[konsole] [Bug 430492] New: Application use konsolepart crashes on exist due to double free

[Weng Xuetian]

https://bugs.kde.org/show_bug.cgi?id=430492

            Bug ID: 430492
           Summary: Application use konsolepart crashes on exist due to
                    double free
           Product: konsole
           Version: 20.12.0
          Platform: Other
                OS: Linux
            Status: REPORTED
          Severity: normal
          Priority: NOR
         Component: kpart
          Assignee: konsole-devel at kde.org
          Reporter: wengxt at gmail.com
  Target Milestone: ---

SUMMARY
konsole crashes on exit, possiblly due the destruction of static data.

Related output from valgrind:

==191447== Invalid free() / delete / delete[] / realloc()
==191447==    at 0x483B9AB: free (vg_replace_malloc.c:538)
==191447==    by 0x4A8FDFB: QHashData::free_helper(void (*)(QHashData::Node*))
(in /usr/lib/libQt5Core.so.5.15.2)
==191447==    by 0x4F1C3AD: __cxa_finalize (in /usr/lib/libc-2.32.so)
==191447==    by 0x50FB877: ??? (in /usr/lib/libkonsoleprivate.so.20.12.0)
==191447==    by 0x401168A: _dl_fini (in /usr/lib/ld-2.32.so)
==191447==    by 0x4F1BDB6: __run_exit_handlers (in /usr/lib/libc-2.32.so)
==191447==    by 0x4F1BF5D: exit (in /usr/lib/libc-2.32.so)
==191447==    by 0x4F04158: (below main) (in /usr/lib/libc-2.32.so)
==191447==  Address 0xbdba380 is 0 bytes inside a block of size 42 free'd
==191447==    at 0x483B9AB: free (vg_replace_malloc.c:538)
==191447==    by 0x4A8FDFB: QHashData::free_helper(void (*)(QHashData::Node*))
(in /usr/lib/libQt5Core.so.5.15.2)
==191447==    by 0x4F1C3AD: __cxa_finalize (in /usr/lib/libc-2.32.so)
==191447==    by 0x48B01D7: ??? (in /usr/lib/libkdeinit5_konsole.so)
==191447==    by 0x401168A: _dl_fini (in /usr/lib/ld-2.32.so)
==191447==    by 0x4F1BDB6: __run_exit_handlers (in /usr/lib/libc-2.32.so)
==191447==    by 0x4F1BF5D: exit (in /usr/lib/libc-2.32.so)
==191447==    by 0x4F04158: (below main) (in /usr/lib/libc-2.32.so)
==191447==  Block was alloc'd at
==191447==    at 0x483A77F: malloc (vg_replace_malloc.c:307)
==191447==    by 0x4A60912: QArrayData::allocate(unsigned long, unsigned long,
unsigned long, QFlags<QArrayData::AllocationOption>) (in
/usr/lib/libQt5Core.so.5.15.2)
==191447==    by 0x4AD7494: QString::reallocData(unsigned int, bool) (in
/usr/lib/libQt5Core.so.5.15.2)
==191447==    by 0x4AD82B4: ??? (in /usr/lib/libQt5Core.so.5.15.2)
==191447==    by 0x4AD8633: ??? (in /usr/lib/libQt5Core.so.5.15.2)
==191447==    by 0x4ADBC9F: QString::toLower_helper(QString const&) (in
/usr/lib/libQt5Core.so.5.15.2)
==191447==    by 0x48CCB9A:
Konsole::Profile::registerProperty(Konsole::Profile::PropertyInfo const&) (in
/usr/lib/libkdeinit5_konsole.so)
==191447==    by 0x48CCD54: Konsole::Profile::fillTableWithDefaultNames() (in
/usr/lib/libkdeinit5_konsole.so)
==191447==    by 0x48CCD95: Konsole::Profile::lookupByName(QString const&) (in
/usr/lib/libkdeinit5_konsole.so)
==191447==    by 0x48CD3A7: Konsole::ProfileCommandParser::parse(QString
const&) (in /usr/lib/libkdeinit5_konsole.so)
==191447==    by 0x5199FD7:
Konsole::SessionManager::sessionProfileCommandReceived(QString const&) (in
/usr/lib/libkonsoleprivate.so.20.12.0)
==191447==    by 0x4C73DD5: ??? (in /usr/lib/libQt5Core.so.5.15.2)



STEPS TO REPRODUCE
1. launch konsole
2. do something in 
3. quit konsole

OBSERVED RESULT
konsole crashes with backtrace like
QHashData::free_helper(void (*)(QHashData::Node*)) (in
/usr/lib/libQt5Core.so.5.15.2)
__cxa_finalize (in /usr/lib/libc-2.32.so)



EXPECTED RESULT
No crash

SOFTWARE/OS VERSIONS
Linux/KDE Plasma:  Archliinux
(available in About System)
KDE Plasma Version: 5.20.4
KDE Frameworks Version: 5.77.0
Qt Version: 5.15.2

ADDITIONAL INFORMATION

-- 
You are receiving this mail because:
You are the assignee for the bug.