[dolphin] [Bug 508648] New: Dolphin crashes when entering selection mode with spacebar repeatedly.

[Fabian Vogt]

https://bugs.kde.org/show_bug.cgi?id=508648

            Bug ID: 508648
           Summary: Dolphin crashes when entering selection mode with
                    spacebar repeatedly.
    Classification: Applications
           Product: dolphin
      Version First 25.08.0
       Reported In:
          Platform: Other
                OS: Linux
            Status: REPORTED
          Severity: normal
          Priority: NOR
         Component: Selection Mode
          Assignee: kfm-devel at kde.org
          Reporter: fabian at ritter-vogt.de
                CC: felixernst at kde.org
  Target Milestone: ---

1. Select any folder anywhere
2. Press spacebar. Selection mode opens.
3. Press spacebar again. Selection mode closes.
4. Press spacebar again. Dolphin crashes.

SOFTWARE/OS VERSIONS
KDE Plasma Version: 6.4.4
KDE Frameworks Version: 6.17.0
Qt Version: 6.9.1

Valgrind reports a use-after-free:

==33231== Invalid read of size 8
==33231==    at 0x7080104: QObject::setParent(QObject*) (in
/usr/lib64/libQt6Core.so.6.9.1)
==33231==    by 0x2CA210D5: ??? (in
/usr/lib64/qt6/plugins/kf6/kfileitemaction/setfoldericonitemaction.so)
==33231==    by 0x5EC9505: QWidgetAction::requestWidget(QWidget*) (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x6002486: QMenu::actionEvent(QActionEvent*) (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x5E61406: QWidget::event(QEvent*) (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x5E087A7: QApplicationPrivate::notify_helper(QObject*,
QEvent*) (in /usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x7033927: QCoreApplication::notifyInternal2(QObject*, QEvent*)
(in /usr/lib64/libQt6Core.so.6.9.1)
==33231==    by 0x5E4E7A9: QWidget::insertAction(QAction*, QAction*) (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x1D5B5C: ??? (in /usr/bin/dolphin)
==33231==    by 0x1996C7: ??? (in /usr/bin/dolphin)
==33231==    by 0x17DCB9: ??? (in /usr/bin/dolphin)
==33231==    by 0x709AB13: ??? (in /usr/lib64/libQt6Core.so.6.9.1)
==33231==  Address 0xdf42558 is 8 bytes inside a block of size 16 free'd
==33231==    at 0x484C739: operator delete(void*, unsigned long) (in
/usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so)
==33231==    by 0x707EFE9: QObjectPrivate::deleteChildren() (in
/usr/lib64/libQt6Core.so.6.9.1)
==33231==    by 0x5E4A9E7: QWidget::~QWidget() (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x5E4AA31: QWidget::~QWidget() (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x707EFE9: QObjectPrivate::deleteChildren() (in
/usr/lib64/libQt6Core.so.6.9.1)
==33231==    by 0x5E4A9E7: QWidget::~QWidget() (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x5FF5B11: QMenu::~QMenu() (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x707EFE9: QObjectPrivate::deleteChildren() (in
/usr/lib64/libQt6Core.so.6.9.1)
==33231==    by 0x5E4A9E7: QWidget::~QWidget() (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x6008CB1: QPushButton::~QPushButton() (in
/usr/lib64/libQt6Widgets.so.6.9.1)
==33231==    by 0x1D6507: ??? (in /usr/bin/dolphin)
==33231==    by 0x198359: ??? (in /usr/bin/dolphin)
==33231==  Block was alloc'd at
==33231==    at 0x4848F3F: operator new(unsigned long) (in
/usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so)
==33231==    by 0x2CA226B3: ??? (in
/usr/lib64/qt6/plugins/kf6/kfileitemaction/setfoldericonitemaction.so)
==33231==    by 0x4C40CB8: ??? (in /usr/lib64/libKF6KIOWidgets.so.6.17.0)
==33231==    by 0x1A3C8D: ??? (in /usr/bin/dolphin)
==33231==    by 0x1A4FB0: ??? (in /usr/bin/dolphin)
==33231==    by 0x1D84B7: ??? (in /usr/bin/dolphin)
==33231==    by 0x199715: ??? (in /usr/bin/dolphin)
==33231==    by 0x17DCB9: ??? (in /usr/bin/dolphin)
==33231==    by 0x709AB13: ??? (in /usr/lib64/libQt6Core.so.6.9.1)
==33231==    by 0x6A8472A: QAction::triggered(bool) (in
/usr/lib64/libQt6Gui.so.6.9.1)
==33231==    by 0x6A8BBB9: QAction::activate(QAction::ActionEvent) (in
/usr/lib64/libQt6Gui.so.6.9.1)
==33231==    by 0x6A8BC8F: QAction::event(QEvent*) (in
/usr/lib64/libQt6Gui.so.6.9.1)

-- 
You are receiving this mail because:
You are the assignee for the bug.