[Qemu-devel] qemu crashed when starting vm(kvm) with vnc connect

[Zhanghaoyu (A)]

I start a kvm VM with vnc(using the zrle protocol) connect, sometimes qemu program crashed during starting period, received signal SIGABRT.

Trying about 20 times, this crash may be reproduced.

I guess the cause memory corruption or double free.

 

The backtrace shown as below:

 

0x00007f32eda3dd95 in raise () from /lib64/libc.so.6

(gdb) bt

#0  0x00007f32eda3dd95 in raise () from /lib64/libc.so.6

#1  0x00007f32eda3f2ab in abort () from /lib64/libc.so.6

#2  0x00007f32eda77ece in __libc_message () from /lib64/libc.so.6

#3  0x00007f32eda7dc06 in malloc_printerr () from /lib64/libc.so.6

#4  0x00007f32eda7ecda in _int_free () from /lib64/libc.so.6

#5  0x00007f32efd3452c in free_and_trace (mem=0x7f3290000cd0) at vl.c:2880

#6  0x00007f32efd251a1 in buffer_free (buffer=0x7f32f0c82890) at ui/vnc.c:505

#7  0x00007f32efd20c56 in vnc_zrle_clear (vs=0x7f32f0c762d0)

    at ui/vnc-enc-zrle.c:364

#8  0x00007f32efd26d07 in vnc_disconnect_finish (vs=0x7f32f0c762d0)

    at ui/vnc.c:1050

#9  0x00007f32efd275c5 in vnc_client_read (opaque=0x7f32f0c762d0)

    at ui/vnc.c:1349

#10 0x00007f32efcb397c in qemu_iohandler_poll (readfds=0x7f32f074d020,

    writefds=0x7f32f074d0a0, xfds=0x7f32f074d120, ret=1) at iohandler.c:124

#11 0x00007f32efcb46e8 in main_loop_wait (nonblocking=0) at main-loop.c:417

#12 0x00007f32efd31159 in main_loop () at vl.c:2133

#13 0x00007f32efd38070 in main (argc=46, argv=0x7fff7f5df178,

    envp=0x7fff7f5df2f0) at vl.c:4481