Bug#576393: qemu-kvm provokes segfault in X server
forwarded 576393 https://bugs.freedesktop.org/show_bug.cgi?id=27573 kthxbye On Sun, Apr 4, 2010 at 19:39:27 +0100, Ben Hutchings wrote: On Sun, 2010-04-04 at 10:05 +0200, Julien Cristau wrote: any chance you can get a backtrace from gdb (with xserver-xorg-core-dbg installed)? Here's a backtrace and local variables for each frame. Thanks, forwarded upstream at the url above. Feel free to add yourself to cc / add comments there. Cheers, Julien signature.asc Description: Digital signature
Bug#576393: qemu-kvm provokes segfault in X server
On Sun, Apr 4, 2010 at 05:45:53 +0100, Ben Hutchings wrote: Package: xserver-xorg Version: 1:7.5+5 Severity: important I've been exercising graphics in qemu-kvm a bit more and have seen the host's X server crash a couple of times. I expect I can reproduce it again if you want me to gather more information. The backtrace from Xorg.0.log.old is: Backtrace: 0: /usr/bin/X (xorg_backtrace+0x3b) [0x80ad72b] 1: /usr/bin/X (0x8048000+0x5a8a5) [0x80a28a5] 2: (vdso) (__kernel_rt_sigreturn+0x0) [0xf7770410] 3: /usr/bin/X (mieqProcessDeviceEvent+0xb9) [0x809fd29] 4: /usr/bin/X (mieqProcessInputEvents+0x6c) [0x809feac] 5: /usr/bin/X (ProcessInputEvents+0x17) [0x80b1437] 6: /usr/bin/X (0x8048000+0x2be40) [0x8073e40] 7: /usr/bin/X (0x8048000+0x1e93a) [0x806693a] 8: /lib/i686/cmov/libc.so.6 (__libc_start_main+0xe5) [0xf74a3b55] 9: /usr/bin/X (0x8048000+0x1e521) [0x8066521] Segmentation fault at address 0x64 Fatal server error: Caught signal 11 (Segmentation fault). Server aborting Hi Ben, any chance you can get a backtrace from gdb (with xserver-xorg-core-dbg installed)? Thanks, Julien signature.asc Description: Digital signature
Bug#576393: qemu-kvm provokes segfault in X server
On Sun, 2010-04-04 at 10:05 +0200, Julien Cristau wrote:
any chance you can get a backtrace from gdb (with xserver-xorg-core-dbg
installed)?
Here's a backtrace and local variables for each frame.
Ben.
(gdb) bt
#0 0x080b4eec in DGAProcessPointerEvent (pScreen=value optimized out,
event=0xa336400, mouse=0xa332418)
at ../../../../hw/xfree86/common/xf86DGA.c:1097
#1 0x0809fd29 in mieqProcessDeviceEvent (dev=0xa332418, event=0xa336400,
screen=0x8b15368) at ../../mi/mieq.c:404
#2 0x0809feac in mieqProcessInputEvents () at ../../mi/mieq.c:471
#3 0x080b1437 in ProcessInputEvents ()
at ../../../../hw/xfree86/common/xf86Events.c:165
#4 0x08074040 in Dispatch () at ../../dix/dispatch.c:407
#5 0x0806693a in main (argc=9, argv=0xffc31114, envp=0xffc3113c)
at ../../dix/main.c:285
(gdb) info locals
butc = 0xa3328a0
ev = {header = 255 '\377', type = ET_Motion, length = 408, time = 0,
deviceid = 0, sourceid = 0, detail = {button = 0, key = 0}, root_x = 0,
root_x_frac = 0, root_y = 0, root_y_frac = 0,
buttons = '\000' repeats 31 times, valuators = {mask = \000\000\000\000,
mode = \000\000\000\000, data = {0 repeats 36 times}, data_frac = {
0 repeats 36 times}}, mods = {base = 0, latched = 0, locked = 0,
effective = 0}, group = {base = 0 '\000', latched = 0 '\000',
locked = 0 '\000', effective = 0 '\000'}, root = 0, corestate = 0,
key_repeat = 0}
(gdb) up
#1 0x0809fd29 in mieqProcessDeviceEvent (dev=0xa332418, event=0xa336400,
screen=0x8b15368) at ../../mi/mieq.c:404
404 ../../mi/mieq.c: No such file or directory.
in ../../mi/mieq.c
(gdb) info locals
screenNum = value optimized out
handler = 0x80b5050 DGAHandleEvent
master = value optimized out
mevent = {any = {header = 192 '\300', type = 0, length = 0, time = 0},
device_event = {header = 192 '\300', type = 0, length = 0, time = 0,
deviceid = -3995384, sourceid = -3995540, detail = {button = 4290971752,
key = 4290971752}, root_x = 36423, root_x_frac = 1.06619174e-33,
root_y = 10100, root_y_frac = 1.06620166e-33,
buttons =
\340\021\v\b4'\261\b\001\000\000\000\310\261\b\000|E\n\000\000\000\000\210\326=\367\000\000\000,
valuators = {
mask = \001\216r, incomplete sequence \367, mode = |E\n|\003,
data = {1024, 0 repeats 33 times, 145827636, 167522360}, data_frac = {
135587579, 32, 32, -144928780, -3993944, -143223808, 29, 99, 0, 43,
43, -144928780, 32, -3993944, -3993980, 32, 1, -3993800, 32, 0, 0,
-143223760, 35, 2110102, -3993980, 43, -3994604, 0, 0, -147770984,
172098632, 172099432, -3995160, -147910644, 172098632, 172099432}},
mods = {base = 330, latched = 18, locked = 1, effective = 4290972176},
group = {base = 0 '\000', latched = 0 '\000', locked = 0 '\000',
effective = 0 '\000'}, root = 4151408674, corestate = 171500120,
key_repeat = 1}, changed_event = {header = 192 '\300', type = 0,
length = 0, time = 0, deviceid = -3995384, flags = -3995540,
masterid = -3995544, sourceid = -143487417, buttons = {
num_buttons = 145827528, names = {145827700, 145827636, 134943200,
145827636, 1, 145827528, 172325888, 0, 4148024968, 0, 4151479809,
172325888, 892, 1024, 0 repeats 33 times, 145827636, 167522360,
135587579, 32, 32, 4150038516, 4290973352, 4151743488, 29, 99, 0, 43,
43, 4150038516, 32, 4290973352, 4290973316, 32, 1, 4290973496, 32, 0,
0, 4151743536, 35, 2110102, 4290973316, 43, 4290972692, 0, 0,
4147196312, 172098632, 172099432, 4290972136, 4147056652, 172098632,
172099432, 330, 18, 1, 4290972176, 0, 4151408674, 171500120, 1,
171569982, 0, 4290973196, 4290972176, 4147031323, 136180172, 4,
4290972176, 4290973224, 0, 7845976, 2160918528, 330, 18, 1,
4290972176, 4294902655, 4294902048, 4294967295, 136004405, 16, 0, 43,
0, 0, 0, 0, 0, 0, 2147483648, 49167, 0, 1073709056, 0, 3355443200,
16387, 0, 0, 0, 2356019200, 49166, 0, 3222178926, 288, 18875263, 0,
136004405, 0, 0, 0, 8064, 65535, 0, 0, 0, 0, 0, 0, 7845976,
2160918528, 0, 2147483648, 4294902655, 4294902048, 4294967295,
136004405, 16, 0, 43, 0, 0, 0, 0, 0, 0, 2147483648, 49167, 0,
1073709056, 0, 3355443200, 16387, 0, 0, 0, 2356019200, 49166, 0,
3222178926, 288, 18875263, 0, 136004405, 0, 0, 0, 8064, 65535, 0, 0,
0, 0, 0, 0, 0, 0, 0, 2147483648, 49167, 0, 0, 2147483648, 16383, 0, 0,
3355443200, 16387, 0, 0, 0, 0, 0, 0, 2356019200, 49166, 0, 0,
2356019200, 49166, 0...}}, num_valuators = 0, valuators = {{min = 0,
max = 0, resolution = 135579312, mode = 0 '\000', name = 0}, {
min = 136265120, max = 0, resolution = 0, mode = 0 '\000', name = 0}, {
min = 0, max = 0, resolution = 0, mode = 0 '\000', name = 0}, {
min = 0, max = 0, resolution = 0, mode = 0 '\000', name = 0}, {
min = 0, max = 0, resolution = 0, mode = 0 '\000',
Bug#576393: qemu-kvm provokes segfault in X server
Package: xserver-xorg Version: 1:7.5+5 Severity: important I've been exercising graphics in qemu-kvm a bit more and have seen the host's X server crash a couple of times. I expect I can reproduce it again if you want me to gather more information. The backtrace from Xorg.0.log.old is: Backtrace: 0: /usr/bin/X (xorg_backtrace+0x3b) [0x80ad72b] 1: /usr/bin/X (0x8048000+0x5a8a5) [0x80a28a5] 2: (vdso) (__kernel_rt_sigreturn+0x0) [0xf7770410] 3: /usr/bin/X (mieqProcessDeviceEvent+0xb9) [0x809fd29] 4: /usr/bin/X (mieqProcessInputEvents+0x6c) [0x809feac] 5: /usr/bin/X (ProcessInputEvents+0x17) [0x80b1437] 6: /usr/bin/X (0x8048000+0x2be40) [0x8073e40] 7: /usr/bin/X (0x8048000+0x1e93a) [0x806693a] 8: /lib/i686/cmov/libc.so.6 (__libc_start_main+0xe5) [0xf74a3b55] 9: /usr/bin/X (0x8048000+0x1e521) [0x8066521] Segmentation fault at address 0x64 Fatal server error: Caught signal 11 (Segmentation fault). Server aborting Ben. -- Package-specific info: /var/lib/x11/X.roster does not exist. /var/lib/x11/X.md5sum does not exist. X server symlink status: lrwxrwxrwx 1 root root 13 Mar 18 2009 /etc/X11/X - /usr/bin/Xorg -rwxr-xr-x 1 root root 1712764 Mar 23 22:13 /usr/bin/Xorg /var/lib/x11/xorg.conf.roster does not exist. VGA-compatible devices on PCI bus: 00:02.0 VGA compatible controller: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller (rev 0c) /var/lib/x11/xorg.conf.md5sum does not exist. Xorg X server configuration file status: -rw-r--r-- 1 root root 2802 Feb 13 16:40 /etc/X11/xorg.conf Contents of /etc/X11/xorg.conf: Section ServerLayout Identifier X.org Configured Screen 0 Screen0 0 0 InputDevicenipple CorePointer InputDevicetouchpad CorePointer InputDeviceKeyboard0 CoreKeyboard EndSection Section Files ModulePath /usr/lib/xorg/modules FontPath /usr/share/fonts/X11/misc FontPath /usr/share/fonts/X11/cyrillic FontPath /usr/share/fonts/X11/100dpi/:unscaled FontPath /usr/share/fonts/X11/75dpi/:unscaled FontPath /usr/share/fonts/X11/Type1 FontPath /usr/share/fonts/X11/100dpi FontPath /usr/share/fonts/X11/75dpi FontPath /var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType FontPath built-ins EndSection Section Module Load glx Load record Load dri Load extmod Load dbe Load dri2 EndSection Section InputDevice Identifier Keyboard0 Driver kbd EndSection Section InputDevice Identifier nipple Driver mouse Option Protocol auto Option Device /dev/input/mouse0 Option ZAxisMapping 4 5 6 7 EndSection Section InputDevice Identifier touchpad Driver synaptics Option Protocol events Option Device /dev/input/mouse1 Option SHMConfig on EndSection Section Monitor Identifier Monitor0 VendorName Monitor Vendor ModelNameMonitor Model EndSection Section Device ### Available Driver options are:- ### Values: i: integer, f: float, bool: True/False, ### string: String, freq: f Hz/kHz/MHz ### [arg]: arg optional #Option NoAccel # [bool] #Option SWcursor # [bool] #Option ColorKey # i #Option CacheLines# i #Option Dac6Bit # [bool] #Option DRI # [bool] #Option NoDDC # [bool] #Option ShowCache # [bool] #Option XvMCSurfaces # i #Option PageFlip # [bool] Identifier Card0 Driver intel VendorName Intel Corporation BoardName Mobile GM965/GL960 Integrated Graphics Controller BusID PCI:0:2:0 EndSection Section Screen Identifier Screen0 Device Card0 MonitorMonitor0 SubSection Display Viewport 0 0 Depth 1 EndSubSection SubSection Display Viewport 0 0 Depth 4 EndSubSection SubSection Display Viewport 0 0 Depth 8 EndSubSection SubSection Display Viewport 0 0 Depth 15 EndSubSection SubSection Display Viewport 0 0 Depth 16 EndSubSection SubSection Display Viewport 0 0 Depth 24 EndSubSection EndSection Xorg X server log files on system: -rw-r--r-- 1 root root 49555 Dec 28 15:56 /var/log/Xorg.20.log -rw-r--r-- 1 root root 4543 Feb 13 16:35 /var/log/Xorg.1.log -rw-r--r-- 1 root root 31032 Apr 4 05:40
