[Bug 95416] New: SIGSEGV - spice-server - on file transfer while killing the agent

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=95416

            Bug ID: 95416
           Summary: SIGSEGV - spice-server - on file transfer while
                    killing the agent
           Product: Spice
           Version: unspecified
          Hardware: Other
                OS: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: server
          Assignee: spice-bugs at lists.freedesktop.org
          Reporter: bugzilla at victortoso.com

Not 100% reproducible here. I had to kill the agent and start the file transfer
three or four times to make it crash.

Program received signal SIGSEGV, Segmentation fault.
0x00007f7bd3e5d838 in reds_get_agent_data_buffer (reds=<optimized out>,
mcc=<optimized out>, size=32) at reds.c:1121
1121        return dev->priv->recv_from_client_buf->buf +
sizeof(VDIChunkHeader);
(gdb) bt
#0  0x00007f7bd3e5d838 in reds_get_agent_data_buffer (reds=<optimized out>,
mcc=<optimized out>, size=32) at reds.c:1121
#1  0x00007f7bd3e37c96 in red_channel_client_receive (handler=0x55891df6a110,
stream=0x55891ca9e300) at red-channel.c:269
#2  0x00007f7bd3e37c96 in red_channel_client_receive
(rcc=rcc at entry=0x55891df66000) at red-channel.c:324
#3  0x00007f7bd3e3a3dc in red_channel_client_event (fd=<optimized out>,
event=1, data=0x55891df66000) at red-channel.c:1584
#4  0x000055891a4c0f96 in qemu_iohandler_poll ()
#5  0x000055891a4c0bb1 in main_loop_wait ()
#6  0x000055891a24a064 in main ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/spice-bugs/attachments/20160516/16bface8/attachment.html>