[module-dbus-protocol] pulseaudio crashed with SIGSEGV in pa_idxset_string_hash_func()

Bug #1213369 reported by Antti Kaijanmäki
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
pulseaudio (Ubuntu)
Fix Released
Medium
David Henningsson

Bug Description

.

ProblemType: Crash
DistroRelease: Ubuntu 13.10
Package: pulseaudio 1:4.0-0ubuntu1
ProcVersionSignature: Ubuntu 3.11.0-1.4-generic 3.11.0-rc4
Uname: Linux 3.11.0-1-generic x86_64
ApportVersion: 2.12-0ubuntu3
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: antti 32451 F.... pulseaudio
 /dev/snd/controlC0: antti 32451 F.... pulseaudio
Date: Sat Aug 17 16:04:29 2013
ExecutablePath: /usr/bin/pulseaudio
InstallationDate: Installed on 2013-08-06 (10 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Alpha amd64 (20130805)
MarkForUpload: True
ProcCmdline: /usr/bin/pulseaudio --start --log-target=syslog
SegvAnalysis:
 Segfault happened at: 0x7fa0d52cd2b0 <pa_idxset_string_hash_func>: movsbl (%rdi),%ecx
 PC (0x7fa0d52cd2b0) ok
 source "(%rdi)" (0x025e1960) not located in a known VMA region (needed readable region)!
 destination "%ecx" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: pulseaudio
StacktraceTop:
 pa_idxset_string_hash_func () from /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-4.0.so
 ?? () from /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-4.0.so
 pa_hashmap_remove_all () from /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-4.0.so
 pa_hashmap_free () from /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-4.0.so
 pa_dbusiface_card_free () from /usr/lib/pulse-4.0/modules/module-dbus-protocol.so
Title: pulseaudio crashed with SIGSEGV in pa_idxset_string_hash_func()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
dmi.bios.date: 05/15/2013
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A09
dmi.board.name: 0PJHXN
dmi.board.vendor: Dell Inc.
dmi.board.version: A00
dmi.chassis.type: 8
dmi.chassis.vendor: Dell Inc.
dmi.chassis.version: 0.1
dmi.modalias: dmi:bvnDellInc.:bvrA09:bd05/15/2013:svnDellInc.:pnDellSystemXPSL322X:pvr:rvnDellInc.:rn0PJHXN:rvrA00:cvnDellInc.:ct8:cvr0.1:
dmi.product.name: Dell System XPS L322X
dmi.sys.vendor: Dell Inc.

Revision history for this message
Antti Kaijanmäki (kaijanmaki) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 pa_idxset_string_hash_func (p=0x25e1960) at pulsecore/idxset.c:67
 remove_entry (h=h@entry=0x25b3080, e=0x24790d0) at pulsecore/hashmap.c:93
 pa_hashmap_remove_all (h=h@entry=0x25b3080, free_cb=0x7fa0c2fb13f0 <pa_dbusiface_card_profile_free>) at pulsecore/hashmap.c:203
 pa_hashmap_free (h=0x25b3080, free_cb=<optimized out>) at pulsecore/hashmap.c:107
 pa_dbusiface_card_free (c=c@entry=0x23f95d0) at modules/dbus/iface-card.c:553

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : StacktraceSource.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in pulseaudio (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
information type: Private → Public
Revision history for this message
David Henningsson (diwic) wrote : Re: pulseaudio crashed with SIGSEGV in pa_idxset_string_hash_func()

Okay, so it appears module-dbus-protocol wasn't completely fixed, as I thought. It is still crashy.

(In this case it crashes on removal of the card, but while doing so, it references the card's name, which has already been freed.)

So maybe I need to remove module-dbus-protocol again...

Changed in pulseaudio (Ubuntu):
status: New → Triaged
summary: - pulseaudio crashed with SIGSEGV in pa_idxset_string_hash_func()
+ [module-dbus-protocol] pulseaudio crashed with SIGSEGV in
+ pa_idxset_string_hash_func()
Revision history for this message
Raymond (superquad-vortex2) wrote :

[ 235.820137] snd-usb-audio 3-1:1.0: no reset_resume for driver snd-usb-audio?
[ 235.820139] snd-usb-audio 3-1:1.1: no reset_resume for driver snd-usb-audio?
[ 235.820140] snd-usb-audio 3-1:1.2: no reset_resume for driver snd-usb-audio?
[ 235.963224] PM: resume of devices complete after 1010.551 msecs

Changed in pulseaudio (Ubuntu):
status: Triaged → Fix Committed
assignee: nobody → David Henningsson (diwic)
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package pulseaudio - 1:4.0-0ubuntu6

---------------
pulseaudio (1:4.0-0ubuntu6) saucy; urgency=low

  * Three crash fixes from upstream:
    0102-combine-Fix-crash-in-output-freeing.patch:
    - Fix crash in module-combine-sink (LP: #1228759)
    0103-resampler-Fix-peaks-resampler-s-channel-handling.patch:
    - Fix crash in peak resampler (LP: #1212019)
    0104-default-system.pa-Do-not-load-module-dbus-protocol.patch:
    - module-dbus-protocol is still crashy, unfortunately (LP: #1213369)
 -- David Henningsson <email address hidden> Mon, 30 Sep 2013 15:59:20 +0200

Changed in pulseaudio (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.