Bug#364830: Full stack trace

[Sam Morris <sam@robots.org.uk>]

Here's the full story from gdb:

#0  0xa7dce6f1 in kill () at string2.h:998
No locals.
#1  0xa7dce455 in *__GI_raise (sig=6)
    at ../linuxthreads/sysdeps/unix/sysv/linux/raise.c:32
No locals.
#2  0xa7dcf9d8 in *__GI_abort () at ../sysdeps/generic/abort.c:88
        act = {__sigaction_handler = {sa_handler = 0x26, sa_sigaction = 0x26},
  sa_mask = {__val = {10, 263169, 108, 76, 435, 419, 9, 263169, 59, 58, 65105,
      65113, 9, 263169, 39, 64, 65106, 65114, 9, 263169, 96, 172, 124, 124, 0,
      65793, 65505, 9, 263169, 35, 126, 65104}}, sa_flags = 65109,
  sa_restorer = 0xb}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#3  0xa7e0411f in __libc_message (do_abort=2,
    fmt=0xa7eb92f0 "*** glibc detected *** %s: 0x%s ***\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:145
        ap = 0xafa418c0 "\uffff\223\uffff\uffff"
        ap_copy = 0xafa418b8 "\uffff\223\uffff\uffff\uffff\030\uffff\uffff\uffff\223\uffff\uffff"
        fd = 20
        list = <value optimized out>
        nlist = 5
        cp = 0x14 <Address 0x14 out of bounds>
#4  0xa7e09fb2 in malloc_printerr (action=2,
    str=0xa7eb93c4 "double free or corruption (!prev)",
    ptr=<value optimized out>) at malloc.c:5525
        buf = "083776b8"
        cp = <value optimized out>
#5  0xa7e0a978 in *__GI___libc_free (mem=0x83776b8) at malloc.c:3404
        ar_ptr = (mstate) 0xa7ec4a40
        p = <value optimized out>
        hook = <value optimized out>
#6  0x08149b1b in SrvXkbResizeKeyType (xkb=0x82932e0, type_ndx=11,
    map_count=14, want_preserve=1, new_num_lvls=8) at XKBMAlloc.c:520
        nextMatch = 14
        type = (XkbKeyTypePtr) 0x837a4c0
        matchingKeys = "\030\033\035\036\037')-45678:", '\0' <repeats 233 times>        nMatchingKeys = 14 '\016'
#7  0x08126b0a in ProcXkbSetMap (client=0x837db18) at xkb.c:1937
        pOld = (XkbKeyTypePtr) 0x837a4a8
        n = 13
        dev = (DeviceIntPtr) 0x8292dd8
        xkbi = (XkbSrvInfoPtr) 0x8293358
        xkb = (XkbDescPtr) 0x82932e0
        change = {device_spec = 0, state_changes = 0, map = {changed = 0,
    min_key_code = 0 '\0', max_key_code = 0 '\0', first_type = 0 '\0',
    num_types = 0 '\0', first_key_sym = 0 '\0', num_key_syms = 0 '\0',
    first_key_act = 0 '\0', num_key_acts = 0 '\0',
    first_key_behavior = 0 '\0', num_key_behaviors = 0 '\0',
    first_key_explicit = 0 '\0', num_key_explicit = 0 '\0',
    first_modmap_key = 0 '\0', num_modmap_keys = 0 '\0',
    first_vmodmap_key = 0 '\0', num_vmodmap_keys = 0 '\0', pad = 0 '\0',
    vmods = 0}, ctrls = {changed_ctrls = 0, enabled_ctrls_changes = 0,
    num_groups_changed = 0}, indicators = {state_changes = 0,
    map_changes = 0}, names = {changed = 0, first_type = 0 '\0',
    num_types = 0 '\0', first_lvl = 0 '\0', num_lvls = 0 '\0',
    num_aliases = 0 '\0', num_rg = 0 '\0', first_key = 0 '\0',
    num_keys = 0 '\0', changed_vmods = 0, changed_indicators = 0,
    changed_groups = 0 '\0'}, compat = {changed_groups = 0 '\0', first_si = 0,
    num_si = 0}}
        cause = {kc = 0 '\0', event = 0 '\0', mjr = 152 '\230', mnr = 9 '\t',
  client = 0x837db18}
        nTypes = <value optimized out>
        nActions = 0
        error = <value optimized out>
        tmp = 0x83a47b4 ""
        mapWidths = "\001\002\002\002\002\002\003\002\003\b\b\b\004\004\004\004\004", '\0' <repeats 95 times>, "\uffff\237\uffff\uffff@J\uffff\uffffxJ\uffff\uffffxJ\uffff\uffff\000\000\000\000\214J\uffff\uffffH\000\000\000\uffff\000\000\000\uffff/\uffff\uffff@J\uffff\uffff\000\000\000\000\uffff\037\uffff\uffff\024\uffff\uffff\uffff", '\0' <repeats 24 times>, "\214M\uffff\uffff\000\000\000\000\214J\uffff\uffff\uffff!)\b@J\uffff\uffff9\020\000\000\uffff\uffff\uffff\uffff\000\000\b\000\uffff\037\uffff\uffff \232<\b\uffffv7\b@J\uc9f8\2067\b\030\000\000\000\uffff\223\uffff\uffff@J\uffff\uffff\230\uffff'\b"
        symsPerKey = {0, 0, 0, 0, 0, 32768, 16383, 0, 0, 1,
  4 <repeats 12 times>, 2, 2, 4, 4, 2, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 4, 4,
  4, 4, 4, 4, 2, 4, 4, 4, 4, 4, 1, 4, 4, 4, 4, 4, 4, 2, 4, 4, 4, 4, 1, 2, 2,
  1, 1, 2 <repeats 11 times>, 1, 2 <repeats 13 times>, 0, 1, 4, 2, 2, 1, 1, 1,
  1, 0, 1, 1, 1, 1, 1, 1, 1, 1, 2, 3, 2, 1, 0, 1, 2, 1, 0, 0, 0, 0, 0, 0, 1,
  2, 1, 2, 2, 0 <repeats 27 times>, 2, 0 <repeats 21 times>, 65520, 65535, 1,
  0, 1, 0, 7720, 44964, 61080, 2056, 7708, 44964, 0, 0, 1, 0, 17440, 2082,
  47192, 119, 0, 32973, 0, 0, 24697, 17487, 6447, 13, 46864, 2106, 8296,
  44964, 35645, 2062, 0, 8, 17440, 2082, 0, 0, 0, 0, 8272, 44964, 0, 0, 8,
  0 <repeats 31 times>}
        sentNKN = 0
        stuff = (xkbSetMapReq *) 0x83a4790
#8  0x080c9a7e in Dispatch () at dispatch.c:459
        result = <value optimized out>
        client = <value optimized out>
        nready = 0
        start_tick = 120
#9  0x080d6785 in main (argc=1, argv=0xafa42554, envp=0x0) at main.c:484
        pScreen = <value optimized out>
        i = 1
        j = <value optimized out>
        k = <value optimized out>
        error = 0
        xauthfile = <value optimized out>
        alwaysCheckForInput = {0, 1}

Also, I noticed this message left on the console after resetting my video
card:

  *** glibc detected *** double free or corruption (!prev): 0x083e12c0 ***

-- 
Sam Morris
http://robots.org.uk/

PGP key id 5EA01078
3412 EA18 1277 354B 991B  C869 B219 7FDB 5EA0 1078