[Bug malloc/32996] New: malloc regression on i686
priv.luk at gmail dot com
sourceware-bugzilla@sourceware.org
Sun May 25 17:00:47 GMT 2025
https://sourceware.org/bugzilla/show_bug.cgi?id=32996
Bug ID: 32996
Summary: malloc regression on i686
Product: glibc
Version: unspecified
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: malloc
Assignee: unassigned at sourceware dot org
Reporter: priv.luk at gmail dot com
Target Milestone: ---
When building python-pyside6 on Fedora rawhide with
glibc-2.41.9000-306-gad966bc4ef, `generate_pyi.py` segfaults during QtGui pyi
generation stage.
gdb backtrace pointed out that it was crashing due to free() error, but I
couldn't find any issue with the underlying Qt code.
```
(gdb) bt
#0 __kernel_vsyscall () at arch/x86/entry/vdso/vdso32/system_call.S:72
#1 0xf78ff8ef in __pthread_kill_implementation
(threadid=threadid@entry=4151961344, signo=signo@entry=6,
no_tid=no_tid@entry=0) at pthread_kill.c:43
#2 0xf78ff9a9 in __pthread_kill_internal (threadid=4151961344, signo=6) at
pthread_kill.c:89
#3 0xf78a4a61 in __GI_raise (sig=6) at ../sysdeps/posix/raise.c:26
#4 0xf788bf59 in __GI_abort () at abort.c:73
#5 0xf788d150 in __libc_message_impl (fmt=<optimized out>) at
../sysdeps/posix/libc_fatal.c:134
#6 0xf790accd in malloc_printerr (str=<optimized out>) at malloc.c:5744
#7 0xf790acf2 in malloc_printerr_tail (str=<optimized out>) at malloc.c:5761
#8 0xf616d744 in QBindingStoragePrivate::destroy (this=<optimized out>)
at
/usr/src/debug/qt6-qtbase-6.9.0-2.fc43.i386/src/corelib/kernel/qproperty.cpp:2273
#9 QBindingStorage::clear (this=0xf1371774)
at
/usr/src/debug/qt6-qtbase-6.9.0-2.fc43.i386/src/corelib/kernel/qproperty.cpp:2308
#10 0xf6155de0 in QObjectPrivate::clearBindingStorage (this=0xf1371750)
--Type <RET> for more, q to quit, c to continue without paging--
at
/usr/src/debug/qt6-qtbase-6.9.0-2.fc43.i386/src/corelib/kernel/qobject.cpp:981
#11 0xf6164d4a in QObject::~QObject (this=0xffffc3d0)
at
/usr/src/debug/qt6-qtbase-6.9.0-2.fc43.i386/src/corelib/kernel/qobject.cpp:1026
#12 0xf60a4d18 in QIODevice::~QIODevice (this=0xffffc3d0)
at
/usr/src/debug/qt6-qtbase-6.9.0-2.fc43.i386/src/corelib/io/qiodevice.cpp:473
#13 0xf606ab08 in QBuffer::~QBuffer (this=0xffffc3d0)
at
/usr/src/debug/qt6-qtbase-6.9.0-2.fc43.i386/src/corelib/io/qbuffer.cpp:172
#14 0xf68a4500 in Sbk_QMarginsF__repr__ (self=0xf0eafcc8)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/redhat-linux-build/sources/pyside6/PySide6/QtCore/PySide6/QtCore/qmarginsf_wrapper.cpp:1183
#15 0xf7c40979 in PyObject_Repr (v=<optimized out>)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/object.c:765
#16 builtin_repr (module=<optimized out>, obj=<optimized out>)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/bltinmodule.c:2419
--Type <RET> for more, q to quit, c to continue without paging--
#17 0xf7bb7c73 in _PyEval_EvalFrameDefault (tstate=<optimized out>,
frame=<optimized out>,
throwflag=<optimized out>) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/generated_cases.c.h:1266
#18 0xf7c92e28 in _PyVectorcall_Call (tstate=0xf7f885c4 <_PyRuntime+148420>,
func=0xf7be5660 <_PyFunction_Vectorcall>, callable=0xf708f398,
tuple=<optimized out>, kwargs=0x0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/call.c:273
#19 _PyObject_Call (tstate=0xf7f885c4 <_PyRuntime+148420>, callable=0xf708f398,
args=<optimized out>, kwargs=0x0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/call.c:348
#20 0xf7015b17 in PySide_BuildSignatureProps (type_key=0xf1014b28)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature.cpp:491
#21 0xf7015d49 in TypeKey_to_PropsDict (type_key=0xf1014b28)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature.cpp:109
#22 GetSignature_Function (obfunc=0xf0eb2028, modifier=0x0)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature.cpp:168
#23 0xf701851a in _get_written_signature (ob=0xf0eb2028, modifier=0x0,
sf=<optimized out>)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature_extend.cpp:53
#24 pyside_cf_get___signature__ (func=0xf0eb2028, modifier=0x0)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature_extend.cpp:67
#25 pyside_md_get___signature__ (ob_md=0xf1516528, modifier=0x0)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature_extend.cpp:83
#26 0xf70167bd in get_signature_intern (ob=0xf1516528, modifier=0x0)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature.cpp:254
#27 0xf7016b27 in get_signature (args=0xf0fffee0)
at
/builddir/build/BUILD/python-pyside6-6.9.0-build/pyside-setup-everywhere-src-6.9.0/sources/shiboken6/libshiboken/signature/signature.cpp:278
#28 0xf7bd9deb in cfunction_call (func=0xf708be38, args=0xf0fffee0, kwargs=0x0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/methodobject.c:551
#29 0xf7ba8365 in _PyObject_MakeTpCall (tstate=0xf7f885c4 <_PyRuntime+148420>,
callable=0xf708be38,
args=0xf1610c58, nargs=1, keywords=<optimized out>)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/call.c:242
#30 0xf7baa20e in _PyObject_VectorcallTstate (tstate=<optimized out>,
callable=0xf708be38, args=0xf1610c58,
nargsf=2147483649, kwnames=0x0)
at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Include/internal/pycore_call.h:166
#31 _PyObject_VectorcallTstate (tstate=<optimized out>, callable=0xf708be38,
args=0xf1610c58, nargsf=2147483649,
kwnames=0x0) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Include/internal/pycore_call.h:153
#32 PyObject_Vectorcall (callable=0xf708be38, args=0xf1610c58,
nargsf=2147483649, kwnames=0x0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/call.c:327
#33 0xf7bb86de in _PyEval_EvalFrameDefault (tstate=<optimized out>,
frame=<optimized out>,
throwflag=<optimized out>) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/generated_cases.c.h:1843
#34 0xf7c0c5a4 in _PyEval_EvalFrame (tstate=<optimized out>, frame=0xf1610c1c,
throwflag=0)
at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Include/internal/pycore_ceval.h:119
#35 gen_send_ex2 (gen=0xf1610bf8, arg=0x0, presult=<synthetic pointer>, exc=0,
closing=0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/genobject.c:229
#36 gen_iternext (gen=0xf1610bf8) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/genobject.c:589
#37 0xf7c0ae59 in list_extend_iter_lock_held (self=0xf0f0f648,
iterable=<optimized out>)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/listobject.c:1260
#38 _list_extend (self=self@entry=0xf0f0f648, iterable=<optimized out>)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/listobject.c:1433
#39 0xf7c3a895 in list___init___impl (self=0xf0f0f648, iterable=<optimized
out>)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/listobject.c:3460
#40 list_vectorcall (type=0xf7f61180 <PyList_Type>, args=0xf7fb42b0, nargsf=1,
kwnames=0x0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Objects/listobject.c:3484
#41 0xf7bb99bd in _PyEval_EvalFrameDefault (tstate=<optimized out>,
frame=<optimized out>,
throwflag=<optimized out>) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/generated_cases.c.h:1123
#42 0xf7c8657b in PyEval_EvalCode (co=0xf76d1ea0, globals=0xf75484d8,
locals=0xf75484d8)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/ceval.c:604
#43 0xf7cc3dae in run_eval_code_obj (tstate=tstate@entry=0xf7f885c4
<_PyRuntime+148420>, co=co@entry=0xf76d1ea0,
globals=globals@entry=0xf75484d8, locals=0xf75484d8)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/pythonrun.c:1381
#44 0xf7cc1158 in run_mod (mod=mod@entry=0xf7717238,
filename=filename@entry=0xf7564700,
globals=globals@entry=0xf75484d8, locals=0xf75484d8, flags=0xffffcdb0,
arena=0xf76369f0, interactive_src=0x0,
generate_new_source=0) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/pythonrun.c:1466
#45 0xf7cbe90c in pyrun_file (fp=fp@entry=0xf769e1c0,
filename=filename@entry=0xf7564700, start=start@entry=257,
globals=0xf75484d8, locals=0xf75484d8, closeit=1, flags=0xffffcdb0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/pythonrun.c:1295
#46 0xf7cbd860 in _PyRun_SimpleFileObject (fp=fp@entry=0xf769e1c0,
filename=filename@entry=0xf7564700,
closeit=closeit@entry=1, flags=0xffffcdb0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/pythonrun.c:517
--Type <RET> for more, q to quit, c to continue without paging--
#47 0xf7cbd656 in _PyRun_AnyFileObject (fp=fp@entry=0xf769e1c0,
filename=filename@entry=0xf7564700,
closeit=closeit@entry=1, flags=0xffffcdb0) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Python/pythonrun.c:77
#48 0xf7cbb4a4 in pymain_run_file_obj (program_name=0xf7581840,
filename=0xf7564700, skip_source_first_line=0)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Modules/main.c:410
#49 pymain_run_file (config=0xf7f710e8 <_PyRuntime+52968>)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Modules/main.c:429
#50 pymain_run_python (exitcode=0xffffcda8) at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Modules/main.c:696
#51 Py_RunMain () at
/usr/src/debug/python3.13-3.13.3-3.fc43.i386/Modules/main.c:775
#52 0xf7c73e8b in Py_BytesMain (argc=6, argv=0xffffcf64)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Modules/main.c:829
#53 0x56555396 in main (argc=6, argv=0xffffcf64)
at /usr/src/debug/python3.13-3.13.3-3.fc43.i386/Programs/python.c:15
```
After bisecting glibc I found out that cd33535002
(https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=cd335350021fd0b7ac533c83717ee38832fd9887;hp=8bac7f7a434e158e9765b3b4d1ecaf10304f5994)
was the change that introduced this issue.
You can see build logs where the issue was spotted at
https://koji.fedoraproject.org/koji/taskinfo?taskID=133128529.
--
You are receiving this mail because:
You are on the CC list for the bug.
More information about the Glibc-bugs
mailing list