Bug 295415 – xorg-server-1.7* segfault

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Piotr Stachura 2009-12-02 10:33:45 UTC]

When I open an application that use drawing (confirmed on kicad and qucs) it is possible to segfault xorg server (ati radeon card). I found that "exa" extension makes problem.

Steps to reproduce:
1. install xorg-server-1.7* (tested on 1.7.1 and 1.7.2)
2. set: Option "AccelMethod" "exa" in xorg.conf
3. Start X server and kicad. Go to layout editor.
4. Try to zoom in / zoom out several times. For me X server always segfault.

Changing AccleMethod from exa to xaa solves problem. This problem wasn't present at xorg-server-1.6*.

Bug confirmed using radeon and radeonHD drivers.

Xorg log:

Backtrace:
0: /usr/bin/X (xorg_backtrace+0x2d) [0x44d491]
1: /usr/bin/X (0x400000+0x4927d) [0x44927d]
2: /lib/libpthread.so.0 (0x7fb87e453000+0xf010) [0x7fb87e462010]
3: /usr/lib64/xorg/modules/libfb.so (fbBltOne+0x3a7) [0x7fb87b532207]
4: /usr/lib64/xorg/modules/libfb.so (fbPushFill+0x157) [0x7fb87b537473]
5: /usr/lib64/xorg/modules/libfb.so (fbPushImage+0xe3) [0x7fb87b5375a9]
6: /usr/lib64/xorg/modules/libfb.so (fbPushPixels+0x6f) [0x7fb87b537640]
7: /usr/bin/X (miPolyArc+0x26a2) [0x4f02e1]
8: /usr/lib64/xorg/modules/libfb.so (fbPolyArc+0x20c) [0x7fb87b52904c]
9: /usr/lib64/xorg/modules/libexa.so (0x7fb87b310000+0xda43) [0x7fb87b31da43]
10: /usr/bin/X (0x400000+0xa0d33) [0x4a0d33]
11: /usr/bin/X (0x400000+0x3b41a) [0x43b41a]
12: /usr/bin/X (0x400000+0x3cd84) [0x43cd84]
13: /usr/bin/X (0x400000+0x251f3) [0x4251f3]
14: /lib/libc.so.6 (__libc_start_main+0xfd) [0x7fb87d0c1bbd]
15: /usr/bin/X (0x400000+0x24cc9) [0x424cc9]
Segmentation fault at address (nil)

Fatal server error:
Caught signal 11 (Segmentation fault). Server aborting


Emerge info:
Portage 2.2_rc54 (default/linux/amd64/10.0/desktop, gcc-4.4.2, glibc-2.11-r0, 2.6.31-tuxonice x86_64)
=================================================================                                    
System uname: Linux-2.6.31-tuxonice-x86_64-AMD_Turion-tm-_64_X2_Mobile_Technology_TL-60-with-gentoo-2.0.1
Timestamp of tree: Wed, 02 Dec 2009 06:45:01 +0000                                                       
ccache version 2.4 [enabled]                                                                             
app-shells/bash:     4.0_p35                                                                             
dev-java/java-config: 1.3.7-r1, 2.1.9-r1                                                                 
dev-lang/python:     2.4.6, 2.5.4-r3, 2.6.4, 3.1.1-r1                                                    
dev-python/pycrypto: 2.0.1-r8                                                                            
dev-util/ccache:     2.4-r8                                                                              
dev-util/cmake:      2.8.0                                                                               
sys-apps/baselayout: 2.0.1                                                                               
sys-apps/openrc:     0.5.2-r2                                                                            
sys-apps/sandbox:    2.2                                                                                 
sys-devel/autoconf:  2.13, 2.64                                                                          
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2, 1.11                      
sys-devel/binutils:  2.20                                                                                
sys-devel/gcc-config: 1.4.1                                                                              
sys-devel/libtool:   2.2.6b                                                                              
virtual/os-headers:  2.6.30-r1                                                                           
ABI="amd64"                                                                                              
ACCEPT_KEYWORDS="amd64 ~amd64"                                                                         
ACCEPT_LICENSE="* -@EULA PUEL IBM-J1.6 dlj-1.1"                                                        
ACCEPT_PROPERTIES="*"                                                                                  
ALLIANCE_TOP="/usr/local"                                                                              
ALSA_CARDS="hda-intel"                                                                                 
ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol"                                                                                                                                 
ANT_HOME="/usr/share/ant"                                                                                                                                    
APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias"                                                 
ARCH="amd64"                                                                                                                                                 
ASFLAGS_x86="--32"                                                                                                                                           
AUTOCLEAN="yes"                                                                                                                                              
CAMERAS="*"                                                                                                                                                  
CBUILD="x86_64-pc-linux-gnu"                                                                                                                                 
CCACHE_DIR="/var/tmp/ccache"                                                                                                                                 
CCACHE_SIZE="8G"                                                                                                                                             
CDEFINE_amd64="__x86_64__"                                                                                                                                   
CDEFINE_x86="__i386__"                                                                                                                                       
CDS_LIC_FILE="5280@soul"                                                                                                                                     
CDS_Netlisting_Mode="Analog"                                                                                                                                 
CDS_ROOT="/Cadence/IC610"                                                                                                                                    
CFLAGS="-march=k8 -Os -pipe -m3dnow"                                                                                                                         
CFLAGS_x86="-m32"                                                                                                                                            
CHOST="x86_64-pc-linux-gnu"                                                                                                                                  
CHOST_amd64="x86_64-pc-linux-gnu"                                                                                                                            
CHOST_x86="i686-pc-linux-gnu"                                                                                                                                
CLASSPATH="."                                                                                                                                                
CLEAN_DELAY="5"                                                                                                                                              
COLLISION_IGNORE="/usr/kde:/lib/modules"                                                                                                                     
COLORFGBG="15;0"                                                                                                                                             
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /var/lib/hsqldb"                  
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"                                                                                 
CVS_RSH="ssh"                                                                                                                                                
CXXFLAGS="-march=k8 -Os -pipe -m3dnow"                                                                        DEFAULT_ABI="amd64"                                                                                                                                          
DESKTOP_SESSION="KDE-4"                                                                                                                                      
DESKTOP_STARTUP_ID=""                                                                                                                                        
DISPLAY=":0.0"                                                                                                                                   
ELIBC="glibc"                                                                   FEATURES="assume-digests ccache distlocks fixpackages news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch"
INPUT_DEVICES="synaptics evdev"
KERNEL="linux"                                                                  LANG="pl_PL.UTF8"
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--warn-once"
LDFLAGS_x86="-m elf_i386"
LINGUAS="pl"                                                                    SETARCH_ARCH_x86="i686"                                                                                                                  
VIDEO_CARDS="radeonhd radeon"

[Comment 1 Conn Clark 2009-12-11 23:39:26 UTC]

I can confirm this bug using qucs on xorg-server-1.7.3

I use radeonhd .

[Comment 2 Roland Jax 2009-12-16 16:26:57 UTC]

I can confirm this bug with radeon.

X-Server crash if compiz-manager start. (gnome login)

With radeonhd it crashed also.

Backtrace:
0: /usr/bin/X (xorg_backtrace+0x3c) [0x80abb88]
1: /usr/bin/X (0x8048000+0x6240f) [0x80aa40f]
2: (vdso) (__kernel_rt_sigreturn+0x0) [0xb78aa40c]
3: /usr/lib/xorg/modules/drivers/radeon_drv.so (0xb70d3000+0x58039) [0xb712b039]
4: /usr/lib/xorg/modules/drivers/radeon_drv.so (0xb70d3000+0x58415) [0xb712b415]
5: /usr/lib/xorg/modules/libexa.so (0xb6f04000+0xbf7b) [0xb6f0ff7b]
6: /usr/lib/xorg/modules/libexa.so (0xb6f04000+0xcdc3) [0xb6f10dc3]
7: /usr/bin/X (0x8048000+0xa3adf) [0x80ebadf]
8: /usr/bin/X (CompositePicture+0x233) [0x80e5023]
9: /usr/bin/X (0x8048000+0x989ea) [0x80e09ea]
10: /usr/bin/X (0x8048000+0x95a06) [0x80dda06]
11: /usr/bin/X (0x8048000+0x44623) [0x808c623]
12: /usr/bin/X (0x8048000+0x1db9a) [0x8065b9a]
13: /lib/libc.so.6 (__libc_start_main+0xfe) [0xb736abee]
Segmentation fault at address (nil)

Fatal server error:
Caught signal 11 (Segmentation fault). Server aborting


mobile jaxrola # emerge --info
Portage 2.1.7.14 (default/linux/x86/10.0, gcc-4.4.2, glibc-2.11-r1, 2.6.31-gentoo-r6 i686)
=================================================================
System uname: Linux-2.6.31-gentoo-r6-i686-Intel-R-_Core-TM-2_CPU_T5500_@_1.66GHz-with-gentoo-2.0.1
Timestamp of tree: Tue, 15 Dec 2009 16:45:01 +0000
distcc 3.1 i686-pc-linux-gnu [enabled]
app-shells/bash:     4.0_p35
dev-java/java-config: 2.1.10
dev-lang/python:     2.6.4, 3.1.1-r1
dev-util/cmake:      2.8.0
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.5.3
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.13, 2.64
sys-devel/automake:  1.9.6-r2, 1.10.3, 1.11.1
sys-devel/binutils:  2.20
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
virtual/os-headers:  2.6.30-r1
ACCEPT_KEYWORDS="x86 ~x86"
ACCEPT_LICENSE="* -@EULA"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=prescott -O2 -ggdb -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo"
CXXFLAGS="-march=prescott -O2 -ggdb -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests distcc distlocks fixpackages news parallel-fetch protect-owned sandbox sfperms splitdebug strict unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.inode.at http://ftp.uni-erlangen.de/pub/mirrors/gentoo http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo"
LANG="de_AT.utf8"
LC_ALL="de_AT.utf8"
LDFLAGS="-Wl,-O1"
LINGUAS="de"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="X a52 aac accessibility acl acpi activefilter akonadi alsa ao applet atm audiofile autoipd avahi bash-completion berkdb bluetooth bzip2 cairo caps cdda cddb cdio cdparanoia cdr cdrkit chm cli connection-sharing consolekit cracklib crypt css cups cxx dbus deskbar device-mapper dhclient dhcp dhcpcd disk-partition dri dts dvd dvdr dvdread eap-tls embedded emerald emovix encode esd evo exif extra-tools extras fam fame fat fbcondecor ffmpeg firefox firefox3 flac fontconfig foomaticdb fortran fts3 fuse gd gdbm gedit gif gimp git glib glibc-compat20 glibc-omitfp glitz gmp gnome gnome-keyring gnome-print gnomecd gphoto2 gpm gs gsf gsm gstreamer gtk gtkhtml hal hfs hpcups iconv icu id3tag inotify iptc irda ithreads java java5 java6 javascript jpeg kdrive kerberos lame laptop lcms libnotify libsamplerate live lzma lzo mad matroska md5sum mdnsresponder-compat memoryview mjpeg mktemp mmap mmx mng modules mono moonlight motif mp2 mp3 mpeg mplayer mppe-mppc mtp mudflap musepack mysql nautilus ncurses network networkmanager nfs nls no-helper nptl nptlonly nsplugin ntfs ntp objc objc++ objc-gc ogg opengl openmp openssl oss pam passwordsave pccts pch pcre pdf perl pidgin png policykit pop pst pulseaudio python qt3 qt3support qt4 quicktime radius raw readline reflection rtsp rubrica samba sdl session skins smp sndfile snmp speex spell spl sqlite srt sse sse2 ssl ssse3 startup-notification stream subversion suid svg svga sysfs tcpd theora threads tiff totem truetype twolame udev unicode usb vidix vim-syntax visualization vlm vorbis wavpack webkit win32codecs wmf x264 x86 x86emu xcb xcomposite xface xine xmp xorg xprint xulrunner xv xvid xvmc zlib" ALSA_CARDS="intel8x0 usb-audio" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de" LIRC_DEVICES="sir" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="radeon radeonhd vesa" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 3 Alexander T 2009-12-26 01:51:00 UTC]

Created attachment 214180 [details, diff]
The patch by Michel Dänzer from Mandriva x11-driver-video-ati-6.12.4-3mdv2010.1.src.rpm package

I had the same problem and xf86-video-ati-6.12.4-exa-check-pictures.patch fixed things for me.

[Comment 4 Roland Jax 2009-12-26 18:50:09 UTC]

Thank you - This patch solved my radeon exa problem too.

[Comment 5 Piotr Stachura 2009-12-26 18:58:45 UTC]

But not mine. It seams that Your Roland bug isn't this same. In your backtrace You have radeon_drv.so. In mine there isn't. I applied that patch and updated xorg-server to xorg-server-1.7.3.901-r1. X still crashes but this time I'm not backing to console but display freazes. Backtrace is similar:

0: /usr/bin/X (xorg_backtrace+0x2d) [0x44d5c1]
1: /usr/bin/X (0x400000+0x493b5) [0x4493b5]
2: /lib/libpthread.so.0 (0x7f218df1e000+0xf010) [0x7f218df2d010]
3: /usr/lib64/xorg/modules/libfb.so (fbBltOne+0x3a7) [0x7f218b43c207]
4: /usr/lib64/xorg/modules/libfb.so (fbPushFill+0x157) [0x7f218b441487]
5: /usr/lib64/xorg/modules/libfb.so (fbPushImage+0xe3) [0x7f218b4415bd]
6: /usr/lib64/xorg/modules/libfb.so (fbPushPixels+0x6f) [0x7f218b441654]
7: /usr/bin/X (miPolyArc+0x26a2) [0x4f045c]
8: /usr/lib64/xorg/modules/libfb.so (fbPolyArc+0x20c) [0x7f218b43304c]
9: /usr/lib64/xorg/modules/libexa.so (0x7f218b21a000+0xd9d3) [0x7f218b2279d3]
10: /usr/bin/X (0x400000+0xa0e9f) [0x4a0e9f]
11: /usr/bin/X (0x400000+0x3b53e) [0x43b53e]
12: /usr/bin/X (0x400000+0x3cea8) [0x43cea8]
13: /usr/bin/X (0x400000+0x251f3) [0x4251f3]
14: /lib/libc.so.6 (__libc_start_main+0xfd) [0x7f218cb8cbbd]
15: /usr/bin/X (0x400000+0x24cc9) [0x424cc9]
Segmentation fault at address (nil)

Is there any way to get use of stripped debug info installed on machine? Xorg crash seams to not loading it...

[Comment 6 Roland Jax 2009-12-26 19:44:06 UTC]

Hi again!

In your backtrace i found "miPolyArc"

I searched "miPolyArc gentoo exa" with google and found this.

http://bugs.gentoo.org/266330

Maybe it will help too solve your problem.

[Comment 7 Tomáš Chvátal (RETIRED) 2010-03-15 23:18:23 UTC]

Fixed by 6.12.5.
Thanks for the patch anyway.