Bug#624548: xserver-xorg: Segmentation fault while opening rxvt
Hi!
On Fri, Apr 29, 2011 at 11:35 AM, Cyril Brulebois <kibi@debian.org> wrote:
> it's always good to provide full backtraces, see:
> http://pkg-xorg.alioth.debian.org/howto/report-bugs.html
> http://pkg-xorg.alioth.debian.org/howto/use-gdb.html
I have followed http://wiki.debian.org/XStrikeForce/XserverDebugging
to get both backtraces before.
By including this in /etc/gdm3/daemon.conf:
[daemon]
LocalXserverCommand=/usr/bin/Xorg -br -verbose -audit 0 -novtswitch -core
I've got /var/lib/gdm3/core (and not /etc/X11/core; is there something
wrong about this?).
The backtraced gdb output of the core is attached.
Just in case it's important, it has been backtraced by:
set logging on
handle SIGPIPE nostop
bt full
> (Anyway, trying without the FontPath should be easy enough to check,
> if you want to make sure about #615975.)
I didn't have any FontPath "unix/:port" in xorg.conf (actually I don't
have a xorg.conf; just created one via "Xorg -configure", to include
Option "NoTrapSignals" in it).
But even after commenting all the FontPath in this generated
xorg.conf, the problem still persists.
Is it another way to get a better backtrace or something else that I
can do, please?
Thank you!
Best regards,
Nelson
Continuing.
Program received signal SIGABRT, Aborted.
0x00007fa6a4ec4165 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64 ../nptl/sysdeps/unix/sysv/linux/raise.c: Arquivo ou diretório não encontrado.
in ../nptl/sysdeps/unix/sysv/linux/raise.c
#0 0x00007fa6a4ec4165 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
pid = <value optimized out>
selftid = <value optimized out>
#1 0x00007fa6a4ec6f70 in abort () at abort.c:92
act = {__sigaction_handler = {sa_handler = 0x7fffacbd4968, sa_sigaction = 0x7fffacbd4968}, sa_mask = {__val = {
140736091474256, 140736091483695, 13, 140353709248667, 3, 140736091474266, 6, 140353709248671, 2,
140736091474254, 2, 140353709239759, 1, 140353709248667, 3, 140736091474260}}, sa_flags = 12,
sa_restorer = 0x7fa6a4fb909f}
sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007fa6a4efa27b in __libc_message (do_abort=<value optimized out>, fmt=<value optimized out>)
at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
ap = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fffacbd52d0, reg_save_area = 0x7fffacbd51e0}}
ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fffacbd52d0, reg_save_area = 0x7fffacbd51e0}}
fd = 26
on_2 = <value optimized out>
list = <value optimized out>
nlist = 0
cp = <value optimized out>
written = false
#3 0x00007fa6a4f03ad6 in malloc_printerr (action=3, str=0x7fa6a4fb7bd0 "malloc(): memory corruption",
ptr=<value optimized out>) at malloc.c:6267
buf = "00000000019cbd00"
cp = 0x7fa6a4fb0e40 "0123456789abcdefghijklmnopqrstuvwxyz"
#4 0x00007fa6a4f06b6d in _int_malloc (av=0x7fa6a51eee40, bytes=<value optimized out>) at malloc.c:4396
iters = 0
nb = 640
idx = <value optimized out>
bin = 0x0
victim = 0x19cbcf0
size = <value optimized out>
victim_index = <value optimized out>
remainder = <value optimized out>
remainder_size = <value optimized out>
block = <value optimized out>
bit = <value optimized out>
map = <value optimized out>
fwd = <value optimized out>
bck = 0xff000000ff000000
errstr = <value optimized out>
__func__ = "_int_malloc"
#5 0x00007fa6a4f08930 in __libc_malloc (bytes=632) at malloc.c:3661
ar_ptr = 0x7fa6a51eee40
victim = 0x4f
__func__ = "__libc_malloc"
#6 0x00000000004dccb9 in damageText (pDrawable=<value optimized out>, pGC=0x540, x=6, y=-1, count=140353709215296,
chars=0x407d88 "", fontEncoding=TwoD16Bit, textType=3) at ../../../miext/damage/damage.c:1513
info = <value optimized out>
i = <value optimized out>
n = <value optimized out>
w = <value optimized out>
imageblt = <value optimized out>
#7 0x00000000004e134a in damageImageText16 (pDrawable=0x13fc660, pGC=0x13fdd30, x=6, y=10, count=-1527050688,
chars=<value optimized out>) at ../../../miext/damage/damage.c:1610
oldFuncs = 0x7d0180
#8 0x0000000000428a03 in doImageText (client=0x13fb750, c=0x7fffacbd54e0) at ../../dix/dixfonts.c:1565
err = <value optimized out>
lgerr = 0
fpe = <value optimized out>
#9 0x0000000000428acf in ImageText (client=0x540, pDraw=<value optimized out>, pGC=0x6, nChars=<value optimized out>,
data=0x7fa6a4fb0e40 "0123456789abcdefghijklmnopqrstuvwxyz", xorg=4226440, yorg=-1, reqType=77, did=16777225)
at ../../dix/dixfonts.c:1616
local_closure = {client = 0x13fb750, pDraw = 0x13fc660, pGC = 0x13fdd30, nChars = 79 'O', data = 0x144227c "",
xorg = 6, yorg = 10, reqType = 77 'M', imageText = 0x4e1260 <damageImageText16>, itemSize = 2, did = 16777225}
#10 0x000000000044647b in ProcImageText16 (client=0x13fb750) at ../../dix/dispatch.c:2330
pDraw = 0x13fc660
pGC = 0x13fdd30
#11 0x0000000000448909 in Dispatch () at ../../dix/dispatch.c:432
result = <value optimized out>
client = 0x13fb750
nready = 0
start_tick = 1300
#12 0x00000000004257ab in main (argc=12, argv=0x7fffacbd5758, envp=<value optimized out>) at ../../dix/main.c:291
i = 1
alwaysCheckForInput = {0, 1}
Signal Stop Print Pass to program Description
SIGPIPE No Yes Yes Broken pipe
The program is not being run.
#0 _int_malloc (av=0x7f2329c45e40, bytes=565312) at malloc.c:4709
p = 0x280a2a0
iters = <value optimized out>
nb = 565328
idx = <value optimized out>
bin = <value optimized out>
victim = 0x7f2329c45e98
size = <value optimized out>
victim_index = <value optimized out>
remainder = 0x28942e0
remainder_size = <value optimized out>
block = 4
bit = <value optimized out>
map = 16777216
fwd = <value optimized out>
bck = <value optimized out>
errstr = <value optimized out>
__func__ = "_int_malloc"
#1 0x00007f232995f930 in __libc_malloc (bytes=565312) at malloc.c:3661
ar_ptr = 0x7f2329c45e40
victim = 0x2243488
__func__ = "__libc_malloc"
#2 0x00007f2327411da0 in exaPrepareAccessReg_mixed (pPixmap=0x2243430, index=1, pReg=0x0) at ../../exa/exa_migration_mixed.c:203
pixmaps = {{as_dst = 48, as_src = 0, pPix = 0x7fff910637d0, pReg = 0x7fff91063780}}
has_gpu_copy = <value optimized out>
success = 0
#3 0x00007f232740e072 in exaChangeWindowAttributes (pWin=0x2281430, mask=<value optimized out>) at ../../exa/exa.c:653
ret = 0
pScreen = 0x1efc650
#4 0x00000000004ad033 in compChangeWindowAttributes (pWin=0x2281430, mask=1) at ../../composite/compinit.c:114
pScreen = 0x1efc650
ret = <value optimized out>
#5 0x000000000044078d in ChangeWindowAttributes (pWin=0x2281430, vmask=<value optimized out>, vlist=<value optimized out>, client=<value optimized out>)
at ../../dix/window.c:1411
pVlist = 0x221f098
pPixmap = 0x2243430
pixID = 16777227
pCursor = 0x244
pOldCursor = 0x100000b
cursorID = 16777227
pChild = 0x100000b
cmap = 16777227
pCmap = 0x7e1bd0
xE = {u = {u = {type = 0 '\000', detail = 0 '\000', sequenceNumber = 0}, keyButtonPointer = {pad00 = 0, time = 0, root = 32, event = 0, child = 32,
rootX = 0, rootY = 0, eventX = 0, eventY = 16384, state = 0, sameScreen = 0 '\000', pad1 = 0 '\000'}, enterLeave = {pad00 = 0, time = 0,
root = 32, event = 0, child = 32, rootX = 0, rootY = 0, eventX = 0, eventY = 16384, state = 0, mode = 0 '\000', flags = 0 '\000'}, focus = {
pad00 = 0, window = 0, mode = 32 ' ', pad1 = 0 '\000', pad2 = 0 '\000', pad3 = 0 '\000'}, expose = {pad00 = 0, window = 0, x = 32, y = 0,
width = 0, height = 0, count = 32, pad2 = 0}, graphicsExposure = {pad00 = 0, drawable = 0, x = 32, y = 0, width = 0, height = 0,
minorEvent = 32, count = 0, majorEvent = 0 '\000', pad1 = 0 '\000', pad2 = 0 '\000', pad3 = 0 '\000'}, noExposure = {pad00 = 0, drawable = 0,
minorEvent = 32, majorEvent = 0 '\000', bpad = 0 '\000'}, visibility = {pad00 = 0, window = 0, state = 32 ' ', pad1 = 0 '\000', pad2 = 0 '\000',
pad3 = 0 '\000'}, createNotify = {pad00 = 0, parent = 0, window = 32, x = 0, y = 0, width = 32, height = 0, borderWidth = 0,
override = 0 '\000', bpad = 0 '\000'}, destroyNotify = {pad00 = 0, event = 0, window = 32}, unmapNotify = {pad00 = 0, event = 0, window = 32,
fromConfigure = 0 '\000', pad1 = 0 '\000', pad2 = 0 '\000', pad3 = 0 '\000'}, mapNotify = {pad00 = 0, event = 0, window = 32,
override = 0 '\000', pad1 = 0 '\000', pad2 = 0 '\000', pad3 = 0 '\000'}, mapRequest = {pad00 = 0, parent = 0, window = 32}, reparent = {
pad00 = 0, event = 0, window = 32, parent = 0, x = 32, y = 0, override = 0 '\000', pad1 = 0 '\000', pad2 = 0 '\000', pad3 = 0 '\000'},
configureNotify = {pad00 = 0, event = 0, window = 32, aboveSibling = 0, x = 32, y = 0, width = 0, height = 0, borderWidth = 0,
override = 0 '\000', bpad = 64 '@'}, configureRequest = {pad00 = 0, parent = 0, window = 32, sibling = 0, x = 32, y = 0, width = 0, height = 0,
borderWidth = 0, valueMask = 16384, pad1 = 0}, gravity = {pad00 = 0, event = 0, window = 32, x = 0, y = 0, pad1 = 32, pad2 = 0,
pad3 = 1073741824, pad4 = 0}, resizeRequest = {pad00 = 0, window = 0, width = 32, height = 0}, circulate = {pad00 = 0, event = 0, window = 32,
parent = 0, place = 32 ' ', pad1 = 0 '\000', pad2 = 0 '\000', pad3 = 0 '\000'}, property = {pad00 = 0, window = 0, atom = 32, time = 0,
state = 32 ' ', pad1 = 0 '\000', pad2 = 0}, selectionClear = {pad00 = 0, time = 0, window = 32, atom = 0}, selectionRequest = {pad00 = 0,
time = 0, owner = 32, requestor = 0, selection = 32, target = 0, property = 1073741824}, selectionNotify = {pad00 = 0, time = 0, requestor = 32,
selection = 0, target = 32, property = 0}, colormap = {pad00 = 0, window = 0, colormap = 32, new = 0 '\000', state = 0 '\000', pad1 = 0 '\000',
pad2 = 0 '\000'}, mappingNotify = {pad00 = 0, request = 0 '\000', firstKeyCode = 0 '\000', count = 0 '\000', pad1 = 0 '\000'}, clientMessage = {
pad00 = 0, window = 0, u = {l = {type = 32, longs0 = 0, longs1 = 32, longs2 = 0, longs3 = 1073741824, longs4 = 0}, s = {type = 32, shorts0 = 0,
shorts1 = 0, shorts2 = 32, shorts3 = 0, shorts4 = 0, shorts5 = 0, shorts6 = 0, shorts7 = 16384, shorts8 = 0, shorts9 = 0}, b = {type = 32,
bytes = "\000\000\000\000 \000\000\000\000\000\000\000\000\000\000@\000\000\000"}}}}}
error = 0
rc = <value optimized out>
pScreen = 0x1efc650
index2 = <value optimized out>
tmask = 35778712
vmaskCopy = 1
val = 0
checkOptional = 0
borderRelative = 0
#6 0x0000000000447f24 in ProcChangeWindowAttributes (client=0x1efafe0) at ../../dix/dispatch.c:693
pWin = 0x2281430
len = 1
rc = <value optimized out>
#7 0x0000000000448909 in Dispatch () at ../../dix/dispatch.c:432
result = <value optimized out>
client = 0x1efafe0
nready = 0
start_tick = 580
#8 0x00000000004257ab in main (argc=13, argv=0x7fff91063b28, envp=<value optimized out>) at ../../dix/main.c:291
i = 1
alwaysCheckForInput = {0, 1}
Reply to: