dolphin crashed when copying files over samba, SIGSEGV in KIO::Slave::deref()

[Danny Daemonic]

Binary package hint: kdebase

It's done this multiple times. Not sure the cause.

ProblemType: Crash
Architecture: amd64
CrashCounter: 1
Date: Tue Sep 8 19:53:20 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/dolphin
NonfreeKernelModules: nvidia
Package: dolphin 4:4.3.1-0ubuntu1
ProcCmdline: /usr/bin/dolphin -icon system-file-manager -caption Dolphin
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
 LANGUAGE=
ProcVersionSignature: Ubuntu 2.6.31-9.29-generic
SegvAnalysis:
 Segfault happened at: 0x7f2f53d7b278 <_ZN3KIO5Slave5derefEv+8>: mov 0x128(%rax),%edx
 PC (0x7f2f53d7b278) ok
 source "0x128(%rax)" (0x00000148) not located in a known VMA region (needed readable region)!
 destination "%edx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: kdebase
StacktraceTop:
 KIO::Slave::deref() () from /usr/lib/libkio.so.5
 KIO::Slave::gotInput() () from /usr/lib/libkio.so.5
 KIO::Slave::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib/libkio.so.5
 QMetaObject::activate(QObject*, int, int, void**) ()
 ?? () from /usr/lib/libkio.so.5
Title: dolphin crashed with SIGSEGV in KIO::Slave::deref()
Uname: Linux 2.6.31-9-generic x86_64
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Computerdruid (computerdruid)]

Title: KMail crashes when loosing network connection

What I was doing when the application crashed:
When I leave home in the morning, my laptop leaves range of my wireless network, and thus KMail eventually comes up with a "could not establish connection dialog" (as expected). However, upon closing this, it sometimes crashes.

This is not using networkmanager or another network backend, I manage my wireless myself.

 -- Application and System information:
Application that crashed: kmail
Version of the application: 1.11.90
KDE Version: 4.2.71 (KDE 4.2.71 (KDE 4.3 >= 20090428))
Qt Version: 4.5.1
Operating System: Linux 2.6.29-gentoo-r2 x86_64

 -- Backtrace:
Application: KMail (kmail), signal: Segmentation fault
[KCrash Handler]
#5 KIO::Slave::deref (this=0x1655650) at /home/cdruid/kde/src/KDE/kdelibs/kio/kio/slave.cpp:242
#6 0x00007f19235797ef in KIO::Slave::gotInput (this=0x1655650) at /home/cdruid/kde/src/KDE/kdelibs/kio/kio/slave.cpp:335
#7 0x00007f192357ba48 in KIO::Slave::qt_metacall (this=0x1655650, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fff2e544330) at /home/cdruid/kde/build/KDE/kdelibs/kio/slave.moc:76
#8 0x00007f1922c5defd in QMetaObject::activate () from /usr/lib64/qt4/libQtCore.so.4
#9 0x00007f19234970e1 in KIO::ConnectionPrivate::dequeue (this=0x164aa30) at /home/cdruid/kde/src/KDE/kdelibs/kio/kio/connection.cpp:82
#10 0x00007f192349753a in KIO::Connection::qt_metacall (this=0xaf8ab0, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x1288760) at /home/cdruid/kde/build/KDE/kdelibs/kio/connection.moc:73
#11 0x00007f1922c5a8a1 in QObject::event () from /usr/lib64/qt4/libQtCore.so.4
#12 0x00007f1921a6778d in QApplicationPrivate::notify_helper () from /usr/lib64/qt4/libQtGui.so.4
#13 0x00007f1921a7018a in QApplication::notify () from /usr/lib64/qt4/libQtGui.so.4
#14 0x00007f1925f34b3b in KApplication::notify (this=0x7fff2e544ea0, receiver=0xaf8ab0, event=0x1288380) at /home/cdruid/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:307
#15 0x00007f1922c4bafb in QCoreApplication::notifyInternal () from /usr/lib64/qt4/libQtCore.so.4
#16 0x00007f1922c4c457 in QCoreApplicationPrivate::sendPostedEvents () from /usr/lib64/qt4/libQtCore.so.4
#17 0x00007f1922c712e3 in ?? () from /usr/lib64/qt4/libQtCore.so.4
#18 0x00007f191855189a in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#19 0x00007f191855504d in ?? () from /usr/lib/libglib-2.0.so.0
#20 0x00007f191855520b in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#21 0x00007f1922c70f7f in QEventDispatcherGlib::processEvents () from /usr/lib64/qt4/libQtCore.so.4
#22 0x00007f1921aed8df in ?? () from /usr/lib64/qt4/libQtGui.so.4
#23 0x00007f1922c4a4b2 in QEventLoop::processEvents () from /usr/lib64/qt4/libQtCore.so.4
#24 0x00007f1922c4a645 in QEventLoop::exec () from /usr/lib64/qt4/libQtCore.so.4
#25 0x00007f1922c4c6bc in QCoreApplication::exec () from /usr/lib64/qt4/libQtCore.so.4
#26 0x000000000040313b in main (argc=<value optimized out>, argv=<value optimized out>) at /home/cdruid/kde/src/KDE/kdepim/kmail/main.cpp:146

[Computerdruid (computerdruid)]

I used the new crash reporter to post this bug report, to test it out. It seems to do a pretty good job.

[Dario Andres (andresbajotierra)]

CCing David Faure as it seems to be related to a KIO error.
BTW: thanks for the comments about the new crash reporting tool.

[Dario Andres (andresbajotierra)]

*** Bug 196862 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 196914 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 198738 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 200589 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 200511 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 199601 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 199358 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 198542 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 197134 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 197090 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 196318 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

*** Bug 195831 has been marked as a duplicate of this bug. ***

[Osterfeld (osterfeld)]

The problem here is that the Slave is deleted before deref() is called. The scheduler also calls deref() when it receives the slaveDied() signal, and that probably causes the deletion. I would think that the initial ref() prevents that, but apparently it doesn't.
It probably only crashes when somewhere in the signalling some client code does event processing (usually some modal dialog, e.g. error msg). Then the deleteLater triggered in deref() kicks in and causes the slave to be deleted before the deref().

It would be easy to work around the crash by doing

QPointer<QObject> that( this );
...
if ( that ) deref();

But that's only a workaround for the real bug (just broken refcounting? conceptual issue?).

[Dario Andres (andresbajotierra)]

*** Bug 200788 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 201133 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 201203 has been marked as a duplicate of this bug. ***

[Pino Toscano (pinotree)]

*** Bug 201566 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 201594 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 201595 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 201758 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 201722 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 202082 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

@Frank Osterfeld: which component is the fault causing this crash? We have both KMail and Dolphin bug reports with the same KIO functions; so I'm wondering if merging them (if it's a KIO bug); or leaving them alone (if it is an implementation error on the app side)
Thanks

[Dario Andres (andresbajotierra)]

*** Bug 202581 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 202957 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 203068 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 203222 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 203392 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 203800 has been marked as a duplicate of this bug. ***

[M-wege (m-wege)]

Is there any chance this bug is going to be fixed in 4.3.1? Looks like many people are affected. Apart from Kopete Kmail is the only app which frequently crashes in KDE 4.3

[Osterfeld (osterfeld)]

@Dario: It seems to be a KIO bug, so I think you can mark all crashes like this as dupes.

[Dario Andres (andresbajotierra)]

*** Bug 202615 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 202555 has been marked as a duplicate of this bug. ***

[Apport retracing service (apport)]

StacktraceTop:KIO::Slave::deref (this=0x2383140) at ../../kio/kio/slave.cpp:242
KIO::Slave::gotInput (this=0x2383140)
KIO::Slave::qt_metacall (this=0x2383140,
QMetaObject::activate ()
KIO::ConnectionPrivate::dequeue (this=0x25b7700)

[Matthew Carpenter (matt-eisgr)]

Wow, what timing...
<crash>

[Dario Andres (andresbajotierra)]

*** Bug 226433 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 226443 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 227086 has been marked as a duplicate of this bug. ***

[maelcum (ahartmetz)]

It would be interesting to know if this bug still occurs in trunk with the new KIO scheduler. I've also changed a few things that looked fishy in KIO::Slave or SlaveInterface, don't remember which. They didn't look very related to this though.

[Dario Andres (andresbajotierra)]

*** Bug 227316 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

So far there are no 4.4.0 (4.3.98+) crashes, so we could assume that the
commits already mentioned (comment 143, comment 146, comment 147, comment 174)
fixes the crash. + the new scheduler implementation on 4.5 trunk.

Marking as FIXED. I will reopen if there is a 4.4 case.
Cleaning CC list, removing 4.4.0-blocker keyword

[Matthew Carpenter (matt-eisgr)]

Please tell me these fixes will be backported to my current version of Kontact/Kmail/KDE (4.3.2) soon because I just decided this morning to switch to using Evolution. Yesterday several things hit me that were all caused by losing emails and losing calendar entries, I assume from all the crashing. Yesterday was a miserable day, and I'm barely digging out today. If I don't have much hope of seeing this in my current version of Kubuntu *very soon* I can't help but make the change. I cannot afford another yesterday, you only get one of those about every six months.

[Dario Andres (andresbajotierra)]

I'm sorry about your problems :-\
You can ask Kubuntu to backport the changes to 4.3.2; but consider that 4.3.2 is a bit old (4.3.5 was released some time ago, and 4.4.0 is the new latest stable release) You can get KDE SC 4.4.0 for Kubuntu at http://www.kubuntu.org/news/kde-sc-4.4
Note that all the mails/events problem could not be related with this specific crash. (also note that I'm not a KMail/Kontact developer)
Regards

[Jonathan Thomas (echidnaman)]

Fixed in KDE 4.4.0.

[Dario Andres (andresbajotierra)]

*** Bug 218143 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 227924 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 225836 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 221842 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 220674 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 228342 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 229193 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 229608 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 221427 has been marked as a duplicate of this bug. ***

[John Bender (johnisfound)]

The latest samba fixes appears to have cured my particular problem, when copying a fairly (250 MB) large folder.
Thanks,
John

---------- Original Message ----------
From: Dario Andres <email address hidden>
To: <email address hidden>
Subject: [Bug 191589] Applications crash when losing network connection (KIO::Slave::deref, KIO::Slave::gotInput,..., KIO::ConnectionPrivate::dequeue)
Date: Wed, 17 Mar 2010 23:36:28 +0100 (CET)

https://bugs.kde.org/show_bug.cgi?id=191589

Dario Andres <email address hidden> changed:

           What |Removed |Added
----------------------------------------------------------------------------
                 CC| |<email address hidden>

--- Comment #216 from Dario Andres <andresbajotierra gmail com> 2010-03-17 23:36:24 ---
*** Bug 221427 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 230406 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 230389 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 232024 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 232335 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 232575 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 232741 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 233541 has been marked as a duplicate of this bug. ***

[Joris Guisson (joris-guisson)]

*** Bug 236055 has been marked as a duplicate of this bug. ***

[Jonathan Thomas (echidnaman)]

*** Bug 238841 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 240401 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 236029 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 234372 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 234519 has been marked as a duplicate of this bug. ***

[Tommi Tervo (tommi-tervo)]

*** Bug 222413 has been marked as a duplicate of this bug. ***

[Tommi Tervo (tommi-tervo)]

*** Bug 247016 has been marked as a duplicate of this bug. ***

[Pino Toscano (pinotree)]

*** Bug 247429 has been marked as a duplicate of this bug. ***

[Dario Andres (andresbajotierra)]

*** Bug 261176 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 262766 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 266794 has been marked as a duplicate of this bug. ***

[Cgiboudeaux (cgiboudeaux)]

*** Bug 275772 has been marked as a duplicate of this bug. ***

[R7g0a-7p7e-h6iae (r7g0a-7p7e-h6iae)]

Hi,
I just got this bug on Centos 6.2 x64
Packet kdepim-4.3.4-5.el6.x86_64

Backtrace
#0 0x0000003dfbc0f36b in raise () from /lib64/libpthread.so.0
#1 0x0000003dc8e55455 in KCrash::defaultCrashHandler(int) () from /usr/lib64/libkdeui.so.5
#2 <signal handler called>
#3 0x0000003dc9390f78 in KIO::Slave::deref() () from /usr/lib64/libkio.so.5
#4 0x0000003dc9391639 in KIO::Slave::gotInput() () from /usr/lib64/libkio.so.5
#5 0x0000003dc939348c in KIO::Slave::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib64/libkio.so.5
#6 0x0000003e0656a52f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib64/libQtCore.so.4
#7 0x0000003dc92bb9d7 in ?? () from /usr/lib64/libkio.so.5
#8 0x0000003dc92bbaed in KIO::Connection::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib64/libkio.so.5
#9 0x0000003e06566a01 in QObject::event(QEvent*) () from /usr/lib64/libQtCore.so.4
#10 0x0000003dc7baaa0c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#11 0x0000003dc7bb09db in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#12 0x0000003dc8df8046 in KApplication::notify(QObject*, QEvent*) () from /usr/lib64/libkdeui.so.5
#13 0x0000003e065579fc in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#14 0x0000003e06558747 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib64/libQtCore.so.4
#15 0x0000003e0657d793 in ?? () from /usr/lib64/libQtCore.so.4
#16 0x0000003dfcc38f0e in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#17 0x0000003dfcc3c938 in ?? () from /lib64/libglib-2.0.so.0
#18 0x0000003dfcc3ca3a in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#19 0x0000003e0657d2d3 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#20 0x0000003dc7c4990e in ?? () from /usr/lib64/libQtGui.so.4
#21 0x0000003e06556442 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#22 0x0000003e0655670c in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#23 0x0000003e065589f9 in QCoreApplication::exec() () from /usr/lib64/libQtCore.so.4
#24 0x0000000000403d27 in _start ()

I can provide the whole abrt log