xdg-desktop-portal crashed with SIGSEGV in magazine_chain_pop_head()

Bug #1966945 reported by Jonas
14
This bug affects 1 person
Affects Status Importance Assigned to Milestone
xdg-desktop-portal (Ubuntu)
Fix Released
Medium
Unassigned
Jammy
Fix Released
Medium
Unassigned

Bug Description

Impact
------
xdg-desktop-portal 1.14.3 has a single change fixing a consistent crash when using the experimental Wayland feature in TeamViewer.

Original Bug Report
-------------------
Crash happened a short time after starting a screen cast / remote desktop session using the Freedesktop portal API in a Wayland session with mouse and keyboard input. Screen cast continues to run (i.e., PipeWire stream), but input stops.

Can be reproduced by using the experimental Wayland support of TeamViewer (https://community.teamviewer.com/English/discussion/122410/teamviewer-support-on-wayland-experimental-state-%F0%9F%A7%AA)

Reported upstream as well: https://github.com/flatpak/xdg-desktop-portal/issues/771

lsb_release -rd:
Description: Ubuntu Jammy Jellyfish (development branch)
Release: 22.04

ProblemType: Crash
DistroRelease: Ubuntu 22.04
Package: xdg-desktop-portal 1.14.1-1
ProcVersionSignature: Ubuntu 5.15.0-23.23-generic 5.15.27
Uname: Linux 5.15.0-23-generic x86_64
ApportVersion: 2.20.11-0ubuntu79
Architecture: amd64
CasperMD5CheckResult: pass
CrashCounter: 1
CurrentDesktop: ubuntu:GNOME
Date: Tue Mar 29 14:04:48 2022
ExecutablePath: /usr/libexec/xdg-desktop-portal
InstallationDate: Installed on 2022-03-25 (4 days ago)
InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - Alpha amd64 (20220325)
ProcCmdline: /usr/libexec/xdg-desktop-portal
SegvAnalysis:
 Segfault happened at: 0x7fcf54779d7b: mov 0x8(%rax),%rcx
 PC (0x7fcf54779d7b) ok
 source "0x8(%rax)" (0x7fcf00000008) not located in a known VMA region (needed readable region)!
 destination "%rcx" ok
 Stack memory exhausted (SP below stack segment)
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: xdg-desktop-portal
StacktraceTop:
 ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
 ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
 __GI___nptl_deallocate_tsd () at ./nptl/nptl_deallocate_tsd.c:73
 __GI___nptl_deallocate_tsd () at ./nptl/nptl_deallocate_tsd.c:22
 start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:453
Title: xdg-desktop-portal crashed with SIGSEGV in __GI___nptl_deallocate_tsd()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin lxd plugdev sambashare sudo
separator:

Revision history for this message
Jonas (joney) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 magazine_chain_pop_head (magazine_chunks=<optimized out>) at ../../../glib/gslice.c:579
 magazine_chain_prepare_fields (magazine_chunks=0x7fcf00000000) at ../../../glib/gslice.c:661
 magazine_cache_push_magazine (ix=14, magazine_chunks=0x7fcf4800d130, count=5) at ../../../glib/gslice.c:735
 private_thread_memory_cleanup (data=0x7fcf480008e0) at ../../../glib/gslice.c:821
 __GI___nptl_deallocate_tsd () at ./nptl/nptl_deallocate_tsd.c:73

tags: removed: need-amd64-retrace
Jonas (joney)
description: updated
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 magazine_chain_pop_head (magazine_chunks=<optimized out>) at ../../../glib/gslice.c:579
 magazine_chain_prepare_fields (magazine_chunks=0x7fcf00000000) at ../../../glib/gslice.c:661
 magazine_cache_push_magazine (ix=14, magazine_chunks=0x7fcf4800d130, count=5) at ../../../glib/gslice.c:735
 private_thread_memory_cleanup (data=0x7fcf480008e0) at ../../../glib/gslice.c:821
 _IO_new_file_fopen (fp=0x7fcf5462fae8 <_sigintr+8>, filename=<optimized out>, mode=<optimized out>, is32not64=<optimized out>) at ./libio/fileops.c:322

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : StacktraceSource.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in xdg-desktop-portal (Ubuntu):
importance: Undecided → Medium
summary: - xdg-desktop-portal crashed with SIGSEGV in __GI___nptl_deallocate_tsd()
+ xdg-desktop-portal crashed with SIGSEGV in magazine_chain_pop_head()
Jonas (joney)
information type: Private → Public
Jonas (joney)
description: updated
Jeremy Bícha (jbicha)
Changed in xdg-desktop-portal (Ubuntu Jammy):
status: New → In Progress
Jeremy Bícha (jbicha)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package xdg-desktop-portal - 1.14.3-0ubuntu2

---------------
xdg-desktop-portal (1.14.3-0ubuntu2) jammy; urgency=medium

  * New upstream stable release
    - Fixes crash with Teamviewer's experimental Wayland support
      (LP: #1966945)

 -- Jeremy Bicha <email address hidden> Fri, 15 Apr 2022 15:17:26 -0400

Changed in xdg-desktop-portal (Ubuntu Jammy):
status: In Progress → Fix Released
Revision history for this message
Jonas (joney) wrote (last edit ):

I can confirm that this is fixed with 1.14.3-0ubuntu2 - I could not reproduce the issue anymore after updating to that version. Thanks a lot for you effort!

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.