https://bugs.kde.org/show_bug.cgi?id=489764
--- Comment #2 from Matt Fagnani <matt.fagn...@bell.net> --- I saw this type of crash when clicking on Konsole and Dolphin's icons in the task manager as they were running and the wallpaper was shown and disappeared so that those programs were shown, so the wallpaper might not be the image being processed in the trace. The texture image might be related to the animation of the window expanding or shrinking when the program was maximized or minimized in front of the wallpaper. I didn't see the problem when clicking on the task manager icons of one of two maximized programs, and that animation didn't appear when I did so. I didn't notice this problem with the radeonsi and amdgpu drivers on bare metal and llvmpipe and virtio-gpu drivers in VMs, so the problem might be specific to virgl. I reproduced the program in nested kwin_wayland under valgrind by clicking on the Konsole icon in the task manager a few times. There were many conditional jumps or moves depending on uninitialized values involving kwin and mesa which might have resulted in undefined behaviour and memory corruption. An invalid read in convert_ubyte_rgba_to_bgra (format_utils.c:219) with an access not within the mapped region at address 0x3BDEC000 was where the segmentation fault happened. ==5466== Memcheck, a memory error detector ==5466== Copyright (C) 2002-2024, and GNU GPL'd, by Julian Seward et al. ==5466== Using Valgrind-3.23.0 and LibVEX; rerun with -h for copyright info ==5466== Command: kwin_wayland --exit-with-session=plasmashell ==5466== Parent PID: 5037 ==5466== ==5466== Syscall param waitid(infop) points to unaddressable byte(s) ==5466== at 0x81723DD: syscall (in /usr/lib64/libc.so.6) ==5466== by 0x7A64692: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x7A44DE0: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4D04209: KWin::InputMethod::startInputMethod() (inputmethod.cpp:914) ==5466== by 0x4D043AF: KWin::InputMethod::setInputMethodCommand(QString const&) (inputmethod.cpp:857) ==5466== by 0x15DEAF: UnknownInlinedFun (main_wayland.cpp:192) ==5466== by 0x15DEAF: KWin::ApplicationWayland::refreshSettings(KConfigGroup const&, QList<QByteArray> const&) (main_wayland.cpp:188) ==5466== by 0x15E19C: UnknownInlinedFun (main_wayland.cpp:205) ==5466== by 0x15E19C: KWin::ApplicationWayland::continueStartupWithScene() (main_wayland.cpp:184) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4C4C857: KWin::WaylandCompositor::start() (compositor_wayland.cpp:196) ==5466== by 0x7856CCA: QObject::event(QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x644B217: QApplicationPrivate::notify_helper(QObject*, QEvent*) (in /usr/lib64/libQt6Widgets.so.6.7.2) ==5466== by 0x77FFD47: QCoreApplication::notifyInternal2(QObject*, QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== Address 0x0 is not stack'd, malloc'd or (recently) free'd ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x180FF9: UnknownInlinedFun (qnumeric.h:328) ==5466== by 0x180FF9: UnknownInlinedFun (qnumeric.h:371) ==5466== by 0x180FF9: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:246) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x1814B6: UnknownInlinedFun (qnumeric.h:328) ==5466== by 0x1814B6: UnknownInlinedFun (qnumeric.h:371) ==5466== by 0x1814B6: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:246) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x18101A: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:246) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x181112: UnknownInlinedFun (qnumeric.h:328) ==5466== by 0x181112: UnknownInlinedFun (qnumeric.h:371) ==5466== by 0x181112: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:258) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x181505: UnknownInlinedFun (qnumeric.h:328) ==5466== by 0x181505: UnknownInlinedFun (qnumeric.h:371) ==5466== by 0x181505: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:258) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x18112E: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:258) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x181168: UnknownInlinedFun (qnumeric.h:328) ==5466== by 0x181168: UnknownInlinedFun (qnumeric.h:371) ==5466== by 0x181168: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:263) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x1814DE: UnknownInlinedFun (qnumeric.h:328) ==5466== by 0x1814DE: UnknownInlinedFun (qnumeric.h:371) ==5466== by 0x1814DE: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:263) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x181186: KWin::ContrastEffect::colorMatrix(double, double, double) (contrast.cpp:263) ==5466== by 0x183F63: KWin::ContrastEffect::updateContrastRegion(KWin::EffectWindow*) (contrast.cpp:147) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x4FA52E4: KWin::SurfaceInterfacePrivate::applyState(KWin::SurfaceState*) (surface.cpp:692) ==5466== by 0x4FD0012: KWin::Transaction::apply() (transaction.cpp:229) ==5466== by 0x4FD0170: KWin::Transaction::tryApply() (transaction.cpp:262) ==5466== by 0x4FD0808: KWin::Transaction::commit() (transaction.cpp:296) ==5466== by 0x4FA8D50: KWin::SurfaceInterfacePrivate::surface_commit(QtWaylandServer::wl_surface::Resource*) (surface.cpp:379) ==5466== by 0xA317055: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA31368C: ??? (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0xA3164DD: ffi_call (in /usr/lib64/libffi.so.8.1.4) ==5466== by 0x8664B22: ??? (in /usr/lib64/libwayland-server.so.0.23.0) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x4851E1E: bcmp (vg_replace_strmem.c:1233) ==5466== by 0x1F791E27: copy_uniform_matrix_to_storage(gl_context*, gl_constant_value*, gl_uniform_storage*, unsigned int, void const*, unsigned int, unsigned int, unsigned int, unsigned int, bool, unsigned int, unsigned int, glsl_base_type, bool) [clone .isra.0] (uniform_query.cpp:1736) ==5466== by 0x1F793A18: _mesa_uniform_matrix (uniform_query.cpp:1959) ==5466== by 0x1F7958CF: _mesa_UniformMatrix4fv (uniforms.c:648) ==5466== by 0x4D3FBA7: KWin::GLShader::setUniform(int, QMatrix4x4 const&) (glshader.cpp:404) ==5466== by 0x185FA0: UnknownInlinedFun (contrastshader.cpp:58) ==5466== by 0x185FA0: UnknownInlinedFun (contrastshader.cpp:51) ==5466== by 0x185FA0: UnknownInlinedFun (contrast.cpp:462) ==5466== by 0x185FA0: KWin::ContrastEffect::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (contrast.cpp:425) ==5466== by 0x4CABC12: KWin::EffectsHandler::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:375) ==5466== by 0x4CABC12: KWin::EffectsHandler::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:375) ==5466== by 0x4CABB42: KWin::EffectsHandler::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:346) ==5466== by 0x4CABB42: KWin::EffectsHandler::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:346) ==5466== by 0x4DA5EDE: UnknownInlinedFun (workspacescene.cpp:485) ==5466== by 0x4DA5EDE: KWin::WorkspaceScene::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::WindowItem*, int, QRegion const&) (workspacescene.cpp:478) ==5466== by 0x4DA61E5: KWin::WorkspaceScene::paintSimpleScreen(KWin::RenderTarget const&, KWin::RenderViewport const&, int, QRegion const&) (workspacescene.cpp:458) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x4851DF5: bcmp (vg_replace_strmem.c:1233) ==5466== by 0x1F791E27: copy_uniform_matrix_to_storage(gl_context*, gl_constant_value*, gl_uniform_storage*, unsigned int, void const*, unsigned int, unsigned int, unsigned int, unsigned int, bool, unsigned int, unsigned int, glsl_base_type, bool) [clone .isra.0] (uniform_query.cpp:1736) ==5466== by 0x1F793A18: _mesa_uniform_matrix (uniform_query.cpp:1959) ==5466== by 0x1F7958CF: _mesa_UniformMatrix4fv (uniforms.c:648) ==5466== by 0x4D3FBA7: KWin::GLShader::setUniform(int, QMatrix4x4 const&) (glshader.cpp:404) ==5466== by 0x185FA0: UnknownInlinedFun (contrastshader.cpp:58) ==5466== by 0x185FA0: UnknownInlinedFun (contrastshader.cpp:51) ==5466== by 0x185FA0: UnknownInlinedFun (contrast.cpp:462) ==5466== by 0x185FA0: KWin::ContrastEffect::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (contrast.cpp:425) ==5466== by 0x4CABC12: KWin::EffectsHandler::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:375) ==5466== by 0x4CABC12: KWin::EffectsHandler::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:375) ==5466== by 0x4CABB42: KWin::EffectsHandler::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:346) ==5466== by 0x4CABB42: KWin::EffectsHandler::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:346) ==5466== by 0x4DA5EDE: UnknownInlinedFun (workspacescene.cpp:485) ==5466== by 0x4DA5EDE: KWin::WorkspaceScene::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::WindowItem*, int, QRegion const&) (workspacescene.cpp:478) ==5466== by 0x4DA61E5: KWin::WorkspaceScene::paintSimpleScreen(KWin::RenderTarget const&, KWin::RenderViewport const&, int, QRegion const&) (workspacescene.cpp:458) ==5466== ==5466== Conditional jump or move depends on uninitialised value(s) ==5466== at 0x1F791E2A: copy_uniform_matrix_to_storage(gl_context*, gl_constant_value*, gl_uniform_storage*, unsigned int, void const*, unsigned int, unsigned int, unsigned int, unsigned int, bool, unsigned int, unsigned int, glsl_base_type, bool) [clone .isra.0] (uniform_query.cpp:1736) ==5466== by 0x1F793A18: _mesa_uniform_matrix (uniform_query.cpp:1959) ==5466== by 0x1F7958CF: _mesa_UniformMatrix4fv (uniforms.c:648) ==5466== by 0x4D3FBA7: KWin::GLShader::setUniform(int, QMatrix4x4 const&) (glshader.cpp:404) ==5466== by 0x185FA0: UnknownInlinedFun (contrastshader.cpp:58) ==5466== by 0x185FA0: UnknownInlinedFun (contrastshader.cpp:51) ==5466== by 0x185FA0: UnknownInlinedFun (contrast.cpp:462) ==5466== by 0x185FA0: KWin::ContrastEffect::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (contrast.cpp:425) ==5466== by 0x4CABC12: KWin::EffectsHandler::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:375) ==5466== by 0x4CABC12: KWin::EffectsHandler::drawWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:375) ==5466== by 0x4CABB42: KWin::EffectsHandler::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:346) ==5466== by 0x4CABB42: KWin::EffectsHandler::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::EffectWindow*, int, QRegion const&, KWin::WindowPaintData&) (effecthandler.cpp:346) ==5466== by 0x4DA5EDE: UnknownInlinedFun (workspacescene.cpp:485) ==5466== by 0x4DA5EDE: KWin::WorkspaceScene::paintWindow(KWin::RenderTarget const&, KWin::RenderViewport const&, KWin::WindowItem*, int, QRegion const&) (workspacescene.cpp:478) ==5466== by 0x4DA61E5: KWin::WorkspaceScene::paintSimpleScreen(KWin::RenderTarget const&, KWin::RenderViewport const&, int, QRegion const&) (workspacescene.cpp:458) ==5466== by 0x4CABA55: KWin::EffectsHandler::paintScreen(KWin::RenderTarget const&, KWin::RenderViewport const&, int, QRegion const&, KWin::Output*) (effecthandler.cpp:318) ==5466== ==5466== Invalid write of size 8 ==5466== at 0x1F6D3E21: convert_ubyte_rgba_to_bgra (format_utils.c:219) ==5466== by 0x1F784143: get_tex_rgba_uncompressed (texgetimage.c:549) ==5466== by 0x1F784143: get_tex_rgba (texgetimage.c:605) ==5466== by 0x1F784143: _mesa_GetTexSubImage_sw (texgetimage.c:760) ==5466== by 0x1F516A6B: st_GetTexSubImage (st_cb_texture.c:2733) ==5466== by 0x1F7834E8: get_texture_image.isra.0 (texgetimage.c:1441) ==5466== by 0x1F7836B9: _get_texture_image (texgetimage.c:1479) ==5466== by 0x1F784C35: _mesa_GetTexImage (texgetimage.c:1514) ==5466== by 0x2C32A69F: KWin::doGrabTexture(KWin::GLTexture*, QImage*) (screencastutils.h:65) ==5466== by 0x2C32FA39: KWin::grabTexture(KWin::GLTexture*, QImage*) [clone .lto_priv.1] (screencastutils.h:81) ==5466== by 0x2C337680: KWin::WindowScreenCastSource::render(QImage*) (windowscreencastsource.cpp:64) ==5466== by 0x2C336571: KWin::ScreenCastStream::recordFrame(QRegion const&, QFlags<KWin::ScreenCastStream::Content>) (screencaststream.cpp:523) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x2C337137: UnknownInlinedFun (moc_screencastsource.cpp:154) ==5466== by 0x2C337137: UnknownInlinedFun (windowscreencastsource.cpp:33) ==5466== by 0x2C337137: UnknownInlinedFun (qobjectdefs_impl.h:137) ==5466== by 0x2C337137: UnknownInlinedFun (qobjectdefs_impl.h:345) ==5466== by 0x2C337137: QtPrivate::QCallableObject<KWin::WindowScreenCastSource::WindowScreenCastSource(KWin::Window*, QObject*)::{lambda()#1}, QtPrivate::List<>, void>::impl(int, QtPrivate::QSlotObjectBase*, QObject*, void**, bool*) [clone .lto_priv.0] (qobjectdefs_impl.h:555) ==5466== Address 0x3bdec000 is not stack'd, malloc'd or (recently) free'd ==5466== ==5466== ==5466== Process terminating with default action of signal 11 (SIGSEGV): dumping core ==5466== Access not within mapped region at address 0x3BDEC000 ==5466== at 0x1F6D3E21: convert_ubyte_rgba_to_bgra (format_utils.c:219) ==5466== by 0x1F784143: get_tex_rgba_uncompressed (texgetimage.c:549) ==5466== by 0x1F784143: get_tex_rgba (texgetimage.c:605) ==5466== by 0x1F784143: _mesa_GetTexSubImage_sw (texgetimage.c:760) ==5466== by 0x1F516A6B: st_GetTexSubImage (st_cb_texture.c:2733) ==5466== by 0x1F7834E8: get_texture_image.isra.0 (texgetimage.c:1441) ==5466== by 0x1F7836B9: _get_texture_image (texgetimage.c:1479) ==5466== by 0x1F784C35: _mesa_GetTexImage (texgetimage.c:1514) ==5466== by 0x2C32A69F: KWin::doGrabTexture(KWin::GLTexture*, QImage*) (screencastutils.h:65) ==5466== by 0x2C32FA39: KWin::grabTexture(KWin::GLTexture*, QImage*) [clone .lto_priv.1] (screencastutils.h:81) ==5466== by 0x2C337680: KWin::WindowScreenCastSource::render(QImage*) (windowscreencastsource.cpp:64) ==5466== by 0x2C336571: KWin::ScreenCastStream::recordFrame(QRegion const&, QFlags<KWin::ScreenCastStream::Content>) (screencaststream.cpp:523) ==5466== by 0x78657F1: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==5466== by 0x2C337137: UnknownInlinedFun (moc_screencastsource.cpp:154) ==5466== by 0x2C337137: UnknownInlinedFun (windowscreencastsource.cpp:33) ==5466== by 0x2C337137: UnknownInlinedFun (qobjectdefs_impl.h:137) ==5466== by 0x2C337137: UnknownInlinedFun (qobjectdefs_impl.h:345) ==5466== by 0x2C337137: QtPrivate::QCallableObject<KWin::WindowScreenCastSource::WindowScreenCastSource(KWin::Window*, QObject*)::{lambda()#1}, QtPrivate::List<>, void>::impl(int, QtPrivate::QSlotObjectBase*, QObject*, void**, bool*) [clone .lto_priv.0] (qobjectdefs_impl.h:555) ==5466== If you believe this happened as a result of a stack ==5466== overflow in your program's main thread (unlikely but ==5466== possible), you can try to increase the size of the ==5466== main thread stack using the --main-stacksize= flag. ==5466== The main thread stack size used in this run was 8388608. ==5466== ==5466== HEAP SUMMARY: ==5466== in use at exit: 26,235,704 bytes in 157,102 blocks ==5466== total heap usage: 870,785 allocs, 713,683 frees, 229,346,218 bytes allocated ==5466== ==5466== LEAK SUMMARY: ==5466== definitely lost: 70,656 bytes in 131 blocks ==5466== indirectly lost: 2,905,980 bytes in 916 blocks ==5466== possibly lost: 7,754,088 bytes in 50,728 blocks ==5466== still reachable: 15,502,964 bytes in 105,306 blocks ==5466== of which reachable via heuristic: ==5466== newarray : 647,152 bytes in 635 blocks ==5466== suppressed: 0 bytes in 0 blocks ==5466== Rerun with --leak-check=full to see details of leaked memory ==5466== ==5466== Use --track-origins=yes to see where uninitialised values come from ==5466== For lists of detected and suppressed errors, rerun with: -s ==5466== ERROR SUMMARY: 17 errors from 14 contexts (suppressed: 0 from 0) -- You are receiving this mail because: You are watching all bug changes.