Bug#575905: backtrace of xvfb segfault
The following backtrace is from
it://anongit.freedesktop.org/xorg/xserver compiled on lenny
(and on i386 and not sid on sparc as my original report),
but I hope it is the same bug:
(gdb) bt full
#0 0xf7cd83b3 in strlen () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#1 0x080b5b7a in SizeDeviceInfo (dev=0x81b0f68) at xiquerydevice.c:204
No locals.
#2 0x080b5d4d in ProcXIQueryDevice (client=0x819bcf0) at xiquerydevice.c:98
rep = {repType = 0 '\0', RepType = 16 '\020', sequenceNumber = 0, length = 0,
num_devices = 0, pad0 = 0, pad1 = 0, pad2 = 135998160, pad3 = 5, pad4 = 8, pad5 = 1}
dev = (DeviceIntPtr) 0x81b0f68
rc = <value optimized out>
i = 5
len = 2428
info = <value optimized out>
skip = (Bool *) 0x819e160
#3 0x080aa543 in ProcIDispatch (client=0x819bed8) at extinit.c:418
No locals.
#4 0x08100aed in Dispatch () at dispatch.c:439
result = <value optimized out>
client = (ClientPtr) 0x819bcf0
nready = 0
start_tick = 420
#5 0x080ef9fd in main (argc=2, argv=0xffffb064, envp=Cannot access memory at address 0x8
) at main.c:286
i = 1
alwaysCheckForInput = {0, 1}
And the dev of frame 1 is:
$3 = {public = {devicePrivate = 0x0, processInputProc = 0x80bd350 <ProcessOtherEvent>,
realInputProc = 0x80bd350 <ProcessOtherEvent>,
enqueueInputProc = 0x810fe60 <EnqueueEvent>, on = 1}, next = 0x81b1220, startup = 1,
deviceProc = 0x8064f20 <vfbMouseProc>, inited = 1, enabled = 1, coreEvents = 1,
deviceGrab = {grabTime = {months = 0, milliseconds = 507943791}, fromPassiveGrab = 0,
implicitGrab = 0, activeGrab = {next = 0x0, resource = 0, device = 0x0, window = 0x0,
ownerEvents = 0, keyboardMode = 0, pointerMode = 0, grabtype = GRABTYPE_CORE,
type = 0 '\0', modifiersDetail = {exact = 0, pMask = 0x0}, modifierDevice = 0x0,
detail = {exact = 0, pMask = 0x0}, confineTo = 0x0, cursor = 0x0, eventMask = 0,
deviceMask = 0, xi2mask = {"\000\000" <repeats 42 times>}}, grab = 0x0,
activatingKey = 0 '\0', ActivateGrab = 0x810fa70 <ActivateKeyboardGrab>,
DeactivateGrab = 0x810f7f0 <DeactivateKeyboardGrab>, sync = {frozen = 0, state = 0,
other = 0x0, event = 0x0}}, type = 0, xinput_type = 0, name = 0x0, id = 6,
key = 0x0, valuator = 0x81b1a60, button = 0x81b1508, focus = 0x0, proximity = 0x0,
absolute = 0x0, kbdfeed = 0x0, ptrfeed = 0x81b2a80, intfeed = 0x0, stringfeed = 0x0,
bell = 0x0, leds = 0x0, xkb_interest = 0x0, config_info = 0x0, devPrivates = 0x81b26e8,
nPrivates = 0, unwrapProc = 0, spriteInfo = 0x81b1210, u = {master = 0x81c2cd0,
lastSlave = 0x81c2cd0}, last = {valuators = {0 <repeats 36 times>}, remainder = {
0 <repeats 36 times>}, numValuators = 2, slave = 0x0}, properties = {
properties = 0x81b2a38, handlers = 0x81b2a68}}
I.e. it is trying strlen on dev.name which is NULL.
Hope that helps,
Bernhard R. Link
Reply to: