I start a kvm VM with vnc(using the zrle protocol) connect, sometimes qemu
program crashed during starting period, received signal SIGABRT.
Trying about 20 times, this crash may be reproduced.
I guess the cause memory corruption or double free.
The backtrace shown as below:
0x00007f32eda3dd95 in raise () from /lib64/libc.so.6
(gdb) bt
#0 0x00007f32eda3dd95 in raise () from /lib64/libc.so.6
#1 0x00007f32eda3f2ab in abort () from /lib64/libc.so.6
#2 0x00007f32eda77ece in __libc_message () from /lib64/libc.so.6
#3 0x00007f32eda7dc06 in malloc_printerr () from /lib64/libc.so.6
#4 0x00007f32eda7ecda in _int_free () from /lib64/libc.so.6
#5 0x00007f32efd3452c in free_and_trace (mem=0x7f3290000cd0) at vl.c:2880
#6 0x00007f32efd251a1 in buffer_free (buffer=0x7f32f0c82890) at ui/vnc.c:505
#7 0x00007f32efd20c56 in vnc_zrle_clear (vs=0x7f32f0c762d0)
at ui/vnc-enc-zrle.c:364
#8 0x00007f32efd26d07 in vnc_disconnect_finish (vs=0x7f32f0c762d0)
at ui/vnc.c:1050
#9 0x00007f32efd275c5 in vnc_client_read (opaque=0x7f32f0c762d0)
at ui/vnc.c:1349
#10 0x00007f32efcb397c in qemu_iohandler_poll (readfds=0x7f32f074d020,
writefds=0x7f32f074d0a0, xfds=0x7f32f074d120, ret=1) at iohandler.c:124
#11 0x00007f32efcb46e8 in main_loop_wait (nonblocking=0) at main-loop.c:417
#12 0x00007f32efd31159 in main_loop () at vl.c:2133
#13 0x00007f32efd38070 in main (argc=46, argv=0x7fff7f5df178,
envp=0x7fff7f5df2f0) at vl.c:4481
