Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-80247

"Invalid memory read" in QQuickAnimatorController detected by Valgrind

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • P1: Critical
    • None
    • 5.6.2
    • None
    • Linux/X11

    Description

      [SOFTWARE VERSION]
      target platform: desktop Ubuntu 16.04.5 LTS
      valgrind version: valgrind-3.15.0

      [PRECONDITIONS]
      valgrind --undef-value-errors=no --error-limit=no ...

      [VALGRIND OUTPUT]

      ==24433== Invalid read of size 4
      ==24433==    at 0xB0B4BB0: QAbstractAnimationJob::stop() (qabstractanimationjob.cpp:528)
      ==24433==    by 0xA0F3A6B: QQuickAnimatorController::stopProxyJobs() (qquickanimatorcontroller.cpp:250)
      ==24433==    by 0xB4797E0: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3730)
      ==24433==    by 0xA139DA6: fireFrameSwapped (qquickwindow_p.h:218)
      ==24433==    by 0xA139DA6: QSGGuiThreadRenderLoop::renderWindow(QQuickWindow*) (qsgrenderloop.cpp:411)
      ==24433==    by 0xA13ABF0: QSGGuiThreadRenderLoop::event(QEvent*) (qsgrenderloop.cpp:493)
      ==24433==    by 0xB44CE19: doNotify (qcoreapplication.cpp:1090)
      ==24433==    by 0xB44CE19: QCoreApplication::notify(QObject*, QEvent*) (qcoreapplication.cpp:1076)
      ==24433==    by 0xB44CF77: QCoreApplication::notifyInternal2(QObject*, QEvent*) (qcoreapplication.cpp:1015)
      ==24433==    by 0xB4A112D: sendEvent (qcoreapplication.h:225)
      ==24433==    by 0xB4A112D: QTimerInfoList::activateTimers() (qtimerinfo_unix.cpp:637)
      ==24433==    by 0xB4A1698: timerSourceDispatch (qeventdispatcher_glib.cpp:176)
      ==24433==    by 0xB4A1698: idleTimerSourceDispatch(_GSource*, int (*)(void*), void*) (qeventdispatcher_glib.cpp:223)
      ==24433==    by 0xFC52196: g_main_context_dispatch (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2)
      ==24433==    by 0xFC523EF: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2)
      ==24433==    by 0xFC5249B: g_main_context_iteration (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2)
      ==24433==  Address 0x4b0517ac is 44 bytes inside a block of size 168 free'd
      ==24433==    at 0x96BD602: operator delete(void*, unsigned long) (vg_replace_malloc.c:595)
      ==24433==    by 0xA0D3DBF: QQuickBehavior::write(QVariant const&) (qquickbehavior.cpp:222)
      ==24433==    by 0xB005D37: QQmlInterceptorMetaObject::intercept(QMetaObject::Call, int, void**) (qqmlvmemetaobject.cpp:247)
      ==24433==    by 0xB00868B: QQmlVMEMetaObject::metaCall(QObject*, QMetaObject::Call, int, void**) (qqmlvmemetaobject.cpp:589)
      ==24433==    by 0xB088903: QQmlBinding::write(QQmlPropertyData const&, QV4::Value const&, bool, QFlags<QQmlPropertyPrivate::WriteFlag>) (qqmlbinding.cpp:242)
      ==24433==    by 0xB089CB9: QQmlBinding::update(QFlags<QQmlPropertyPrivate::WriteFlag>) (qqmlbinding.cpp:191)
      ==24433==    by 0xB08A10D: QQmlBinding::refresh() (qqmlbinding.cpp:403)
      ==24433==    by 0xB06123D: QQmlNotifier::emitNotify(QQmlNotifierEndpoint*, void**) (qqmlnotifier.cpp:94)
      ==24433==    by 0xB00CECB: QQmlData::signalEmitted(QAbstractDeclarativeData*, QObject*, int, void**) (qqmlengine.cpp:772)
      ==24433==    by 0xB478F1F: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3616)
      ==24433==    by 0xB008BA8: QQmlVMEMetaObject::metaCall(QObject*, QMetaObject::Call, int, void**) (qqmlvmemetaobject.cpp:748)
      ==24433==    by 0xB01CD19: QQmlPropertyPrivate::write(QObject*, QQmlPropertyData const&, QVariant const&, QQmlContextData*, QFlags<QQmlPropertyPrivate::WriteFlag>) (qqmlproperty.cpp:1252)
      ==24433==  Block was alloc'd at
      ==24433==    at 0x96BC4B6: operator new(unsigned long) (vg_replace_malloc.c:344)
      ==24433==    by 0xA0D4020: QQuickBehavior::write(QVariant const&) (qquickbehavior.cpp:219)
      ==24433==    by 0xB005D37: QQmlInterceptorMetaObject::intercept(QMetaObject::Call, int, void**) (qqmlvmemetaobject.cpp:247)
      ==24433==    by 0xB00868B: QQmlVMEMetaObject::metaCall(QObject*, QMetaObject::Call, int, void**) (qqmlvmemetaobject.cpp:589)
      ==24433==    by 0xB088903: QQmlBinding::write(QQmlPropertyData const&, QV4::Value const&, bool, QFlags<QQmlPropertyPrivate::WriteFlag>) (qqmlbinding.cpp:242)
      ==24433==    by 0xB089CB9: QQmlBinding::update(QFlags<QQmlPropertyPrivate::WriteFlag>) (qqmlbinding.cpp:191)
      ==24433==    by 0xB08A10D: QQmlBinding::refresh() (qqmlbinding.cpp:403)
      ==24433==    by 0xB06123D: QQmlNotifier::emitNotify(QQmlNotifierEndpoint*, void**) (qqmlnotifier.cpp:94)
      ==24433==    by 0xB00CECB: QQmlData::signalEmitted(QAbstractDeclarativeData*, QObject*, int, void**) (qqmlengine.cpp:772)
      ==24433==    by 0xB478F1F: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3616)
      ==24433==    by 0xB008BA8: QQmlVMEMetaObject::metaCall(QObject*, QMetaObject::Call, int, void**) (qqmlvmemetaobject.cpp:748)
      ==24433==    by 0xB01CD19: QQmlPropertyPrivate::write(QObject*, QQmlPropertyData const&, QVariant const&, QQmlContextData*, QFlags<QQmlPropertyPrivate::WriteFlag>) (qqmlproperty.cpp:1252)
      ==24433== 
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            srutledg Shawn Rutledge
            dmytrokh Dmytro Khlopov
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes