Bug#551122: xserver-xorg-core: xserver crashes when mouse movement leads to pop-up or similar

[Duane Kaufman <duanek@chorus.net>]

Hi,

I believe I have produced a good gdb back-trace though dumping a core  
file (see attached)

I hope this is helpful. Let me know if there is anything more I can do.

Thanks,
Duane

Quoting Julien Cristau <jcristau@debian.org>:

> On Thu, Oct 15, 2009 at 15:47:18 -0500, Duane Kaufman wrote:
>
> > On Acer C300 Tablet PC
> > When mouse motion leads to a pop-up (or similar) _sometimes_ the xserver
> > crashes
> >
> > Backtrace:
> > 0: /usr/bin/X11/X(xorg_backtrace+0x3b) [0x81314cb]
> > 1: /usr/bin/X11/X(xf86SigHandler+0x51) [0x80c1df1]
> > 2: [0xffffe420]
> > 3: [0xffffe420]
> > 4: /usr/bin/X11/X(ProcChangeProperty+0x160) [0x80a3a10]
> > 5: /usr/bin/X11/X(Dispatch+0x357) [0x808c8b7]
> > 6: /usr/bin/X11/X(main+0x3aa) [0x8071b8a]
> > 7: /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7c507a5]
> > 8: /usr/bin/X11/X [0x8071051]
> >
> > Fatal server error:
> > Caught signal 11.  Server aborting
> Hi,
>
> any chance you could get a backtrace from gdb?  See
> http://wiki.debian.org/XStrikeForce/XserverDebugging#Obtainingabacktracewithgdb
> for some instructions.
>
> Cheers,
> Julien


#0  0x080b79f5 in xf86SIGIO (sig=29)
    at ../../../../../hw/xfree86/os-support/linux/../shared/sigio.c:110
        i = <value optimized out>
        ready = {fds_bits = {125952, -1210965455, -1210965635, 136768912, 
            -1210842728, 136768912, -1214320200, 16392, 114, -1210965596, 17, 
            3, 136794072, 17, -1213712945, 13404, -1210842740, -1210842728, 0, 
            2, 104, 2, 8, 157458632, -1368729720, 1716, 1716, 1728, 44, 
            157458632, -1368729732, 50}}
        to = {tv_sec = 0, tv_usec = 0}
        save_errno = 0
        r = -1
#1  <signal handler called>
No symbol table info available.
#2  0xb7c5c5fd in memmove () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#3  0x08133692 in FlushClient (who=0x826e470, oc=0x826e718, 
    __extraBuf=0x8be0608, extraCount=65208) at ../../os/io.c:959
        before = <value optimized out>
        remain = <value optimized out>
        i = <value optimized out>
        len = <value optimized out>
        oco = 0x8b69eb0
        connection = <value optimized out>
        trans_conn = 0x8b06908
        iov = {{iov_base = 0x9616190, iov_len = 342864}, {
            iov_base = 0x8be0608, iov_len = 65208}, {iov_base = 0x8270c68, 
            iov_len = 136770640}}
        written = 0
        padsize = 0
        notWritten = 408072
        todo = 408072
        padBuffer = "\000\000"
#4  0x08133b68 in WriteToClient (who=0x826e470, count=65208, __buf=0x8be0608)
    at ../../os/io.c:821
        oc = 0x826e718
        oco = <value optimized out>
        padBytes = 0
#5  0x0808a7ef in DoGetImage (client=0x826e470) at ../../dix/dispatch.c:2083
        pDraw = 0x892c130
        linesPerBuf = 38
        linesDone = 266
        plane = 0
        pBuf = 0x8be0608 '�' <repeats 200 times>...
        xgi = {type = 1 '\001', depth = 24 '\030', sequenceNumber = 65179, 
          length = 217074, visual = 0, pad3 = 136766576, pad4 = 0, pad5 = 20, 
          pad6 = 136766576, pad7 = 136766576}
        pVisibleRegion = 0x0
        nlines = 38
        rc = <value optimized out>
        length = 1716
#6  ProcGetImage (client=0x826e470) at ../../dix/dispatch.c:2148
No locals.
#7  0x0808c8b7 in Dispatch () at ../../dix/dispatch.c:456
        result = <value optimized out>
        client = 0x826e470
        nready = 0
        start_tick = 2360
#8  0x08071b8a in main (argc=8, argv=0xbfe550c4, envp=
Cannot access memory at address 0x3820
) at ../../dix/main.c:397
        i = <value optimized out>
        alwaysCheckForInput = {0, 1}