https://bugs.kde.org/show_bug.cgi?id=503464

--- Comment #8 from Ming Chuan <m...@culpring.com> ---
(In reply to Ming Chuan from comment #7)
> I got another segfault crash related to tablet event processing, this time
> stack trace is more straightforward (crash at
> https://codebrowser.dev/qt6/qtbase/src/gui/kernel/qpointingdevice.cpp.
> html#279)
> 
> ```
> #0  0x00007ffff3447808 in QPointingDevice::uniqueId
> (this=this@entry=0x1ec49350) at
> /build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qpointingdevice.cpp:279
> #1  0x00007ffff34011e9 in QGuiApplicationPrivate::processTabletEvent
> (e=0xef7ea30) at
> /build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qguiapplication.cpp:2939
> #2  0x00007ffff346ce64 in QWindowSystemInterface::sendWindowSystemEvents
> (flags=flags@entry=...) at
> /build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qwindowsysteminterface.cpp:
> 1113
> #3  0x00007ffff346d08f in QWindowSystemInterface::flushWindowSystemEvents
> (flags=...) at
> /build/qtbase-everywhere-src-6.9.0/src/gui/kernel/qwindowsysteminterface.cpp:
> 1082
> #4  0x00007ffff2c1ca5e in doActivate<false> (sender=0xe3add0,
> signal_index=4, argv=0x7ffffffdc538) at
> /build/qtbase-everywhere-src-6.9.0/src/corelib/kernel/qobject.cpp:4150
> #5  0x00007ffff2c128e7 in QMetaObject::activate
> (sender=sender@entry=0xe3add0, m=m@entry=0x7ffff30b0fa0
> <QAbstractEventDispatcher::staticMetaObject>,
> local_signal_index=local_signal_index@entry=1, argv=argv@entry=0x0) at
> /build/qtbase-everywhere-src-6.9.0/src/corelib/kernel/qobject.cpp:4198
> #6  0x00007ffff2bab647 in QAbstractEventDispatcher::awake
> (this=this@entry=0xe3add0) at
> /build/qtbase-everywhere-src-6.9.0/build/src/corelib/Core_autogen/include/
> moc_qabstracteventdispatcher.cpp:128
> #7  0x00007ffff2ec39db in QEventDispatcherGlib::processEvents
> (this=0xe3add0, flags=...) at
> /build/qtbase-everywhere-src-6.9.0/src/corelib/kernel/qeventdispatcher_glib.
> cpp:406
> #8  0x00007ffff2bc0beb in QEventLoop::exec (this=this@entry=0x7ffffffdc680,
> flags=..., flags@entry=...) at
> /build/qtbase-everywhere-src-6.9.0/src/corelib/global/qflags.h:77
> #9  0x00007ffff2bbc02e in QCoreApplication::exec () at
> /build/qtbase-everywhere-src-6.9.0/src/corelib/global/qflags.h:77
> #10 0x000000000040a088 in main ()
> ```
> 
> gdb says the value of `d` is `0x114`
> ```
> (gdb) print d
> $7 = (const QPointingDevicePrivate * const) 0x114
> ```
> 
> so this likely is some kind of use-after-free bug of `QPointingDevice` or
> some related class?

Got this crash 3 times, 2 out of 3 times the value of `d` are `0x114`, the
other one is null

```
(gdb) print d
$1 = (const QPointingDevicePrivate * const) 0x0
```

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to