<html>
    <head>
      <base href="https://bugs.freedesktop.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - SIGSEGV - spice-server - on file transfer while killing the agent"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=95416">95416</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>SIGSEGV - spice-server - on file transfer while killing the agent
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>Spice
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>Other
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>server
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>spice-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>bugzilla@victortoso.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Not 100% reproducible here. I had to kill the agent and start the file transfer
three or four times to make it crash.

Program received signal SIGSEGV, Segmentation fault.
0x00007f7bd3e5d838 in reds_get_agent_data_buffer (reds=<optimized out>,
mcc=<optimized out>, size=32) at reds.c:1121
1121        return dev->priv->recv_from_client_buf->buf +
sizeof(VDIChunkHeader);
(gdb) bt
#0  0x00007f7bd3e5d838 in reds_get_agent_data_buffer (reds=<optimized out>,
mcc=<optimized out>, size=32) at reds.c:1121
#1  0x00007f7bd3e37c96 in red_channel_client_receive (handler=0x55891df6a110,
stream=0x55891ca9e300) at red-channel.c:269
#2  0x00007f7bd3e37c96 in red_channel_client_receive
(rcc=rcc@entry=0x55891df66000) at red-channel.c:324
#3  0x00007f7bd3e3a3dc in red_channel_client_event (fd=<optimized out>,
event=1, data=0x55891df66000) at red-channel.c:1584
#4  0x000055891a4c0f96 in qemu_iohandler_poll ()
#5  0x000055891a4c0bb1 in main_loop_wait ()
#6  0x000055891a24a064 in main ()</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>