[RV570] X crashes with SIGSEGV in xf86_reload_cursors() with SWcursor

Bug #371405 reported by Daniel Hermansson
26
This bug affects 4 people
Affects Status Importance Assigned to Milestone
xserver-xorg-driver-ati
Fix Released
Medium
xorg-server (Debian)
Fix Released
Unknown
xorg-server (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Binary package hint: xserver-xorg-video-ati

When I enable SWcursor in xorg.conf and reboot, I get to the login screen and enter my user name and password as usual. I once saw my background image, other times it's just black. Then X crashes before I see anything else. I get back to the login screen and can do the whole fun thing again countless times.

ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xserver-xorg-video-ati 1:6.12.1-0ubuntu2
ProcEnviron:
 PATH=(custom, user)
 LANG=sv_SE.UTF-8
 SHELL=/bin/bash
ProcVersion: Linux version 2.6.28-11-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-5ubuntu4) ) #42-Ubuntu SMP Fri Apr 17 01:58:03 UTC 2009
SourcePackage: xserver-xorg-video-ati
Uname: Linux 2.6.28-11-generic x86_64

Backtrace:
0: /usr/X11R6/bin/X(xorg_backtrace+0x26) [0x4f1b66]
1: /usr/X11R6/bin/X(xf86SigHandler+0x41) [0x485a61]
2: /lib/libc.so.6 [0x341be33040]
3: /usr/X11R6/bin/X(xf86_reload_cursors+0x45) [0x4afd15]
4: /usr/X11R6/bin/X(xf86CrtcSetModeTransform+0x47d) [0x4ac6dd]
5: /usr/X11R6/bin/X [0x4b5195]
6: /usr/X11R6/bin/X(RRCrtcSet+0x98) [0x51efe8]
7: /usr/X11R6/bin/X(ProcRRSetCrtcConfig+0x62e) [0x51f87e]
8: /usr/X11R6/bin/X(Dispatch+0x364) [0x44e304]
9: /usr/X11R6/bin/X(main+0x3bd) [0x433d8d]
10: /lib/libc.so.6(__libc_start_main+0xe6) [0x341be1e5a6]
11: /usr/X11R6/bin/X [0x433219]
Saw signal 11. Server aborting.

[lspci]
00:00.0 Host bridge [0600]: Intel Corporation 82G33/G31/P35/P31 Express DRAM Controller [8086:29c0] (rev 02)
     Subsystem: ASUSTeK Computer Inc. Device [1043:8276]
01:00.0 VGA compatible controller [0300]: ATI Technologies Inc RV570 [Radeon X1950 Pro] [1002:7280] (rev 9a)
     Subsystem: PC Partner Limited Device [174b:e190]

Revision history for this message
In , Bugzilla-allyourba (bugzilla-allyourba) wrote :

Created an attachment (id=25406)
Xorg.0.log

Revision history for this message
Daniel Hermansson (daniel.h) wrote : X crashes with SIGSEGV with SWcursor

Binary package hint: xserver-xorg-video-ati

When I enable SWcursor in xorg.conf and reboot, I get to the login screen and enter my user name and password as usual. I see my background image, then X crashes before I see anything else. I get back to the login screen and can do the whole fun thing again countless times.

ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xserver-xorg-video-ati 1:6.12.1-0ubuntu2
ProcEnviron:
 PATH=(custom, user)
 LANG=sv_SE.UTF-8
 SHELL=/bin/bash
ProcVersion: Linux version 2.6.28-11-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-5ubuntu4) ) #42-Ubuntu SMP Fri Apr 17 01:58:03 UTC 2009
SourcePackage: xserver-xorg-video-ati
Uname: Linux 2.6.28-11-generic x86_64
Xrandr:

glxinfo:

setxkbmap:

xdpyinfo:

xkbcomp:

Revision history for this message
Daniel Hermansson (daniel.h) wrote :
Revision history for this message
Daniel Hermansson (daniel.h) wrote :

Xorg.0.log.old with backtrace

description: updated
summary: - X crashes with SIGSEGV with SWcursor
+ X crashes with SIGSEGV in xf86_reload_cursors() with SWcursor
Revision history for this message
Daniel Hermansson (daniel.h) wrote :

GDM log with backtrace

Changed in xserver-xorg-video-ati (Ubuntu):
status: New → Confirmed
Revision history for this message
Daniel Hermansson (daniel.h) wrote : Re: X crashes with SIGSEGV in xf86_reload_cursors() with SWcursor

full backtrace

description: updated
Revision history for this message
In , agd5f (agd5f) wrote :

This is an xserver bug. I believe it was fixed in:
7d85169c7ab1d05c21fdbb2877ffd79f344dbb6b

Changed in xserver-xorg-driver-ati:
status: Unknown → Confirmed
Revision history for this message
In , Bugzi09-fdo-tormod (bugzi09-fdo-tormod) wrote :

Commit 7d85169c7ab1d05c21fdbb2877ffd79f344dbb6b (from master) does not apply against server-1.6-branch which these guys are using, and I don't think the same typo can be found in the old code anyway. Any chance for a 1.6 fix?

BTW (for understanding the bug triaging practices) why is this bug Notourbug? If it is fixed in xserver it would be Fixed, no?

Revision history for this message
In , agd5f (agd5f) wrote :

(In reply to comment #3)
> Commit 7d85169c7ab1d05c21fdbb2877ffd79f344dbb6b (from master) does not apply
> against server-1.6-branch which these guys are using, and I don't think the
> same typo can be found in the old code anyway. Any chance for a 1.6 fix?
>

It looks like a different issue then.

> BTW (for understanding the bug triaging practices) why is this bug Notourbug?
> If it is fixed in xserver it would be Fixed, no?
>

It's not an xf86-video-ati bug, it's presumably an xserver bug, re-opening as such.

Revision history for this message
In , agd5f (agd5f) wrote :

looks like cursor_screen_priv is NULL. maybe some issue with dixLookupPrivate()? I don't know that code well enough.

Bryce Harrington (bryce)
description: updated
Bryce Harrington (bryce)
summary: - X crashes with SIGSEGV in xf86_reload_cursors() with SWcursor
+ [RV570] X crashes with SIGSEGV in xf86_reload_cursors() with SWcursor
Bryce Harrington (bryce)
tags: added: crash
Bryce Harrington (bryce)
summary: - [RV570] X crashes with SIGSEGV in xf86_reload_cursors() with SWcursor
+ [RV570] [RV570] X crashes with SIGSEGV in xf86_reload_cursors() with
+ SWcursor
Bryce Harrington (bryce)
summary: - [RV570] [RV570] X crashes with SIGSEGV in xf86_reload_cursors() with
- SWcursor
+ [RV570] X crashes with SIGSEGV in xf86_reload_cursors() with SWcursor
Bryce Harrington (bryce)
tags: added: jaunty
Bryce Harrington (bryce)
Changed in xserver-xorg-video-ati (Ubuntu):
importance: Undecided → High
status: Confirmed → Triaged
affects: xserver-xorg-video-ati (Ubuntu) → xorg-server (Ubuntu)
Revision history for this message
In , Jim Paris (jim-jtan) wrote :

Created an attachment (id=31555)
Fix crash in xf86_reload_cursors

I ran into the same problem on my system and this patch seems to fix it.

Revision history for this message
Jim Paris (jim-jtan) wrote :

I ran into the same problem and the attached patch fixes the problem for me

Revision history for this message
In , Julien Cristau (jcristau) wrote :

*** Bug 21275 has been marked as a duplicate of this bug. ***

Revision history for this message
Bryce Harrington (bryce) wrote :

The patch is incorrect, it should be:

- if (!cursor_screen_priv->isUp)
+ if (!cursor_screen_priv || !cursor_screen_priv->isUp)

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package xorg-server - 2:1.7.5-1ubuntu3

---------------
xorg-server (2:1.7.5-1ubuntu3) lucid; urgency=low

  * Add 109_fix-swcursor-crash.patch: Avoid dereferencing null pointer
    while reloading cursors during resume.
    (LP: #371405)
 -- Bryce Harrington <email address hidden> Thu, 11 Mar 2010 17:16:12 -0800

Changed in xorg-server (Ubuntu):
status: Triaged → Fix Released
Changed in xorg-server (Debian):
status: Unknown → Confirmed
Revision history for this message
In , Jürg Billeter (j-bitron) wrote :

Created an attachment (id=34977)
Proposed patch

Jim's patch didn't build for me, however, I've attached a very similar patch, which I've been using with X server 1.7 and 1.8 with enabled software cursors for a month now without any issues. Could someone please push this to master?

Changed in xorg-server (Debian):
status: Confirmed → Fix Released
Changed in xserver-xorg-driver-ati:
importance: Unknown → Medium
Changed in xserver-xorg-driver-ati:
importance: Medium → Unknown
status: Confirmed → Fix Released
Changed in xserver-xorg-driver-ati:
importance: Unknown → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.