I noticed that this service has been stuck in a respawn/segfault loop on
my system.

[...]
[ 4969.616799] colord[22761]: segfault at 55fd30d664d5 ip 00007f47219ccc01 sp 00007ffecd7fd3a8 error 4 in libgobject-2.0.so.0.7800.0[7f47219a1000+34000] likely on CPU 3 (core 1, socket 0)
[ 4969.616819] Code: c5 57 02 00 48 8b 34 e8 e9 53 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 85 ff 74 47 48 8b 07 48 85 c0 74 3f <48> 8b 00 48 3d fc 03 00 00 77 2c 48 8d 15 8d 57 02 00 48 c1 e8 02
[ 4972.827228] colord[22778]: segfault at 55e578ec796c ip 00007f56e6dc2c01 sp 00007ffd52003138 error 4 in libgobject-2.0.so.0.7800.0[7f56e6d97000+34000] likely on CPU 3 (core 1, socket 0)
[ 4972.827253] Code: c5 57 02 00 48 8b 34 e8 e9 53 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 85 ff 74 47 48 8b 07 48 85 c0 74 3f <48> 8b 00 48 3d fc 03 00 00 77 2c 48 8d 15 8d 57 02 00 48 c1 e8 02
[ 4976.595370] colord[22797]: segfault at 5573ed6cf512 ip 00007f72d6785c01 sp 00007fff98e380c8 error 4 in libgobject-2.0.so.0.7800.0[7f72d675a000+34000] likely on CPU 0 (core 0, socket 0)


(gdb) thread apply all bt

Thread 5 (Thread 0x7fef177fe6c0 (LWP 18507)):
#0  0x00007fef1dcfc9ff in __GI___poll (fds=0x7fef0c000b90, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fef1e05c237 in g_main_context_poll_unlocked (priority=<optimized out>, n_fds=2, fds=0x7fef0c000b90, timeout=<optimized out>, context=0x7fef08005d00) at ../../../glib/gmain.c:4653
#2  g_main_context_iterate_unlocked (context=0x7fef08005d00, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../../../glib/gmain.c:4344
#3  0x00007fef1e05cbdf in g_main_loop_run (loop=0x7fef08005e30) at ../../../glib/gmain.c:4551
#4  0x00007fef1e2cbdfa in gdbus_shared_thread_func (user_data=0x7fef08005cd0) at ../../../gio/gdbusprivate.c:284
#5  0x00007fef1e0899e1 in g_thread_proxy (data=0x560db24a50b0) at ../../../glib/gthread.c:831
#6  0x00007fef1dc893ec in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:444
#7  0x00007fef1dd09a2c in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 4 (Thread 0x7fef17fff6c0 (LWP 18506)):
#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1  0x00007fef1e0b7b70 in g_cond_wait_until (cond=cond@entry=0x560db24e0fe8, mutex=mutex@entry=0x560db24e0fe0, end_time=end_time@entry=3795687445) at ../../../glib/gthread-posix.c:1677
#2  0x00007fef1e026133 in g_async_queue_pop_intern_unlocked (queue=0x560db24e0fe0, wait=1, end_time=3795687445) at ../../../glib/gasyncqueue.c:428
#3  0x00007fef1e08a3ea in g_thread_pool_wait_for_new_task (pool=0x560db24b3f90) at ../../../glib/gthreadpool.c:274
#4  g_thread_pool_thread_proxy (data=<optimized out>) at ../../../glib/gthreadpool.c:339
#5  0x00007fef1e0899e1 in g_thread_proxy (data=0x7fef18000b70) at ../../../glib/gthread.c:831
#6  0x00007fef1dc893ec in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:444
#7  0x00007fef1dd09a2c in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 3 (Thread 0x7fef1c9fe6c0 (LWP 18505)):
#0  0x00007fef1dcfc9ff in __GI___poll (fds=0x560db24e75b0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fef1e05c237 in g_main_context_poll_unlocked (priority=<optimized out>, n_fds=2, fds=0x560db24e75b0, timeout=<optimized out>, context=0x560db24e73f0) at ../../../glib/gmain.c:4653
#2  g_main_context_iterate_unlocked (context=context@entry=0x560db24e73f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../../../glib/gmain.c:4344
#3  0x00007fef1e05c8f0 in g_main_context_iteration (context=0x560db24e73f0, may_block=may_block@entry=1) at ../../../glib/gmain.c:4414
#4  0x00007fef1e05c941 in glib_worker_main (data=<optimized out>) at ../../../glib/gmain.c:6574
#5  0x00007fef1e0899e1 in g_thread_proxy (data=0x560db24d8690) at ../../../glib/gthread.c:831
#6  0x00007fef1dc893ec in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:444
#7  0x00007fef1dd09a2c in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 2 (Thread 0x7fef1d1ff6c0 (LWP 18504)):
#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1  0x00007fef1e0b79a4 in g_cond_wait (cond=cond@entry=0x560db24e2108, mutex=mutex@entry=0x560db24e2100) at ../../../glib/gthread-posix.c:1552
#2  0x00007fef1e02615b in g_async_queue_pop_intern_unlocked (queue=0x560db24e2100, wait=1, end_time=-1) at ../../../glib/gasyncqueue.c:425
#3  0x00007fef1e08a06a in g_thread_pool_spawn_thread (data=<optimized out>) at ../../../glib/gthreadpool.c:311
#4  0x00007fef1e0899e1 in g_thread_proxy (data=0x560db24e0570) at ../../../glib/gthread.c:831
#5  0x00007fef1dc893ec in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:444
#6  0x00007fef1dd09a2c in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 1 (Thread 0x7fef1d643900 (LWP 18503)):
#0  g_type_check_instance_is_fundamentally_a (type_instance=type_instance@entry=0x560db2516200, fundamental_type=fundamental_type@entry=0x50 [GObject]) at ../../../gobject/gtype.c:4184
#1  0x00007fef1e16387d in g_object_unref (_object=0x560db2516200) at ../../../gobject/gobject.c:3810
#2  0x00007fef1e4928a0 in glib_autoptr_clear_GFileInfo (_ptr=0x560db2516200) at /usr/include/glib-2.0/gio/gio-autocleanups.h:71
#3  glib_autoptr_cleanup_GFileInfo (_ptr=<synthetic pointer>) at /usr/include/glib-2.0/gio/gio-autocleanups.h:71
#4  cd_icc_store_search_path (store=store@entry=0x560db24f5fa0 [CdIccStore], path=path@entry=0x560db24f6650 "/usr/share/color/icc", depth=depth@entry=0, cancellable=cancellable@entry=0x0, error=error@entry=0x7ffe3665b3f8) at ../lib/colord/cd-icc-store.c:407
#5  0x00007fef1e492e29 in cd_icc_store_search_location (store=store@entry=0x560db24f5fa0 [CdIccStore], location=0x560db24f6650 "/usr/share/color/icc", search_flags=search_flags@entry=CD_ICC_STORE_SEARCH_FLAGS_NONE, cancellable=cancellable@entry=0x0, error=error@entry=0x7ffe3665b3f8) at ../lib/colord/cd-icc-store.c:665
#6  0x00007fef1e492f28 in cd_icc_store_search_kind (store=0x560db24f5fa0 [CdIccStore], search_kind=search_kind@entry=CD_ICC_STORE_SEARCH_KIND_SYSTEM, search_flags=search_flags@entry=CD_ICC_STORE_SEARCH_FLAGS_NONE, cancellable=cancellable@entry=0x0, error=error@entry=0x7ffe3665b3f8) at ../lib/colord/cd-icc-store.c:612
#7  0x0000560db13631dc in cd_main_on_name_acquired_cb (connection=<optimized out>, name=<optimized out>, user_data=0x560db24a43a0) at ../src/cd-main.c:1874
#8  0x00007fef1e2c56a4 in actually_do_call (call_type=CALL_TYPE_NAME_ACQUIRED, connection=<optimized out>, client=0x560db24e3ee0) at ../../../gio/gdbusnameowning.c:165
#9  do_call (client=client@entry=0x560db24e3ee0, call_type=call_type@entry=CALL_TYPE_NAME_ACQUIRED) at ../../../gio/gdbusnameowning.c:217
#10 0x00007fef1e2c5ce8 in call_acquired_handler (client=0x560db24e3ee0) at ../../../gio/gdbusnameowning.c:231
#11 call_acquired_handler (client=0x560db24e3ee0) at ../../../gio/gdbusnameowning.c:222
#12 on_name_lost_or_acquired (connection=<optimized out>, sender_name=0x7fef0c002730 "org.freedesktop.DBus", object_path=<optimized out>, interface_name=<optimized out>, user_data=0x560db24e3ee0, parameters=0x7fef0c002b20, signal_name=0x7fef0c002a90 "NameAcquired") at ../../../gio/gdbusnameowning.c:298
#13 on_name_lost_or_acquired (connection=<optimized out>, sender_name=0x7fef0c002730 "org.freedesktop.DBus", object_path=<optimized out>, interface_name=<optimized out>, signal_name=0x7fef0c002a90 "NameAcquired", parameters=0x7fef0c002b20, user_data=0x560db24e3ee0) at ../../../gio/gdbusnameowning.c:262
#14 0x00007fef1e2b59af in emit_signal_instance_in_idle_cb (data=0x7fef0c003670) at ../../../gio/gdbusconnection.c:3802
#15 0x00007fef1e059099 in g_main_dispatch (context=context@entry=0x560db24a4460) at ../../../glib/gmain.c:3476
#16 0x00007fef1e05c2d7 in g_main_context_dispatch_unlocked (context=0x560db24a4460) at ../../../glib/gmain.c:4284
#17 g_main_context_iterate_unlocked (context=0x560db24a4460, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../../../glib/gmain.c:4349
#18 0x00007fef1e05cbdf in g_main_loop_run (loop=0x560db24a4670) at ../../../glib/gmain.c:4551
#19 0x0000560db135bd6b in main (argc=<optimized out>, argv=<optimized out>) at ../src/cd-main.c:2502
Warning: the current language does not match this frame.
(gdb)

tag 1052173 + patch
tag 1052173 + fixed-upstream
thanks

I found that this problem does not occur with latest upstream, so I used
bisection to identify the fix. The problem no longer occurs after
applying this fix to the existing package:

commit 124efd03f3cb9b1df819134eb7cb6683497be9b1
Author: Richard Hughes <richard@hughsie.com>
Date:   Wed Apr 13 14:16:02 2022 +0100

    Fix a double free spotted by Coverity

[dann frazier]

Which is available from
<URL: https://github.com/hughsie/colord/commit/124efd03f3cb9b1df819134eb7cb6683497be9b1 >.

I investigated some more, and discovered that a fix for this was uploaded in
version 1.4.6-2.