Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-132523

Null pointer dereference causing crash in QQuickPopup

    XMLWordPrintable

Details

    • c0c1f96ad (dev), c18d134af (6.9), d5139f513 (6.8)

    Description

      Crash occurs due to null pointer dereference here: https://github.com/qt/qtdeclarative/blob/0033e3f7f1f6e413e107f9060f236f3696b1d3f5/src/quicktemplates/qquickpopup.cpp#L1120.

      Reported stack trace:

      # Child-SP          RetAddr               Call Site
      00 (Inline Function) --------`--------     libqt_plugin!QScopedPointer<QObjectData,QScopedPointerDeleter<QObjectData> >::get+0x4 [//contrib/x86_64-w64-mingw32/include/QtCore/qscopedpointer.h @ 112] 
      01 (Inline Function) --------`--------     libqt_plugin!qGetPtrHelper+0x4 [//contrib/x86_64-w64-mingw32/include/QtCore/qtclasshelpermacros.h @ 103] 
      02 (Inline Function) --------`--------     libqt_plugin!QQuickWindowQmlImpl::d_func+0x4 [//contrib/contrib-win64/qtdeclarative/vlc_build/src/quick/Quick_autogen/include/../../../../../src/quick/items/qquickwindowmodule_p.h @ 98] 
      03 000000ea`e92f8c48 00007ffd`5380d923     libqt_plugin!QQuickWindowQmlImpl::setVisible+0x4
      04 000000ea`e92f8c50 00007ffd`5380df48     libqt_plugin!QQuickPopupPrivate::adjustPopupItemParentAndWindow+0x343 [//contrib/contrib-win64/qtdeclarative/src/quicktemplates/qquickpopup.cpp @ 1134] 
      05 000000ea`e92f8d00 00007ffd`538a7579     libqt_plugin!QQuickPopupPrivate::finalizeExitTransition+0x228 [//contrib/contrib-win64/qtdeclarative/src/quicktemplates/qquickpopup.cpp @ 866] 
      06 (Inline Function) --------`--------     libqt_plugin!QQmlPropertyData::writeProperty+0x57 [//contrib/contrib-win64/qtdeclarative/src/qml/qml/qqmlpropertydata_p.h @ 385] 
      07 (Inline Function) --------`--------     libqt_plugin!GenericBinding<1>::doStore+0x63 [//contrib/contrib-win64/qtdeclarative/src/qml/qml/qqmlbinding.cpp @ 282] 
      08 000000ea`e92f8d90 00007ffd`538a4fa1     libqt_plugin!GenericBinding<1>::write+0x109 [//contrib/contrib-win64/qtdeclarative/src/qml/qml/qqmlbinding.cpp @ 243] 
      09 000000ea`e92f8e60 00007ffd`538a2b2d     libqt_plugin!QQmlBinding::doUpdate+0x2b1 [//contrib/contrib-win64/qtdeclarative/src/qml/qml/qqmlbinding.cpp @ 711] 
      0a 000000ea`e92f8f30 00007ffd`533661e4     libqt_plugin!QQmlBinding::update+0x13d [//contrib/contrib-win64/qtdeclarative/src/qml/qml/qqmlbinding.cpp @ 167] 
      0b 000000ea`e92f8fe0 00007ffd`52b29169     libqt_plugin!QQmlNotifier::emitNotify+0x1f4 [//contrib/contrib-win64/qtdeclarative/src/qml/qml/qqmlnotifier.cpp @ 71] 
      0c 000000ea`e92fa880 00007ffd`52ff8554     libqt_plugin!doActivate<0>+0xa9 [//contrib/contrib-win64/qt/src/corelib/kernel/qobject.cpp @ 4016] 
      0d (Inline Function) --------`--------     libqt_plugin!QQuickHoverHandler::hoveredChanged+0x15 [//contrib/contrib-win64/qtdeclarative/vlc_build/src/quick/Quick_autogen/include/moc_qquickhoverhandler_p.cpp @ 198] 
      0e 000000ea`e92fa9a0 00007ffd`52ff88d1     libqt_plugin!QQuickHoverHandler::setHovered+0x234 [//contrib/contrib-win64/qtdeclarative/src/quick/handlers/qquickhoverhandler.cpp @ 198] 
      0f 000000ea`e92faa70 00007ffd`52653a17     libqt_plugin!QQuickHoverHandler::event+0x21 [//contrib/contrib-win64/qtdeclarative/src/quick/handlers/qquickhoverhandler.cpp @ 121] 
      10 000000ea`e92faaa0 00007ffd`52654a88     libqt_plugin!QApplicationPrivate::notify_helper+0x137 [//contrib/contrib-win64/qt/src/widgets/kernel/qapplication.cpp @ 3296] 
      11 000000ea`e92faaf0 00007ffd`52ae9f44     libqt_plugin!QApplication::notify+0x258 [//contrib/contrib-win64/qt/src/widgets/kernel/qapplication.cpp @ 2687] 
      12 000000ea`e92fad70 00007ffd`52f6a71c     libqt_plugin!QCoreApplication::notifyInternal2+0xc4 [//contrib/contrib-win64/qt/src/corelib/kernel/qcoreapplication.cpp @ 1165] 
      13 000000ea`e92fadf0 00007ffd`52f66545     libqt_plugin!QQuickDeliveryAgentPrivate::deliverHoverEventToItem+0xe2c [//contrib/contrib-win64/qtdeclarative/src/quick/util/qquickdeliveryagent.cpp @ 1281] 
      14 000000ea`e92faff0 00007ffd`52f71413     libqt_plugin!QQuickDeliveryAgentPrivate::deliverHoverEvent+0x185 [//contrib/contrib-win64/qtdeclarative/src/quick/util/qquickdeliveryagent.cpp @ 1129] 
      15 000000ea`e92fb0b0 00007ffd`539886f1     libqt_plugin!QQuickDeliveryAgentPrivate::flushFrameSynchronousEvents+0x203 [//contrib/contrib-win64/qtdeclarative/src/quick/util/qquickdeliveryagent.cpp @ 1828] 
      16 000000ea`e92fb190 00007ffd`539890bc     libqt_plugin!QSGThreadedRenderLoop::polishAndSync+0x201 [//contrib/contrib-win64/qtdeclarative/src/quick/scenegraph/qsgthreadedrenderloop.cpp @ 1558] 
      17 000000ea`e92fb2d0 00007ffd`528dcdfd     libqt_plugin!QSGThreadedRenderLoop::handleUpdateRequest+0x18c [//contrib/contrib-win64/qtdeclarative/src/quick/scenegraph/qsgthreadedrenderloop.cpp @ 1404] 
      18 000000ea`e92fb390 00007ffd`52653a17     libqt_plugin!QQuickWindow::event+0x12dd [//contrib/contrib-win64/qtdeclarative/src/quick/items/qquickwindow.cpp @ 1582] 
      19 000000ea`e92fb640 00007ffd`52654a88     libqt_plugin!QApplicationPrivate::notify_helper+0x137 [//contrib/contrib-win64/qt/src/widgets/kernel/qapplication.cpp @ 3296] 
      1a 000000ea`e92fb690 00007ffd`52ae9f44     libqt_plugin!QApplication::notify+0x258 [//contrib/contrib-win64/qt/src/widgets/kernel/qapplication.cpp @ 2687] 
      1b 000000ea`e92fb910 00007ffd`531481da     libqt_plugin!QCoreApplication::notifyInternal2+0xc4 [//contrib/contrib-win64/qt/src/corelib/kernel/qcoreapplication.cpp @ 1165] 
      1c 000000ea`e92fb990 00007ffd`53147424     libqt_plugin!QPlatformWindow::deliverUpdateRequest+0x7a [//contrib/contrib-win64/qt/src/gui/kernel/qplatformwindow.cpp @ 793] 
      1d 000000ea`e92fba40 00007ffd`526548fc     libqt_plugin!QPlatformWindow::windowEvent+0x34 [//contrib/contrib-win64/qt/src/gui/kernel/qplatformwindow.cpp @ 454] 
      1e 000000ea`e92fba70 00007ffd`52ae9f44     libqt_plugin!QApplication::notify+0xcc [//contrib/contrib-win64/qt/src/widgets/kernel/qapplication.cpp @ 2585] 
      1f 000000ea`e92fbcf0 00007ffd`534a769e     libqt_plugin!QCoreApplication::notifyInternal2+0xc4 [//contrib/contrib-win64/qt/src/corelib/kernel/qcoreapplication.cpp @ 1165] 
      20 000000ea`e92fbd70 00007ffd`534aa187     libqt_plugin!QEventDispatcherWin32Private::sendTimerEvent+0x20e [//contrib/contrib-win64/qt/src/corelib/kernel/qeventdispatcher_win.cpp @ 411] 
      21 000000ea`e92fbde0 00007ffd`52653a17     libqt_plugin!QEventDispatcherWin32::event+0x1f7 [//contrib/contrib-win64/qt/src/corelib/kernel/qeventdispatcher_win.cpp @ 888] 
      22 000000ea`e92fbe60 00007ffd`52654a88     libqt_plugin!QApplicationPrivate::notify_helper+0x137 [//contrib/contrib-win64/qt/src/widgets/kernel/qapplication.cpp @ 3296] 
      23 000000ea`e92fbeb0 00007ffd`52ae9f44     libqt_plugin!QApplication::notify+0x258 [//contrib/contrib-win64/qt/src/widgets/kernel/qapplication.cpp @ 2687] 
      24 000000ea`e92fc130 00007ffd`52aebc7e     libqt_plugin!QCoreApplication::notifyInternal2+0xc4 [//contrib/contrib-win64/qt/src/corelib/kernel/qcoreapplication.cpp @ 1165] 
      25 (Inline Function) --------`--------     libqt_plugin!QCoreApplication::sendEvent+0xf [//contrib/contrib-win64/qt/src/corelib/kernel/qcoreapplication.cpp @ 1609] 
      26 000000ea`e92fc1b0 00007ffd`53c54531     libqt_plugin!QCoreApplicationPrivate::sendPostedEvents+0xc4e [//contrib/contrib-win64/qt/src/corelib/kernel/qcoreapplication.cpp @ 1970] 
      27 000000ea`e92fc320 00007ffd`534a8178     libqt_plugin!QWindowsGuiEventDispatcher::sendPostedEvents+0x11 [//contrib/contrib-win64/qt/src/gui/platform/windows/qwindowsguieventdispatcher.cpp @ 44] 
      28 000000ea`e92fc350 00007ffd`53c54508     libqt_plugin!QEventDispatcherWin32::processEvents+0x68 [//contrib/contrib-win64/qt/src/corelib/kernel/qeventdispatcher_win.cpp @ 471] 
      29 000000ea`e92ff4a0 00007ffd`52de92e9     libqt_plugin!QWindowsGuiEventDispatcher::processEvents+0x18 [//contrib/contrib-win64/qt/src/gui/platform/windows/qwindowsguieventdispatcher.cpp @ 37] 
      2a (Inline Function) --------`--------     libqt_plugin!QEventLoop::processEvents+0x1e [//contrib/contrib-win64/qt/src/corelib/kernel/qeventloop.cpp @ 100] 
      2b 000000ea`e92ff4e0 00007ffd`52aea733     libqt_plugin!QEventLoop::exec+0x499 [//contrib/contrib-win64/qt/src/corelib/kernel/qeventloop.cpp @ 191] 
      2c 000000ea`e92ff5e0 00007ffd`51f3a033     libqt_plugin!QCoreApplication::exec+0x93 [//contrib/contrib-win64/qt/src/corelib/kernel/qcoreapplication.cpp @ 1511] 
      2d 000000ea`e92ff650 00007ffd`7c327dd1     libqt_plugin!Thread+0x1df3 [//extras/package/win32/../../../modules/gui/qt/qt.cpp @ 1095] 
      2e 000000ea`e92ffc50 00007ffd`e66aaf5a     libvlccore!vlc_entry+0x51 [//extras/package/win32/../../../src/win32/thread.c @ 354] 
      2f 000000ea`e92ffc90 00007ffd`e66ab02c     msvcrt!_callthreadstartex+0x1e
      30 000000ea`e92ffcc0 00007ffd`e6977374     msvcrt!_threadstartex+0x7c
      31 000000ea`e92ffcf0 00007ffd`e733cc91     KERNEL32!BaseThreadInitThunk+0x14
      32 000000ea`e92ffd20 00000000`00000000     ntdll!RtlUserThreadStart+0x21
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            qt.team.quick.subscriptions Qt Quick and Widgets Team
            fuzun Fatih Uzunoglu
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes