Thanks, that looks much better.
Looks like it's crashing in the memcpy from fbBlt. This looks like the
same pattern as bug 337608 although the particulars of the backtrace
differ so not certain that it's a dupe.
** Description changed:
When trying to run `xephyr :1` on Intrepid LPIA, the Xephyr window shows
up but then crashes immediately. This is a completely new virtual
machine built with the command
ubuntu-vm-builder kvm intrepid -v --arch lpia --debug
This is more information about the setup;
uname -a
Linux ubuntu 2.6.24-4-lpia #1 SMP Fri Oct 24 13:13:03 UTC 2008 i686 GNU/Linux
ii xserver-xephyr 2:1.5.2-2ubuntu3 nested X server
- The short backtrace I get is:
-
- 0: Xephyr(KdBacktrace+0x27) [0x80b1a67]
- 1: [0xb80b0400]
- 2: Xephyr(fbOddTile+0xf6) [0x80d48c6]
- 3: Xephyr(fbTile+0x60) [0x80d4970]
- 4: Xephyr(fbFill+0x28a) [0x80cca0a]
- 5: Xephyr(fbPolyRect+0x1a7) [0x80ccdb7]
- 6: Xephyr [0x8174705]
- 7: Xephyr(miPaintWindow+0x221) [0x80e3971]
- 8: Xephyr(miWindowExposures+0x138) [0x80e3cd8]
- 9: Xephyr(MapWindow+0x2a7) [0x8093c27]
- 10: Xephyr(InitRootWindow+0xe5) [0x8093e35]
- 11: Xephyr(main+0x41d) [0x808e80d]
- 12: /lib/libc.so.6(__libc_start_main+0xd5) [0xb7c2a675]
- 13: Xephyr [0x8070391]
-
[backtrace]
- #0 0xb7b2d196 in memcpy () from /lib/libc.so.6
- #1 0x08ce59d8 in ?? ()
- #2 0x080d48c6 in fbOddTile ()
- #3 0x080d4970 in fbTile ()
- #4 0x080cca0a in fbFill ()
- #5 0x080ccdb7 in fbPolyFillRect ()
- #6 0x08174705 in ?? ()
- #7 0x080e3971 in miPaintWindow ()
- #8 0x080e3cd8 in miWindowExposures ()
- #9 0x08093c27 in MapWindow ()
- #10 0x08093e35 in InitRootWindow ()
- #11 0x0808e80d in main ()
- (gdb) info registers
- eax 0x0 0
- ecx 0x4 4
- edx 0x1 1
- ebx 0x81e7ff4 136216564
- esp 0xbfc70dd8 0xbfc70dd8
- ebp 0xbfc70ec8 0xbfc70ec8
- esi 0x8ce59d8 147741144
- edi 0xb79dc000 -1214398464
- eip 0xb7b2d196 0xb7b2d196 <memcpy+70>
- eflags 0x210246 [ PF ZF IF RF ID ]
- cs 0x73 115
- ss 0x7b 123
- ds 0x7b 123
- es 0x7b 123
- fs 0x0 0
- gs 0x33 51
- (gdb) thread apply all backtrace
-
- Thread 1 (Thread 0xb79f46c0 (LWP 3786)):
- #0 0xb7b2d196 in memcpy () from /lib/libc.so.6
- #1 0x08ce59d8 in ?? ()
- #2 0x080d48c6 in fbOddTile ()
- #3 0x080d4970 in fbTile ()
- #4 0x080cca0a in fbFill ()
- #5 0x080ccdb7 in fbPolyFillRect ()
- #6 0x08174705 in ?? ()
- #7 0x080e3971 in miPaintWindow ()
- #8 0x080e3cd8 in miWindowExposures ()
- #9 0x08093c27 in MapWindow ()
- #10 0x08093e35 in InitRootWindow ()
- #11 0x0808e80d in main ()
- (gdb) quit
+ #0 0xb7bf9106 in memcpy () from /lib/libc.so.6
+ No symbol table info available.
+ #1 0x093536c0 in ?? ()
+ No symbol table info available.
+ #2 0x080d4a46 in fbOddTile (dst=0xb79bd000, dstStride=640, dstX=0,
+ width=20480, height=116, tile=0x93536c0, tileStride=4, tileWidth=128,
+ tileHeight=4, alu=3, pm=4294967295, bpp=32, xRot=0, yRot=0)
+ at ../../fb/fbtile.c:152
+ tileX = 1
+ tileY = <value optimized out>
+ widthTmp = -1213603840
+ h = 4
+ w = 154482368
+ x = 0
+ y = 360
+ #3 0x080d4af0 in fbTile (dst=0xb79bd000, dstStride=640, dstX=0,
+ width=20480, height=480, tile=0x93536c0, tileStride=4, tileWidth=128,
+ tileHeight=4, alu=3, pm=4294967295, bpp=32, xRot=0, yRot=0)
+ at ../../fb/fbtile.c:200
+ No locals.
+ #4 0x080ccb9a in fbFill (pDrawable=0x92df0d0, pGC=0x92deee8, x=0, y=0,
+ width=640, height=480) at ../../fb/fbfill.c:147
+ pTile = <value optimized out>
+ dst = (FbBits *) 0xb79bd000
+ dstStride = 640
+ dstBpp = <value optimized out>
+ dstXoff = 0
+ dstYoff = 0
+ pPriv = (FbGCPrivPtr) 0x92def6c
+ #5 0x080ccf47 in fbPolyFillRect (pDrawable=0x92df0d0, pGC=0x92deee8,
+ nrect=0, prect=0x9359768) at ../../fb/fbfillrect.c:77
+ pClip = (RegionPtr) 0x92df100
+ pbox = <value optimized out>
+ extentX1 = 0
+ extentX2 = 640
+ extentY1 = 0
+ extentY2 = 480
+ fullX1 = 0
+ fullX2 = 640
+ fullY1 = 0
+ fullY2 = 480
+ partX1 = <value optimized out>
+ partX2 = <value optimized out>
+ partY1 = <value optimized out>
+ partY2 = <value optimized out>
+ xorg = 0
+ yorg = 0
+ n = 0
+ #6 0x08174875 in damagePolyFillRect (pDrawable=0x92df0d0, pGC=0x92deee8,
+ nRects=1, pRects=0x9359768) at ../../../miext/damage/damage.c:1337
+ pGCPriv = (DamageGCPrivPtr) 0x92def54
+ oldFuncs = (GCFuncs *) 0x81ecec0
+ #7 0x080e3af1 in miPaintWindow (pWin=0x92df0d0, prgn=0xbfe99b38, what=0)
+ at ../../mi/miexpose.c:646
+ pScreen = <value optimized out>
+ gcval = {{val = 3, ptr = 0x3}, {val = 1, ptr = 0x1}, {
+ val = 154482320, ptr = 0x9353690}, {val = 0, ptr = 0x0}, {val = 0,
+ ptr = 0x0}}
+ gcmask = <value optimized out>
+ pGC = (GCPtr) 0x92deee8
+ i = -1
+ pbox = <value optimized out>
+ prect = (xRectangle *) 0x9359768
+ numRects = 1
+ draw_x_off = 0
+ draw_y_off = 0
+ tile_x_off = <value optimized out>
+ tile_y_off = <value optimized out>
+ fill = <value optimized out>
+ drawable = (DrawablePtr) 0x92df0d0
+ #8 0x080e3e58 in miWindowExposures (pWin=0x92df0d0, prgn=0xbfe99b38,
+ other_exposed=0x0) at ../../mi/miexpose.c:517
+ expRec = {extents = {x1 = -25800, y1 = -16407, x2 = -3840,
+ y2 = 2349}, data = 0x92de768}
+ exposures = (RegionPtr) 0xbfe99b38
+ #9 0x08093c37 in MapWindow (pWin=0x92df0d0, client=0x92cd580)
+ at ../../dix/window.c:2838
+ temp = {extents = {x1 = 0, y1 = 0, x2 = 640, y2 = 480}, data = 0x0}
+ pScreen = (ScreenPtr) 0x92d1cd8
+ pParent = (WindowPtr) 0x0
+ dosave = <value optimized out>
+ pLayerWin = <value optimized out>
+ #10 0x08093e45 in InitRootWindow (pWin=0x92df0d0) at ../../dix/window.c:492
+ pScreen = (ScreenPtr) 0x92d1cd8
+ #11 0x0808e81d in main (argc=2, argv=0xbfe99c94, envp=Cannot access memory at
address 0xc
+ )
+ at ../../dix/main.c:422
+ i = 1
+ error = 134800406
+ xauthfile = <value optimized out>
+ alwaysCheckForInput = {0, 1}
[lspci]
00:00.0 Host bridge [0600]: Intel Corporation 440FX - 82441FX PMC [Natoma]
[8086:1237] (rev 02)
00:02.0 VGA compatible controller [0300]: Cirrus Logic GD 5446 [1013:00b8]
** Changed in: xorg-server (Ubuntu)
Importance: Medium => High
Status: Incomplete => Triaged
--
Xephyr crashes with Segmentation fault in fbOddTile/memcpy() on LPIA arch
https://bugs.launchpad.net/bugs/298868
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
