Bug 358325 – x11-libs/cairo-1.10 causes crashes on chromium and firefox on PowerPC

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Andrew John Hughes 2011-03-11 00:02:08 UTC]

*** glibc detected *** /usr/bin/firefox: malloc(): smallbin double linked list corrupted: 0x10cef480 ***
======= Backtrace: =========
/lib/libc.so.6(+0x826b4)[0xfd4a6b4]
/lib/libc.so.6(+0x8587c)[0xfd4d87c]
/lib/libc.so.6(__libc_malloc+0x88)[0xfd4f718]
/usr/lib/libglib-2.0.so.0(g_malloc+0x58)[0xdf98ee8]
/usr/lib/libglib-2.0.so.0(g_slice_alloc+0x588)[0xdfb7098]
/usr/lib/libglib-2.0.so.0(g_datalist_id_set_data_full+0x120)[0xdf6c570]
/usr/lib/libgobject-2.0.so.0(g_object_set_qdata_full+0xbc)[0xe0ba90c]
/usr/lib/xulrunner-1.9.2/libxul.so(_ZN17gfxPangoFontGroup24CreateGlyphRunsItemizingEP10gfxTextRunPKcjj+0x8c)[0xf658404]
/usr/lib/xulrunner-1.9.2/libxul.so(_ZN17gfxPangoFontGroup11InitTextRunEP10gfxTextRunPKcjji+0x80)[0xf6598e4]
/usr/lib/xulrunner-1.9.2/libxul.so(_ZN17gfxPangoFontGroup11MakeTextRunEPKtjPKN17gfxTextRunFactory10ParametersEj+0x100)[0xf659af0]
/usr/lib/xulrunner-1.9.2/libxul.so(+0xc86788)[0xf653788]
/usr/lib/xulrunner-1.9.2/libxul.so(_ZN15gfxTextRunCache11MakeTextRunEPKtjP12gfxFontGroupP10gfxContextjj+0x80)[0xf651ab8]



Reproducible: Always




Portage 2.2.0_alpha26 (default/linux/powerpc/ppc64/10.0/32bit-userland/desktop, gcc-4.5.2, glibc-2.13-r1, 2.6.37.2.omega ppc64)
=================================================================
System uname: Linux-2.6.37.2.omega-ppc64-PPC970MP,_altivec_supported-with-gentoo-2.0.1
Timestamp of tree: Thu, 10 Mar 2011 02:45:01 +0000
ccache version 3.1.4 [enabled]
app-shells/bash:     4.2_p7
dev-java/java-config: 2.1.11-r3
dev-lang/python:     2.7.1-r1, 3.1.3-r1
dev-util/ccache:     3.1.4
dev-util/cmake:      2.8.4
sys-apps/baselayout: 2.0.1-r1
sys-apps/openrc:     0.7.0
sys-apps/sandbox:    2.5
sys-devel/autoconf:  2.13, 2.68
sys-devel/automake:  1.6.3, 1.8.5-r3, 1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:  2.21
sys-devel/gcc:       4.4.4-r2, 4.5.2
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.4-r1
sys-devel/make:      3.82
virtual/os-headers:  2.6.36.1 (sys-kernel/linux-headers)
Repositories: gentoo kde-sunset java-overlay ppc64 xmmsroot2_overlay fixes-overlay
Installed sets: @system
ACCEPT_KEYWORDS="ppc ~ppc"
ACCEPT_LICENSE="@FSF-APPROVED-EXT @X11-LICENSES @PRESUMED-FOSS @CREATIVE-COMMONS adobe-ps freedist"
CBUILD="powerpc-unknown-linux-gnu"
CFLAGS="-O2 -mtune=G5 -mcpu=G5 -mabi=altivec -pipe -ggdb"
CHOST="powerpc-unknown-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -mtune=G5 -mcpu=G5 -mabi=altivec -pipe -ggdb"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests binpkg-logs ccache distlocks fixlafiles fixpackages installsources news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
FFLAGS=""
GENTOO_MIRRORS="http://mirror.bytemark.co.uk/gentoo/ http://mirror.qubenet.net/mirror/gentoo/ http://www.mirrorservice.org/sites/www.ibiblio.org/gentoo/ http://gentoo.virginmedia.com/"
LANG="en_GB.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en_GB en"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/64ul/usr/portage"
PORTDIR_OVERLAY="/var/lib/layman/kde-sunset /var/lib/layman/java-overlay /usr/local/portage/ppc64 /usr/local/portage/xmmsroot2_overlay /usr/local/portage/fixes-overlay"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="X a52 aac acl addbookmarks alias alsa altivec asf autoreplace avahi bash-completion berkdb bindist bluetooth branding bzip2 cairo caps cdaudio cdda cddb cdparanoia cdr cli connectionstatus consolekit contactnotes cracklib crypt cups curl cvs cxx daap dbus dga dia dirac djvu doc dri dts dv dvd dvdnav dvdr dvdread dvi eds effects emacs emboss emf encode evo examples exif fam fame ffmpeg fftw firefox flac fontconfig fortran fping gcc64 gcj gd gdbm gdu gif gimp git gmp gnome gnome-keyring gnutls gpac gpgme gphoto2 gpm gstreamer gtk hal hfs highlight history iconv id3tag idn ieee1394 imagemagick imap imlib ipv6 irc jack java java5 javascript jingle jpeg jpeg2k kde kerberos ladspa lame lapack latex lcms libnotify live lzma lzo mad matroska mbox mikmod mjpeg mmap mng modules mp2 mp3 mp4 mpeg mpi mplayer mudflap musepack musicbrainz ncurses netmeeting network nls nntp nowlistening nptl nptlonly nsplugin ogg openal openexr opengl openmp optimisememory oss pam pango pch pcre pdf perl pidgin plotutils png pnm policykit pop postscript ppc ppds pppd pulseaudio python qt3 qt3support qt4 quicktime readline rtc sasl scanner sdl semantic-desktop session shout slp smime smp sms smtp snmp sox speex spell sqlite ssl startup-notification statistics stream subtitles subversion svg sysfs syslog t1lib tcpd tetex texteffect tga theora threads tiff translator truetype twolame udev unicode urandom usb v4l2 vcd visualization vorbis vram webkit webpresence wifi wmf xattr xcb xchattext xcomposite xine xinerama xml xmmsroot2 xorg xscreensaver xulrunner xv xvid yahoo zeroconf zlib" ALSA_CARDS="aoa aoa-fabric-layout aoa-onyx aoa-soundbus aoa-soundbus-i2s aoa-tas aoa-toonie powermac usb-audio via82xx" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en_GB en" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="nv nouveau fbdev" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Andrew John Hughes 2011-03-11 00:02:47 UTC]

Created attachment 265515 [details]
Backtrace from the crash

[Comment 2 Jorge Manuel B. S. Vicetto (RETIRED) 2011-03-14 15:53:25 UTC]

@ppc, @ppc64:

I'm sorry but I don't know to which of you this applies.

[Comment 3 Jory A. Pratt 2011-03-14 16:07:24 UTC]

If you can still reproduce with ccache disabled please feel free to reopen.

[Comment 4 Joe Jezak (RETIRED) 2011-03-14 23:19:52 UTC]

It happens on my machines as well, both ppc32 and ppc64. I think it's a Cairo issue and doesn't appear to be a problem with Mozilla, since it breaks other gtk applications. I'll bisect once I get my new processors for my ppc64 machine.

[Comment 5 Joe Jezak (RETIRED) 2011-03-24 03:54:25 UTC]

Okay I've confirmed that the current git version does not crash.

Master branch, commit: 90156f6ab7b94e9e576e34f6a2d8cb809242f8d0

I'll try to bisect and figure out if we can back port the patch.

[Comment 6 Pacho Ramos 2011-04-03 11:56:31 UTC]

(In reply to comment #5)
> Okay I've confirmed that the current git version does not crash.
> 
> Master branch, commit: 90156f6ab7b94e9e576e34f6a2d8cb809242f8d0
> 
> I'll try to bisect and figure out if we can back port the patch.

cairo problem then?

[Comment 7 Joe Jezak (RETIRED) 2011-04-04 06:18:36 UTC]

Yeah, I think so. I bisected it, but the resulting patch isn't the solution. I'm still looking into it.

[Comment 8 Pacho Ramos 2011-04-04 08:06:46 UTC]

*** Bug 358327 has been marked as a duplicate of this bug. ***

[Comment 9 Jory A. Pratt 2011-05-28 02:22:24 UTC]

*** Bug 368767 has been marked as a duplicate of this bug. ***

[Comment 10 Joe Jezak (RETIRED) 2011-10-04 00:27:28 UTC]

For what it's worth, the git version works fine with no crashes. Any chance of you guys prodding the Cairo developers to release a new version? The git bisect didn't come to any reasonable conclusion.

[Comment 11 Jory A. Pratt 2011-12-12 16:47:47 UTC]

ppc herd needs an updated snapshot for cairo, nothing mozilla team needs to do here.

[Comment 12 Jory A. Pratt 2012-02-05 17:38:46 UTC]

Please test if you find it resolves problem maybe we can get x11 team to include in tree.

[Comment 13 Ben de Groot (RETIRED) 2012-07-24 14:23:12 UTC]

Please test with cairo-1.12.2, which should be unmasked later this week.

[Comment 14 Joe Jezak (RETIRED) 2012-09-09 16:03:34 UTC]

This no longer causes crashes, but I've got a new issue where text is displayed with inverted colors in gtk+ applications (which effects the same group of applications in this bug). I'm working on tracking this down, but all I can say is that it looks like it's not in Pango, but at a different level. In any case, this specific bug is fixed!