Flathub KeePassXC 2.7.6 package crashes on startup

[tlcarpenter]

Overview

Flathub KeePassXC 2.7.6 package crashes when attempting to start from the command line.

Steps to Reproduce

1. execute "flatpak run org.keepassxc.KeePassXC"

Expected Behavior

Actual Behavior

$ flatpak run org.keepassxc.KeePassXC
Gtk-Message: 10:30:37.633: Failed to load module "canberra-gtk-module"
Gtk-Message: 10:30:37.633: Failed to load module "canberra-gtk-module"
qt.qpa.qgnomeplatform: Could not find color scheme ""
Qt: Session management error: None of the authentication protocols specified are supported
Existing single-instance lock file is invalid. Launching new instance.
*** stack smashing detected ***: terminated

Context

dpkg -l | grep canberra
ii gnome-session-canberra 0.30-10ubuntu1.22.04.1
ii libcanberra-gtk-module:amd64 0.30-10ubuntu1.22.04.1
ii libcanberra-gtk0:amd64 0.30-10ubuntu1.22.04.1
ii libcanberra-gtk3-0:amd64 0.30-10ubuntu1.22.04.1
ii libcanberra-gtk3-module:amd64 0.30-10ubuntu1.22.04.1
ii libcanberra-pulse:amd64 0.30-10ubuntu1.22.04.1

$ env | grep QT_*
QT_ACCESSIBILITY=1
QT_IM_MODULE=ibus

$ flatpak list
Name Application ID Version Branch Installation
Yubico Authenticator com.yubico.yubioath 6.3.0 stable system
Chromium Web Browser org.chromium.Chromium 118.0.5993.117 stable system
Codecs org.chromium.Chromium.Codecs stable system
Freedesktop Platform org.freedesktop.Platform 22.08.19 22.08 system
Mesa org.freedesktop.Platform.GL.default 23.1.9 22.08 system
Mesa (Extra) org.freedesktop.Platform.GL.default 23.1.9 22.08-extra system
Mesa org.freedesktop.Platform.GL.default 23.2.1 23.08 system
Mesa (Extra) org.freedesktop.Platform.GL.default 23.2.1 23.08-extra system
nvidia-390-157 org.freedesktop.Platform.GL.nvidia-390-157 1.4 system
ffmpeg-full org.freedesktop.Platform.ffmpeg-full 22.08 system
openh264 org.freedesktop.Platform.openh264 2.1.0 2.2.0 system
openh264 org.freedesktop.Platform.openh264 2.1.0 2.3.0 system
GNOME Application Platform version 43 org.gnome.Platform 43 system
Yaru Gtk Theme org.gtk.Gtk3theme.Yaru 3.22 system
KDE Application Platform org.kde.Platform 5.15-22.08 system
KDE Application Platform org.kde.Platform 5.15-23.08 system
QGnomePlatform org.kde.PlatformTheme.QGnomePlatform 5.15-22.08 system
QGnomePlatform org.kde.PlatformTheme.QGnomePlatform 5.15-23.08 system
QAdwaitaDecorations org.kde.WaylandDecoration.QAdwaitaDecorations 5.15-22.08 system
QAdwaitaDecorations org.kde.WaylandDecoration.QAdwaitaDecorations 5.15-23.08 system
QGnomePlatform-decoration org.kde.WaylandDecoration.QGnomePlatform-decoration 5.15-22.08 system
QGnomePlatform-decoration org.kde.WaylandDecoration.QGnomePlatform-decoration 5.15-23.08 system
KeePassXC org.keepassxc.KeePassXC 2.7.6 stable system
Remmina org.remmina.Remmina 1.4.33 stable system
Zoom us.zoom.Zoom 5.16.6.382 stable system

KeePassXC - 2.7.6
Revision: ?

$ flatpak info org.keepassxc.KeePassXC

KeePassXC - Community-driven port of the Windows application “KeePass Password
Safe”

      ID: org.keepassxc.KeePassXC
     Ref: app/org.keepassxc.KeePassXC/x86_64/stable
    Arch: x86_64
  Branch: stable
 Version: 2.7.6
 License: GPL-3.0+
  Origin: flathub

Collection: org.flathub.Stable
Installation: system
Installed: 41.5 MB
Runtime: org.kde.Platform/x86_64/5.15-23.08
Sdk: org.kde.Sdk/x86_64/5.15-23.08

  Commit: bee71bce744c659455c504dfb535464dec303fc9d33ff81197cdc9b3a7f4621b
  Parent: e819ca2682dde064b1969a0c338fdb467a584e22cfec7472c7ec44a4c72d61c8
 Subject: Update to runtime 5.15-23.08 (#118) (a9089e5e)
    Date: 2023-10-31 03:00:12 +0000

Operating System: Linux
Desktop Env: Gnome
Windowing System: Wayland

[tlcarpenter]

...also, tried uninstalling the package, restarting the system, then reinstalled KeePassXC from Flathub, get the same error trying to run "flatpak run org.keepassxc.KeePassXC".

[droidmonkey]

The stack smash error means there is a buffer overflow somewhere in code that has enabled that kind of protection. I doubt this is in KeePassXC code as we'd see it everywhere, plus we did not change KeePassXC code in our latest flatpak update, just the kde runtime used and Botan. Can you run diagnostics on your flatpak or gdb?

[tlcarpenter]

Willing to try (not much of a programmer). Follow the info below for Flatpak?

https://docs.flatpak.org/en/latest/debugging.html

[droidmonkey]

Yes that would be the way

[tlcarpenter]

Not sure that my environment is set up properly for debugging but I tried running

$ flatpak run --command=sh --devel org.keepassxc.KeePassXC
[📦 org.keepassxc.KeePassXC ~]$ gdb /app/bin/keepassxc

the output for which included

"(No debugging symbols found in /app/bin/keepassxc)"

[droidmonkey]

That is expected, you need to type "r" then press enter to run the program

[tlcarpenter]

Thanks.

(gdb) r
Starting program: /app/bin/keepassxc
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7ffff1f536c0 (LWP 12)]
[New Thread 0x7ffff17526c0 (LWP 13)]
Gtk-Message: 17:26:48.961: Failed to load module "canberra-gtk-module"
Gtk-Message: 17:26:48.963: Failed to load module "canberra-gtk-module"
qt.qpa.qgnomeplatform: Could not find color scheme ""
Qt: Session management error: None of the authentication protocols specified are supported
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
[New Thread 0x7fffeabb26c0 (LWP 14)]
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
[New Thread 0x7fffe91be6c0 (LWP 15)]
[New Thread 0x7fffe89bd6c0 (LWP 16)]
[New Thread 0x7fffdffff6c0 (LWP 17)]
[New Thread 0x7fffdf7fe6c0 (LWP 18)]
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
Error while mapping shared library sections:
/proc/9/ns/mnt: Permission denied.
*** stack smashing detected ***: terminated

Thread 1 "keepassxc" received signal SIGABRT, Aborted.
__pthread_kill_implementation (threadid=, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
44 return INTERNAL_SYSCALL_ERROR_P (ret) ? INTERNAL_SYSCALL_ERRNO (ret) : 0;
(gdb)

[droidmonkey]

Sorry forgot after it crashes issue a bt and press enter to show the stack trace

[tlcarpenter]

(gdb) bt
#0 __pthread_kill_implementation (threadid=, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
#1 0x00007ffff5aa3e83 in __pthread_kill_internal (signo=6, threadid=) at pthread_kill.c:78
#2 0x00007ffff5a51dce in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#3 0x00007ffff5a3983f in __GI_abort () at abort.c:79
#4 0x00007ffff5a3a710 in __libc_message (fmt=fmt@entry=0x7ffff5bbd2fa "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150
#5 0x00007ffff5b37fa9 in __GI___fortify_fail (msg=msg@entry=0x7ffff5bbd312 "stack smashing detected") at fortify_fail.c:24
#6 0x00007ffff5b39264 in __stack_chk_fail () at stack_chk_fail.c:24
#7 0x00007ffff5a9d81d in _dlerror_run (operate=operate@entry=0x7ffff5a9dba0 <dlopen_doit>, args=args@entry=0x7fffffffc640) at dlerror.c:198
#8 0x00007ffff5a9dcbf in dlopen_implementation (dl_caller=, mode=, file=) at dlopen.c:71
#9 ___dlopen (file=, mode=) at dlopen.c:81
#10 0x00007ffff51f12b8 in __glXLookupVendorByName (vendorName=) at ../src/GLX/libglxmapping.c:428
#11 0x00007ffff51f3b2d in __glXLookupVendorByScreen (dpy=dpy@entry=0x555555c606d0, screen=screen@entry=0) at ../src/GLX/libglxmapping.c:572
#12 0x00007ffff51f4906 in __glXGetDynDispatch (screen=0, dpy=0x555555c606d0) at ../src/GLX/libglxmapping.c:606
#13 glXQueryExtensionsString (dpy=0x555555c606d0, screen=0) at ../src/GLX/libglx.c:1473
#14 0x00007fffe966cbae in ()
#15 0x0000000000000000 in ()
(gdb)

[droidmonkey]

This isn't a KeePassXC crash. This needs to be filed with another project, I'm not sure which just yet.

[tlcarpenter]

Mine may be an edge case; seeing the GLX-related messages makes me wonder. The system I'm getting these errors on is an Apple iMac (27-inch, Late 2013) running Ubuntu 22.04.3 LTS (desktop version for amd64). It'd be nice to get the flatpak package working but I understand if there are bigger fish to fry.

[droidmonkey]

Yah this isn't a bug on our side though. I would imagine all flatpaks would fail, but maybe not. We enable a lot of security protections in our code that other apps do not.

[tlcarpenter]

Thanks for the time you put in on this.