[Bug]: qml内存异常引起崩溃

[zzxyb]

SUMMARY | 问题概要

warning: 479	./src/corelib/kernel/qproperty_p.h: 没有那个文件或目录
[Current thread is 1 (Thread 0x7ffb31935ec0 (LWP 11866))]
(gdb) bt
#0  0x00007ffb384bd504 in QPropertyBindingDataPointer::firstObserver (this=<optimized out>) at ./src/corelib/kernel/qproperty_p.h:479
#1  QtPrivate::QPropertyBindingData::~QPropertyBindingData (this=0x556ba03ac138, this=<optimized out>) at ./src/corelib/kernel/qproperty.cpp:472
#2  0x00007ffb384bd7df in QBindingStoragePrivate::Pair::~Pair (this=0x556ba03ac130, this=<optimized out>) at ./src/corelib/kernel/qproperty.cpp:2166
#3  QBindingStoragePrivate::destroy (this=<optimized out>) at ./src/corelib/kernel/qproperty.cpp:2263
#4  QBindingStorage::clear (this=0x556b9e3f23d0) at ./src/corelib/kernel/qproperty.cpp:2301
#5  0x00007ffb384b2017 in QObject::~QObject (this=0x556ba047ac60, this=<optimized out>) at ./src/corelib/kernel/qobject.cpp:1024
#6  0x00007ffb369e18fc in QQmlContext::~QQmlContext (this=0x556ba047ac60, this=<optimized out>) at ./src/qml/qml/qqmlcontext.cpp:131
#7  QQmlContextData::~QQmlContextData (this=0x556ba090e100, this=<optimized out>) at ./src/qml/qml/qqmlcontextdata.cpp:175
#8  0x00007ffb3691c688 in QQmlContextData::release (this=0x556ba090e100) at ./src/qml/qml/qqmlcontextdata_p.h:52
#9  QQmlContextData::release (this=0x556ba090e100) at ./src/qml/qml/qqmlcontextdata_p.h:52
#10 QV4::Heap::QQmlContextWrapper::destroy (this=0x7ffb03d38500) at ./src/qml/jsruntime/qv4qmlcontext.cpp:45
#11 QV4::QQmlContextWrapper::virtualDestroy (b=0x7ffb03d38500) at ./src/qml/jsruntime/qv4qmlcontext_p.h:61
#12 0x00007ffb369907c8 in QV4::Chunk::sweep (this=0x7ffb03d30000, engine=0x556b9c1b81e0) at ./src/qml/memory/qv4mm.cpp:308
#13 0x00007ffb3699289b in operator() (c=<optimized out>, __closure=<synthetic pointer>) at ./src/qml/memory/qv4mm.cpp:565
#14 std::__partition<__gnu_cxx::__normal_iterator<QV4::Chunk**, std::vector<QV4::Chunk*> >, QV4::BlockAllocator::sweep()::<lambda(QV4::Chunk*)> > (__pred=..., __last=0xff08183aff061336, __first=0x7ffb03d30000)
    at /usr/include/c++/12/bits/stl_algo.h:1477
#15 std::partition<__gnu_cxx::__normal_iterator<QV4::Chunk**, std::vector<QV4::Chunk*> >, QV4::BlockAllocator::sweep()::<lambda(QV4::Chunk*)> > (__pred=..., __last=Python Exception <class 'gdb.error'>: value has been optimized out
, __first=Python Exception <class 'gdb.error'>: value has been optimized out
) at /usr/include/c++/12/bits/stl_algo.h:4632
#16 QV4::BlockAllocator::sweep (this=0x556b9c255f00) at ./src/qml/memory/qv4mm.cpp:564
#17 0x00007ffb369a1819 in QV4::(anonymous namespace)::doSweep (that=0x556b9cd3f670) at ./src/qml/memory/qv4mm.cpp:878
#18 0x00007ffb3699d440 in QV4::GCStateMachine::transition (this=0x556b9cd3f670) at ./src/qml/memory/qv4mm.cpp:1495
#19 QV4::GCStateMachine::transition (this=0x556b9cd3f670) at ./src/qml/memory/qv4mm.cpp:1477
#20 0x00007ffb384b0f3f in QObject::event (this=0x556b9cc8cb30, e=0x556ba0a27000) at ./src/corelib/kernel/qobject.cpp:1419
#21 0x00007ffb3846e938 in QCoreApplication::notifyInternal2 (receiver=0x556b9cc8cb30, event=0x556ba0a27000) at ./src/corelib/kernel/qcoreapplication.cpp:1165
#22 0x00007ffb384767d7 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x556b9c12ccf0) at ./src/corelib/kernel/qcoreapplication.cpp:1965
#23 0x00007ffb38664817 in postEventSourceDispatch (s=0x556b9c137da0) at ./src/corelib/kernel/qeventdispatcher_glib.cpp:246
#24 0x00007ffb358dee0f in ??? () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#25 0x00007ffb358e0e97 in ??? () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#26 0x00007ffb358e14b0 in g_main_context_iteration () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#27 0x00007ffb38662070 in QEventDispatcherGlib::processEvents (this=0x556b9c0e9d00, flags=...) at ./src/corelib/kernel/qeventdispatcher_glib.cpp:396
#28 0x00007ffb3847767a in QEventLoop::exec (this=0x7ffc5ff1ade0, flags=...) at ./src/corelib/global/qflags.h:34
#29 0x00007ffb38471768 in QCoreApplication::exec () at ./src/corelib/global/qflags.h:74
#30 0x0000556b790d0655 in main (argc=1, argv=0x7ffc5ff1b058) at /home/xyb/Documents/Code/Github/treeland/src/main.cpp:48
(gdb) 

LAUNCH-WAY | 启动方式

lightdm

BACKEND | 启动后端

Wayland

STEPS TO REPRODUCE | 复现步骤

偶现崩溃，无固定复现步骤

OBSERVED RESULT | 观察到的结果

No response

EXPECTED RESULT | 期望的结果

No response

ADDITIONAL INFORMATION | 额外补充

No response

[zzxyb]

一样的堆栈

Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/bin/treeland'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  unlink_chunk (p=p@entry=0x563e0b1d0d60, av=0x7eff736b0ac0 <main_arena>) at ./malloc/malloc.c:1615

warning: 1615	./malloc/malloc.c: 没有那个文件或目录
[Current thread is 1 (Thread 0x7eff6d676ec0 (LWP 6536))]
(gdb) bt
#0  unlink_chunk (p=p@entry=0x563e0b1d0d60, av=0x7eff736b0ac0 <main_arena>) at ./malloc/malloc.c:1615
#1  0x00007eff7356f6a5 in _int_free_create_chunk
    (av=av@entry=0x7eff736b0ac0 <main_arena>, p=p@entry=0x563e0b1d0c40, size=size@entry=288, nextchunk=nextchunk@entry=0x563e0b1d0d60, nextsize=nextsize@entry=48) at ./malloc/malloc.c:4714
#2  0x00007eff735709f8 in _int_free_merge_chunk (av=av@entry=0x7eff736b0ac0 <main_arena>, p=0x563e0b1d0c40, size=288) at ./malloc/malloc.c:4693
#3  0x00007eff73570d71 in _int_free (av=0x7eff736b0ac0 <main_arena>, p=<optimized out>, have_lock=<optimized out>, have_lock@entry=0) at ./malloc/malloc.c:4639
#4  0x00007eff7357344f in __GI___libc_free (mem=<optimized out>) at ./malloc/malloc.c:3391
#5  0x00007eff74293592 in QtPrivate::QPropertyBindingData::~QPropertyBindingData (this=<optimized out>, this=<optimized out>) at ./src/corelib/kernel/qproperty.cpp:478
#6  0x00007eff742937df in QBindingStoragePrivate::Pair::~Pair (this=0x563e0a9ae700, this=<optimized out>) at ./src/corelib/kernel/qproperty.cpp:2166
#7  QBindingStoragePrivate::destroy (this=<optimized out>) at ./src/corelib/kernel/qproperty.cpp:2263
#8  QBindingStorage::clear (this=0x563e0b4ba090) at ./src/corelib/kernel/qproperty.cpp:2301
#9  0x00007eff74288017 in QObject::~QObject (this=0x563e08fca400, this=<optimized out>) at ./src/corelib/kernel/qobject.cpp:1024
#10 0x00007eff3f2bf037 in QQmlPrivate::QQmlElement<Dtk::Quick::DQuickBorderImage>::~QQmlElement() () at /lib/x86_64-linux-gnu/libdtk6declarative.so.6
#11 0x00007eff74285c43 in QObjectPrivate::deleteChildren (this=this@entry=0x563e11829de0) at ./src/corelib/kernel/qobject.cpp:2211
#12 0x00007eff74288408 in QObject::~QObject (this=<optimized out>, this=<optimized out>) at ./src/corelib/kernel/qobject.cpp:1138
#13 0x00007eff72e10b99 in QQmlPrivate::QQmlElement<QQuickItem>::~QQmlElement (this=0x563e0a90a500, this=<optimized out>) at ./src/qml/qml/qqmlprivate.h:104
#14 QQmlPrivate::QQmlElement<QQuickItem>::~QQmlElement (this=0x563e0a90a500, this=<optimized out>) at ./src/qml/qml/qqmlprivate.h:104
#15 0x00007eff74285c43 in QObjectPrivate::deleteChildren (this=this@entry=0x563e0846b360) at ./src/corelib/kernel/qobject.cpp:2211
#16 0x00007eff74288408 in QObject::~QObject (this=<optimized out>, this=<optimized out>) at ./src/corelib/kernel/qobject.cpp:1138
#17 0x00007eff72e10b99 in QQmlPrivate::QQmlElement<QQuickItem>::~QQmlElement (this=0x563e0a80cf90, this=<optimized out>) at ./src/qml/qml/qqmlprivate.h:104
#18 QQmlPrivate::QQmlElement<QQuickItem>::~QQmlElement (this=0x563e0a80cf90, this=<optimized out>) at ./src/qml/qml/qqmlprivate.h:104
#19 0x00007eff7565a5f0 in SurfaceWrapper::~SurfaceWrapper (this=0x563e13f4ff70, __in_chrg=<optimized out>) at /home/xyb/Documents/Code/Github/treeland/src/surface/surfacewrapper.cpp:239
#20 0x00007eff7565a89e in SurfaceWrapper::~SurfaceWrapper (this=0x563e13f4ff70, __in_chrg=<optimized out>) at /home/xyb/Documents/Code/Github/treeland/src/surface/surfacewrapper.cpp:262
#21 0x00007eff74286d36 in QObject::event (this=0x563e13f4ff70, e=<optimized out>) at ./src/corelib/kernel/qobject.cpp:1404
#22 0x00007eff74244938 in QCoreApplication::notifyInternal2 (receiver=0x563e13f4ff70, event=0x563e0c901580) at ./src/corelib/kernel/qcoreapplication.cpp:1165
#23 0x00007eff7424c7d7 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x563e05d04cf0) at ./src/corelib/kernel/qcoreapplication.cpp:1965
#24 0x00007eff7443a817 in postEventSourceDispatch (s=0x563e05d0fda0) at ./src/corelib/kernel/qeventdispatcher_glib.cpp:246
#25 0x00007eff7161fe0f in ??? () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#26 0x00007eff71621e97 in ??? () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#27 0x00007eff716224b0 in g_main_context_iteration () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#28 0x00007eff74438070 in QEventDispatcherGlib::processEvents (this=0x563e05cc1d00, flags=...) at ./src/corelib/kernel/qeventdispatcher_glib.cpp:396
#29 0x00007eff7424d67a in QEventLoop::exec (this=0x7ffed0074350, flags=...) at ./src/corelib/global/qflags.h:34
#30 0x00007eff74247768 in QCoreApplication::exec () at ./src/corelib/global/qflags.h:74
#31 0x0000563df1fa0655 in main (argc=1, argv=0x7ffed00745c8) at /home/xyb/Documents/Code/Github/treeland/src/main.cpp:48
(gdb) q