Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 230612 - net-misc/tightvnc-1.3.9-r1: Server crashes with double free or corruption
Summary: net-misc/tightvnc-1.3.9-r1: Server crashes with double free or corruption
Status: RESOLVED TEST-REQUEST
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Raúl Porcel (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-07-03 09:59 UTC by Mark Bowman
Modified: 2011-07-26 18:26 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge.info.txt,3.26 KB, text/plain)
2008-07-03 10:07 UTC, Mark Bowman
Details
Installed software versions (installed apps.txt,29.05 KB, text/plain)
2008-07-03 10:14 UTC, Mark Bowman
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Bowman 2008-07-03 09:59:46 UTC
The server crashes after a few minutes of use with 
*** glibc detected *** Xvnc: double free or corruption (!prev): 0x082e9aa0 ***

Reproducible: Always

Steps to Reproduce:
1. /etc/init.d/vnc start
2. connect from client using UltraVNC Win32 viewer 1.0.1
3. open editor and manipulate text
Comment 1 Mark Bowman 2008-07-03 10:02:20 UTC
*** glibc detected *** Xvnc: double free or corruption (!prev): 0x082e9aa0 ***
======= Backtrace: =========
/lib/libc.so.6[0xb7e5a3c4]
/lib/libc.so.6(cfree+0x9c)[0xb7e5bd2c]
Xvnc(cfb32DestroyPixmap+0x1e)[0x812a0ce]
Xvnc(FreeResource+0xfb)[0x806610b]
Xvnc(ProcFreePixmap+0x52)[0x80787f2]
Xvnc(Dispatch+0x145)[0x807d335]
Xvnc(main+0x7c6)[0x8065536]
/lib/libc.so.6(__libc_start_main+0xe5)[0xb7e05635]
Xvnc[0x8064a31]
======= Memory map: ========
08048000-0818a000 r-xp 00000000 08:01 4631445    /usr/bin/Xvnc
0818a000-0818b000 r--p 00141000 08:01 4631445    /usr/bin/Xvnc
0818b000-08192000 rw-p 00142000 08:01 4631445    /usr/bin/Xvnc
08192000-08446000 rw-p 08192000 00:00 0          [heap]
b7500000-b7521000 rw-p b7500000 00:00 0
b7521000-b7600000 ---p b7521000 00:00 0
b7697000-b76f7000 rw-s 00000000 00:08 2621445    /SYSV00000000 (deleted)
b777b000-b7860000 rw-p b777b000 00:00 0
b7860000-b7869000 r-xp 00000000 08:01 4328528    /lib/libnss_files-2.8.so
b7869000-b786a000 r--p 00008000 08:01 4328528    /lib/libnss_files-2.8.so
b786a000-b786b000 rw-p 00009000 08:01 4328528    /lib/libnss_files-2.8.so
b786b000-b7873000 r-xp 00000000 08:01 4328362    /lib/libnss_nis-2.8.so
b7873000-b7874000 r--p 00007000 08:01 4328362    /lib/libnss_nis-2.8.so
b7874000-b7875000 rw-p 00008000 08:01 4328362    /lib/libnss_nis-2.8.so
b7875000-b7888000 r-xp 00000000 08:01 4328361    /lib/libnsl-2.8.so
b7888000-b7889000 r--p 00012000 08:01 4328361    /lib/libnsl-2.8.so
b7889000-b788a000 rw-p 00013000 08:01 4328361    /lib/libnsl-2.8.so
b788a000-b788c000 rw-p b788a000 00:00 0
b788c000-b7893000 r-xp 00000000 08:01 4328003    /lib/libnss_compat-2.8.so
b7893000-b7894000 r--p 00006000 08:01 4328003    /lib/libnss_compat-2.8.so
b7894000-b7895000 rw-p 00007000 08:01 4328003    /lib/libnss_compat-2.8.so
b7895000-b7def000 rw-p b7895000 00:00 0
b7def000-b7f29000 r-xp 00000000 08:01 4327951    /lib/libc-2.8.so
b7f29000-b7f2b000 r--p 0013a000 08:01 4327951    /lib/libc-2.8.so
b7f2b000-b7f2c000 rw-p 0013c000 08:01 4327951    /lib/libc-2.8.so
b7f2c000-b7f2f000 rw-p b7f2c000 00:00 0
b7f2f000-b7f38000 r-xp 00000000 08:01 4328491    /lib/libcrypt-2.8.so
b7f38000-b7f39000 r--p 00008000 08:01 4328491    /lib/libcrypt-2.8.so
b7f39000-b7f3a000 rw-p 00009000 08:01 4328491    /lib/libcrypt-2.8.so
b7f3a000-b7f61000 rw-p b7f3a000 00:00 0
b7f61000-b7f7f000 r-xp 00000000 08:01 326720     /usr/lib/libjpeg.so.62.0.0
b7f7f000-b7f80000 r--p 0001e000 08:01 326720     /usr/lib/libjpeg.so.62.0.0
b7f80000-b7f81000 rw-p 0001f000 08:01 326720     /usr/lib/libjpeg.so.62.0.0
b7f81000-b7f83000 r-xp 00000000 08:01 4328355    /lib/libdl-2.8.so
b7f83000-b7f84000 r--p 00001000 08:01 4328355    /lib/libdl-2.8.so
b7f84000-b7f85000 rw-p 00002000 08:01 4328355    /lib/libdl-2.8.so
b7f85000-b7fa9000 r-xp 00000000 08:01 4328337    /lib/libm-2.8.so
b7fa9000-b7faa000 r--p 00023000 08:01 4328337    /lib/libm-2.8.so
b7faa000-b7fab000 rw-p 00024000 08:01 4328337    /lib/libm-2.8.so
b7fab000-b7fbd000 r-xp 00000000 08:01 4086740    /lib/libz.so.1.2.3
b7fbd000-b7fbe000 r--p 00011000 08:01 4086740    /lib/libz.so.1.2.3
b7fbe000-b7fbf000 rw-p 00012000 08:01 4086740    /lib/libz.so.1.2.3
b7fbf000-b7fc0000 rw-p b7fbf000 00:00 0
b7fc0000-b7fcc000 r-xp 00000000 08:01 4307758    /usr/lib/gcc/i686-pc-linux-gnu/4.3.1/libgcc_s.so.1
b7fcc000-b7fcd000 r--p 0000b000 08:01 4307758    /usr/lib/gcc/i686-pc-linux-gnu/4.3.1/libgcc_s.so.1
b7fcd000-b7fce000 rw-p 0000c000 08:01 4307758    /usr/lib/gcc/i686-pc-linux-gnu/4.3.1/libgcc_s.so.1
b7fce000-b7fd1000 rw-s 00000000 00:08 2654214    /SYSV00000000 (deleted)
b7fd1000-b7fec000 r-xp 00000000 08:01 4328513    /lib/ld-2.8.so
b7fec000-b7fed000 r--p 0001a000 08:01 4328513    /lib/ld-2.8.so
b7fed000-b7fee000 rw-p 0001b000 08:01 4328513    /lib/ld-2.8.so
bfdfa000-bfe0f000 rw-p bffeb000 00:00 0          [stack]
ffffe000-fffff000 r-xp 00000000 00:00 0          [vdso]
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2008-07-03 10:03:08 UTC
Please post your `emerge --info' too.
It would also help to describe what you're running in that VNC session (which GUI programs, desktop environment and so on).
You may also want to check http://www.gentoo.org/proj/en/qa/backtraces.xml to find out how to obtain a backtrace.
Comment 3 Mark Bowman 2008-07-03 10:07:00 UTC
Created attachment 159387 [details]
emerge --info
Comment 4 Mark Bowman 2008-07-03 10:14:42 UTC
Created attachment 159389 [details]
Installed software versions
Comment 5 Mark Bowman 2008-07-03 10:19:25 UTC
Thanks for jumping on this so fast Jeroen. 
My desktop environment on the console is KDE 3.5. I've made no changes to the vnc config beyond specifying three sessions and the geometry. The application that I am using when the crash occurs is eclipse 3.3.1.1 (specifically, the java editor). 
Comment 6 Raúl Porcel (RETIRED) gentoo-dev 2008-07-06 18:04:09 UTC
What happens if you use tightvnc's viewer?
Comment 7 Mark Bowman 2008-07-07 08:06:45 UTC
(In reply to comment #6)
Exactly the same behaviour.

Comment 8 Raúl Porcel (RETIRED) gentoo-dev 2009-04-18 17:39:17 UTC
What about tightvnc-1.3.10?
Comment 9 Ciprian Ciubotariu 2009-04-30 15:07:11 UTC
(In reply to comment #8)
> What about tightvnc-1.3.10?
> 

I have experienced the same behavior with the 1.3.10 server, though on Gentoo Hardened (pie,ssp etc).

Also note that sometimes I get this error, and other times

*** glibc detected *** ./a.out: munmap_chunk(): invalid pointer: 0xff9360a0 ***

I have no idea if they are related.

I use the tightvnc 1.3.9 client from a windows station, through ssh tunnel. The usage pattern is to open a few flash/animated gifs tabs in a konqueror (kde 3.5) and next close them, reopen etc.
Comment 10 Raúl Porcel (RETIRED) gentoo-dev 2011-07-26 18:26:36 UTC
Still happening? Reopen if so