Bug#605374: xserver-xorg-input-evdev: evdev segfaults on touchpad events

[Wilfried Klaebe <w+reportbug@chaos.in-kiel.de>]

On Tue, Nov 30, 2010 at 02:25:42AM +0100, Cyril Brulebois wrote:
> Hi,
> 
> this looks like embarrassing.
> 
> Wilfried Klaebe <w+reportbug@chaos.in-kiel.de> (29/11/2010):
> > This is a MacBookPro3,1 with newest xorg and xserver-xorg-*
> > packages, freshly booted.
> 
> > When I touch the touchpad, X segfaults. Relevant Xorg.0.log lines
> > afterwards (everything before is from starting X and the same as in
> > "most recent Xorg X server log file" below):
> 
> The backtrace isn't really usable as-is. Any chance you could make
> sure you have -dbg installed for xserver-xorg-core, possibly build a
> debug flavour of -evdev, and run "bt full" (e.g. through another
> machine, using ssh, or after having generated a core dump)?

re-done with xserver-xorg-core-dbg installed.

Log file entries:

[397503.602]
Backtrace:
[397503.602] 0: (vdso) (xorg_backtrace+0x28) [0x4a24e8]
[397503.602] 1: (vdso) (0x400000+0x5f989) [0x45f989]
[397503.602] 2: /lib/libpthread.so.0 (0x7f7cf954f000+0xef60) [0x7f7cf955df60]
[397503.602] 3: /lib/libc.so.6 (memcpy+0x15b) [0x7f7cf83258ab]
[397503.602] 4: (vdso) (0x400000+0x9cc67) [0x49cc67]
[397503.602] Segmentation fault at address 0x7ffff542e000
[397503.602]
Fatal server error:
[397503.602] Caught signal 11 (Segmentation fault). Server aborting
[397503.602]
[397503.602]
Please consult the The X.Org Foundation support
         at http://wiki.x.org
 for help.
[397503.602] Please also check the log file at "/var/log/Xorg.0.log" for additional information.
[397503.602]

gdb:

Core was generated by `/usr/bin/X :0 vt7 -nolisten tcp -auth /var/lib/xdm/authdir/authfiles/A:0-EeKDnk'.
Program terminated with signal 6, Aborted.
#0  0x00007f7cf82d8165 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
	in ../nptl/sysdeps/unix/sysv/linux/raise.c
(gdb) bt full
#0  0x00007f7cf82d8165 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        pid = <value optimized out>
        selftid = <value optimized out>
#1  0x00007f7cf82daf70 in abort () at abort.c:92
        act = {__sigaction_handler = {sa_handler = 0xc3fb80, sa_sigaction = 0xc3fb80}, sa_mask = {__val = {140174747042709, 16, 8215780, 18446744073709551568, 2, 
              140174716226312, 140174749025464, 1, 4294967295, 20, 1, 8140888, 0, 8260048, 12708576, 0}}, sa_flags = -100621486, sa_restorer = 0x1}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00000000004648be in OsAbort () at ../../os/utils.c:1260
No locals.
#3  0x00000000004702fd in ddxGiveUp () at ../../../../hw/xfree86/common/xf86Init.c:940
        i = <value optimized out>
#4  0x000000000045b85d in AbortServer () at ../../os/log.c:424
No locals.
#5  0x000000000045c030 in FatalError (f=0x578718 "Caught signal %d (%s). Server aborting\n") at ../../os/log.c:552
        args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7ffff542bca0, reg_save_area = 0x7ffff542bbe0}}
        beenhere = 1
#6  0x000000000045f9de in OsSigHandler (signo=11, sip=0x7ffff542e000, unused=<value optimized out>) at ../../os/osinit.c:156
No locals.
#7  <signal handler called>
No symbol table info available.
#8  memcpy () at ../sysdeps/x86_64/memcpy.S:267
No locals.
#9  0x000000000049cc67 in GetProximityEvents (events=<value optimized out>, pDev=0x105c790, type=108, first_valuator=16, num_valuators=<value optimized out>, 
    valuators_in=0x7ffff542c450) at ../../dix/getevents.c:1225
        num_events = 0
        event = 0xc1eae0
        valuators = {0 <repeats 20 times>, 32, 0, 17150672, 0, -98634072, 32636, 0, 0, 0, 0, 1, 0, -180172048, 32767, 4636327, 0}
#10 0x0000000000000000 in ?? ()
No symbol table info available.

HTH,
Wilfried