Opened 15 hours ago

Closed 14 hours ago

Last modified 14 hours ago

#19319 closed bug (invalid)

[Deskbar] crash in icu_74

Reported by: diver Owned by: jscipione
Priority: normal Milestone: Unscheduled
Component: Applications/Deskbar Version: R1/Development
Keywords: Cc:
Blocked By: Blocking:
Platform: All

Description

Deskbar suddenly crashed without me clicking it. I have the following replicants installed:

~> message ~/config/settings/deskbar/replicants 
BMessage(0x0) {
        replicant_path[0] = string("/boot/system/apps/ProcessController", 36 bytes)
        replicant_path[1] = string("/boot/system/apps/NetworkStatus", 32 bytes)
        replicant_path[2] = string("/boot/system/bin/desklink", 26 bytes)
        replicant_path[3] = string("/boot/system/bin/vmware_tray", 29 bytes)
}
Debug information for team /boot/system/Deskbar (122):
CPU(s): 4x AMD Ryzen 7 5825U
Memory: 2.00 GiB total, 402.09 MiB used
Haiku revision: hrev58463 Dec 26 2024 07:02:13 (x86_64)

Active Threads:
	thread 122: Deskbar (main)
	thread 183: _BMediaRoster_ 
	thread 185: Expando Window Watcher 
	thread 190: w>Twitcher 
	thread 701: team 122 debug task 
	thread 191: w>Deskbar 
		state: Exception (General protection fault)

		Frame		IP			Function Name
		-----------------------------------------------
		0x7f650b23b2c0	0x1576e3848e1	BPrivate::processHeap::free(void*) + 0x41 
			Disassembly:
				BPrivate::processHeap::free(void*):
				0x000001576e3848a0:           4885f6  test %rsi, %rsi
				0x000001576e3848a3:     0f8437010000  jz 0x1576e3849e0
				0x000001576e3848a9:               55  push %rbp
				0x000001576e3848aa:         488d46f0  lea -0x10(%rsi), %rax
				0x000001576e3848ae:           4889e5  mov %rsp, %rbp
				0x000001576e3848b1:             4156  push %r14
				0x000001576e3848b3:             4155  push %r13
				0x000001576e3848b5:             4154  push %r12
				0x000001576e3848b7:           4989fc  mov %rdi, %r12
				0x000001576e3848ba:               53  push %rbx
				0x000001576e3848bb:         4883ec10  sub $0x10, %rsp
				0x000001576e3848bf:         488b56f0  movq -0x10(%rsi), %rdx
				0x000001576e3848c3:         488945d0  movq %rax, -0x30(%rbp)
				0x000001576e3848c7:           f6c201  test $0x1, %dl
				0x000001576e3848ca:     0f85e0000000  jnz 0x1576e3849b0
				0x000001576e3848d0:         488b7808  movq 0x8(%rax), %rdi
				0x000001576e3848d4:         48897dd8  movq %rdi, -0x28(%rbp)
				0x000001576e3848d8:           4885ff  test %rdi, %rdi
				0x000001576e3848db:     0f8462010000  jz 0x1576e384a43
				0x000001576e3848e1:           8b4704  movl 0x4(%rdi), %eax <--

			Frame memory:
				[0x7f650b23b280]  .l.............@   00 6c 0f f3 1c 11 00 00 00 00 00 00 00 00 00 40
				[0x7f650b23b290]  .l......p.......   10 6c 0f f3 1c 11 00 00 70 01 01 f3 1c 11 00 00
				[0x7f650b23b2a0]  .........6......   00 00 00 00 00 00 00 00 18 36 06 f3 1c 11 00 00
				[0x7f650b23b2b0]  ..#.e....\8nW...   e0 b2 23 0b 65 7f 00 00 09 5c 38 6e 57 01 00 00
		0x7f650b23b2f0	0x1576e385c04	free + 0x44 
		0x7f650b23b310	0x15554a7bb12	uprv_free_74 + 0x48 
		0x7f650b23b330	0x15554aaacd9	icu_74::LSR::deleteOwned() + 0x17 
		0x7f650b23b350	0x15554a90ae8	icu_74::LSR::~LSR() + 0x20 
		0x7f650b23b590	0x15554aa6bbb	icu_74::XLikelySubtags::minimizeSubtags(icu_74::StringPiece, icu_74::StringPiece, icu_74::StringPiece, bool, UErrorCode&) const + 0x6f5 
		0x7f650b23b700	0x15554aa35c8	_uloc_minimizeSubtags(char const*, icu_74::ByteSink&, bool, UErrorCode*) + 0x2b5 
		0x7f650b23b790	0x15554aa3b0d	ulocimp_minimizeSubtags_74.localalias + 0x7f 
		0x7f650b23b820	0x15554aa0464	icu_74::Locale::minimizeSubtags(bool, UErrorCode&) [clone .localalias] + 0x66 
		0x7f650b23b840	0x15554aa03f6	icu_74::Locale::minimizeSubtags(UErrorCode&) + 0x20 
		0x7f650b23bc70	0x22196a746a3	icu_74::Calendar::setWeekData(icu_74::Locale const&, char const*, UErrorCode&) [clone .localalias] + 0xdf 
		0x7f650b23bcb0	0x22196a6dc2e	icu_74::Calendar::Calendar(icu_74::TimeZone const&, icu_74::Locale const&, UErrorCode&) + 0x13a 
		0x7f650b23bcf0	0x22196b056d2	icu_74::GregorianCalendar::GregorianCalendar(icu_74::TimeZone const&, icu_74::Locale const&, UErrorCode&) + 0x2c 
		0x7f650b23bfd0	0x18704aa8a33	BPrivate::Libroot::ICUTimeConversion::_FillTmValues(icu_74::TimeZone const*, long const*, tm*) + 0x43 
		0x7f650b23c000	0x18704aa5dd9	BPrivate::Libroot::ICULocaleBackend::Localtime(long const*, tm*) + 0x29 
		0x7f650b23c020	0x1576e37e35d	localtime_r + 0x2d 
		0x7f650b23c070	0x3950167a01	TTimeView::Pulse() + 0x21 
		0x7f650b23c090	0x1b0b481173b	BView::_Pulse() + 0x5b 
		0x7f650b23c0b0	0x1b0b481171d	BView::_Pulse() + 0x3d 
		0x7f650b23c0d0	0x1b0b481171d	BView::_Pulse() + 0x3d 
		0x7f650b23c0f0	0x1b0b481171d	BView::_Pulse() + 0x3d 
		0x7f650b23c110	0x1b0b481171d	BView::_Pulse() + 0x3d 
		0x7f650b23c340	0x1b0b4826c26	BWindow::DispatchMessage(BMessage*, BHandler*) + 0x696 
		0x7f650b23c3d0	0x1b0b4822843	BWindow::task_looper() + 0x1d3 
		0x7f650b23c3f0	0x1b0b476371b	BLooper::_task0_(void*) + 0x1b 
		0x7f650b23c410	0x1576e2fc187	thread_entry + 0x17 
		00000000	0x7f8a8c07f258	commpage_thread_exit + 0 

Perhaps a double free?

Change History (3)

comment:1 by waddlesplash, 14 hours ago

Resolution: invalid
Status: newclosed

vmware_tray causes memory corruption in clipboard handling, so encountering random crashes isn't unusual.

comment:2 by diver, 14 hours ago

Yes, but the stack trace is different from the usual in https://github.com/HaikuArchives/VMwareAddons/issues/12

comment:3 by waddlesplash, 14 hours ago

I also use vmware_tray and get crashes without clicking Deskbar, and the traces aren't always the same.

Note: See TracTickets for help on using tickets.