Bug#757982: xserver segmentation fault
Dnia 9 września 2014 5:13 Michel Dänzer <michel@daenzer.net> napisał(a):
> On 08.09.2014 20:32, repron wrote:
> > > Last several freezes of Xorg, coused that Xorg.o.log file ended suddenly,> without SIGSEGV.
> > I am still trying to reproduce exactly the same state of "freeze" as> mentioned in the bug.
> > Of course it can be a bug in kernel or somewhere else but if I had> uninstalled packages
> > xserver-xorg-video-radeon, xserver-xorg-video-iti
> > and installed in that place packages:
> > fglrx-modules-dkms and firmware-linux-nonfree
> > the error of "freezing" did not appeared.
> >
> (Note that the firmware-linux-nonfree package is required for the radeon
> driver, not for fglrx, but the information you've provided shows that it
> was installed)
>
>
> It seems like the crashes you're experiencing are more or less random
> and all over the place. I can think of two basic explanations for that:
> Either the GPU is scribbling over random system memory locations, or
> there is a problem with the RAM or some other hardware component in the
> system.
>
> You can test for the latter with the memtest86(+) or memtester package.
>
>
> --
> Earthling Michel Dänzer | http://www.amd.com
> Libre software enthusiast | Mesa and X developer
>
Thanks much for suggestions concerning memtest.
In both cases (radeon or fglrx) I had firmware-linux-nonfree
package installed.
The last freeze was coused by "SIGPIPE broken" and I was able
to get a full backtrace with gdb - enclosed here as a txt file: sigpipe_backtrace.txt.
Could you have a look at it and say somthing about it. ?
with regards,
richi
DEBUGGING INFORMATION from GDB after BACKTRACE of Xorg freezing
=================================================================
Program received signal SIGPIPE, Broken pipe.
0x00007fc9bd0368f0 in __libc_writev (fd=38, vector=vector@entry=0x7fff74842ec0, count=count@entry=1) at ../sysdeps/unix/sysv/linux/writev.c:54
54 ../sysdeps/unix/sysv/linux/writev.c: No such file or directory.
(gdb) bt full
#0 0x00007fc9bd0368f0 in __libc_writev (fd=38, vector=vector@entry=0x7fff74842ec0, count=count@entry=1) at ../sysdeps/unix/sysv/linux/writev.c:54
resultvar = 18446744073709551584
oldtype = 0
result = <optimized out>
#1 0x00007fc9bf405a9c in _XSERVTransSocketWritev (ciptr=0x7fc9c142dc00, buf=0x7fff74842ec0, size=<optimized out>) at /usr/include/X11/Xtrans/Xtranssock.c:2364
No locals.
#2 0x00007fc9bf400b7d in FlushClient (who=who@entry=0x7fc9c14203b0, oc=oc@entry=0x7fc9c1422d60, __extraBuf=__extraBuf@entry=0x7fff74843050,
extraCount=extraCount@entry=32) at ../../os/io.c:941
before = <optimized out>
remain = <optimized out>
i = <optimized out>
len = <optimized out>
oco = 0x7fc9c1698e80
connection = 38
trans_conn = 0x7fc9c142dc00
iov = {{iov_base = 0x7fff74843050, iov_len = 32}, {iov_base = 0x7fc9c0f93060, iov_len = 3243186256}, {iov_base = 0x7fc9c0f93060, iov_len = 140504502846800}}
padBuffer = "\000\000"
extraBuf = 0x7fff74843050 "W\002\257M\001"
written = 0
padsize = 0
notWritten = 32
todo = 32
#3 0x00007fc9bf40125e in WriteToClient (who=who@entry=0x7fc9c14203b0, count=count@entry=32, __buf=__buf@entry=0x7fff74843050) at ../../os/io.c:856
oc = 0x7fc9c1422d60
oco = 0x7fc9c1698e80
buf = <optimized out>
#4 0x00007fc9bf2aa142 in WriteEventsToClient (pClient=0x7fc9c14203b0, count=<optimized out>, count@entry=1, events=events@entry=0x7fff74843050)
at ../../dix/events.c:5992
eventCopy = {u = {u = {type = 16 '\020', detail = 49 '1', sequenceNumber = 29828}, keyButtonPointer = {pad00 = 1954820368, time = 32767, root = 3243884512,
event = 32713, child = 1954820112, rootX = 32767, rootY = 0, eventX = 5185, eventY = -17155, state = 0, sameScreen = 0 '\000', pad1 = 0 '\000'},
enterLeave = {pad00 = 1954820368, time = 32767, root = 3243884512, event = 32713, child = 1954820112, rootX = 32767, rootY = 0, eventX = 5185,
eventY = -17155, state = 0, mode = 0 '\000', flags = 0 '\000'}, focus = {pad00 = 1954820368, window = 32767, mode = 224 '\340', pad1 = 191 '\277',
pad2 = 89 'Y', pad3 = 193 '\301'}, expose = {pad00 = 1954820368, window = 32767, x = 49120, y = 49497, width = 32713, height = 0, count = 12304,
pad2 = 29828}, graphicsExposure = {pad00 = 1954820368, drawable = 32767, x = 49120, y = 49497, width = 32713, height = 0, minorEvent = 12304,
count = 29828, majorEvent = 255 '\377', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'}, noExposure = {pad00 = 1954820368, drawable = 32767,
minorEvent = 49120, majorEvent = 89 'Y', bpad = 193 '\301'}, visibility = {pad00 = 1954820368, window = 32767, state = 224 '\340', pad1 = 191 '\277',
pad2 = 89 'Y', pad3 = 193 '\301'}, createNotify = {pad00 = 1954820368, parent = 32767, window = 3243884512, x = 32713, y = 0, width = 12304,
height = 29828, borderWidth = 32767, override = 0 '\000', bpad = 0 '\000'}, destroyNotify = {pad00 = 1954820368, event = 32767, window = 3243884512},
unmapNotify = {pad00 = 1954820368, event = 32767, window = 3243884512, fromConfigure = 201 '\311', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'},
mapNotify = {pad00 = 1954820368, event = 32767, window = 3243884512, override = 201 '\311', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'},
mapRequest = {pad00 = 1954820368, parent = 32767, window = 3243884512}, reparent = {pad00 = 1954820368, event = 32767, window = 3243884512,
parent = 32713, x = 12304, y = 29828, override = 255 '\377', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'}, configureNotify = {
pad00 = 1954820368, event = 32767, window = 3243884512, aboveSibling = 32713, x = 12304, y = 29828, width = 32767, height = 0, borderWidth = 5185,
override = 253 '\375', bpad = 188 '\274'}, configureRequest = {pad00 = 1954820368, parent = 32767, window = 3243884512, sibling = 32713, x = 12304,
y = 29828, width = 32767, height = 0, borderWidth = 5185, valueMask = 48381, pad1 = 0}, gravity = {pad00 = 1954820368, event = 32767,
window = 3243884512, x = 32713, y = 0, pad1 = 1954820112, pad2 = 32767, pad3 = 3170702401, pad4 = 0}, resizeRequest = {pad00 = 1954820368,
window = 32767, width = 49120, height = 49497}, circulate = {pad00 = 1954820368, event = 32767, window = 3243884512, parent = 32713,
place = 16 '\020', pad1 = 48 '0', pad2 = 132 '\204', pad3 = 116 't'}, property = {pad00 = 1954820368, window = 32767, atom = 3243884512, time = 32713,
state = 16 '\020', pad1 = 48 '0', pad2 = 29828}, selectionClear = {pad00 = 1954820368, time = 32767, window = 3243884512, atom = 32713},
selectionRequest = {pad00 = 1954820368, time = 32767, owner = 3243884512, requestor = 32713, selection = 1954820112, target = 32767,
property = 3170702401}, selectionNotify = {pad00 = 1954820368, time = 32767, requestor = 3243884512, selection = 32713, target = 1954820112,
property = 32767}, colormap = {pad00 = 1954820368, window = 32767, colormap = 3243884512, new = 201 '\311', state = 127 '\177', pad1 = 0 '\000',
pad2 = 0 '\000'}, mappingNotify = {pad00 = 1954820368, request = 255 '\377', firstKeyCode = 127 '\177', count = 0 '\000', pad1 = 0 '\000'},
clientMessage = {pad00 = 1954820368, window = 32767, u = {l = {type = 3243884512, longs0 = 32713, longs1 = 1954820112, longs2 = 32767,
longs3 = -1124264895, longs4 = 0}, s = {type = 3243884512, shorts0 = 32713, shorts1 = 0, shorts2 = 12304, shorts3 = 29828, shorts4 = 32767,
shorts5 = 0, shorts6 = 5185, shorts7 = -17155, shorts8 = 0, shorts9 = 0}, b = {type = 3243884512,
bytes = "\311\177\000\000\020\060\204t\377\177\000\000A\024\375\274\000\000\000"}}}}}
eventTo = <optimized out>
eventFrom = <optimized out>
i = <optimized out>
eventlength = 32
#5 0x00007fc9bf334ec4 in XFixesSelectionCallback (callbacks=<optimized out>, data=<optimized out>, args=<optimized out>) at ../../xfixes/select.c:90
ev = {type = 87 'W', subtype = 2 '\002', sequenceNumber = 19887, window = 46137345, owner = 0, selection = 1, timestamp = 706695,
selectionTimestamp = 687200, pad2 = 0, pad3 = 0}
e = 0x7fc9c15b3380
info = <optimized out>
selection = 0x7fc9c14e9160
---Type <return> to continue, or q <return> to quit---
subtype = 2
eventMask = 4
#6 0x00007fc9bf2a4394 in _CallCallbacks (pcbl=pcbl@entry=0x7fc9bf69fba0 <SelectionCallback>, call_data=call_data@entry=0x7fff748430e0) at ../../dix/dixutils.c:718
cbl = 0x7fc9c12e1610
cbr = 0x7fc9c13146a0
pcbr = <optimized out>
#7 0x00007fc9bf2c3559 in CallCallbacks (call_data=0x7fff748430e0, pcbl=0x7fc9bf69fba0 <SelectionCallback>) at ../../include/callback.h:83
No locals.
#8 CallSelectionCallback (kind=SelectionClientClose, client=0x0, pSel=0x7fc9c14e9160) at ../../dix/selection.c:109
info = {selection = 0x7fc9c14e9160, client = 0x0, kind = SelectionClientClose}
#9 DeleteClientFromAnySelections (client=client@entry=0x7fc9c14203b0) at ../../dix/selection.c:134
pSel = 0x7fc9c14e9160
#10 0x00007fc9bf29e4b7 in CloseDownClient (client=client@entry=0x7fc9c14203b0) at ../../dix/dispatch.c:3331
really_close_down = 1
#11 0x00007fc9bf29ef3e in Dispatch () at ../../dix/dispatch.c:444
clientReady = 0x7fc9c12e2eb0
result = <optimized out>
client = 0x7fc9c14203b0
nready = 0
icheck = 0x7fc9bf699d70 <checkForInput>
start_tick = 1040
#12 0x00007fc9bf2a3096 in dix_main (argc=6, argv=0x7fff74843318, envp=<optimized out>) at ../../dix/main.c:296
i = <optimized out>
alwaysCheckForInput = {0, 1}
#13 0x00007fc9bcf79b45 in __libc_start_main (main=0x7fc9bf28d4e0 <main>, argc=6, argv=0x7fff74843318, init=<optimized out>, fini=<optimized out>,
rtld_fini=<optimized out>, stack_end=0x7fff74843308) at libc-start.c:287
result = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -3382902399662630999, 140504472278245, 140735148208912, 0, 0, 3383167835504826281, 3359401510238738345},
mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7fc9bf40e4e0 <__libc_csu_init>, 0x7fff74843318}, data = {prev = 0x0, cleanup = 0x0,
canceltype = -1086266144}}}
not_first_call = <optimized out>
#14 0x00007fc9bf28d50e in _start ()
No symbol table info available.
Reply to: