Xorg crashes in DamageUnregister when the session finishes

Bug #343694 reported by Edmundo
2
Affects Status Importance Assigned to Milestone
xorg-server (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Binary package hint: xorg

When my xfce4 session finishes, instead of getting back to kdm (I use kubuntu.... but my kde is broken right now, so I'm using xfce in the meantime), I'm welcomed by the VTs

I checked xorg's logs and it's because there's a crash.

By the way, I'm using vesa cause I'm having problems with intel's driver (in case you are interested as well)
https://bugs.launchpad.net/ubuntu/+source/xserver-xorg-video-intel/+bug/343690

0xb804d430 in __kernel_vsyscall ()
(gdb) backtrace full
#0 0xb804d430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ce01fc in writev () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0x0813c01e in _XSERVTransSocketWritev (ciptr=0x90878b0, buf=0xbff6bb84, size=1) at /usr/include/X11/Xtrans/Xtranssock.c:2184
No locals.
#3 0x0813b05f in _XSERVTransWritev (ciptr=0x90878b0, buf=0xbff6bb84, size=1) at /usr/include/X11/Xtrans/Xtrans.c:
912
No locals.
#4 0x08137002 in FlushClient (who=0x9087910, oc=0x90878f0, __extraBuf=0x0, extraCount=0) at ../../os/io.c:899
 before = <value optimized out>
 remain = <value optimized out>
 i = -1074349180
 len = <value optimized out>
 oco = (ConnectionOutputPtr) 0x9106d50
 connection = 72
 trans_conn = (XtransConnInfo) 0x90878b0
 iov = {{iov_base = 0x910b110, iov_len = 32}, {iov_base = 0xb7c755b6, iov_len = 3084271936}, {iov_base = 0x908db50, iov_len = 151575368}}
 written = 0
 padsize = 0
 notWritten = 32
 todo = 32
 padBuffer = "\000\000"
#5 0x0813799a in FlushAllOutput () at ../../os/io.c:649
 index = <value optimized out>
 base = 2
 mask = 0
 oc = (OsCommPtr) 0x90878f0
 client = (ClientPtr) 0x9087910
 newoutput = <value optimized out>
#6 0x0808d44d in Dispatch () at ../../dix/dispatch.c:456
 result = 136277312
 client = (ClientPtr) 0x908db50
 nready = 0
 start_tick = 5800
#7 0x0807231d in main (argc=8, argv=0xbff6bd24, envp=0xb7c755b6) at ../../dix/main.c:397
 i = <value optimized out>
 alwaysCheckForInput = {0, 1}

Tags: crash kubuntu
Revision history for this message
Edmundo (eantoranz) wrote :
Revision history for this message
Bryce Harrington (bryce) wrote :

Please collect a full backtrace - see http://wiki.ubuntu.com/X/Backtracing for directions.

Changed in xorg (Ubuntu):
status: New → Incomplete
Revision history for this message
Edmundo (eantoranz) wrote : Re: [Bug 343694] Re: Jaunty: Xorg fails when the session finishes

Here's what I got. There was no dbg package for vesa.

Anything else I could give you?

Bryce Harrington (bryce)
description: updated
description: updated
Revision history for this message
Bryce Harrington (bryce) wrote : Re: Jaunty: Xorg fails when the session finishes

Hmm, the backtrace shows it's crashing during client/server communication. Not certain how to troubleshoot this further. Probably should be sent upstream.

Please attach the output of `lspci -vvnn` as well.

description: updated
Changed in xorg-server (Ubuntu):
importance: Undecided → High
status: Incomplete → Triaged
Revision history for this message
Edmundo (eantoranz) wrote : Re: [Bug 343694] Re: Jaunty: Xorg fails when the session finishes
Download full text (4.8 KiB)

is that wnn or nn? cause w is not working:
lspci: invalid option -- 'w'

If it's just nn:
sudo lspci -nn
00:00.0 Host bridge [0600]: Intel Corporation 82865G/PE/P DRAM
Controller/Host-Hub Interface [8086:2570] (rev 02)
00:02.0 VGA compatible controller [0300]: Intel Corporation 82865G
Integrated Graphics Controller [8086:2572] (rev 02)
00:1d.0 USB Controller [0c03]: Intel Corporation 82801EB/ER
(ICH5/ICH5R) USB UHCI Controller #1 [8086:24d2] (rev 02)
00:1d.1 USB Controller [0c03]: Intel Corporation 82801EB/ER
(ICH5/ICH5R) USB UHCI Controller #2 [8086:24d4] (rev 02)
00:1d.2 USB Controller [0c03]: Intel Corporation 82801EB/ER
(ICH5/ICH5R) USB UHCI Controller #3 [8086:24d7] (rev 02)
00:1d.3 USB Controller [0c03]: Intel Corporation 82801EB/ER
(ICH5/ICH5R) USB UHCI Controller #4 [8086:24de] (rev 02)
00:1d.7 USB Controller [0c03]: Intel Corporation 82801EB/ER
(ICH5/ICH5R) USB2 EHCI Controller [8086:24dd] (rev 02)
00:1e.0 PCI bridge [0604]: Intel Corporation 82801 PCI Bridge
[8086:244e] (rev c2)
00:1f.0 ISA bridge [0601]: Intel Corporation 82801EB/ER (ICH5/ICH5R)
LPC Interface Bridge [8086:24d0] (rev 02)
00:1f.1 IDE interface [0101]: Intel Corporation 82801EB/ER
(ICH5/ICH5R) IDE Controller [8086:24db] (rev 02)
00:1f.2 IDE interface [0101]: Intel Corporation 82801EB (ICH5) SATA
Controller [8086:24d1] (rev 02)
00:1f.3 SMBus [0c05]: Intel Corporation 82801EB/ER (ICH5/ICH5R) SMBus
Controller [8086:24d3] (rev 02)
00:1f.5 Multimedia audio controller [0401]: Intel Corporation
82801EB/ER (ICH5/ICH5R) AC'97 Audio Controller [8086:24d5] (rev 02)
01:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd.
RTL-8139/8139C/8139C+ [10ec:8139] (rev 10)
01:02.0 Modem [0703]: Intel Corporation FA82537EP 56K V.92 Data/Fax
Modem PCI [8086:1080] (rev 03)

On Fri, Mar 20, 2009 at 1:00 AM, Bryce Harrington
<email address hidden> wrote:
> Hmm, the backtrace shows it's crashing during client/server
> communication.  Not certain how to troubleshoot this further.  Probably
> should be sent upstream.
>
> Please attach the output of `lspci -vvnn` as well.
>
> ** Description changed:
>
>  Binary package hint: xorg
>
>  When my xfce4 session finishes, instead of getting back to kdm (I use
>  kubuntu.... but my kde is broken right now, so I'm using xfce in the
>  meantime), I'm welcomed by the VTs
>
>  I checked xorg's logs and it's because there's a crash.
>
>  By the way, I'm using vesa cause I'm having problems with intel's driver (in case you are interested as well)
>  https://bugs.launchpad.net/ubuntu/+source/xserver-xorg-video-intel/+bug/343690
>
>
>  0xb804d430 in __kernel_vsyscall ()
>  (gdb) backtrace full
>  #0  0xb804d430 in __kernel_vsyscall ()
>  No symbol table info available.
>  #1  0xb7ce01fc in writev () from /lib/tls/i686/cmov/libc.so.6
>  No symbol table info available.
> - #2  0x0813c01e in _XSERVTransSocketWritev (ciptr=0x90878b0, buf=0xbff6bb84, size=1) at /usr/include/X11/Xtrans/Xtr
> - anssock.c:2184
> + #2  0x0813c01e in _XSERVTransSocketWritev (ciptr=0x90878b0, buf=0xbff6bb84, size=1) at /usr/include/X11/Xtrans/Xtranssock.c:2184
>  No locals.
>  #3  0x0813b05f in _XSERVTransWritev (ciptr=0x90878b0, buf=0xbff6bb84, size=1) at /usr/include/X11...

Read more...

Bryce Harrington (bryce)
summary: - Jaunty: Xorg fails when the session finishes
+ Xorg crashes in FlushClient when the session finishes
Bryce Harrington (bryce)
tags: added: kubuntu
Bryce Harrington (bryce)
tags: added: crash
Revision history for this message
Chris Halse Rogers (raof) wrote :

If you look at the backtrace it's actually just SIGPIPE-ing in FlushClient, which is entirely expected - the both the client and the server are going away, so there'll be a time when one end of the pipe is broken.

The actual crash is a SIGSEGV in DamageUnregister; although we haven't got an actual backtrace from it, that looks like it matches a bug fixed post 1.9RC5, and so should be fixed in the next Xserver release.

summary: - Xorg crashes in FlushClient when the session finishes
+ Xorg crashes in DamageUnregister when the session finishes
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (3.4 KiB)

This bug was fixed in the package xorg-server - 2:1.9.0-0ubuntu1

---------------
xorg-server (2:1.9.0-0ubuntu1) maverick; urgency=low

  * Merge from (unreleased) Debian experimental. Remaining Ubuntu changes:
    - rules, control:
      + Disable SELinux, libaudit-dev is not in main yet (LP 406226).
        Drop libaudit-dev from build-deps.
    - rules: Enable xcsecurity (LP 247537).
    - local/xvfb-run*: Add correct docs about error codes (LP 328205)
    - rules: Add --with-extra-module-dir to support GL alternatives.
    - control: Xvfb depends on xauth, x11-xkb-utils. (LP 500102)
    - rules, local/64-xorg-xkb.rules: Don't use keyboard-configuration
      until it's available.
    - control: Update some versioned Breaks for Ubuntu versions.
    - debian/patches:
      + 100_rethrow_signals.patch:
        When aborting, re-raise signals for apport
      + 109_fix-swcursor-crash.patch:
        Avoid dereferencing null pointer while reloading cursors during
        resume. (LP 371405)
      + 111_armel-drv-fallbacks.patch:
        Add support for armel driver fallbacks.
      + 121_only_switch_vt_when_active.diff:
        Add a check to prevent the X server from changing the VT when killing
        GDM from the console.
      + 122_xext_fix_card32_overflow_in_xauth.patch:
        Fix server crash when “xauth generate” is called with large timeout.
      + 157_check_null_modes.patch, 162_null_crtc_in_rotation.patch,
        166_nullptr_xinerama_keyrepeat.patch, 167_nullptr_xisbread.patch
        169_mipointer_nullptr_checks.patch,
        172_cwgetbackingpicture_nullptr_check.patch:
        Fix various segfaults in xserver by checking pointers for NULL
        values before dereferencing them.
      + 165_man_xorg_conf_no_device_ident.patch
        Correct man page
      + 168_glibc_trace_to_stderr.patch:
        Report abort traces to stderr instead of terminal
      + 184_virtual_devices_autodetect.patch:
        Use vesa for qemu device, which is not supported by cirrus
      + 187_edid_quirk_hp_nc8430.patch:
        Quirk for another LPL monitor (LP 380009)
      + 188_default_primary_to_first_busid.patch:
        Pick the first device and carry on (LP 459512)
      + 189_xserver_1.5.0_bg_none_root.patch:
        Create a root window with no background.
      + 190_cache-xkbcomp_output_for_fast_start_up.patch:
        Cache keyboard settings.
      + 191-Xorg-add-an-extra-module-path.patch:
        Add support for the alternatives module path.
      + 197_xvfb-randr.patch:
        Adds xrandr support to xvfb. (LP 516123)
      + 198_nohwaccess.patch:
        Adds a -nohwaccess argument to make X not access the hardware
        ports directly.
      + 200_randr-null.patch:
        Clarify a pointer initialization.
      + 203_gestures-extension.patch:
      + 202_xf86CoordinationsToWindows.patch:
        Add gesture extension support (LP: 616678)
      + debian/serverminver:
        Bump for gesture support
  * New upstream release:
    - Fixes crash in DamageUnregister on session close (LP: #343694)
    - Fixes crash with extremely large windows exposed by xpdf (Closes: #320627)
  * Drop 17-fix-DRI2-segfault-when-clientGone.diff: fixe...

Read more...

Changed in xorg-server (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.