https://bugs.kde.org/show_bug.cgi?id=503464

--- Comment #7 from Ming Chuan <m...@culpring.com> ---
I got another segfault crash related to tablet event processing, this time
stack trace is more straightforward (crash at
https://codebrowser.dev/qt6/qtbase/src/gui/kernel/qpointingdevice.cpp.html#279)

```
#0  0x00007ffff3447808 in QPointingDevice::uniqueId
(this=this@entry=0x1ec49350) at
/build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qpointingdevice.cpp:279
#1  0x00007ffff34011e9 in QGuiApplicationPrivate::processTabletEvent
(e=0xef7ea30) at
/build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qguiapplication.cpp:2939
#2  0x00007ffff346ce64 in QWindowSystemInterface::sendWindowSystemEvents
(flags=flags@entry=...) at
/build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qwindowsysteminterface.cpp:1113
#3  0x00007ffff346d08f in QWindowSystemInterface::flushWindowSystemEvents
(flags=...) at
/build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qwindowsysteminterface.cpp:1082
#4  0x00007ffff2c1ca5e in doActivate<false> (sender=0xe3add0, signal_index=4,
argv=0x7ffffffdc538) at
/build/qtbase-everywhere-src-6.9.0/src/corelib/kernel/qobject.cpp:4150
#5  0x00007ffff2c128e7 in QMetaObject::activate (sender=sender@entry=0xe3add0,
m=m@entry=0x7ffff30b0fa0 <QAbstractEventDispatcher::staticMetaObject>,
local_signal_index=local_signal_index@entry=1, argv=argv@entry=0x0) at
/build/qtbase-everywhere-src-6.9.0/src/corelib/kernel/qobject.cpp:4198
#6  0x00007ffff2bab647 in QAbstractEventDispatcher::awake
(this=this@entry=0xe3add0) at
/build/qtbase-everywhere-src-6.9.0/build/src/corelib/Core_autogen/include/moc_qabstracteventdispatcher.cpp:128
#7  0x00007ffff2ec39db in QEventDispatcherGlib::processEvents (this=0xe3add0,
flags=...) at
/build/qtbase-everywhere-src-6.9.0/src/corelib/kernel/qeventdispatcher_glib.cpp:406
#8  0x00007ffff2bc0beb in QEventLoop::exec (this=this@entry=0x7ffffffdc680,
flags=..., flags@entry=...) at
/build/qtbase-everywhere-src-6.9.0/src/corelib/global/qflags.h:77
#9  0x00007ffff2bbc02e in QCoreApplication::exec () at
/build/qtbase-everywhere-src-6.9.0/src/corelib/global/qflags.h:77
#10 0x000000000040a088 in main ()
```

gdb says the value of `d` is `0x114`
```
(gdb) print d
$7 = (const QPointingDevicePrivate * const) 0x114
```

so this likely is some kind of use-after-free bug of `QPointingDevice` or some
related class?

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to