Bug#700013: libxcb1: libxcb crashes on systems with Mali graphics

2013-02-07 Thread Michal Suchanek
Package: libxcb1
Version: 1.8.1-2
Severity: important

Hello,

running es2_info on a system with mali graphics causes crash.

The Mali EGL library uses thread internally.

The interface to the user program should be single-threaded, however.

ldd es2_info
libGLESv2.so = /usr/lib/arm-linux-gnueabihf/libGLESv2.so (0xb6f12000)
libm.so.6 = /lib/arm-linux-gnueabihf/libm.so.6 (0xb6ea6000)
libX11.so.6 = /usr/lib/arm-linux-gnueabihf/libX11.so.6 (0xb6dbd000)
libXext.so.6 = /usr/lib/arm-linux-gnueabihf/libXext.so.6 (0xb6dab000)
libc.so.6 = /lib/arm-linux-gnueabihf/libc.so.6 (0xb6cc6000)
libUMP.so = /usr/lib/arm-linux-gnueabihf/libUMP.so (0xb6cb9000)
libpthread.so.0 = /lib/arm-linux-gnueabihf/libpthread.so.0 (0xb6c9d000)
libdl.so.2 = /lib/arm-linux-gnueabihf/libdl.so.2 (0xb6c92000)
libgcc_s.so.1 = /lib/arm-linux-gnueabihf/libgcc_s.so.1 (0xb6c6e000)
/lib/ld-linux-armhf.so.3 (0xb6fe1000)
libxcb.so.1 = /usr/lib/arm-linux-gnueabihf/libxcb.so.1 (0xb6c53000)
libdri2.so.1 = /usr/lib/arm-linux-gnueabihf/libdri2.so.1 (0xb6c49000)
libdrm.so.2 = /usr/lib/arm-linux-gnueabihf/libdrm.so.2 (0xb6c38000)
libXfixes.so.3 = /usr/lib/arm-linux-gnueabihf/libXfixes.so.3 
(0xb6c2c000)
libXau.so.6 = /usr/lib/arm-linux-gnueabihf/libXau.so.6 (0xb6c22000)
libXdmcp.so.6 = /usr/lib/arm-linux-gnueabihf/libXdmcp.so.6 (0xb6c17000)
librt.so.1 = /lib/arm-linux-gnueabihf/librt.so.1 (0xb6c09000)


[Thread debugging using libthread_db enabled]
Using host libthread_db library /lib/arm-linux-gnueabihf/libthread_db.so.1.
[xcb] Unknown request in queue while appending request
[xcb] Most likely this is a multi-threaded client and XInitThreads has not been 
called
[xcb] Aborting, sorry about that.
[New Thread 0xb6c0d470 (LWP 11163)]
[New Thread 0xb640d470 (LWP 11164)]
[New Thread 0xb5c0d470 (LWP 11165)]

Program received signal SIGSEGV, Segmentation fault.
_int_malloc (av=0xb6dab258, bytes=100) at malloc.c:4439
4439malloc.c: No such file or directory.
#0  _int_malloc (av=0xb6dab258, bytes=100) at malloc.c:4439
iters = optimized out
nb = 104
idx = 13
bin = optimized out
victim = 0x18308
size = 16392
victim_index = optimized out
remainder = optimized out
remainder_size = optimized out
block = optimized out
bit = optimized out
map = optimized out
fwd = optimized out
bck = 0x10004
errstr = 0x0
__func__ = _int_malloc
#1  0xb6d1fd68 in __GI___libc_malloc (bytes=100) at malloc.c:3660
ar_ptr = 0xb6dab258
victim = optimized out
hook = optimized out
__func__ = __libc_malloc
#2  0xb6d1560e in _IO_vasprintf (result_ptr=0xbefff9e4, format=0xb6d93008 
%s%s%s:%u: %s%sAssertion `%s' failed.\n, args=...) at vasprintf.c:52
string = optimized out
sf = {_sbf = {_f = {_flags = 1298088780, _IO_read_ptr = 0x41535345 
Address 0x41535345 out of bounds, _IO_read_end = 0x2f534547 Address 
0x2f534547 out of bounds, _IO_read_base = 0x6362696c Address 0x6362696c out 
of bounds, _IO_write_base = 0x6f6d2e Address 0x6f6d2e out of bounds, 
_IO_write_ptr = 0xb6cea723 F\327\370\224, _IO_write_end = 0xb6dad2e8 
U\200\312\266, _IO_buf_base = 0x Address 0x out of bounds, 
_IO_buf_end = 0xbeff0043 , _IO_save_base = 0xb6cea9c7 
\346\376\367\364\373\003x\004FC+\030\277\064F\177\364\257\256cx, 
_IO_backup_base = 0xb6ff548c symbol=%s;  lookup in file=%s [%lu]\n, 
_IO_save_end = 0xb6dc4df8 , _markers = 0x0, _chain = 0x0, _fileno = 0, 
_flags2 = 357, _old_offset = -1224756536, _cur_column = 11, _vtable_offset = 0 
'\000', _shortbuf = , _lock = 0x4, _offset = 3070194880, _codecvt = 0x0, 
_wide_data = 0x0, _freeres_list = 0xb6d92ea8, _freeres_buf = 0xb6d92ec0, 
_freeres_size = 3204446448, _mode = -1227186176, _u
 nused2 = 
\\000\000\000\250.\331\266\005\000\000\000\020\371\377\276\377\377\377\377\000\000\000\000\\000\000\000\005\000\000\000\b0\331\266\000\000\000},
 vtable = 0xb6ff74c0}, _s = {_allocate_buffer = 0x5, _free_buffer = 0xa4}}
ret = optimized out
needed = optimized out
allocated = optimized out
#3  0xb6d01858 in ___asprintf (string_ptr=optimized out, format=0xb6d93008 
%s%s%s:%u: %s%sAssertion `%s' failed.\n) at asprintf.c:37
arg = {__ap = 0xbefff9c0}
done = 268435456
#4  0xb6ce9224 in __GI___assert_fail (assertion=0xb6e369b4 
!xcb_xlib_unknown_req_pending, file=0xb6e368b0 ../../src/xcb_io.c, 
line=164, function=optimized out) at assert.c:59
buf = optimized out
#5  0xb6deaee4 in append_pending_request (dpy=0xb6e36770, sequence=optimized 
out) at ../../src/xcb_io.c:162
xcb_xlib_unknown_req_pending = 1
node = optimized out
__PRETTY_FUNCTION__ = append_pending_request
#6  0xb6deb7a0 in _XReply (dpy=0x12008, rep=0xbefffa40, extra=0, discard=1) at 
../../src/xcb_io.c:584
error = optimized out
   

Bug#700013: libxcb1: libxcb crashes on systems with Mali graphics

2013-02-07 Thread Michal Suchanek
close   700013
thanks

I occasionaly get memory corruption error from libc when running this
binary repeatedly so the crash is probably due to some error the might
be unrelated to libxcb.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org