[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#625521: glibc: causes segfault in Xorg



On Wed, May 04, 2011 at 02:18:35AM -0500, Jonathan Nieder wrote:

> Thanks, Michel.  Steve, could you install xserver-xorg-video-radeon-dbg
> and get a full backtrace (bt full), or even better, run xorg under
> valgrind and see what it says?

OK, I ran valgrind Xorg; note that valgrind was not exiting
so I used ^C after approx 10 seconds.

==14381== Memcheck, a memory error detector
==14381== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al.
==14381== Using Valgrind-3.6.0.SVN-Debian and LibVEX; rerun with -h for copyright info
==14381== Command: Xorg :0
==14381== Parent PID: 13550
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x4016466: index (strchr.S:56)
==14381==    by 0x400720A: expand_dynamic_string_token (dl-load.c:324)
==14381==    by 0x400761F: _dl_map_object (dl-load.c:2182)
==14381==    by 0x400185D: map_doit (rtld.c:636)
==14381==    by 0x400D965: _dl_catch_error (dl-error.c:178)
==14381==    by 0x4001776: do_preload (rtld.c:820)
==14381==    by 0x4004474: dl_main (rtld.c:1705)
==14381==    by 0x401499D: _dl_sysdep_start (dl-sysdep.c:244)
==14381==    by 0x4001422: _dl_start (rtld.c:341)
==14381==    by 0x4000AF7: ??? (in /lib/ld-2.13.so)
==14381==    by 0x1: ???
==14381==    by 0x7FF000CC6: ???
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x401646B: index (strchr.S:59)
==14381==    by 0x400720A: expand_dynamic_string_token (dl-load.c:324)
==14381==    by 0x400761F: _dl_map_object (dl-load.c:2182)
==14381==    by 0x400185D: map_doit (rtld.c:636)
==14381==    by 0x400D965: _dl_catch_error (dl-error.c:178)
==14381==    by 0x4001776: do_preload (rtld.c:820)
==14381==    by 0x4004474: dl_main (rtld.c:1705)
==14381==    by 0x401499D: _dl_sysdep_start (dl-sysdep.c:244)
==14381==    by 0x4001422: _dl_start (rtld.c:341)
==14381==    by 0x4000AF7: ??? (in /lib/ld-2.13.so)
==14381==    by 0x1: ???
==14381==    by 0x7FF000CC6: ???
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x400AF5E: _dl_relocate_object (do-rel.h:65)
==14381==    by 0x40037B0: dl_main (rtld.c:2265)
==14381==    by 0x401499D: _dl_sysdep_start (dl-sysdep.c:244)
==14381==    by 0x4001422: _dl_start (rtld.c:341)
==14381==    by 0x4000AF7: ??? (in /lib/ld-2.13.so)
==14381==    by 0x1: ???
==14381==    by 0x7FF000CC6: ???
==14381==    by 0x7FF000CCB: ???
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x400AF67: _dl_relocate_object (do-rel.h:68)
==14381==    by 0x40037B0: dl_main (rtld.c:2265)
==14381==    by 0x401499D: _dl_sysdep_start (dl-sysdep.c:244)
==14381==    by 0x4001422: _dl_start (rtld.c:341)
==14381==    by 0x4000AF7: ??? (in /lib/ld-2.13.so)
==14381==    by 0x1: ???
==14381==    by 0x7FF000CC6: ???
==14381==    by 0x7FF000CCB: ???
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x400AF5E: _dl_relocate_object (do-rel.h:65)
==14381==    by 0x40038F3: dl_main (rtld.c:2331)
==14381==    by 0x401499D: _dl_sysdep_start (dl-sysdep.c:244)
==14381==    by 0x4001422: _dl_start (rtld.c:341)
==14381==    by 0x4000AF7: ??? (in /lib/ld-2.13.so)
==14381==    by 0x1: ???
==14381==    by 0x7FF000CC6: ???
==14381==    by 0x7FF000CCB: ???
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x400AF67: _dl_relocate_object (do-rel.h:68)
==14381==    by 0x40038F3: dl_main (rtld.c:2331)
==14381==    by 0x401499D: _dl_sysdep_start (dl-sysdep.c:244)
==14381==    by 0x4001422: _dl_start (rtld.c:341)
==14381==    by 0x4000AF7: ??? (in /lib/ld-2.13.so)
==14381==    by 0x1: ???
==14381==    by 0x7FF000CC6: ???
==14381==    by 0x7FF000CCB: ???
==14381== 
==14381== Warning: noted but unhandled ioctl 0x4601 with no size/direction hints
==14381==    This could cause spurious value errors to appear.
==14381==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==14381== Warning: noted but unhandled ioctl 0x4611 with no size/direction hints
==14381==    This could cause spurious value errors to appear.
==14381==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==14381== Warning: noted but unhandled ioctl 0x4606 with no size/direction hints
==14381==    This could cause spurious value errors to appear.
==14381==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69672EB: __strcasecmp_l_ssse3 (strcmp.S:243)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Use of uninitialised value of size 8
==14381==    at 0x6969334: __strcasecmp_l_ssse3 (strcmp.S:2257)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Use of uninitialised value of size 8
==14381==    at 0x6969338: __strcasecmp_l_ssse3 (strcmp.S:2258)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968730: __strcasecmp_l_ssse3 (strcmp.S:1498)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968FDA: __strcasecmp_l_ssse3 (strcmp.S:2039)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968930: __strcasecmp_l_ssse3 (strcmp.S:1623)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69679DA: __strcasecmp_l_ssse3 (strcmp.S:664)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69691DA: __strcasecmp_l_ssse3 (strcmp.S:2166)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69687DA: __strcasecmp_l_ssse3 (strcmp.S:1539)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6967436: __strcasecmp_l_ssse3 (strcmp.S:326)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968DDA: __strcasecmp_l_ssse3 (strcmp.S:1914)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6969130: __strcasecmp_l_ssse3 (strcmp.S:2123)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69681DA: __strcasecmp_l_ssse3 (strcmp.S:1164)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6967BDA: __strcasecmp_l_ssse3 (strcmp.S:789)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968D30: __strcasecmp_l_ssse3 (strcmp.S:1873)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6967DDA: __strcasecmp_l_ssse3 (strcmp.S:914)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968BDA: __strcasecmp_l_ssse3 (strcmp.S:1789)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69689DA: __strcasecmp_l_ssse3 (strcmp.S:1664)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69683DA: __strcasecmp_l_ssse3 (strcmp.S:1289)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968F30: __strcasecmp_l_ssse3 (strcmp.S:1998)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6968B30: __strcasecmp_l_ssse3 (strcmp.S:1748)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6967FDA: __strcasecmp_l_ssse3 (strcmp.S:1039)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x69673AB: __strcasecmp_l_ssse3 (strcmp.S:305)
==14381==    by 0x5B64212: FontFileMatchRenderer (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B60475: FontFileAddFontFile (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F066: FontFileReadDirectory (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62E2E: FontFileInitFPE (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x431F25: SetFontPathElements (dixfonts.c:1720)
==14381==    by 0x434A94: SetDefaultFontPath (dixfonts.c:1838)
==14381==    by 0x4256E6: main (main.c:228)
==14381== 
==14381== Conditional jump or move depends on uninitialised value(s)
==14381==    at 0x6DCD290: inflateReset2 (in /usr/lib/libz.so.1.2.3.4)
==14381==    by 0x6DCD37F: inflateInit2_ (in /usr/lib/libz.so.1.2.3.4)
==14381==    by 0x5B63B05: BufFilePushZIP (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B5F655: FontFileOpen (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B70CE3: ??? (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B61B45: ??? (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x5B62BFF: FontFileOpenFont (in /usr/lib/libXfont.so.1.4.1)
==14381==    by 0x433D46: doOpenFont (dixfonts.c:279)
==14381==    by 0x43424C: OpenFont (dixfonts.c:452)
==14381==    by 0x434315: SetDefaultFont (dixfonts.c:129)
==14381==    by 0x4256FE: main (main.c:231)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6969F54: __strncasecmp_l_ssse3 (strcmp.S:862)
==14381==    by 0x51FE82: device_added (udev.c:152)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1a748 is 8 bytes inside a block of size 9 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E319A0: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E31B3A: udev_device_new_from_syspath (in /lib/libudev.so.0.11.2)
==14381==    by 0x520402: config_udev_init (udev.c:298)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x69690C8: __strcasecmp_l_ssse3 (strcmp.S:2113)
==14381==    by 0x51FDD4: device_added (udev.c:156)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1b8f8 is 8 bytes inside a block of size 9 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x69690C8: __strcasecmp_l_ssse3 (strcmp.S:2113)
==14381==    by 0x51FDEB: device_added (udev.c:158)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1b8f8 is 8 bytes inside a block of size 9 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6968AC4: __strcasecmp_l_ssse3 (strcmp.S:1737)
==14381==    by 0x51FE02: device_added (udev.c:160)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1b8f8 is 8 bytes inside a block of size 9 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x696734C: __strcasecmp_l_ssse3 (strcmp.S:292)
==14381==    by 0x51FE19: device_added (udev.c:162)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1b8f8 is 8 bytes inside a block of size 9 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967279: __strcasecmp_l_ssse3 (strcmp.S:213)
==14381==    by 0x51FDD4: device_added (udev.c:156)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1ba13 is 3 bytes inside a block of size 10 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967281: __strcasecmp_l_ssse3 (strcmp.S:215)
==14381==    by 0x51FDD4: device_added (udev.c:156)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1ba1b is 1 bytes after a block of size 10 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967279: __strcasecmp_l_ssse3 (strcmp.S:213)
==14381==    by 0x51FDEB: device_added (udev.c:158)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1ba13 is 3 bytes inside a block of size 10 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967281: __strcasecmp_l_ssse3 (strcmp.S:215)
==14381==    by 0x51FDEB: device_added (udev.c:158)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1ba1b is 1 bytes after a block of size 10 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x4E2EF01: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E324AF: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E326CA: ??? (in /lib/libudev.so.0.11.2)
==14381==    by 0x4E32A9E: udev_device_get_devnode (in /lib/libudev.so.0.11.2)
==14381==    by 0x51F9C8: device_added (udev.c:69)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6968CC4: __strcasecmp_l_ssse3 (strcmp.S:1862)
==14381==    by 0x47FB4A: NewInputDeviceRequest (xf86Xinput.c:863)
==14381==    by 0x51FD56: device_added (udev.c:194)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1bd68 is 0 bytes after a block of size 8 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x51FA32: device_added (udev.c:88)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967281: __strcasecmp_l_ssse3 (strcmp.S:215)
==14381==    by 0x47FB82: NewInputDeviceRequest (xf86Xinput.c:875)
==14381==    by 0x51FD56: device_added (udev.c:194)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1bd68 is 0 bytes after a block of size 8 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x51FA32: device_added (udev.c:88)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967281: __strcasecmp_l_ssse3 (strcmp.S:215)
==14381==    by 0x47FB95: NewInputDeviceRequest (xf86Xinput.c:876)
==14381==    by 0x51FD56: device_added (udev.c:194)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1bd68 is 0 bytes after a block of size 8 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x51FA32: device_added (udev.c:88)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967279: __strcasecmp_l_ssse3 (strcmp.S:213)
==14381==    by 0x47FB82: NewInputDeviceRequest (xf86Xinput.c:875)
==14381==    by 0x51FD56: device_added (udev.c:194)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1d500 is 0 bytes inside a block of size 5 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x51F8E6: add_option (config.c:136)
==14381==    by 0x51FBB7: device_added (udev.c:124)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid read of size 8
==14381==    at 0x6967279: __strcasecmp_l_ssse3 (strcmp.S:213)
==14381==    by 0x47FB95: NewInputDeviceRequest (xf86Xinput.c:876)
==14381==    by 0x51FD56: device_added (udev.c:194)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381==  Address 0x12b1d600 is 0 bytes inside a block of size 5 alloc'd
==14381==    at 0x4C264E8: malloc (vg_replace_malloc.c:236)
==14381==    by 0x68B93E1: strdup (strdup.c:43)
==14381==    by 0x51F8E6: add_option (config.c:136)
==14381==    by 0x51FBCB: device_added (udev.c:126)
==14381==    by 0x52040D: config_udev_init (udev.c:299)
==14381==    by 0x51F718: config_init (config.c:39)
==14381==    by 0x472424: InitInput (xf86Init.c:823)
==14381==    by 0x4257A5: main (main.c:259)
==14381== 
==14381== Invalid write of size 1
==14381==    at 0x4C28044: memcpy (mc_replace_strmem.c:497)
==14381==    by 0x95ABDB0: shadowUpdatePacked (shpacked.c:105)
==14381==    by 0x95AB43E: shadowRedisplay (shadow.c:61)
==14381==    by 0x43571C: BlockHandler (dixutils.c:389)
==14381==    by 0x45DCD9: WaitForSomething (WaitFor.c:219)
==14381==    by 0x4314B1: Dispatch (dispatch.c:367)
==14381==    by 0x4257DD: main (main.c:287)
==14381==  Address 0xa07b000 is not stack'd, malloc'd or (recently) free'd
==14381== 
==14381== Invalid write of size 1
==14381==    at 0x4C2804C: memcpy (mc_replace_strmem.c:497)
==14381==    by 0x95ABDB0: shadowUpdatePacked (shpacked.c:105)
==14381==    by 0x95AB43E: shadowRedisplay (shadow.c:61)
==14381==    by 0x43571C: BlockHandler (dixutils.c:389)
==14381==    by 0x45DCD9: WaitForSomething (WaitFor.c:219)
==14381==    by 0x4314B1: Dispatch (dispatch.c:367)
==14381==    by 0x4257DD: main (main.c:287)
==14381==  Address 0xa07b001 is not stack'd, malloc'd or (recently) free'd
==14381== 
==14381== Invalid write of size 1
==14381==    at 0x4C28055: memcpy (mc_replace_strmem.c:497)
==14381==    by 0x95ABDB0: shadowUpdatePacked (shpacked.c:105)
==14381==    by 0x95AB43E: shadowRedisplay (shadow.c:61)
==14381==    by 0x43571C: BlockHandler (dixutils.c:389)
==14381==    by 0x45DCD9: WaitForSomething (WaitFor.c:219)
==14381==    by 0x4314B1: Dispatch (dispatch.c:367)
==14381==    by 0x4257DD: main (main.c:287)
==14381==  Address 0xa07b002 is not stack'd, malloc'd or (recently) free'd
==14381== 
==14381== Invalid write of size 1
==14381==    at 0x4C2805E: memcpy (mc_replace_strmem.c:497)
==14381==    by 0x95ABDB0: shadowUpdatePacked (shpacked.c:105)
==14381==    by 0x95AB43E: shadowRedisplay (shadow.c:61)
==14381==    by 0x43571C: BlockHandler (dixutils.c:389)
==14381==    by 0x45DCD9: WaitForSomething (WaitFor.c:219)
==14381==    by 0x4314B1: Dispatch (dispatch.c:367)
==14381==    by 0x4257DD: main (main.c:287)
==14381==  Address 0xa07b003 is not stack'd, malloc'd or (recently) free'd
==14381== 
findSb: can't find pointer 0x115AB1F0 in arena 'client'

valgrind: the 'impossible' happened:
   findSb: VG_(arena_free)() in wrong arena?
==14381==    at 0x3802B0A7: report_and_quit (m_libcassert.c:191)
==14381==    by 0x3802B10E: panic (m_libcassert.c:275)
==14381==    by 0x3802B168: vgPlain_core_panic_at (m_libcassert.c:280)
==14381==    by 0x3802B17A: vgPlain_core_panic (m_libcassert.c:285)
==14381==    by 0x380379C2: vgPlain_arena_free (m_mallocfree.c:731)
==14381==    by 0x38001DE9: die_and_free_mem (mc_malloc_wrappers.c:123)
==14381==    by 0x380662C1: vgPlain_scheduler (scheduler.c:1394)
==14381==    by 0x3808F194: run_a_thread_NORETURN (syswrap-linux.c:94)

sched status:
  running_tid=1

Thread 1: status = VgTs_Runnable
==14381==    at 0x4C260FD: free (vg_replace_malloc.c:366)
==14381==    by 0x8F812CA: ??? (in /usr/lib/xorg/modules/drivers/fbdev_drv.so)
==14381==    by 0x4A9BBA: CursorCloseScreen (cursor.c:191)
==14381==    by 0x5695CB: AnimCurCloseScreen (animcur.c:106)
==14381==    by 0x425896: main (main.c:320)


Note: see also the FAQ in the source distribution.
It contains workarounds to several common problems.
In particular, if Valgrind aborted or crashed after
identifying problems in your program, there's a good chance
that fixing those problems will prevent Valgrind aborting or
crashing, especially if it happened in m_mallocfree.c.

If that doesn't help, please report this bug to: www.valgrind.org

In the bug report, send all the above text, the valgrind
version, and what OS and version you are using.  Thanks.



Attachment: signature.asc
Description: Digital signature


Reply to: