Bug#613451: xserver-xorg: segmentation fault on client closedown

[Ferenc Wagner <wferi@niif.hu>]

Cyril Brulebois <kibi@debian.org> writes:

> Ferenc Wagner <wferi@niif.hu> (27/02/2011):
>
>> Whichever you prefer; (re)opening isn't a problem for me, and you
>> probably haven't got any info to start working with now.
>
> Exactly. Closing then, thanks for the quick follow-up.

So now I got another X server crash, which actually generated a core
file.  Full backtrace below, it's lacking some frames, but maybe still
useful.  Firefox didn't get any error report now, it simply hit the
closed connection together with the other desktop applications.  The
problem didn't kill the X server instantly: after opening a new tab in
Firefox, severe screen corruption started to appear, during which I
could interact with the applications (at least the parts that weren't
corrupted beyond recognition).  The server finally collapsed several
seconds later, then took considerable time to start again, and after
login it still isn't behaving normally: the cursor in urxvt is always
hollow (should be a filled block when focused) and off by one character
when backspacing, and selected text disappears instead of turning
inverse.  Emacs and Firefox took enormous time to start, but are
perfectly OK and usable now (seems like they waited for something with
their windows half-drawn).

Hope we've got something usable now...

Thanks,
Feri.

================ .xsession-errors ==================
[...]
(firefox-bin:2573): Gdk-WARNING **: XID collision, trouble ahead

(firefox-bin:2573): Gdk-WARNING **: XID collision, trouble ahead

(firefox-bin:2573): Gdk-WARNING **: XID collision, trouble ahead
Xlib:  extension "RANDR" missing on display ":0.0".
Xlib:  extension "RANDR" missing on display ":0.0".

firefox-bin: Fatal IO error 104 (Connection reset by peer) on X server :0.0.
trayer: Fatal IO error 11 (Resource temporarily unavailable) on X server :0.0.
XIO:  fatal IO error 104 (Connection reset by peer) on X server ":0.0"
      after 41854 requests (41853 known processed) with 2 events remaining.
Pidgin: Fatal IO error 104 (Connection reset by peer) on X server :0.0.
XIO:  fatal IO error 104 (Connection reset by peer) on X server ":0.0"
      after 1122793 requests (1122674 known processed) with 0 events remaining.
XIO:  fatal IO error 11 (Resource temporarily unavailable) on X server ":0.0"
      after 145928 requests (145928 known processed) with 0 events remaining.
urxvt: X connection to ':0.0' broken, unable to recover, exiting.
urxvt: X connection to ':0.0' broken, unable to recover, exiting.
urxvt: X connection to ':0.0' broken, unable to recover, exiting.
urxvt: X connection to ':0.0' broken, unable to recover, exiting.
urxvt: X connection to ':0.0' broken, unable to recover, exiting.
urxvt: X connection to ':0.0' broken, unable to recover, exiting.
Connection lost to X server `:0.0'
=====================================================

===================== xdm.log =======================
Tue Mar  1 10:18:31 2011 xdm info (pid 6217): sourcing /etc/X11/xdm/Xstartup
Tue Mar  1 10:18:31 2011 xdm info (pid 19046): executing session /etc/X11/xdm/Xsession
Tue Mar  1 19:39:10 2011 xdm info (pid 6217): sourcing /etc/X11/xdm/Xreset
Tue Mar  1 19:39:11 2011 xdm info (pid 1206): Starting X server on :0
Tue Mar  1 19:39:13 2011 xdm info (pid 30898): sourcing /etc/X11/xdm/Xsetup
Wed Mar  2 10:25:23 2011 xdm info (pid 30898): sourcing /etc/X11/xdm/Xstartup
Wed Mar  2 10:25:23 2011 xdm info (pid 2504): executing session /etc/X11/xdm/Xsession
Wed Mar  2 15:33:00 2011 xdm error (pid 1206): Server for display :0 terminated unexpectedly: 1536
Wed Mar  2 15:33:02 2011 xdm info (pid 30898): sourcing /etc/X11/xdm/Xreset
Wed Mar  2 15:33:05 2011 xdm info (pid 1206): Starting X server on :0

X.Org X Server 1.7.7
Release Date: 2010-05-04
X Protocol Version 11, Revision 0
Build Operating System: Linux 2.6.32.28-dsa-ia32 i686 Debian
Current Operating System: Linux tac 2.6.37-trunk-686 #1 SMP Thu Jan 6 14:39:08 UTC 2011 i686
Kernel command line: BOOT_IMAGE=/boot/vmlinuz-2.6.37-trunk-686 root=UUID=e306b8b5-03fa-499f-9910-677bc0ed0e52 ro vga=0x318 console=tty0
Build Date: 12 January 2011  03:44:48AM
xorg-server 2:1.7.7-11 (Cyril Brulebois <kibi@debian.org>) 
Current version of pixman: 0.16.4
	Before reporting problems, check http://wiki.x.org
	to make sure that you have the latest version.
Markers: (--) probed, (**) from config file, (==) default setting,
	(++) from command line, (!!) notice, (II) informational,
	(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: "/var/log/Xorg.0.log", Time: Wed Mar  2 15:33:06 2011
(==) Using config file: "/etc/X11/xorg.conf"
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
(EE) MGA(0): [drm] DRIScreenInit failed.  Disabling DRI.
(EE) MGA(1): Not initializing the DRI on the second head
SELinux: Disabled on system, not enabling in X server
The XKEYBOARD keymap compiler (xkbcomp) reports:
> Warning:          Symbol map for key <RALT> redefined
>                   Using last definition for conflicting fields
> Warning:          Type "ONE_LEVEL" has 1 levels, but <RALT> has 2 symbols
>                   Ignoring extra symbols
Errors from xkbcomp are not fatal to the X server
Wed Mar  2 15:33:09 2011 xdm info (pid 26976): sourcing /etc/X11/xdm/Xsetup
Wed Mar  2 15:33:16 2011 xdm error (pid 26976): pam_authenticate failure: Authentication failure
Wed Mar  2 15:33:20 2011 xdm info (pid 26976): sourcing /etc/X11/xdm/Xstartup
Wed Mar  2 15:33:20 2011 xdm info (pid 26984): executing session /etc/X11/xdm/Xsession
=====================================================

================ Xorg.0.log.old =====================
[...]
(**) ImExPS/2 Logitech Explorer Mouse: EmulateWheelButton: 4, EmulateWheelInertia: 10, EmulateWheelTimeout: 200
(II) ImExPS/2 Logitech Explorer Mouse: initialized for relative axes.
(II) config/udev: Adding input device ImExPS/2 Logitech Explorer Mouse (/dev/input/mouse0)
(II) No input driver/identifier specified (ignoring)
(II) config/udev: Adding input device PC Speaker (/dev/input/event3)
(II) No input driver/identifier specified (ignoring)

Backtrace:
0: /usr/bin/X (xorg_backtrace+0x3b) [0x80adebb]
1: /usr/bin/X (0x8048000+0x5aa95) [0x80a2a95]
2: (vdso) (__kernel_rt_sigreturn+0x0) [0xb780940c]
3: /usr/bin/X (CreatePicture+0x182) [0x8107432]
4: /usr/bin/X (0x8048000+0xc9971) [0x8111971]
5: /usr/bin/X (0x8048000+0xca97d) [0x811297d]
6: /usr/bin/X (0x8048000+0xc3273) [0x810b273]
7: /usr/bin/X (0x8048000+0x2c187) [0x8074187]
8: /usr/bin/X (0x8048000+0x1e9aa) [0x80669aa]
9: /lib/i686/cmov/libc.so.6 (__libc_start_main+0xe6) [0xb753cc76]
10: /usr/bin/X (0x8048000+0x1e5a1) [0x80665a1]
Segmentation fault at address 0x7d067b0

Fatal server error:
Caught signal 11 (Segmentation fault). Server aborting


Please consult the The X.Org Foundation support 
	 at http://wiki.x.org
 for help. 
Please also check the log file at "/var/log/Xorg.0.log" for additional information.

(II) Power Button: Close
(II) UnloadModule: "evdev"
(II) Power Button: Close
(II) UnloadModule: "evdev"
(II) AT Translated Set 2 keyboard: Close
(II) UnloadModule: "evdev"
(II) ImExPS/2 Logitech Explorer Mouse: Close
(II) UnloadModule: "evdev"
======================================================

===================== bt full ========================
#0  0xb7809424 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7550751 in raise () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb7553b82 in abort () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#3  0x080afbab in ddxGiveUp () at ../../../../hw/xfree86/common/xf86Init.c:1214
        i = <value optimized out>
#4  0x080afc58 in AbortDDX () at ../../../../hw/xfree86/common/xf86Init.c:1260
        i = 2
#5  0x080a184d in AbortServer () at ../../os/log.c:404
No locals.
#6  0x080a1e3e in FatalError (f=0x81c5560 "Caught signal %d (%s). Server aborting\n")
    at ../../os/log.c:529
        beenhere = 1
#7  0x080a2af1 in OsSigHandler (signo=11, sip=0xbfe4d09c, unused=0xbfe4d11c) at ../../os/osinit.c:156
No locals.
#8  <signal handler called>
No symbol table info available.
#9  0x07d067b0 in ?? ()
No symbol table info available.
#10 0x08107432 in CreatePicture (pid=1096942613, pDrawable=0xc033378, pFormat=0xc16b290, vmask=128, 
    vlist=0xc621a24, client=0xc9a2fa0, error=0xbfe4d524) at ../../render/picture.c:793
        pPicture = 0x80
#11 0x08111971 in ProcRenderCreatePicture (client=0xc9a2fa0) at ../../render/render.c:612
        pPicture = <value optimized out>
        pDrawable = 0xc033378
        pFormat = 0xc16b290
        len = 1
        error = <value optimized out>
        rc = 0
#12 0x0811297d in PanoramiXRenderCreatePicture (client=0xc9a2fa0) at ../../render/render.c:2720
        refDraw = 0xa5ddaa8
        newPict = <value optimized out>
        result = <value optimized out>
        j = 1
#13 0x0810b273 in ProcRenderDispatch (client=0xa050518) at ../../render/render.c:2064
No locals.
#14 0x08074187 in Dispatch () at ../../dix/dispatch.c:439
        result = <value optimized out>
        client = 0xc9a2fa0
        nready = 0
        start_tick = 830000
#15 0x080669aa in main (argc=8, argv=0xbfe4d744, envp=0xbfe4d768) at ../../dix/main.c:283
        i = <value optimized out>
        alwaysCheckForInput = {0, 1}
======================================================