Bug#547496: backtrace for another crash...
On Mon, 2009-09-28 at 16:58 +0200, Julien Cristau wrote:
Does this still happen with server 1.6.3.901? There's a
signal-related
fix in there, although it's kind of a long shot.
Yes, it does still happen after upgrade (last time ~ 5 minutes ago).
A gdb session is attached, with as much information as I could
reasonably gather without knowing anything about X internals.
Is there any other information that I could supply? Does anybody want
the core file?
Thomas
Core was generated by `/usr/bin/X -br -nolisten tcp :0 vt7 -auth
/var/run/xauth/A:0-Be6ZAT'.
Program terminated with signal 6, Aborted.
#0 0xe410 in __kernel_vsyscall ()
(gdb) bt full
#0 0xe410 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7bde3d0 in *__GI_raise (sig=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:64
resultvar = value optimized out
pid = -1211047948
selftid = 4461
#2 0xb7be1a85 in *__GI_abort () at abort.c:88
act = {__sigaction_handler = {sa_handler = 0x1, sa_sigaction = 0x1},
sa_mask = {__val = {3216826184,
3081377788, 136444272, 4, 3216826288, 3216826276, 3081361264,
3081380132, 3082956628, 3216826352,
3086272112, 134611646, 3216826200, 0, 0, 136690792, 136273568,
3083923808, 1, 136222616, 3216826216,
135484561, 136255000, 3083923808, 3216826264, 156887200,
3082938977, 136255352, 16, 3216826344,
3216826296, 21505}}, sa_flags = -1212030607, sa_restorer =
0x81f1618}
sigs = {__val = {32, 0 repeats 31 times}}
#3 0x080ad535 in ddxGiveUp () at ../../../../hw/xfree86/common/xf86Init.c:1417
i = value optimized out
#4 0x0813b80d in AbortServer () at ../../os/log.c:397
No locals.
#5 0x0813be0e in FatalError (f=0x81c94f0 Caught signal %d. Server
aborting\n) at ../../os/log.c:522
beenhere = 1
#6 0x080c1e13 in xf86SigHandler (signo=11) at
../../../../hw/xfree86/common/xf86Events.c:387
No locals.
#7 signal handler called
No symbol table info available.
#8 0x080b7945 in xf86SIGIO (sig=29) at
../../../../../hw/xfree86/os-support/linux/../shared/sigio.c:110
i = value optimized out
ready = {fds_bits = {3072, -1078139880, 135537224, 154986920, 64,
-1078139976, 135484561, 154108840,
136177084, -1078139912, -1211047948, -1211043488, 154981320,
-1078139928, -1212008298, -1211043488,
154981320, 154981312, 136177084, 154981320, 136675704, -1078139912,
135484561, 154981320, 136177084,
-1078139880, 135761828, 154981320, 136242664, 136510104, 136177084,
144530640}}
to = {tv_sec = 0, tv_usec = 0}
save_errno = 0
r = -1
#9 signal handler called
No symbol table info available.
#10
Bug#547496: backtrace for another crash...
severity 547496 important
kthxbye
This doesn't seem to be extremely common, so downgrading.
On Sun, Sep 20, 2009 at 21:21:44 +0200, Thomas Koenig wrote:
Here's a backtrace from another crash, obtained as described on
http://wiki.debian.org/XStrikeForce/XserverDebugging from
a core file.
#0 0xe410 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7b9d3d0 in raise () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7ba0a85 in abort () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#3 0x080ad3a5 in ddxGiveUp ()
at ../../../../hw/xfree86/common/xf86Init.c:1417
i = value optimized out
#4 0x0813b5fd in AbortServer () at ../../os/log.c:397
No locals.
#5 0x0813bbfe in FatalError (f=0x81c9150 Caught signal %d. Server
aborting\n)
at ../../os/log.c:522
beenhere = 1
#6 0x080c1c73 in xf86SigHandler (signo=11)
at ../../../../hw/xfree86/common/xf86Events.c:387
No locals.
#7 signal handler called
No symbol table info available.
#8 0x080b77b5 in xf86SIGIO (sig=29)
at ../../../../../hw/xfree86/os-support/linux/../shared/sigio.c:110
i = value optimized out
ready = {fds_bits = {3072, -65536, 0, 0, 65535, 0, -65536,
16711935, 16711935,
8454143, 8388736, -65408, 0, 0, 16777215, 16711935, -65281,
16416, 1075839871,
0, 0, 0, 0, 0, 8064, 0, -2102793, 0, 65535, 0, -1209998559,
0}}
to = {tv_sec = 0, tv_usec = 0}
save_errno = 0
r = -1
#9 signal handler called
hw/xfree86/os-support/linux/../shared/sigio.c:110 seems to be:
SYSCALL (r = select (xf86SigIOMaxFd, ready, 0, 0, to));
where SYSCALL() is defined as:
#define SYSCALL(call) while(((call) == -1) (errno == EINTR))
No idea how this would segfault...
Does this still happen with server 1.6.3.901? There's a signal-related
fix in there, although it's kind of a long shot.
Cheers,
Julien
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#547496: backtrace for another crash...
On Mon, 2009-09-28 at 16:58 +0200, Julien Cristau wrote:
hw/xfree86/os-support/linux/../shared/sigio.c:110 seems to be:
SYSCALL (r = select (xf86SigIOMaxFd, ready, 0, 0, to));
where SYSCALL() is defined as:
#define SYSCALL(call) while(((call) == -1) (errno == EINTR))
No idea how this would segfault...
The way I read the backtrace:
#8 0x080b77b5 in xf86SIGIO (sig=29)
at ../../../../../hw/xfree86/os-support/linux/../shared/sigio.c:110
i = value optimized out
ready = {fds_bits = {3072, -65536, 0, 0, 65535, 0, -65536,
16711935, 16711935,
8454143, 8388736, -65408, 0, 0, 16777215, 16711935, -65281,
16416, 1075839871,
0, 0, 0, 0, 0, 8064, 0, -2102793, 0, 65535, 0, -1209998559,
0}}
to = {tv_sec = 0, tv_usec = 0}
save_errno = 0
r = -1
#9 signal handler called
No symbol table info available.
#10 0xb7bea5fd in memmove () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#11 0x08133682 in FlushClient (who=0x8b18ec8, oc=0x8b18e58,
__extraBuf=0x868fba8,
extraCount=51876) at ../../os/io.c:959
before = value optimized out
remain = value optimized out
i = value optimized out
len = value optimized out
memmove segfaults due to invalid arguments, the signal handler just gets
called afterwards.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#547496: backtrace for another crash...
Here's a backtrace from another crash, obtained as described on
http://wiki.debian.org/XStrikeForce/XserverDebugging from
a core file.
#0 0xe410 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7b9d3d0 in raise () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7ba0a85 in abort () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#3 0x080ad3a5 in ddxGiveUp ()
at ../../../../hw/xfree86/common/xf86Init.c:1417
i = value optimized out
#4 0x0813b5fd in AbortServer () at ../../os/log.c:397
No locals.
#5 0x0813bbfe in FatalError (f=0x81c9150 Caught signal %d. Server
aborting\n)
at ../../os/log.c:522
beenhere = 1
#6 0x080c1c73 in xf86SigHandler (signo=11)
at ../../../../hw/xfree86/common/xf86Events.c:387
No locals.
#7 signal handler called
No symbol table info available.
#8 0x080b77b5 in xf86SIGIO (sig=29)
at ../../../../../hw/xfree86/os-support/linux/../shared/sigio.c:110
i = value optimized out
ready = {fds_bits = {3072, -65536, 0, 0, 65535, 0, -65536,
16711935, 16711935,
8454143, 8388736, -65408, 0, 0, 16777215, 16711935, -65281,
16416, 1075839871,
0, 0, 0, 0, 0, 8064, 0, -2102793, 0, 65535, 0, -1209998559,
0}}
to = {tv_sec = 0, tv_usec = 0}
save_errno = 0
r = -1
#9 signal handler called
No symbol table info available.
#10 0xb7bea5fd in memmove () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#11 0x08133682 in FlushClient (who=0x8b18ec8, oc=0x8b18e58,
__extraBuf=0x868fba8,
extraCount=51876) at ../../os/io.c:959
before = value optimized out
remain = value optimized out
i = value optimized out
len = value optimized out
oco = 0x9b6c538
connection = value optimized out
trans_conn = 0x8b18e08
iov = {{iov_base = 0x869b968, iov_len = 3300}, {iov_base =
0x868fba8,
iov_len = 64452}, {iov_base = 0x2b0, iov_len = 136510440}}
written = 48576
padsize = 0
notWritten = 3300
todo = 3300
padBuffer = \0\0
#12 0x08133b58 in WriteToClient (who=0x8b18ec8, count=51876,
__buf=0x868fba8)
at ../../os/io.c:821
oc = 0x8b18e58
oco = value optimized out
padBytes = 0
#13 0x0808a6ef in DoGetImage (client=0x8b18ec8)
at ../../dix/dispatch.c:2063
pDraw = 0x9c31790
linesPerBuf = 41
linesDone = 41
plane = 0
pBuf = 0x868fba8 '\17' repeats 200 times...
xgi = {type = 1 '\1', depth = 32 ' ', sequenceNumber = 29117,
length = 29082,
visual = 0, pad3 = 145854152, pad4 = 0, pad5 = 20, pad6 = 2,
pad7 = 145854152}
pVisibleRegion = 0x0
nlines = 33
rc = value optimized out
length = 1572
#14 ProcGetImage (client=0x8b18ec8) at ../../dix/dispatch.c:2128
No locals.
#15 0x0808c79f in Dispatch () at ../../dix/dispatch.c:437
result = value optimized out
client = 0x8b18ec8
nready = 0
start_tick = 2160
#16 0x08071ada in main (argc=8, argv=0xbf96fec4, envp=Cannot access
memory at address 0x22b
) at ../../dix/main.c:397
i = value optimized out
alwaysCheckForInput = {0, 1}
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
