[Ubuntu-x-swat] [Bug 2060354] Re: Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

2024-04-08 Thread Daniel van Vugt
Sounds like CVE-2024-31083 mentioned in
https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1463 and
fixed in Xorg 21.1.12.

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-31083

** Information type changed from Public to Public Security

** Tags added: jammy mantic noble

** Tags added: fixed-in-xorg-21-1.12 fixed-upstream

** Tags removed: fixed-in-xorg-21-1.12
** Tags added: fixed-in-xorg-21.1.12

** Summary changed:

- Segfault in 2:21.1.4-2ubuntu1.7-22.04.9
+ Segfaults and assertion failures in Xorg's render/glyph.c

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to xorg-server in Ubuntu.
https://bugs.launchpad.net/bugs/2060354

Title:
  Segfaults and assertion failures in Xorg's render/glyph.c

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/2060354/+subscriptions


___
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to : ubuntu-x-swat@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help   : https://help.launchpad.net/ListHelp


[Ubuntu-x-swat] [Bug 2060354] Re: Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

2024-04-07 Thread Axenic
A new symptom. While I'm working with NetBeans the system very often freezes 
randomly. Only reboot helps. I see next data in log:
[   235.747] (EE) BUG: triggered 'if (glyph->refcnt == 0)'
[   235.748] (EE) BUG: ../../../../render/glyph.c:252 in FreeGlyph()
[   235.748] (EE) 
[   235.748] (EE) Backtrace:
[   235.748] (EE) 0: /usr/lib/xorg/Xorg (AddTraps+0x4e3b) [0x5590352dce3b]
[   235.748] (EE) 1: /usr/lib/xorg/Xorg (SendErrorToClient+0x354) 
[0x559035205144]
[   235.748] (EE) 2: /usr/lib/xorg/Xorg (InitFonts+0x3b4) [0x5590352091f4]
[   235.749] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xf3) 
[0x7f6d6bb0c083]
[   235.749] (EE) 4: /usr/lib/xorg/Xorg (_start+0x2e) [0x5590351f2ace]
[   235.749] (EE) 
[   235.749] (EE) BUG: triggered 'if (glyph->refcnt == 0)'
[   235.749] (EE) BUG: ../../../../render/glyph.c:252 in FreeGlyph()
[   235.749] (EE) 
[   235.749] (EE) Backtrace:
[   235.749] (EE) 0: /usr/lib/xorg/Xorg (AddTraps+0x4e3b) [0x5590352dce3b]
[   235.749] (EE) 1: /usr/lib/xorg/Xorg (SendErrorToClient+0x354) 
[0x559035205144]
[   235.749] (EE) 2: /usr/lib/xorg/Xorg (InitFonts+0x3b4) [0x5590352091f4]
[   235.750] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xf3) 
[0x7f6d6bb0c083]
[   235.750] (EE) 4: /usr/lib/xorg/Xorg (_start+0x2e) [0x5590351f2ace]
[   235.750] (EE) 
[   235.750] (EE) 
[   235.750] (EE) Backtrace:
[   235.751] (EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+0x13c) [0x559035366fdc]
[   235.751] (EE) 1: /lib/x86_64-linux-gnu/libpthread.so.0 (funlockfile+0x60) 
[0x7f6d6bcf0420]
[   235.752] (EE) 2: /lib/x86_64-linux-gnu/libc.so.6 (gsignal+0xcb) 
[0x7f6d6bb2b00b]
[   235.752] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (abort+0x12b) 
[0x7f6d6bb0a859]
[   235.753] (EE) 4: /lib/x86_64-linux-gnu/libc.so.6 (__fsetlocking+0x42e) 
[0x7f6d6bb7526e]
[   235.754] (EE) 5: /lib/x86_64-linux-gnu/libc.so.6 
(pthread_attr_setschedparam+0x54c) [0x7f6d6bb7d2fc]
[   235.754] (EE) 6: /lib/x86_64-linux-gnu/libc.so.6 
(pthread_attr_setschedparam+0xd28) [0x7f6d6bb7dad8]
[   235.755] (EE) 7: /lib/x86_64-linux-gnu/libc.so.6 
(pthread_attr_setschedparam+0x2230) [0x7f6d6bb7efe0]
[   235.755] (EE) 8: /lib/x86_64-linux-gnu/libc.so.6 
(pthread_attr_setschedparam+0x4172) [0x7f6d6bb80f22]
[   235.756] (EE) 9: /lib/x86_64-linux-gnu/libc.so.6 (realloc+0x2d6) 
[0x7f6d6bb83156]
[   235.756] (EE) 10: /usr/lib/xorg/Xorg (ReadRequestFromClient+0x4ab) 
[0x559035365e8b]
[   235.757] (EE) 11: /usr/lib/xorg/Xorg (SendErrorToClient+0x2ed) 
[0x5590352050dd]
[   235.757] (EE) 12: /usr/lib/xorg/Xorg (InitFonts+0x3b4) [0x5590352091f4]
[   235.758] (EE) 13: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xf3) 
[0x7f6d6bb0c083]
[   235.758] (EE) 14: /usr/lib/xorg/Xorg (_start+0x2e) [0x5590351f2ace]
[   235.759] (EE) 
[   235.759] (EE) 
Fatal server error:
[   235.759] (EE) Caught signal 6 (Aborted). Server aborting
[   235.759] (EE) 
[   235.759] (EE) 
Please consult the The X.Org Foundation support 
 at http://wiki.x.org
 for help. 
[   235.760] (EE) Please also check the log file at 
"/home/axenic/.local/share/xorg/Xorg.0.log" for additional information.
[   235.760] (EE) 
[   235.760] (II) AIGLX: Suspending AIGLX clients for VT switch

Or this:

[  1036.721] (EE) BUG: triggered 'if (glyph->refcnt == 0)'
[  1036.721] (EE) BUG: ../../../../render/glyph.c:252 in FreeGlyph()
[  1036.721] (EE) 
[  1036.721] (EE) Backtrace:
[  1036.722] (EE) 0: /usr/lib/xorg/Xorg (AddTraps+0x4e3b) [0x5570de00de3b]
[  1036.723] (EE) 1: /usr/lib/xorg/Xorg (SendErrorToClient+0x354) 
[0x5570ddf36144]
[  1036.723] (EE) 2: /usr/lib/xorg/Xorg (InitFonts+0x3b4) [0x5570ddf3a1f4]
[  1036.723] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xf3) 
[0x7f317a306083]
[  1036.723] (EE) 4: /usr/lib/xorg/Xorg (_start+0x2e) [0x5570ddf23ace]
[  1036.723] (EE) 
[  1036.723] (EE) 
[  1036.723] (EE) Backtrace:
[  1036.723] (EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+0x13c) [0x5570de097fdc]
[  1036.724] (EE) 1: /lib/x86_64-linux-gnu/libpthread.so.0 (funlockfile+0x60) 
[0x7f317a4ea420]
[  1036.724] (EE) 2: /lib/x86_64-linux-gnu/libc.so.6 (gsignal+0xcb) 
[0x7f317a32500b]
[  1036.725] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (abort+0x12b) 
[0x7f317a304859]
[  1036.725] (EE) 4: /lib/x86_64-linux-gnu/libc.so.6 (__fsetlocking+0x42e) 
[0x7f317a36f26e]
[  1036.725] (EE) 5: /lib/x86_64-linux-gnu/libc.so.6 
(pthread_attr_setschedparam+0x54c) [0x7f317a3772fc]
[  1036.726] (EE) 6: /lib/x86_64-linux-gnu/libc.so.6 
(pthread_attr_setschedparam+0xd28) [0x7f317a377ad8]
[  1036.726] (EE) 7: /lib/x86_64-linux-gnu/libc.so.6 
(pthread_attr_setschedparam+0x2ed3) [0x7f317a379c83]
[  1036.726] (EE) 8: /lib/x86_64-linux-gnu/libc.so.6 (__libc_calloc+0x85) 
[0x7f317a37db95]
[  1036.730] (EE) 9: /usr/lib/x86_64-linux-gnu/dri/radeonsi_dri.so 
(radeon_drm_winsys_create+0x176878) [0x7f3178a79d18]
[  1036.730] (EE) 10: /usr/lib/x86_64-linux-gnu/dri/radeonsi_dri.so 
(radeon_drm_winsys_create+0x17778d) [0x7f3178a7ac2d]
[  1036.731] (EE) 11: 

[Ubuntu-x-swat] [Bug 2060354] Re: Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

2024-04-07 Thread Axenic
In my case the crash happens randomly, when I'm working with NetBeans
21. I didn't any system updates. Perhaps the NetBeans made auto update.

My log lile:
[   356.402] (EE) 
[   356.402] (EE) Backtrace:
[   356.403] (EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+0x13c) [0x5594ee295fdc]
[   356.404] (EE) 1: /lib/x86_64-linux-gnu/libpthread.so.0 (funlockfile+0x60) 
[0x7f37ec080420]
[   356.405] (EE) 2: /lib/x86_64-linux-gnu/libc.so.6 (__libc_malloc+0x11e) 
[0x7f37ebf121fe]
[   356.405] (EE) 3: /usr/lib/xorg/Xorg (SetGlyphPicture+0x15d) [0x5594ee201ced]
[   356.405] (EE) 4: /usr/lib/xorg/Xorg (AddTraps+0x4b5a) [0x5594ee20bb5a]
[   356.405] (EE) 5: /usr/lib/xorg/Xorg (SendErrorToClient+0x354) 
[0x5594ee134144]
[   356.405] (EE) 6: /usr/lib/xorg/Xorg (InitFonts+0x3b4) [0x5594ee1381f4]
[   356.406] (EE) 7: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xf3) 
[0x7f37ebe9c083]
[   356.406] (EE) 8: /usr/lib/xorg/Xorg (_start+0x2e) [0x5594ee121ace]
[   356.406] (EE) 
[   356.406] (EE) Segmentation fault at address 0x0
[   356.406] (EE) 
Fatal server error:
[   356.406] (EE) Caught signal 11 (Segmentation fault). Server aborting
[   356.406] (EE) 
[   356.406] (EE) 
Please consult the The X.Org Foundation support 
 at http://wiki.x.org
 for help. 
[   356.406] (EE) Please also check the log file at 
"/home/user-name/.local/share/xorg/Xorg.0.log" for additional information.
[   356.406] (EE) 
[   356.406] (II) AIGLX: Suspending AIGLX clients for VT switch
[   356.425] (EE) Server terminated with error (1). Closing log file.

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to xorg-server in Ubuntu.
https://bugs.launchpad.net/bugs/2060354

Title:
  Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/2060354/+subscriptions


___
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to : ubuntu-x-swat@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help   : https://help.launchpad.net/ListHelp


[Ubuntu-x-swat] [Bug 2060354] Re: Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

2024-04-06 Thread Javier Noval
In my case (Android Studio 2023.2.1, also based on IntelliJ, on a fully-
updated Jammy), with the editor antialiasing set to "grayscale", the
crash is 100% reproducible (same stacktrace) as soon as any file is
opened. The default setting, "subpixel", doesn't seem to cause any
issues.

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to xorg-server in Ubuntu.
https://bugs.launchpad.net/bugs/2060354

Title:
  Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/2060354/+subscriptions


___
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to : ubuntu-x-swat@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help   : https://help.launchpad.net/ListHelp


[Ubuntu-x-swat] [Bug 2060354] Re: Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

2024-04-06 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: xorg-server (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to xorg-server in Ubuntu.
https://bugs.launchpad.net/bugs/2060354

Title:
  Segfault in 2:21.1.4-2ubuntu1.7-22.04.9

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/2060354/+subscriptions


___
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to : ubuntu-x-swat@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help   : https://help.launchpad.net/ListHelp