KDE托盘应用程序消失

Hello, I was investigating a [bug report in Debian](https://bugs.debian.org/cgi-…bin/bugreport.cgi?bug=1026062#35) and could track it down to a use-after-free of a `PackageKit::Transaction` object. The free, as far as I see, is done inside the Qt library because of a `QDeferredDeleteEvent` which was created because of a call to `TransactionPrivate::finished`, while still in the constructor of the `PackageKit::Transaction` object. A [bug report in KDE](https://bugs.kde.org/show_bug.cgi?id=462706) states this could be an issue of packagekit-qt. Could you please have a look if that is the case? A shortened valgrind log follows for searchability, see the Debian bug for complete backtraces. The matching packaged source code of packagekit-qt is [available here](https://sources.debian.org/src/packagekit-qt/1.1.0-1/). ``` ==12351== Invalid read of size 8 ==12351== at 0x27458BA0: PackageKit::Transaction::role() const (transaction.cpp:297) ==12351== by 0x273B6AAD: TransactionWatcher::watchTransaction(QDBusObjectPath const&, bool) (TransactionWatcher.cpp:104) ==12351== by 0x273B6B98: TransactionWatcher::transactionListChanged(QStringList const&) (TransactionWatcher.cpp:85) ==12351== by 0x5B59FCE: ??? (in /usr/lib/x86_64-linux-gnu/libQt5Core.so.5.15.7) ==12351== by 0x2744C094: PackageKit::Daemon::transactionListChanged(QStringList const&) (moc_daemon.cpp:419) ==12351== by 0x5B59FFB: ??? (in /usr/lib/x86_64-linux-gnu/libQt5Core.so.5.15.7) ==12351== by 0x27464B37: TransactionListChanged (daemonproxy.moc:331) ... ==12351== Address 0x1a6a2a10 is 16 bytes inside a block of size 24 free'd ==12351== at 0x484371B: operator delete(void*) (vg_replace_malloc.c:923) ==12351== by 0x5B4E53E: QObject::event(QEvent*) (in /usr/lib/x86_64-linux-gnu/libQt5Core.so.5.15.7) ==12351== by 0x49CAF5D: QApplicationPrivate::notify_helper(QObject*, QEvent*) (in /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5.15.7) ==12351== by 0x5B227C7: QCoreApplication::notifyInternal2(QObject*, QEvent*) (in /usr/lib/x86_64-linux-gnu/libQt5Core.so.5.15.7) ==12351== by 0x5B25760: QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (in /usr/lib/x86_64-linux-gnu/libQt5Core.so.5.15.7) ... ==12351== Block was alloc'd at ==12351== at 0x4840F2F: operator new(unsigned long) (vg_replace_malloc.c:422) ==12351== by 0x273B693B: TransactionWatcher::watchTransaction(QDBusObjectPath const&, bool) (TransactionWatcher.cpp:95) ==12351== by 0x273B6B98: TransactionWatcher::transactionListChanged(QStringList const&) (TransactionWatcher.cpp:85) ==12351== by 0x5B59FCE: ??? (in /usr/lib/x86_64-linux-gnu/libQt5Core.so.5.15.7) ==12351== by 0x2744C094: PackageKit::Daemon::transactionListChanged(QStringList const&) (moc_daemon.cpp:419) ==12351== by 0x5B59FFB: ??? (in /usr/lib/x86_64-linux-gnu/libQt5Core.so.5.15.7) ==12351== by 0x27464B37: TransactionListChanged (daemonproxy.moc:331) ==12351== by 0x27464B37: OrgFreedesktopPackageKitInterface::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) (daemonproxy.moc:178) ... ```

解决方案

作为临时解决方案，建议卸载 apper。如果你愿意测试补丁，参见：

Pirate · 2023 年2 月 3 日 05:37

恐怕这才是问题的根源，想起来曾经出现过kbed5的崩溃，但当时没有当回事。

ybx333 · 2023 年2 月 3 日 09:30

天啊，这个bug影响这么大的吗？当时我花了好多时间才成功定位到这个bug。

ybx333 · 2023 年4 月 3 日 15:17

bug已在4月1日在bookworm中修复。