Ubuntu
xserver-xorg-input-synaptics package

Xorg crashed with SIGSEGV in XIGetDeviceProperty()

Bug #931344 reported by Daniel Holbach on 2012-02-13

This bug affects 3 people

Affects		Status	Importance	Assigned to	Milestone
	xserver-xorg-input-synaptics (Ubuntu)	Fix Released	Medium	Chase Douglas

Bug Description

If the device is turned off, usually by syndaemon to disable the touchpad while the typing, the touch state will not be updated with the latest hardware state changes. If a touch begins while the device is off and ends while the device is on, then the touch count will be decremented without any previous increment. A similar effect will occur if the device is on when the touch begins, but off when the touch ends.

If the touch count goes negative, the index into the touch slot mask array will be out of bounds. This can corrupt memory and cause random crashes.

Original bug report
===================

No idea what happened.

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: xserver-xorg-core 2:1.11.4-0ubuntu1
ProcVersionSignature: Ubuntu 3.2.0-15.24-generic 3.2.5
Uname: Linux 3.2.0-15-generic x86_64
.tmp.unity.support.test.0:

ApportVersion: 1.91-0ubuntu1
Architecture: amd64
CheckboxSubmission: 2f383a1679e8525d7196eb2518a1921f
CheckboxSystem: bb422ca46d02494cdbc459927a98bc2f
CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: compiz
Date: Mon Feb 13 11:29:44 2012
DistUpgraded: Log time: 2011-12-02 10:42:12.615728
DistroCodename: precise
DistroVariant: ubuntu
ExecutablePath: /usr/bin/Xorg
ExecutableTimestamp: 1328935414
ExtraDebuggingInterest: Yes, if not too technical
GraphicsCard:
Intel Corporation 2nd Generation Core Processor Family Integrated Graphics Controller [8086:0126] (rev 09) (prog-if 00 [VGA controller])
Subsystem: Lenovo Device [17aa:21da]
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Alpha amd64 (20110817)
MachineType: LENOVO 429149G
ProcCmdline: /usr/bin/X :0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch -background none
ProcCwd: /etc/X11
ProcEnviron:

ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.2.0-15-generic root=UUID=51ab960b-a2da-4841-98ce-c017f0582971 ro quiet splash vt.handoff=7
SegvAnalysis:
Segfault happened at: 0x7f2934a65b88 <XIChangeDeviceProperty+456>: mov 0x10(%r12),%rax
PC (0x7f2934a65b88) ok
source "0x10(%r12)" (0x7f2900000010) not located in a known VMA region (needed readable region)!
destination "%rax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
XIGetDeviceProperty ()
?? ()
?? ()
?? ()
?? ()
Title: Xorg crashed with SIGSEGV in XIGetDeviceProperty()
UpgradeStatus: Upgraded to precise on 2012-01-12 (31 days ago)
UserGroups:

dmi.bios.date: 05/18/2011
dmi.bios.vendor: LENOVO
dmi.bios.version: 8DET46WW (1.16 )
dmi.board.asset.tag: Not Available
dmi.board.name: 429149G
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr8DET46WW(1.16):bd05/18/2011:svnLENOVO:pn429149G:pvrThinkPadX220:rvnLENOVO:rn429149G:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 429149G
dmi.product.version: ThinkPad X220
dmi.sys.vendor: LENOVO
version.compiz: compiz 1:0.9.6+bzr20110929-0ubuntu8
version.ia32-libs: ia32-libs N/A
version.libdrm2: libdrm2 2.4.30-1ubuntu1
version.libgl1-mesa-dri: libgl1-mesa-dri 8.0~rc2-0ubuntu5
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 8.0~rc2-0ubuntu5
version.xserver-xorg-core: xserver-xorg-core 2:1.11.4-0ubuntu1
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.6.99.901-1ubuntu3
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:6.14.99~git20111219.aacbd629-0ubuntu2
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.17.0-1ubuntu3
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:0.0.16+git20111201+b5534a1-1build2

See original description

Tags:

Related branches

lp:ubuntu/precise/xserver-xorg-input-synaptics

Revision history for this message

Daniel Holbach (dholbach) wrote on 2012-02-13:

BootDmesg.txt Edit (68.3 KiB, text/plain; charset="utf-8")
BootLog.gz Edit (1.2 KiB, application/x-gzip)
CurrentDmesg.txt Edit (12.4 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (2.3 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (1.2 KiB, text/plain; charset="utf-8")
DpkgLog.txt Edit (1019.9 KiB, text/plain; charset="utf-8")
GconfCompiz.txt Edit (28.1 KiB, text/plain; charset="utf-8")
LightdmDisplayLog.txt Edit (1.1 KiB, text/plain; charset="utf-8")
LightdmGreeterLog.txt Edit (6.5 KiB, text/plain; charset="utf-8")
LightdmLog.txt Edit (11.5 KiB, text/plain; charset="utf-8")
Lspci.txt Edit (30.9 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (620 bytes, text/plain; charset="utf-8")
MonitorsUser.xml.txt Edit (1.2 KiB, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (3.5 KiB, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (2.6 KiB, text/plain; charset="utf-8")
ProcMaps.txt Edit (55.4 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (3.4 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (763 bytes, text/plain; charset="utf-8")
Registers.txt Edit (779 bytes, text/plain; charset="utf-8")
Stacktrace.txt Edit (1.6 KiB, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (1.6 KiB, text/plain; charset="utf-8")
UdevDb.txt Edit (136.0 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (316.6 KiB, text/plain; charset="utf-8")
UnitySupportTest.txt Edit (602 bytes, text/plain; charset="utf-8")
XorgLog.txt Edit (32.6 KiB, text/plain; charset="utf-8")
XorgLogOld.txt Edit (57.1 KiB, text/plain; charset="utf-8")
Xrandr.txt Edit (5.0 KiB, text/plain; charset="utf-8")
dmidecode.txt.txt Edit (14.7 KiB, text/plain; charset="utf-8")
locale.txt Edit (328 bytes, text/plain; charset="utf-8")
peripherals.txt Edit (513 bytes, text/plain; charset="utf-8")
setxkbmap.txt Edit (248 bytes, text/plain; charset="utf-8")
xdpyinfo.txt Edit (9.7 KiB, text/plain; charset="utf-8")
xinput.txt Edit (913 bytes, text/plain; charset="utf-8")
xkbcomp.txt Edit (58.9 KiB, text/plain; charset="utf-8")

Revision history for this message

Apport retracing service (apport) wrote on 2012-02-13:

StacktraceTop:
XIGetDeviceProperty (dev=0x7f29362796b0, property=<optimized out>, value=0x7fff3cfaf9b8) at ../../Xi/xiproperty.c:852
get_property (dev=<optimized out>, property=278, type=19, offset=<optimized out>, length=<optimized out>, bytes_after=0x7fff3cfafa88, type_return=0x7fff3cfafa8c, format=0x7fff3cfafa80, nitems=0x7fff3cfafa84, length_return=0x7fff3cfafa7c, data=0x7fff3cfafa70, delete=<optimized out>, client=<optimized out>) at ../../Xi/xiproperty.c:290
get_property (data=0x7fff3cfafa70, length_return=0x7fff3cfafa7c, nitems=0x7fff3cfafa84, format=0x7fff3cfafa80, type_return=0x7fff3cfafa8c, bytes_after=0x7fff3cfafa88, length=1, offset=0, delete=0 '\000', type=19, property=278, dev=0x7f29362796b0, client=<optimized out>) at ../../Xi/xiproperty.c:272
ProcXGetDeviceProperty (client=0x7f293629a600) at ../../Xi/xiproperty.c:991
Dispatch () at ../../dix/dispatch.c:439

Revision history for this message

Apport retracing service (apport) wrote on 2012-02-13: Stacktrace.txt

Stacktrace.txt Edit (4.0 KiB, text/plain)

Revision history for this message

Apport retracing service (apport) wrote on 2012-02-13: ThreadStacktrace.txt

ThreadStacktrace.txt Edit (4.1 KiB, text/plain)

Changed in xorg-server (Ubuntu):
importance:	Undecided → Medium
tags:	removed: need-amd64-retrace

Timo Aaltonen (tjaalton) on 2012-02-14

visibility:

private → public

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-02-14:

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in xorg-server (Ubuntu):
status:	New → Confirmed

Chase Douglas (chasedouglas) on 2012-02-14

Changed in xorg-server (Ubuntu):
assignee:	nobody → Chase Douglas (chasedouglas)

Chase Douglas (chasedouglas) on 2012-02-21

affects:	xorg-server (Ubuntu) → xserver-xorg-input-synaptics (Ubuntu)
Changed in xserver-xorg-input-synaptics (Ubuntu):
status:	Confirmed → In Progress
description:	updated

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-02-21:

This bug was fixed in the package xserver-xorg-input-synaptics - 1.5.99~git20120220-0ubuntu3

---------------
xserver-xorg-input-synaptics (1.5.99~git20120220-0ubuntu3) precise; urgency=low

* Fix crash on multitouch devices when disabled while typing (LP: #931344)
- Add temporary patch 130_tmp_touch_count_fix.patch
-- Chase Douglas <email address hidden> Tue, 21 Feb 2012 16:22:17 +0100

Changed in xserver-xorg-input-synaptics (Ubuntu):
status:	In Progress → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

Duplicates of this bug

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntuxserver-xorg-input-synaptics package

Xorg crashed with SIGSEGV in XIGetDeviceProperty()

Bug Description

Related branches

Duplicates of this bug

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
xserver-xorg-input-synaptics package