#1129957 libkscreenlocker6: kscreenlocker_greet crashes

Package:
libkscreenlocker6
Source:
libkscreenlocker6
Description:
Secure lock screen architecture
Submitter:
cedric borgese
Date:
2026-03-07 14:05:02 UTC
Severity:
normal
#1129957#5
Date:
2026-03-06 15:44:50 UTC
From:
To:
Dear Maintainer,

kscreenlocker_greet crash for me, when the screen is automatically locked by kde or when I try to run it manually with /usr/lib/x86_64-linux-gnu/libexec/kscreenlocker_greet
it seems to be crash only on this system as I have anoother system with debian sid installed that dont experience this crash

Note that I already experienced this crash a while ago (~ 1 year) and it just disappear after some weeks.
I tried to chenge the lockscreen background in case it may be a corruption of the svg file but without success.

here a backtrace when I run it with gdb with some debug sym installed :

Thread 38 "Thread (pooled)" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffa13fb6c0 (LWP 22501)]
0x0000000000000000 in ?? ()
(gdb) bt
#0  0x0000000000000000 in ??? ()
#1  0x00007ffff31bbce5 in loadDocument<QByteArray> (q=0x7fff88007ef0, d=0x7fff88007e50, in=...) at ./src/svg/qsvgrenderer.cpp:417
#2  QSvgRenderer::load (this=this@entry=0x7fff88007ef0, contents=...) at ./src/svg/qsvgrenderer.cpp:451
#3  0x00007ffff68a45fd in KSvg::SharedSvgRenderer::load (this=this@entry=0x7fff88007ef0, contents=..., styleSheet=..., interestingElements=...) at ./src/ksvg/svg.cpp:142
#4  0x00007ffff68a969c in KSvg::SharedSvgRenderer::reload (this=0x7fff88007ef0) at ./src/ksvg/svg.cpp:105
#5  KSvg::SvgPrivate::setImagePath (this=<optimized out>, imagePath=<optimized out>) at ./src/ksvg/svg.cpp:530
#6  0x00007ffff68acde1 in KSvg::Svg::setImagePath (this=0x7fffa13fa5a0, svgFilePath=<optimized out>) at ./src/ksvg/svg.cpp:1062
#7  0x00007fffd4be1d55 in ??? ()
#8  0x00007fffa13fa580 in ??? ()
#9  0x00007fffd4bea8c2 in ??? ()
#10 0x00007fffa13fa518 in ??? ()
#11 0x00007fffd4bea8b0 in ??? ()
#12 0x0000000000000000 in ??? ()


I also tried to tun it with valgrind, here the log :

==22046== Memcheck, a memory error detector
==22046== Copyright (C) 2002-2024, and GNU GPL'd, by Julian Seward et al.
==22046== Using Valgrind-3.25.1 and LibVEX; rerun with -h for copyright info
==22046== Command: /usr/lib/x86_64-linux-gnu/libexec/kscreenlocker_greet
==22046== Parent PID: 13309
==22046==
==22046== Warning: unimplemented fcntl command: 1027
==22046== Conditional jump or move depends on uninitialised value(s)
==22046==    at 0x27444E46: ???
==22046==    by 0x101A09F7: ???
==22046==
==22046== Conditional jump or move depends on uninitialised value(s)
==22046==    at 0x27444B62: ???
==22046==    by 0x2C2BEF6F: ???
==22046==
==22046== Invalid read of size 16
==22046==    at 0x27444A79: ???
==22046==    by 0xFE899EF: ???
==22046==  Address 0xfe949de is 45,054 bytes inside a block of size 45,060 alloc'd
==22046==    at 0x487A818: malloc (vg_replace_malloc.c:446)
==22046==    by 0x6B311B7: QArrayData::allocate2(QArrayData**, long long, QArrayData::AllocationOption) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6AFE49D: QString::fromLatin1(QByteArrayView) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x74C461E: UnknownInlinedFun (qstring.h:727)
==22046==    by 0x74C461E: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:147)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74D6542: UnknownInlinedFun (svg.cpp:775)
==22046==    by 0x74D6542: KSvg::SvgPrivate::elementRect(QStringView) (svg.cpp:764)
==22046==    by 0x74D6B78: KSvg::Svg::hasElement(QStringView) const (svg.cpp:1028)
==22046==    by 0x27424FD8: ??? (in /usr/lib/x86_64-linux-gnu/qt6/qml/org/kde/ksvg/libcorebindingsplugin.so)
==22046==    by 0x274272AE: ??? (in /usr/lib/x86_64-linux-gnu/qt6/qml/org/kde/ksvg/libcorebindingsplugin.so)
==22046==    by 0x56CA5B2: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Qml.so.6.9.2)
==22046==    by 0x5587CFE: QV4::QObjectMethod::callPrecise(QQmlObjectOrGadget const&, QQmlPropertyData const&, QV4::ExecutionEngine*, QV4::CallData*, QMetaObject::Call) (in /usr/lib/x86_64-linux-gnu/libQt6Qml.so.6.9.2)
==22046==    by 0x5593078: QV4::QObjectMethod::callInternal(QV4::Value const*, QV4::Value const*, int) const (in /usr/lib/x86_64-linux-gnu/libQt6Qml.so.6.9.2)
==22046==
==22046== Invalid read of size 16
==22046==    at 0x27444A79: ???
==22046==    by 0xFD9509F: ???
==22046==  Address 0xfda008e is 45,054 bytes inside a block of size 45,060 alloc'd
==22046==    at 0x487A818: malloc (vg_replace_malloc.c:446)
==22046==    by 0x6B311B7: QArrayData::allocate2(QArrayData**, long long, QArrayData::AllocationOption) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6AFE49D: QString::fromLatin1(QByteArrayView) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x74C461E: UnknownInlinedFun (qstring.h:727)
==22046==    by 0x74C461E: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:147)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74D6542: UnknownInlinedFun (svg.cpp:775)
==22046==    by 0x74D6542: KSvg::SvgPrivate::elementRect(QStringView) (svg.cpp:764)
==22046==    by 0x74D6A5B: KSvg::Svg::elementSize(QStringView) const (svg.cpp:1003)
==22046==    by 0x74BCBB6: KSvg::FrameSvgPrivate::updateSizes(KSvg::FrameData*) const (framesvg.cpp:947)
==22046==    by 0x74BF270: UnknownInlinedFun (framesvg_p.h:155)
==22046==    by 0x74BF270: UnknownInlinedFun (framesvg.cpp:1064)
==22046==    by 0x74BF270: KSvg::FrameSvgPrivate::updateFrameData(unsigned int, KSvg::FrameSvgPrivate::UpdateType) (framesvg.cpp:775)
==22046==    by 0x27426C42: ??? (in /usr/lib/x86_64-linux-gnu/qt6/qml/org/kde/ksvg/libcorebindingsplugin.so)
==22046==    by 0x56C4739: QQmlObjectCreator::finalize(QQmlInstantiationInterrupt&) (in /usr/lib/x86_64-linux-gnu/libQt6Qml.so.6.9.2)
==22046==    by 0x563AD19: QQmlComponentPrivate::complete(QQmlEnginePrivate*, QQmlComponentPrivate::ConstructionState*) (in /usr/lib/x86_64-linux-gnu/libQt6Qml.so.6.9.2)
==22046==
==22046== Conditional jump or move depends on uninitialised value(s)
==22046==    at 0x2744398E: ???
==22046==    by 0xF3A7AF7: ???
==22046==
==22046== Invalid read of size 16
==22046==    at 0x27444A79: ???
==22046==    by 0x26E0926F: ???
==22046==  Address 0x26e1425e is 45,054 bytes inside a block of size 45,060 alloc'd
==22046==    at 0x487A818: malloc (vg_replace_malloc.c:446)
==22046==    by 0x6B311B7: QArrayData::allocate2(QArrayData**, long long, QArrayData::AllocationOption) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6AFE49D: QString::fromLatin1(QByteArrayView) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x74C461E: UnknownInlinedFun (qstring.h:727)
==22046==    by 0x74C461E: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:147)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74D6542: UnknownInlinedFun (svg.cpp:775)
==22046==    by 0x74D6542: KSvg::SvgPrivate::elementRect(QStringView) (svg.cpp:764)
==22046==    by 0x74D6B78: KSvg::Svg::hasElement(QStringView) const (svg.cpp:1028)
==22046==    by 0x74BF5C6: KSvg::FrameSvg::setElementPrefix(QString const&) (framesvg.cpp:119)
==22046==    by 0x74BF6B4: KSvg::FrameSvgPrivate::updateNeeded() (framesvg.cpp:1049)
==22046==    by 0x6A89620: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x27421DE4: ??? (in /usr/lib/x86_64-linux-gnu/qt6/qml/org/kde/ksvg/libcorebindingsplugin.so)
==22046==    by 0x27427094: ??? (in /usr/lib/x86_64-linux-gnu/qt6/qml/org/kde/ksvg/libcorebindingsplugin.so)
==22046==
==22046== Conditional jump or move depends on uninitialised value(s)
==22046==    at 0x27444B62: ???
==22046==    by 0x2D557CDF: ???
==22046==
==22046== Thread 41 Thread (pooled):
==22046== Invalid read of size 16
==22046==    at 0x27444A79: ???
==22046==    by 0x2C68CC8F: ???
==22046==  Address 0x2c6b4e0e is 164,238 bytes inside a block of size 164,244 alloc'd
==22046==    at 0x487A818: malloc (vg_replace_malloc.c:446)
==22046==    by 0x6B311B7: QArrayData::allocate2(QArrayData**, long long, QArrayData::AllocationOption) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6AFE49D: QString::fromLatin1(QByteArrayView) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x74C461E: UnknownInlinedFun (qstring.h:727)
==22046==    by 0x74C461E: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:147)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74C9288: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:542)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6BA67E3: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x7190468: start_thread (pthread_create.c:448)
==22046==    by 0x720EB1F: clone (clone.S:100)
==22046==
==22046== Thread 40 Thread (pooled):
==22046== Invalid read of size 16
==22046==    at 0x27444A79: ???
==22046==    by 0x2C6B4E6F: ???
==22046==  Address 0x2c6dcfee is 164,238 bytes inside a block of size 164,244 alloc'd
==22046==    at 0x487A818: malloc (vg_replace_malloc.c:446)
==22046==    by 0x6B311B7: QArrayData::allocate2(QArrayData**, long long, QArrayData::AllocationOption) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6AFE49D: QString::fromLatin1(QByteArrayView) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x74C461E: UnknownInlinedFun (qstring.h:727)
==22046==    by 0x74C461E: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:147)
==22046==    by 0x74C969B: UnknownInlinedFun (svg.cpp:105)
==22046==    by 0x74C969B: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:530)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6BA67E3: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x7190468: start_thread (pthread_create.c:448)
==22046==    by 0x720EB1F: clone (clone.S:100)
==22046==
==22046== Invalid read of size 16
==22046==    at 0x27444A79: ???
==22046==    by 0x2C6DD04F: ???
==22046==  Address 0x2c7051ce is 164,238 bytes inside a block of size 164,244 alloc'd
==22046==    at 0x487A818: malloc (vg_replace_malloc.c:446)
==22046==    by 0x6B311B7: QArrayData::allocate2(QArrayData**, long long, QArrayData::AllocationOption) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6AFE49D: QString::fromLatin1(QByteArrayView) (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x74C461E: UnknownInlinedFun (qstring.h:727)
==22046==    by 0x74C461E: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:147)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74C9288: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:542)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6BA67E3: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x7190468: start_thread (pthread_create.c:448)
==22046==    by 0x720EB1F: clone (clone.S:100)
==22046==
==22046== Thread 41 Thread (pooled):
==22046== Invalid read of size 1
==22046==    at 0x9654D10: UnknownInlinedFun (q20utility.h:129)
==22046==    by 0x9654D10: UnknownInlinedFun (qscopedvaluerollback.h:25)
==22046==    by 0x9654D10: QSvgMarker::drawHelper(QSvgNode const*, QPainter*, QSvgExtraStates&, QRectF*) (qsvgstructure.cpp:415)
==22046==    by 0x964D0BD: QSvgNode::fillThenStroke(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:111)
==22046==    by 0x964F45A: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:88)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964D34E: QSvgNode::drawIntoBuffer(QPainter*, QSvgExtraStates&, QRect const&) (qsvgnode.cpp:159)
==22046==    by 0x964F62C: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:84)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964EE03: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:90)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964EE03: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:90)
==22046==    by 0x9664EE4: QSvgTinyDocument::draw(QPainter*, QRectF const&) (qsvgtinydocument.cpp:266)
==22046==    by 0x74CBAE9: KSvg::SvgPrivate::findInCache(QString const&, double, QSizeF const&) (svg.cpp:624)
==22046==  Address 0x2d835182 is 818 bytes inside a block of size 848 free'd
==22046==    at 0x487E86D: operator delete(void*, unsigned long) (vg_replace_malloc.c:1181)
==22046==    by 0x9650CE4: loadDocument<QByteArray> (qsvgrenderer.cpp:417)
==22046==    by 0x9650CE4: QSvgRenderer::load(QByteArray const&) (qsvgrenderer.cpp:451)
==22046==    by 0x74C45FC: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:142)
==22046==    by 0x74C969B: UnknownInlinedFun (svg.cpp:105)
==22046==    by 0x74C969B: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:530)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6BA67E3: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x7190468: start_thread (pthread_create.c:448)
==22046==    by 0x720EB1F: clone (clone.S:100)
==22046==  Block was alloc'd at
==22046==    at 0x487AF93: operator new(unsigned long) (vg_replace_malloc.c:487)
==22046==    by 0x962F9E5: createSvgNode(QSvgNode*, QXmlStreamAttributes const&, QSvgHandler*) (qsvghandler.cpp:3978)
==22046==    by 0x9640B76: QSvgHandler::startElement(QString const&, QXmlStreamAttributes const&) (qsvghandler.cpp:4720)
==22046==    by 0x964376F: QSvgHandler::parse() (qsvghandler.cpp:4650)
==22046==    by 0x96674A8: QSvgTinyDocument::load(QByteArray const&, QFlags<QtSvg::Option>, QtSvg::AnimatorType) (qsvgtinydocument.cpp:224)
==22046==    by 0x9650CF7: loadDocument<QByteArray> (qsvgrenderer.cpp:418)
==22046==    by 0x9650CF7: QSvgRenderer::load(QByteArray const&) (qsvgrenderer.cpp:451)
==22046==    by 0x74C45FC: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:142)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74C9288: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:542)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==
==22046== Invalid write of size 1
==22046==    at 0x9654D2C: UnknownInlinedFun (q20utility.h:130)
==22046==    by 0x9654D2C: UnknownInlinedFun (qscopedvaluerollback.h:25)
==22046==    by 0x9654D2C: QSvgMarker::drawHelper(QSvgNode const*, QPainter*, QSvgExtraStates&, QRectF*) (qsvgstructure.cpp:415)
==22046==    by 0x964D0BD: QSvgNode::fillThenStroke(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:111)
==22046==    by 0x964F45A: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:88)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964D34E: QSvgNode::drawIntoBuffer(QPainter*, QSvgExtraStates&, QRect const&) (qsvgnode.cpp:159)
==22046==    by 0x964F62C: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:84)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964EE03: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:90)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964EE03: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:90)
==22046==    by 0x9664EE4: QSvgTinyDocument::draw(QPainter*, QRectF const&) (qsvgtinydocument.cpp:266)
==22046==    by 0x74CBAE9: KSvg::SvgPrivate::findInCache(QString const&, double, QSizeF const&) (svg.cpp:624)
==22046==  Address 0x2d835182 is 818 bytes inside a block of size 848 free'd
==22046==    at 0x487E86D: operator delete(void*, unsigned long) (vg_replace_malloc.c:1181)
==22046==    by 0x9650CE4: loadDocument<QByteArray> (qsvgrenderer.cpp:417)
==22046==    by 0x9650CE4: QSvgRenderer::load(QByteArray const&) (qsvgrenderer.cpp:451)
==22046==    by 0x74C45FC: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:142)
==22046==    by 0x74C969B: UnknownInlinedFun (svg.cpp:105)
==22046==    by 0x74C969B: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:530)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x6BA67E3: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==    by 0x7190468: start_thread (pthread_create.c:448)
==22046==    by 0x720EB1F: clone (clone.S:100)
==22046==  Block was alloc'd at
==22046==    at 0x487AF93: operator new(unsigned long) (vg_replace_malloc.c:487)
==22046==    by 0x962F9E5: createSvgNode(QSvgNode*, QXmlStreamAttributes const&, QSvgHandler*) (qsvghandler.cpp:3978)
==22046==    by 0x9640B76: QSvgHandler::startElement(QString const&, QXmlStreamAttributes const&) (qsvghandler.cpp:4720)
==22046==    by 0x964376F: QSvgHandler::parse() (qsvghandler.cpp:4650)
==22046==    by 0x96674A8: QSvgTinyDocument::load(QByteArray const&, QFlags<QtSvg::Option>, QtSvg::AnimatorType) (qsvgtinydocument.cpp:224)
==22046==    by 0x9650CF7: loadDocument<QByteArray> (qsvgrenderer.cpp:418)
==22046==    by 0x9650CF7: QSvgRenderer::load(QByteArray const&) (qsvgrenderer.cpp:451)
==22046==    by 0x74C45FC: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:142)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74C9288: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:542)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==
==22046== Invalid read of size 8
==22046==    at 0x964DC50: QSvgNode::document() const (qsvgnode.cpp:388)
==22046==    by 0x964F93C: QSvgNode::hasAnyMarker() const (qsvgnode.cpp:616)
==22046==    by 0x9654D38: markersForNode (qsvgstructure.cpp:276)
==22046==    by 0x9654D38: QSvgMarker::drawHelper(QSvgNode const*, QPainter*, QSvgExtraStates&, QRectF*) (qsvgstructure.cpp:418)
==22046==    by 0x964D0BD: QSvgNode::fillThenStroke(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:111)
==22046==    by 0x964F45A: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:88)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964D34E: QSvgNode::drawIntoBuffer(QPainter*, QSvgExtraStates&, QRect const&) (qsvgnode.cpp:159)
==22046==    by 0x964F62C: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:84)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964EE03: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:90)
==22046==    by 0x9658577: QSvgG::drawCommand(QPainter*, QSvgExtraStates&) (qsvgstructure.cpp:40)
==22046==    by 0x964EE03: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:90)
==22046==  Address 0x2c4e3e10 is 0 bytes inside a block of size 624 free'd
==22046==    at 0x487E86D: operator delete(void*, unsigned long) (vg_replace_malloc.c:1181)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*>::const_iterator> (qalgorithms.h:28)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*> > (qalgorithms.h:36)
==22046==    by 0x965409E: QSvgStructureNode::~QSvgStructureNode() (qsvgstructure.cpp:31)
==22046==    by 0x9658C2F: ~QSvgG (qsvgstructure_p.h:48)
==22046==    by 0x9658C2F: QSvgG::~QSvgG() (qsvgstructure_p.h:48)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*>::const_iterator> (qalgorithms.h:28)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*> > (qalgorithms.h:36)
==22046==    by 0x965409E: QSvgStructureNode::~QSvgStructureNode() (qsvgstructure.cpp:31)
==22046==    by 0x9658C2F: ~QSvgG (qsvgstructure_p.h:48)
==22046==    by 0x9658C2F: QSvgG::~QSvgG() (qsvgstructure_p.h:48)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*>::const_iterator> (qalgorithms.h:28)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*> > (qalgorithms.h:36)
==22046==    by 0x965409E: QSvgStructureNode::~QSvgStructureNode() (qsvgstructure.cpp:31)
==22046==    by 0x9658C2F: ~QSvgG (qsvgstructure_p.h:48)
==22046==    by 0x9658C2F: QSvgG::~QSvgG() (qsvgstructure_p.h:48)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*>::const_iterator> (qalgorithms.h:28)
==22046==    by 0x965409E: qDeleteAll<QList<QSvgNode*> > (qalgorithms.h:36)
==22046==    by 0x965409E: QSvgStructureNode::~QSvgStructureNode() (qsvgstructure.cpp:31)
==22046==    by 0x9663C41: QSvgTinyDocument::~QSvgTinyDocument() (qsvgtinydocument.cpp:48)
==22046==    by 0x9650CE4: loadDocument<QByteArray> (qsvgrenderer.cpp:417)
==22046==    by 0x9650CE4: QSvgRenderer::load(QByteArray const&) (qsvgrenderer.cpp:451)
==22046==    by 0x74C45FC: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:142)
==22046==    by 0x74C969B: UnknownInlinedFun (svg.cpp:105)
==22046==    by 0x74C969B: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:530)
==22046==  Block was alloc'd at
==22046==    at 0x487AF93: operator new(unsigned long) (vg_replace_malloc.c:487)
==22046==    by 0x96370F6: createPathNode(QSvgNode*, QXmlStreamAttributes const&, QSvgHandler*) (qsvghandler.cpp:3713)
==22046==    by 0x9641433: QSvgHandler::startElement(QString const&, QXmlStreamAttributes const&) (qsvghandler.cpp:4764)
==22046==    by 0x964376F: QSvgHandler::parse() (qsvghandler.cpp:4650)
==22046==    by 0x96674A8: QSvgTinyDocument::load(QByteArray const&, QFlags<QtSvg::Option>, QtSvg::AnimatorType) (qsvgtinydocument.cpp:224)
==22046==    by 0x9650CF7: loadDocument<QByteArray> (qsvgrenderer.cpp:418)
==22046==    by 0x9650CF7: QSvgRenderer::load(QByteArray const&) (qsvgrenderer.cpp:451)
==22046==    by 0x74C45FC: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:142)
==22046==    by 0x74C72D5: UnknownInlinedFun (svg.cpp:89)
==22046==    by 0x74C72D5: KSvg::SvgPrivate::createRenderer() (svg.cpp:689)
==22046==    by 0x74C9288: KSvg::SvgPrivate::setImagePath(QString const&) (svg.cpp:542)
==22046==    by 0x74CCDE0: KSvg::Svg::setImagePath(QString const&) (svg.cpp:1062)
==22046==    by 0x260ECD54: AsyncPackageImageResponseRunnable::run() (packageimageprovider.cpp:95)
==22046==    by 0x6BAE864: ??? (in /usr/lib/x86_64-linux-gnu/libQt6Core.so.6.9.2)
==22046==
==22046==
==22046== Process terminating with default action of signal 6 (SIGABRT): dumping core
==22046==    at 0x71923BC: __pthread_kill_implementation (pthread_kill.c:44)
==22046==    by 0x713B941: raise (raise.c:26)
==22046==    by 0x71234AB: abort (abort.c:77)
==22046==    by 0x6F2BAA3: ??? (in /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.34)
==22046==    by 0x6F3E159: ??? (in /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.34)
==22046==    by 0x6F2B62D: std::terminate() (in /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.34)
==22046==    by 0x6F3EFE2: __cxa_pure_virtual (in /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.34)
==22046==    by 0x964DC58: QSvgNode::document() const (qsvgnode.cpp:388)
==22046==    by 0x964F93C: QSvgNode::hasAnyMarker() const (qsvgnode.cpp:616)
==22046==    by 0x9654D38: markersForNode (qsvgstructure.cpp:276)
==22046==    by 0x9654D38: QSvgMarker::drawHelper(QSvgNode const*, QPainter*, QSvgExtraStates&, QRectF*) (qsvgstructure.cpp:418)
==22046==    by 0x964D0BD: QSvgNode::fillThenStroke(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:111)
==22046==    by 0x964F45A: QSvgNode::draw(QPainter*, QSvgExtraStates&) (qsvgnode.cpp:88)
==22046==
==22046== HEAP SUMMARY:
==22046==     in use at exit: 161,675,444 bytes in 223,914 blocks
==22046==   total heap usage: 930,413 allocs, 706,499 frees, 377,617,311 bytes allocated
==22046==
==22046== LEAK SUMMARY:
==22046==    definitely lost: 5,928 bytes in 151 blocks
==22046==    indirectly lost: 2,764 bytes in 107 blocks
==22046==      possibly lost: 202,250 bytes in 577 blocks
==22046==    still reachable: 161,462,654 bytes in 223,058 blocks
==22046==                       of which reachable via heuristic:
==22046==                         length64           : 32 bytes in 1 blocks
==22046==                         newarray           : 763,336 bytes in 1,348 blocks
==22046==                         multipleinheritance: 203,672 bytes in 197 blocks
==22046==         suppressed: 0 bytes in 0 blocks
==22046== Rerun with --leak-check=full to see details of leaked memory
==22046==
==22046== Use --track-origins=yes to see where uninitialised values come from
==22046== For lists of detected and suppressed errors, rerun with: -s
==22046== ERROR SUMMARY: 15 errors from 13 contexts (suppressed: 0 from 0)
#1129957#10
Date:
2026-03-07 08:59:51 UTC
From:
To:
Some more tests

I find how to actually change the lockscreen background and found that screen
locker crashes with ceratospian background, but not with some other I tried (I
didn't tried all the wallpapers)

I also tried to set ceratospian on my other hardware with debian sid and it
does not crash.

So I guess the severity of this issue can be lowered.
#1129957#15
Date:
2026-03-07 09:33:03 UTC
From:
To:
control: severity -1 normal

Hi,

Le 7 mars 2026 09:59:51 GMT+01:00, "cédric borgese" <cedric.borgese@gmail.com> a écrit :

Thanks for the follow-up.

I cannot reproduce this so I'd guess it's hardware or driver related.

Could you try with another Debian and another non-Debian wallpaper to test SVG vs JPEG and confirm if / when it crashes ?

If not all SVGs it would mean Ceratopsian uses a particular SVG feature / combination that triggers the crash.


Thanks,
--
Aurélien
#1129957#22
Date:
2026-03-07 11:08:19 UTC
From:
To:
After doing a lot of experiments including reinstalling packages and clearing
caches the crash does not reproduce anymore.

It may have been some corrupted svg or cache.

just to answer your last question, I changed the wallpaper to homeworld while
the crash was still present, which is also svg and I experience no chashes
with it.
So it must have been something with this particular file.

I add a last note that may be usefull if someone else it this issue, I see 2
identical ceratopsian entries in the wallpaper selection. I don't know why/
where the second one is found, but it may also be part of the issue, the
second one may point to an old invalid file.

I guess the issue may be closed. If I hit it again, I'll try to investigate
more before opening a new issue.

thanks.