Bug#1051579: nomacs: segmentation fault in std::__atomic_base

[John Dorian]

On Sun, 10 Sep 2023 01:01:50 +0200 Vincent Lefevre 
wrote:> Package: nomacs
> Version: 3.17.2282+dfsg-2
> Severity: important
>
> I got a segmentation fault when doing "View -> Close Tab" then
> a double click on a directory.
>

Thank you for reporting. This has been fixed in the following pull request.

https://github.com/nomacs/nomacs/pull/1087

Bug#1051579: nomacs: segmentation fault in std::__atomic_base

[Vincent Lefevre]

Package: nomacs
Version: 3.17.2282+dfsg-2
Severity: important

I got a segmentation fault when doing "View -> Close Tab" then
a double click on a directory.

The latest messages:

[...]
[INFO] "/home/vinc17/photos-tmp/DCIM/chamonix/20230620_175745.jpg" does not 
exist - according to a fast check
[INFO] "/home/vinc17/private/appart/photo-porte.jpg" does not exist - according 
to a fast check
[WARNING] fromIccProfile: failed minimal tag size sanity
[INFO] [Basic Loader] "/home/vinc17/wd/images/normal.jpg" loaded in 4 ms
[INFO] [Basic Loader] "/home/vinc17/wd/images/gps-tracks/aubepin028.jpg" loaded 
in 4 ms
Error: XMP Toolkit error 203: Duplicate property or field node
Warning: Failed to decode XMP metadata.
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/year2022.cpuload.png" 
loaded in 2 ms
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/year2018.mail-e.png" 
loaded in 2 ms
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/year2018.mail-n.png" 
loaded in 3 ms
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/20210616.mail-n.png" 
loaded in 4 ms
[INFO] list updated in 75 ms
[INFO] [DkImageLoader] 10215 containers created in 222 ms
[INFO] [DkImageLoader] after sorting:  316 ms
[INFO] [Basic Loader] "/home/vinc17/photos-tmp/DCIM/20230825_112623.jpg" loaded 
in 78 ms
zsh: segmentation fault (core dumped)  nomacs .

According to gdb:

Program terminated with signal SIGSEGV, Segmentation fault.
#0  std::__atomic_base::load (__m=std::memory_order_acquire, 
this=0xe4457b82fe3d7e0a) at /usr/include/c++/13/bits/atomic_base.h:835

warning: Source file is more recent than executable.
835 __glibcxx_assert(__b != memory_order_acq_rel);
[Current thread is 1 (Thread 0x7f3cfdb03cc0 (LWP 487325))]

I've attached the full backtrace.

This is reproducible:

1. Run "nomacs .".
2. Menu View -> Close Tab.
3. Double click on an arbitrary directory (this doesn't seem to matter).

Now, I get an additional warning:

[...]
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/year2022.cpuload.png" 
loaded in 3 ms
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/year2018.mail-e.png" 
loaded in 3 ms
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/year2018.mail-n.png" 
loaded in 3 ms
[INFO] [Basic Loader] "/home/vinc17/wd/linux/joooj/stat/20210616.mail-n.png" 
loaded in 4 ms
[INFO] list updated in 68 ms
[WARNING] danger zone: viewport is queried before its initialization
[INFO] [DkImageLoader] 10215 containers created in 222 ms
[INFO] [DkImageLoader] after sorting:  323 ms
zsh: segmentation fault (core dumped)  nomacs .

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'stable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
merged-usr: no
Architecture: amd64 (x86_64)

Kernel: Linux 6.4.0-4-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages nomacs depends on:
ii  libc6  2.37-8
ii  libexiv2-270.27.6-1
ii  libgcc-s1  13.2.0-3
ii  libopencv-core406  4.6.0+dfsg-13+b1
ii  libopencv-imgproc406   4.6.0+dfsg-13+b1
ii  libqt5concurrent5  5.15.10+dfsg-3
ii  libqt5core5a   5.15.10+dfsg-3
ii  libqt5gui5 5.15.10+dfsg-3
ii  libqt5network5 5.15.10+dfsg-3
ii  libqt5printsupport55.15.10+dfsg-3
ii  libqt5svg5 5.15.10-2
ii  libqt5widgets5 5.15.10+dfsg-3
ii  libquazip5-1   0.9.1-3
ii  libraw23   0.21.1-7
ii  libstdc++6 13.2.0-3
ii  libtiff6   4.5.1+git230720-1
ii  qt5-image-formats-plugins  5.15.10-2

Versions of packages nomacs recommends:
ii  nomacs-l10n  3.17.2282+dfsg-2

nomacs suggests no packages.

-- no debconf information

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Thread 18 (Thread 0x7f3cb850d6c0 (LWP 487354)):
#0  __futex_abstimed_wait_common64 (private=0, cancel=true, 
abstime=0x7f3cb850cc90, op=137, expected=0, futex_word=0x7f3cd4010fa4) at 
./nptl/futex-internal.c:57
sc_cancel_oldtype = 0
__arg6 = 
__arg3 = 
_a5 = 
_a2 = 
sc_ret = 
__arg4 = 
__arg1 = 
_a6 = 
_a3 = 
resultvar = 
__arg5 = 
__arg2 = 
_a4 = 
_a1 = 
#1  __futex_abstimed_wait_common (futex_word=futex_word@entry=0x7f3cd4010fa4, 
expected=expected@entry=0, clockid=clockid@entry=1, 
abstime=abstime@entry=0x7f3cb850cc90, private=private@entry=0,