https://bugs.kde.org/show_bug.cgi?id=484674
--- Comment #2 from Nicolas Fella <nicolas.fe...@gmx.de> --- ==6961==ERROR: AddressSanitizer: heap-use-after-free on address 0x5130002286d0 at pc 0x7fd72ecf58b5 bp 0x7ffd85d7c560 sp 0x7ffd85d7c558 READ of size 8 at 0x5130002286d0 thread T0 #0 0x7fd72ecf58b4 in QArrayDataPointer<QAction*>::QArrayDataPointer(QArrayDataPointer<QAction*> const&) /home/nico/kde/usr/include/QtCore/qarraydatapointer.h:38 #1 0x7fd72ecf58b4 in QArrayDataPointer<QAction*>::operator=(QArrayDataPointer<QAction*> const&) /home/nico/kde/usr/include/QtCore/qarraydatapointer.h:64 #2 0x7fd72ecf58b4 in QList<QAction*>::operator=(QList<QAction*> const&) /home/nico/kde/usr/include/QtCore/qlist.h:70 #3 0x7fd72ecf58b4 in KIO::DropMenu::addExtraActions(QList<QAction*> const&, QList<QAction*> const&) /home/nico/kde/src/kio/src/widgets/dropjob.cpp:206 #4 0x7fd72ecfa757 in KIO::DropJobPrivate::addPluginActions(KIO::DropMenu*, KFileItemListProperties const&) /home/nico/kde/src/kio/src/widgets/dropjob.cpp:356 #5 0x7fd72ecff447 in KIO::DropJobPrivate::fillPopupMenu(KIO::DropMenu*) /home/nico/kde/src/kio/src/widgets/dropjob.cpp:340 #6 0x7fd72ed00d4a in KIO::DropJobPrivate::slotDropActionDetermined(int) /home/nico/kde/src/kio/src/widgets/dropjob.cpp:521 #7 0x7fd72ed0352a in KIO::DropJobPrivate::handleCopyToDirectory() /home/nico/kde/src/kio/src/widgets/dropjob.cpp:498 #8 0x7fd72ed06002 in KIO::DropJobPrivate::slotStart() /home/nico/kde/src/kio/src/widgets/dropjob.cpp:266 #9 0x7fd72ed07e77 in operator() /home/nico/kde/src/kio/src/widgets/dropjob.cpp:232 #10 0x7fd72ed07e77 in call /home/nico/kde/usr/include/QtCore/qobjectdefs_impl.h:137 #11 0x7fd72ed07e77 in call<QtPrivate::List<>, void> /home/nico/kde/usr/include/QtCore/qobjectdefs_impl.h:339 #12 0x7fd72ed07e77 in impl /home/nico/kde/usr/include/QtCore/qobjectdefs_impl.h:522 #13 0x7fd72fc1f24d in QtPrivate::QSlotObjectBase::call(QObject*, void**) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qobjectdefs_impl.h:433 #14 0x7fd72fc1f24d in QMetaCallEvent::placeMetaCall(QObject*) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qobject.cpp:649 #15 0x7fd72fc312f5 in QObject::event(QEvent*) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qobject.cpp:1437 #16 0x7fd736a73811 in QApplicationPrivate::notify_helper(QObject*, QEvent*) /home/nico/workspace/qt6/qtbase/src/widgets/kernel/qapplication.cpp:3296 #17 0x7fd736a8f107 in QApplication::notify(QObject*, QEvent*) /home/nico/workspace/qt6/qtbase/src/widgets/kernel/qapplication.cpp:3247 #18 0x7fd72fb48f9f in QCoreApplication::notifyInternal2(QObject*, QEvent*) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qcoreapplication.cpp:1121 #19 0x7fd72fb4911e in QCoreApplication::sendEvent(QObject*, QEvent*) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qcoreapplication.cpp:1539 #20 0x7fd72fb4a451 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qcoreapplication.cpp:1901 #21 0x7fd72fb4a746 in QCoreApplication::sendPostedEvents(QObject*, int) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qcoreapplication.cpp:1760 #22 0x7fd7302c0c8f in postEventSourceDispatch /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qeventdispatcher_glib.cpp:243 #23 0x7fd72ef1270f in g_main_dispatch ../glib/gmain.c:3344 #24 0x7fd72ef1270f in g_main_context_dispatch_unlocked ../glib/gmain.c:4152 #25 0x7fd72ef14357 in g_main_context_iterate_unlocked ../glib/gmain.c:4217 #26 0x7fd72ef14a0b in g_main_context_iteration ../glib/gmain.c:4282 #27 0x7fd7302bf21f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qeventdispatcher_glib.cpp:393 #28 0x7fd731f63375 in QPAEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6/qtbase/src/gui/platform/unix/qeventdispatcher_glib.cpp:87 #29 0x7fd72fb66453 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qeventloop.cpp:100 #30 0x7fd72fb67837 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qeventloop.cpp:182 #31 0x7fd72fb510a0 in QCoreApplication::exec() /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qcoreapplication.cpp:1442 #32 0x7fd7311d6fc5 in QGuiApplication::exec() /home/nico/workspace/qt6/qtbase/src/gui/kernel/qguiapplication.cpp:1925 #33 0x7fd736a72ea6 in QApplication::exec() /home/nico/workspace/qt6/qtbase/src/widgets/kernel/qapplication.cpp:2574 #34 0x42f6d5 in main /home/nico/kde/src/plasma-workspace/shell/main.cpp:211 #35 0x7fd72f02a1ef in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58 #36 0x7fd72f02a2b8 in __libc_start_main_impl ../csu/libc-start.c:360 #37 0x430af4 in _start ../sysdeps/x86_64/start.S:115 0x5130002286d0 is located 272 bytes inside of 336-byte region [0x5130002285c0,0x513000228710) freed by thread T0 here: #0 0x7fd73a2fd0d8 in operator delete(void*, unsigned long) ../../../../libsanitizer/asan/asan_new_delete.cpp:164 #1 0x7fd72ed0a99d in KIO::DropJobPrivate::~DropJobPrivate() /home/nico/kde/src/kio/src/widgets/dropjob.cpp:75 #2 0x7fd738e9d8d1 in KIO::Job::~Job() /home/nico/kde/src/kio/src/core/job.cpp:41 #3 0x7fd72ecf1c56 in KIO::DropJob::~DropJob() /home/nico/kde/src/kio/src/widgets/dropjob.cpp:238 #4 0x7fd72ecf1c70 in KIO::DropJob::~DropJob() /home/nico/kde/src/kio/src/widgets/dropjob.cpp:238 #5 0x7fd72fc3aee3 in QObjectPrivate::deleteChildren() /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qobject.cpp:2206 #6 0x7fd72fc42356 in QObject::~QObject() /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qobject.cpp:1159 #7 0x7fd7395b697b in DropMenu::~DropMenu() /home/nico/kde/src/libplasma/src/plasmaquick/plasmoid/dropmenu.cpp:48 #8 0x7fd7395b69e0 in DropMenu::~DropMenu() /home/nico/kde/src/libplasma/src/plasmaquick/plasmoid/dropmenu.cpp:48 #9 0x7fd73957f871 in ContainmentItem::processMimeData(QMimeData*, int, int, KIO::DropJob*) /home/nico/kde/src/libplasma/src/plasmaquick/plasmoid/containmentitem.cpp:396 #10 0x7fd739580bc2 in ContainmentItem::processMimeData(QMimeData*, int, int, KIO::DropJob*) /home/nico/kde/src/libplasma/src/plasmaquick/plasmoid/containmentitem.cpp:353 #11 0x7fd739580bc2 in ContainmentItem::processMimeData(QObject*, int, int, KIO::DropJob*) /home/nico/kde/src/libplasma/src/plasmaquick/plasmoid/containmentitem.cpp:345 #12 0x7fd739592e36 in ContainmentItem::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/kde/build/libplasma/src/plasmaquick/PlasmaQuick_autogen/include/moc_containmentitem.cpp:359 #13 0x7fd739595973 in ContainmentItem::qt_metacall(QMetaObject::Call, int, void**) /home/nico/kde/build/libplasma/src/plasmaquick/PlasmaQuick_autogen/include/moc_containmentitem.cpp:477 #14 0x7fd733d3f0f8 in QQmlVMEMetaObject::metaCall(QObject*, QMetaObject::Call, int, void**) /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmlvmemetaobject.cpp:1172 #15 0x7fd72fb6f44a in QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qmetaobject.cpp:332 #16 0x7fd733b55750 in QQmlObjectOrGadget::metacall(QMetaObject::Call, int, void**) const /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmlobjectorgadget.cpp:14 #17 0x7fd73369f39e in CallMethod /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:1525 #18 0x7fd7336a23fa in CallPrecise /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:1830 #19 0x7fd7336a263a in operator() /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2733 #20 0x7fd7336a2912 in operator()<QV4::QObjectMethod::callInternal(const QV4::Value*, const QV4::Value*, int) const::<lambda()> > /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2710 #21 0x7fd7336a3a24 in QV4::QObjectMethod::callInternal(QV4::Value const*, QV4::Value const*, int) const /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2733 #22 0x7fd7336a3d5e in QV4::QObjectMethod::virtualCall(QV4::FunctionObject const*, QV4::Value const*, QV4::Value const*, int) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2622 #23 0x7fd733436e15 in QV4::FunctionObject::call(QV4::Value const*, QV4::Value const*, int) const /home/nico/workspace/qt6/qtbase/include/QtQml/6.6.1/QtQml/private/../../../../../../qtdeclarative/src/qml/jsruntime/qv4functionobject_p.h:171 #24 0x7fd7337c1c98 in QV4::Moth::VME::interpret(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*, char const*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:902 #25 0x7fd7337d6adc in QV4::Moth::VME::exec(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:584 #26 0x7fd7335931dd in doCall /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:54 #27 0x7fd733594d5d in QV4::Function::call(QV4::Value const*, QV4::Value const*, int, QV4::ExecutionContext*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:79 #28 0x7fd73359524e in operator() /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:30 #29 0x7fd73359524e in convertAndCall<QV4::Function::call(QObject*, void**, const QMetaType*, int, QV4::ExecutionContext*)::<lambda(const QV4::Value*, const QV4::Value*, int)> > /home/nico/workspace/qt6/qtbase/include/QtQml/6.6.1/QtQml/private/../../../../../../qtdeclarative/src/qml/jsruntime/qv4jscall_p.h:170 #30 0x7fd733595759 in QV4::Function::call(QObject*, void**, QMetaType const*, int, QV4::ExecutionContext*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:27 #31 0x7fd733a961fc in QQmlJavaScriptExpression::evaluate(void**, QMetaType const*, int) /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmljavascriptexpression.cpp:270 previously allocated by thread T0 here: #0 0x7fd73a2fc1d8 in operator new(unsigned long) ../../../../libsanitizer/asan/asan_new_delete.cpp:95 #1 0x7fd72ecf8877 in KIO::DropJobPrivate::newJob(QDropEvent const*, QUrl const&, QFlags<KIO::DropJobFlag>, QFlags<KIO::JobFlag>) /home/nico/kde/src/kio/src/widgets/dropjob.cpp:169 #2 0x7fd72ecf8877 in KIO::drop(QDropEvent const*, QUrl const&, QFlags<KIO::DropJobFlag>, QFlags<KIO::JobFlag>) /home/nico/kde/src/kio/src/widgets/dropjob.cpp:648 #3 0x7fd7144db80a in FolderModel::drop(QQuickItem*, QObject*, int, bool) /home/nico/kde/src/plasma-desktop/containments/desktop/plugins/folder/foldermodel.cpp:1210 #4 0x7fd7144730c2 in FolderModel::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/kde/build/plasma-desktop/containments/desktop/plugins/folder/folderplugin_autogen/EWIEGA46WW/moc_foldermodel.cpp:1325 #5 0x7fd714475593 in FolderModel::qt_metacall(QMetaObject::Call, int, void**) /home/nico/kde/build/plasma-desktop/containments/desktop/plugins/folder/folderplugin_autogen/EWIEGA46WW/moc_foldermodel.cpp:1659 #6 0x7fd72fb6f49a in QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/workspace/qt6/qtbase/src/corelib/kernel/qmetaobject.cpp:334 #7 0x7fd733b55750 in QQmlObjectOrGadget::metacall(QMetaObject::Call, int, void**) const /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmlobjectorgadget.cpp:14 #8 0x7fd73369f39e in CallMethod /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:1525 #9 0x7fd7336a23fa in CallPrecise /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:1830 #10 0x7fd7336a263a in operator() /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2733 #11 0x7fd7336a2912 in operator()<QV4::QObjectMethod::callInternal(const QV4::Value*, const QV4::Value*, int) const::<lambda()> > /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2710 #12 0x7fd7336a3a24 in QV4::QObjectMethod::callInternal(QV4::Value const*, QV4::Value const*, int) const /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2733 #13 0x7fd7336a3d5e in QV4::QObjectMethod::virtualCall(QV4::FunctionObject const*, QV4::Value const*, QV4::Value const*, int) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2622 #14 0x7fd733436e15 in QV4::FunctionObject::call(QV4::Value const*, QV4::Value const*, int) const /home/nico/workspace/qt6/qtbase/include/QtQml/6.6.1/QtQml/private/../../../../../../qtdeclarative/src/qml/jsruntime/qv4functionobject_p.h:171 #15 0x7fd7337c1c98 in QV4::Moth::VME::interpret(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*, char const*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:902 #16 0x7fd7337d6adc in QV4::Moth::VME::exec(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:584 #17 0x7fd73359e149 in qfoDoCall /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4functionobject.cpp:526 #18 0x7fd7335a713c in QV4::ArrowFunction::virtualCall(QV4::FunctionObject const*, QV4::Value const*, QV4::Value const*, int) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4functionobject.cpp:556 #19 0x7fd733436e15 in QV4::FunctionObject::call(QV4::Value const*, QV4::Value const*, int) const /home/nico/workspace/qt6/qtbase/include/QtQml/6.6.1/QtQml/private/../../../../../../qtdeclarative/src/qml/jsruntime/qv4functionobject_p.h:171 #20 0x7fd7337c1c98 in QV4::Moth::VME::interpret(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*, char const*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:902 #21 0x7fd7337d6adc in QV4::Moth::VME::exec(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:584 #22 0x7fd7335931dd in doCall /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:54 #23 0x7fd733594d5d in QV4::Function::call(QV4::Value const*, QV4::Value const*, int, QV4::ExecutionContext*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:79 #24 0x7fd73359524e in operator() /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:30 #25 0x7fd73359524e in convertAndCall<QV4::Function::call(QObject*, void**, const QMetaType*, int, QV4::ExecutionContext*)::<lambda(const QV4::Value*, const QV4::Value*, int)> > /home/nico/workspace/qt6/qtbase/include/QtQml/6.6.1/QtQml/private/../../../../../../qtdeclarative/src/qml/jsruntime/qv4jscall_p.h:170 #26 0x7fd733595759 in QV4::Function::call(QObject*, void**, QMetaType const*, int, QV4::ExecutionContext*) /home/nico/workspace/qt6/qtdeclarative/src/qml/jsruntime/qv4function.cpp:27 #27 0x7fd733a961fc in QQmlJavaScriptExpression::evaluate(void**, QMetaType const*, int) /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmljavascriptexpression.cpp:270 #28 0x7fd7338c3b24 in QQmlBoundSignalExpression::evaluate(void**) /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmlboundsignal.cpp:195 #29 0x7fd7338c508d in QQmlBoundSignal_callback(QQmlNotifierEndpoint*, void**) /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmlboundsignal.cpp:314 #30 0x7fd733b1b839 in QQmlNotifier::emitNotify(QQmlNotifierEndpoint*, void**) /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmlnotifier.cpp:70 #31 0x7fd733951d1e in QQmlData::signalEmitted(QAbstractDeclarativeData*, QObject*, int, void**) /home/nico/workspace/qt6/qtdeclarative/src/qml/qml/qqmlengine.cpp:360 SUMMARY: AddressSanitizer: heap-use-after-free /home/nico/kde/usr/include/QtCore/qarraydatapointer.h:38 in QArrayDataPointer<QAction*>::QArrayDataPointer(QArrayDataPointer<QAction*> const&) -- You are receiving this mail because: You are watching all bug changes.