http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c1 --- Comment #1 from Atri Bhattacharya --- Created attachment 677843 --> http://bugzilla.opensuse.org/attachment.cgi?id=677843&action=edit bt from coredumpctl -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 Bjørn Lie changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening@forge.pr |bnc-team-gnome@forge.provo. |ovo.novell.com |novell.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c4 --- Comment #4 from Atri Bhattacharya --- OK, still happens with updated TW 20160520, and so here is the full bt: Reading symbols from /usr/lib/packagekitd...Reading symbols from /usr/lib/debug/usr/lib/packagekitd.debug...done. done. [New LWP 2141] [New LWP 1427] [New LWP 1433] [New LWP 1432] [New LWP 2089] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `/usr/lib/packagekitd'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f983ca82908 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54 54 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory. [Current thread is 1 (Thread 0x7f9825d65700 (LWP 2141))] (gdb) bt #0 0x00007f983ca82908 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54 #1 0x00007f983ca83d5a in __GI_abort () at abort.c:78 #2 0x00007f983ca7b667 in __assert_fail_base (fmt=<optimized out>, assertion=assertion@entry=0x7f983953b0cc "px != 0", file=file@entry=0x7f983953b7d0 "/usr/include/boost/smart_ptr/intrusive_ptr.hpp", line=line@entry=174, function=function@entry=0x7f983953c760 zypp::ResObject::operator->() const::__PRETTY_FUNCTION__> "T* boost::intrusive_ptr<T>::operator->() const [with T = zypp::ResObject]") at assert.c:92 #3 0x00007f983ca7b712 in __GI___assert_fail (assertion=assertion@entry=0x7f983953b0cc "px != 0", file=file@entry=0x7f983953b7d0 "/usr/include/boost/smart_ptr/intrusive_ptr.hpp", line=line@entry=174, function=function@entry=0x7f983953c760 zypp::ResObject::operator->() const::__PRETTY_FUNCTION__> "T* boost::intrusive_ptr<T>::operator->() const [with T = zypp::ResObject]") at assert.c:101 #4 0x00007f983952d5c9 in boost::intrusive_ptrzypp::ResObject::operator-> (this=0x7f9825d64c50) at /usr/include/boost/smart_ptr/intrusive_ptr.hpp:174 #5 backend_get_update_detail_thread (job=0x55b2b20ae4d0, params=<optimized out>, user_data=<optimized out>) at pk-backend-zypp.cpp:2454 #6 0x000055b2afc5d38a in pk_backend_job_thread_setup (thread_data=0x55b2b20f81f0) at pk-backend-job.c:813 #7 0x00007f983d30b165 in g_thread_proxy (data=0x55b2b20fa400) at gthread.c:780 #8 0x00007f983cdf7454 in start_thread (arg=0x7f9825d65700) at pthread_create.c:333 #9 0x00007f983cb363fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c6 Dominique Leuenberger changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High Summary|PackageKit dumps core |PackageKit dumps core |during offline update | Severity|Normal |Critical --- Comment #6 from Dominique Leuenberger --- This is not limited to Offline update - actually a simply:

pkcon get-updates -d

already makes packagekitd segfault, rendering PK pretty useless at the moment -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c8 --- Comment #8 from Michael Andres --- Logfile is AFAIK /var/log/pk_backend_zypp -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c10 --- Comment #10 from Michael Andres --- Right, the log does not show the error. We'd need a log immediately taken after a SEGV. OTOH the fix sketched in c#7 is for sure not wrong ;) -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c12 --- Comment #12 from Michael Andres --- The log for PID 10496 fits to the initial backtrace and c#7:

2016-05-23 11:11:52 <1> mal(10496) [packagekit] pk-backend-zypp.cpp(zypp_get_package_by_id):884 bundle-lang-common-en;13.2-21.4;noarch;repo-oss 2016-05-23 11:11:52 <1> mal(10496) [packagekit] pk-backend-zypp.cpp(backend_get_update_detail_thread):2407 bundle-lang-common-en;13.2-21.4;noarch;repo-oss noSolvable ---------------------------(10520)--------------------------- ... 2016-05-23 11:11:52 <1> mal(10520) [zypp] ZYppFactory.cc(readLockFile):221 read: Lockfile /var/run/zypp.pid has pid 10496 (our pid: 10520) 2016-05-23 11:11:52 <1> mal(10520) [zypp] ZYppFactory.cc(isProcessRunning):193 Checking /proc/10496{[2-No such file or directory]} 2016-05-23 11:11:52 <1> mal(10520) [zypp] ZYppFactory.cc(zyppLocked):273 10496 is dead. Taking the lock file.

The log ends after 'pk-backend-zypp.cpp(backend_get_update_detail_thread):2407' reported it found 'noSolvable' for 'bundle-lang-common-en;13.2-21.4;noarch;repo-oss'. The backend crashed and the next PID 10520 finds the orphaned lock file of 10496. The backend must check for zypp_get_package_by_id returning 'noSolvable' and do whatever is appropriate in this situation. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c14 --- Comment #14 from Atri Bhattacharya --- Created attachment 678568 --> http://bugzilla.opensuse.org/attachment.cgi?id=678568&action=edit /var/log/pk_backend_zypp Caught it again, and this time I have the logs to show for it ;) journalctl says: May 27 00:02:38 tp-yoga260 PackageKit[905]: search-file transaction /18_aaaedaaa from uid 1000 finished with success after 611ms May 27 00:02:38 tp-yoga260 PackageKit[905]: search-file transaction /19_dacabeae from uid 1000 finished with success after 680ms May 27 00:02:39 tp-yoga260 PackageKit[905]: search-file transaction /20_eddabaec from uid 1000 finished with success after 796ms May 27 00:02:40 tp-yoga260 PackageKit[905]: search-file transaction /21_ccacbaed from uid 1000 finished with success after 684ms May 27 00:02:41 tp-yoga260 PackageKit[905]: search-file transaction /22_ddabcbbc from uid 1000 finished with success after 731ms May 27 00:02:41 tp-yoga260 PackageKit[905]: search-file transaction /23_dccdeaeb from uid 1000 finished with success after 812ms May 27 00:02:42 tp-yoga260 PackageKit[905]: search-file transaction /24_decaddce from uid 1000 finished with success after 621ms May 27 00:02:43 tp-yoga260 PackageKit[905]: search-file transaction /25_accdbcca from uid 1000 finished with success after 684ms May 27 00:02:43 tp-yoga260 PackageKit[905]: search-file transaction /26_bbaedccd from uid 1000 finished with success after 646ms May 27 00:02:44 tp-yoga260 PackageKit[905]: search-file transaction /27_deccddda from uid 1000 finished with success after 668ms May 27 00:02:45 tp-yoga260 PackageKit[905]: search-file transaction /28_eacdaacd from uid 1000 finished with success after 701ms May 27 00:02:46 tp-yoga260 PackageKit[905]: get-details transaction /29_ebebddbc from uid 1000 finished with success after 978ms May 27 00:02:51 tp-yoga260 kernel: SFW2-INext-DROP-DEFLT IN=wlp4s0 OUT= MAC= SRC=fe80:0000:0000:0000:4685:00ff:fe3c:fb40 DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=88 T May 27 00:03:03 tp-yoga260 PackageKit[905]: daemon quit May 27 00:03:03 tp-yoga260 packagekitd[905]: (packagekitd:905): GLib-CRITICAL **: Source ID 10 was not found when attempting to remove it May 27 00:03:03 tp-yoga260 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=packagekit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? ad May 27 00:03:06 tp-yoga260 systemd-coredump[896]: Process 858 (packagekitd) of user 0 dumped core. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c16 --- Comment #16 from Michael Andres --- Created attachment 685243 --> http://bugzilla.opensuse.org/attachment.cgi?id=685243&action=edit Patch from upstream pull request Upstream pull request is: https://github.com/hughsie/PackageKit/pull/148 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c18 --- Comment #18 from Atri Bhattacharya --- Thanks a bunch, Michael. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c20 --- Comment #20 from Atri Bhattacharya --- It's back! I am on Tumbleweed VERSION_ID="20170722", and tried to upgrade today, leading to: Jul 26 06:57:21 mal systemd[1]: Received SIGRTMIN+20 from PID 311 (plymouthd). Jul 26 06:57:21 mal packagekitd[845]: packagekitd: /usr/include/boost/smart_ptr/intrusive_ptr.hpp:199: T* boost::intrusive_ptr<T>::operator->() const [with T = zypp::ui::Selectable]: Assertion `px != 0' failed. Jul 26 06:57:21 mal systemd-coredump[890]: Failed to connect to coredump service: No such file or directory Jul 26 06:57:21 mal systemd[1]: packagekit.service: Main process exited, code=killed, status=6/ABRT Jul 26 06:57:21 mal systemd[1]: packagekit.service: Unit entered failed state. Jul 26 06:57:21 mal systemd[1]: packagekit.service: Failed with result 'signal'. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c22 Atri Bhattacharya changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(badshah400@gmail. | |com) | --- Comment #22 from Atri Bhattacharya --- Created attachment 733877 --> http://bugzilla.opensuse.org/attachment.cgi?id=733877&action=edit tarball contains /var/log/pk_backend_zypp -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c24 --- Comment #24 from Michael Andres --- @gnome-maintainers the complete backend code should be reviewed. There are several other locations where you retrieve some previously stored package_id (here nome-color-manager-lang;3.24.0-2.3;noarch;repo-oss in backend_update_packages_thread) and don't handle the case that the package_id is no longer valid (see comment#7). Your code should basically behave like this:

sat::Solvable solvable = zypp_get_package_by_id( package_id ); if ( ! solvable ) { // Previously stored package_id no longer matches any solvable. // May happen e.g. if repos meanwhile changed (add/remove/refresh) } else { // found matching solvable }

Construncting pointer types like a ui::Selectable::Ptr from a sat::Solvable::noSolvable will result in a nullptr and leads to crashes like the above. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=981011 http://bugzilla.opensuse.org/show_bug.cgi?id=981011#c33 Dominique Leuenberger changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ohering@suse.com --- Comment #33 from Dominique Leuenberger --- *** Bug 984851 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.