Crash after zoom and unzoom with secondary axes #9740
Description
- Checked for duplicates
Describe the bug
This is a histogram I have with some extra axes:
After zooming on the (lower) X-axis of a histogram, I get this weird image:
After clicking on the canvas once, I get the correct zoomed image:
Then, if I right click on the lower x axis, and then Unzoom, ROOT crashes with SIGSEGV.
*** Break *** segmentation violation
===========================================================
There was a crash (kSigSegmentationViolation).
This is the entire stack trace of all threads:
===========================================================
#0 0x00007faba4e70457 in __GI___waitpid (pid=27807, stat_loc=stat_loc
entry=0x7ffd300bf178, options=options
entry=0) at ../sysdeps/unix/sysv/linux/waitpid.c:30
#1 0x00007faba4ddb177 in do_system (line=<optimized out>) at ../sysdeps/posix/system.c:149
#2 0x00007faba5b72a08 in TUnixSystem::Exec (this=0x55692f74e7c0, shellcmd=0x556933e43c00 "/opt/root_bld/etc/gdb-backtrace.sh 26942 1>&2") at /opt/root_src/core/unix/src/TUnixSystem.cxx:2108
#3 0x00007faba5b732b9 in TUnixSystem::StackTrace (this=0x55692f74e7c0) at /opt/root_src/core/unix/src/TUnixSystem.cxx:2399
#4 0x00007faba5b76f5a in TUnixSystem::DispatchSignals (this=0x55692f74e7c0, sig=kSigSegmentationViolation) at /opt/root_src/core/unix/src/TUnixSystem.cxx:3619
#5 0x00007faba5b6e70e in SigHandler (sig=kSigSegmentationViolation) at /opt/root_src/core/unix/src/TUnixSystem.cxx:395
#6 0x00007faba5b76e67 in sighandler (sig=11) at /opt/root_src/core/unix/src/TUnixSystem.cxx:3590
#7 0x00007faba5b6742a in textinput::TerminalConfigUnix::HandleSignal (this=0x7faba60569a0 <textinput::TerminalConfigUnix::Get()::s>, signum=11) at /opt/root_src/core/textinput/src/textinput/TerminalConfigUnix.cpp:99
#8 0x00007faba5b67146 in (anonymous namespace)::TerminalConfigUnix__handleSignal (signum=11) at /opt/root_src/core/textinput/src/textinput/TerminalConfigUnix.cpp:36
#9 <signal handler called>
#10 0x00007faba5b538c3 in TContextMenu::Action (this=0x5569344ccc70, object=0x556932dbe648, method=0x33dc19b0) at /opt/root_src/core/gui/src/TContextMenu.cxx:100
#11 0x00007fab9194bc4b in TContextMenu::Action (this=0x5569344ccc70, method=0x33dc19b0) at /opt/root_src/core/gui/inc/TContextMenu.h:74
#12 0x00007fab9194b3e6 in TRootContextMenu::ProcessMessage (this=0x5569344debf0, msg=257, parm1=7, parm2=870062512) at /opt/root_src/gui/gui/src/TRootContextMenu.cxx:712
#13 0x00007fab91849a21 in TGFrame::HandleClientMessage (this=0x5569344debf0, event=0x7ffd300c1db0) at /opt/root_src/gui/gui/src/TGFrame.cxx:675
#14 0x00007fab918494d5 in TGFrame::HandleEvent (this=0x5569344debf0, event=0x7ffd300c1db0) at /opt/root_src/gui/gui/src/TGFrame.cxx:551
#15 0x00007fab917fb1f0 in TGClient::HandleEvent (this=0x5569340f5f50, event=0x7ffd300c1db0) at /opt/root_src/gui/gui/src/TGClient.cxx:844
#16 0x00007fab917faac6 in TGClient::ProcessOneEvent (this=0x5569340f5f50) at /opt/root_src/gui/gui/src/TGClient.cxx:654
#17 0x00007fab917fac6e in TGClient::HandleInput (this=0x5569340f5f50) at /opt/root_src/gui/gui/src/TGClient.cxx:701
#18 0x00007fab917f905a in TGInputHandler::Notify (this=0x5569341ed2f0) at /opt/root_src/gui/gui/src/TGClient.cxx:117
#19 0x00007faba5b6fe1f in TUnixSystem::DispatchOneEvent (this=0x55692f74e7c0, pendingOnly=false) at /opt/root_src/core/unix/src/TUnixSystem.cxx:1055
#20 0x00007faba5a55eb5 in TSystem::InnerLoop (this=0x55692f74e7c0) at /opt/root_src/core/base/src/TSystem.cxx:406
#21 0x00007faba5a55c4a in TSystem::Run (this=0x55692f74e7c0) at /opt/root_src/core/base/src/TSystem.cxx:356
#22 0x00007faba59dde87 in TApplication::Run (this=0x55692f7a6f00, retrn=false) at /opt/root_src/core/base/src/TApplication.cxx:1607
#23 0x00007faba608fc5d in TRint::Run (this=0x55692f7a6f00, retrn=false) at /opt/root_src/core/rint/src/TRint.cxx:473
#24 0x000055692efa10fe in main (argc=1, argv=0x7ffd300c4218) at /opt/root_src/main/src/rmain.cxx:83
===========================================================
The lines below might hint at the cause of the crash.
You may get help by asking at the ROOT forum https://root.cern/forum
Only if you are really convinced it is a bug in ROOT then please submit a
report at https://root.cern/bugs Please post the ENTIRE stack trace
from above as an attachment in addition to anything else
that might help us fixing this issue.
===========================================================
#10 0x00007faba5b538c3 in TContextMenu::Action (this=0x5569344ccc70, object=0x556932dbe648, method=0x33dc19b0) at /opt/root_src/core/gui/src/TContextMenu.cxx:100
#11 0x00007fab9194bc4b in TContextMenu::Action (this=0x5569344ccc70, method=0x33dc19b0) at /opt/root_src/core/gui/inc/TContextMenu.h:74
#12 0x00007fab9194b3e6 in TRootContextMenu::ProcessMessage (this=0x5569344debf0, msg=257, parm1=7, parm2=870062512) at /opt/root_src/gui/gui/src/TRootContextMenu.cxx:712
#13 0x00007fab91849a21 in TGFrame::HandleClientMessage (this=0x5569344debf0, event=0x7ffd300c1db0) at /opt/root_src/gui/gui/src/TGFrame.cxx:675
#14 0x00007fab918494d5 in TGFrame::HandleEvent (this=0x5569344debf0, event=0x7ffd300c1db0) at /opt/root_src/gui/gui/src/TGFrame.cxx:551
#15 0x00007fab917fb1f0 in TGClient::HandleEvent (this=0x5569340f5f50, event=0x7ffd300c1db0) at /opt/root_src/gui/gui/src/TGClient.cxx:844
#16 0x00007fab917faac6 in TGClient::ProcessOneEvent (this=0x5569340f5f50) at /opt/root_src/gui/gui/src/TGClient.cxx:654
#17 0x00007fab917fac6e in TGClient::HandleInput (this=0x5569340f5f50) at /opt/root_src/gui/gui/src/TGClient.cxx:701
#18 0x00007fab917f905a in TGInputHandler::Notify (this=0x5569341ed2f0) at /opt/root_src/gui/gui/src/TGClient.cxx:117
#19 0x00007faba5b6fe1f in TUnixSystem::DispatchOneEvent (this=0x55692f74e7c0, pendingOnly=false) at /opt/root_src/core/unix/src/TUnixSystem.cxx:1055
#20 0x00007faba5a55eb5 in TSystem::InnerLoop (this=0x55692f74e7c0) at /opt/root_src/core/base/src/TSystem.cxx:406
#21 0x00007faba5a55c4a in TSystem::Run (this=0x55692f74e7c0) at /opt/root_src/core/base/src/TSystem.cxx:356
#22 0x00007faba59dde87 in TApplication::Run (this=0x55692f7a6f00, retrn=false) at /opt/root_src/core/base/src/TApplication.cxx:1607
#23 0x00007faba608fc5d in TRint::Run (this=0x55692f7a6f00, retrn=false) at /opt/root_src/core/rint/src/TRint.cxx:473
#24 0x000055692efa10fe in main (argc=1, argv=0x7ffd300c4218) at /opt/root_src/main/src/rmain.cxx:83
===========================================================
Here is where QtCreator says the problem is:
And going a bit up, the value of fUser[2] looks a bit suspicious:
Expected behavior
Zooming and unzooming works without crashing or artefacts
To Reproduce
- Download test_zoom.zip
- root -l test_zoom.cpp+
Setup
------------------------------------------------------------------
| Welcome to ROOT 6.27/01 https://root.cern |
| (c) 1995-2021, The ROOT Team; conception: R. Brun, F. Rademakers |
| Built for linuxx8664gcc on Jan 27 2022, 21:50:22 |
| From heads/master@v6-25-01-3005-g36dc424df9 |
| With g++ (Ubuntu 8.4.0-1ubuntu1~18.04) 8.4.0 |
| Try '.help', '.demo', '.license', '.credits', '.quit'/'.q' |
------------------------------------------------------------------