Ubuntu
xorg-server package

Xorg crashed with SIGSEGV in WriteToClient() from CloseDownClient()

Bug #948858 reported by Anshul Jain on 2012-03-07

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	xorg-server (Ubuntu)	Expired	Low	Unassigned

Bug Description

Unity crashed when moving the cursor to the top left corner

=> 0x7ff1bbc9bb01: movdqu %xmm0,-0x20(%rdi)
   0x7ff1bbc9bb06: lddqu -0x10(%rsi),%xmm0
   0x7ff1bbc9bb0b: movdqu %xmm0,-0x10(%rdi)
   0x7ff1bbc9bb10: retq
   0x7ff1bbc9bb11: data32 data32 data32 data32 data32 nopw %cs:0x0(%rax,%rax,1)
   0x7ff1bbc9bb20: lddqu -0x8f(%rsi),%xmm0
   0x7ff1bbc9bb28: movdqu %xmm0,-0x8f(%rdi)
   0x7ff1bbc9bb30: lddqu -0x7f(%rsi),%xmm0
   0x7ff1bbc9bb35: movdqu %xmm0,-0x7f(%rdi)
   0x7ff1bbc9bb3a: lddqu -0x6f(%rsi),%xmm0
   0x7ff1bbc9bb3f: movdqu %xmm0,-0x6f(%rdi)
   0x7ff1bbc9bb44: lddqu -0x5f(%rsi),%xmm0
   0x7ff1bbc9bb49: movdqu %xmm0,-0x5f(%rdi)
   0x7ff1bbc9bb4e: lddqu -0x4f(%rsi),%xmm0
   0x7ff1bbc9bb53: movdqu %xmm0,-0x4f(%rdi)
   0x7ff1bbc9bb58: lddqu -0x3f(%rsi),%xmm0

#18 <signal handler called>
No symbol table info available.
#19 __memmove_ssse3_back () at ../sysdeps/x86_64/multiarch/memcpy-ssse3-back.S:1703
No locals.
#20 0x00007ff1bdb3f8e2 in WriteToClient (who=0x7ff1bfb3d0c0, count=32, __buf=0x7fff0ab9e5b0) at /usr/include/x86_64-linux-gnu/bits/string3.h:58
        oc = 0x7ff1bfa21d50
        oco = 0x7ff1bfeda470
        padBytes = <optimized out>
        buf = 0x7fff0ab9e5b0 "\021"
#21 0x00007ff1bda0c38a in WriteEventsToClient (events=0x7fff0ab9e5b0, count=1, pClient=<optimized out>) at ../../dix/events.c:6131
        eventCopy = {u = {u = {type = 16 '\020', detail = 241 '\361', sequenceNumber = 49048}, keyButtonPointer = {pad00 = 3214471440, time = 32753, root = 3214471552, event = 32753, child = 3214471440, rootX = 32753, rootY = 0, eventX = 23984, eventY = -16933, state = 32753, sameScreen = 0 '\000', pad1 = 0 '\000'}, enterLeave = {pad00 = 3214471440, time = 32753, root = 3214471552, event = 32753, child = 3214471440, rootX = 32753, rootY = 0, eventX = 23984, eventY = -16933, state = 32753, mode = 0 '\000', flags = 0 '\000'}, focus = {pad00 = 3214471440, window = 32753, mode = 128 '\200', pad1 = 241 '\361', pad2 = 152 '\230', pad3 = 191 '\277'}, expose = {pad00 = 3214471440, window = 32753, x = 61824, y = 49048, width = 32753, height = 0, count = 61712, pad2 = 49048}, graphicsExposure = {pad00 = 3214471440, drawable = 32753, x = 61824, y = 49048, width = 32753, height = 0, minorEvent = 61712, count = 49048, majorEvent = 241 '\361', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'}, noExposure = {pad00 = 3214471440, drawable = 32753, minorEvent = 61824, majorEvent = 152 '\230', bpad = 191 '\277'}, visibility = {pad00 = 3214471440, window = 32753, state = 128 '\200', pad1 = 241 '\361', pad2 = 152 '\230', pad3 = 191 '\277'}, createNotify = {pad00 = 3214471440, parent = 32753, window = 3214471552, x = 32753, y = 0, width = 61712, height = 49048, borderWidth = 32753, override = 0 '\000', bpad = 0 '\000'}, destroyNotify = {pad00 = 3214471440, event = 32753, window = 3214471552}, unmapNotify = {pad00 = 3214471440, event = 32753, window = 3214471552, fromConfigure = 241 '\361', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'}, mapNotify = {pad00 = 3214471440, event = 32753, window = 3214471552, override = 241 '\361', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'}, mapRequest = {pad00 = 3214471440, parent = 32753, window = 3214471552}, reparent = {pad00 = 3214471440, event = 32753, window = 3214471552, parent = 32753, x = -3824, y = -16488, override = 241 '\361', pad1 = 127 '\177', pad2 = 0 '\000', pad3 = 0 '\000'}, configureNotify = {pad00 = 3214471440, event = 32753, window = 3214471552, aboveSibling = 32753, x = -3824, y = -16488, width = 32753, height = 0, borderWidth = 23984, override = 219 '\333', bpad = 189 '\275'}, configureRequest = {pad00 = 3214471440, parent = 32753, window = 3214471552, sibling = 32753, x = -3824, y = -16488, width = 32753, height = 0, borderWidth = 23984, valueMask = 48603, pad1 = 32753}, gravity = {pad00 = 3214471440, event = 32753, window = 3214471552, x = 32753, y = 0, pad1 = 3214471440, pad2 = 32753, pad3 = 3185270192, pad4 = 32753}, resizeRequest = {pad00 = 3214471440, window = 32753, width = 61824, height = 49048}, circulate = {pad00 = 3214471440, event = 32753, window = 3214471552, parent = 32753, place = 16 '\020', pad1 = 241 '\361', pad2 = 152 '\230', pad3 = 191 '\277'}, property = {pad00 = 3214471440, window = 32753, atom = 3214471552, time = 32753, state = 16 '\020', pad1 = 241 '\361', pad2 = 49048}, selectionClear = {pad00 = 3214471440, time = 32753, window = 3214471552, atom = 32753}, selectionRequest = {pad00 = 3214471440, time = 32753, owner = 3214471552, requestor = 32753, selection = 3214471440, target = 32753, property = 3185270192}, selectionNotify = {pad00 = 3214471440, time = 32753, requestor = 3214471552, selection = 32753, target = 3214471440, property = 32753}, colormap = {pad00 = 3214471440, window = 32753, colormap = 3214471552, new = 241 '\361', state = 127 '\177', pad1 = 0 '\000', pad2 = 0 '\000'}, mappingNotify = {pad00 = 3214471440, request = 241 '\361', firstKeyCode = 127 '\177', count = 0 '\000', pad1 = 0 '\000'}, clientMessage = {pad00 = 3214471440, window = 32753, u = {l = {type = 3214471552, longs0 = 32753, longs1 = -1080495856, longs2 = 32753, longs3 = -1109697104, longs4 = 32753}, s = {type = 3214471552, shorts0 = 32753, shorts1 = 0, shorts2 = -3824, shorts3 = -16488, shorts4 = 32753, shorts5 = 0, shorts6 = 23984, shorts7 = -16933, shorts8 = 32753, shorts9 = 0}, b = {type = 3214471552, bytes = "\361\177\000\000\020\361\230\277\361\177\000\000\260]\333\275\361\177\000"}}}}}
        eventTo = <optimized out>
        i = <optimized out>
        eventFrom = <optimized out>
        eventlength = 32
#22 WriteEventsToClient (pClient=0x7ff1bfb3d0c0, count=<optimized out>, events=<optimized out>) at ../../dix/events.c:6015
No locals.

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: xserver-xorg-core 2:1.11.4-0ubuntu4
ProcVersionSignature: Ubuntu 3.2.0-18.28-generic 3.2.9
Uname: Linux 3.2.0-18-generic x86_64
.tmp.unity.support.test.0:

ApportVersion: 1.94-0ubuntu2
Architecture: amd64
CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: compiz
Date: Wed Mar 7 16:17:20 2012
DistUpgraded: Fresh install
DistroCodename: precise
DistroVariant: ubuntu
ExecutablePath: /usr/bin/Xorg
ExtraDebuggingInterest: Yes, whatever it takes to get this fixed in Ubuntu
GraphicsCard:
Intel Corporation 2nd Generation Core Processor Family Integrated Graphics Controller [8086:0126] (rev 09) (prog-if 00 [VGA controller])
Subsystem: Lenovo Device [17aa:21e2]
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64 (20120301)
MachineType: LENOVO 1141CTO
ProcCmdline: /usr/bin/X :0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
ProcEnviron:

ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.2.0-18-generic root=UUID=1cf1e5bc-21fb-4b94-9c30-e859cea641db ro quiet splash vt.handoff=7
SegvAnalysis:
Segfault happened at: 0x7ff1bbc9bb01: movdqu %xmm0,-0x20(%rdi)
PC (0x7ff1bbc9bb01) ok
source "%xmm0" ok
destination "-0x20(%rdi)" (0x00000000) not located in a known VMA region (needed writable region)!
SegvReason: writing NULL VMA
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
?? () from /lib/x86_64-linux-gnu/libc.so.6
WriteToClient ()
WriteEventsToClient ()
TryClientEvents ()
?? ()
Title: Xorg crashed with SIGSEGV in WriteToClient()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups:

dmi.bios.date: 11/03/2011
dmi.bios.vendor: LENOVO
dmi.bios.version: 8HET40WW(1.22)
dmi.board.asset.tag: Not Available
dmi.board.name: 1141CTO
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr8HET40WW(1.22):bd11/03/2011:svnLENOVO:pn1141CTO:pvrThinkPadE420:rvnLENOVO:rn1141CTO:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 1141CTO
dmi.product.version: ThinkPad E420
dmi.sys.vendor: LENOVO
version.compiz: compiz 1:0.9.7.0+bzr3035-0ubuntu1~ppa1
version.ia32-libs: ia32-libs N/A
version.libdrm2: libdrm2 2.4.30-1ubuntu1
version.libgl1-mesa-dri: libgl1-mesa-dri 8.0.1-0ubuntu2
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 8.0.1-0ubuntu2
version.xserver-xorg-core: xserver-xorg-core 2:1.11.4-0ubuntu4
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.6.99.901+git20120126-0ubuntu2
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:6.14.99~git20111219.aacbd629-0ubuntu2
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.17.0-1ubuntu4
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:0.0.16+git20111201+b5534a1-1build2

See original description

Tags:

Revision history for this message

Anshul Jain (anshulajain) wrote on 2012-03-07:

BootDmesg.txt Edit (62.2 KiB, text/plain; charset="utf-8")
BootLog.gz Edit (580 bytes, application/x-gzip)
CurrentDmesg.txt Edit (1.8 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (2.4 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (722 bytes, text/plain; charset="utf-8")
DpkgLog.txt Edit (1.2 MiB, text/plain; charset="utf-8")
GconfCompiz.txt Edit (27.7 KiB, text/plain; charset="utf-8")
LightdmLog.txt Edit (9.1 KiB, text/plain; charset="utf-8")
Lspci.txt Edit (30.5 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (404 bytes, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (3.5 KiB, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (2.0 KiB, text/plain; charset="utf-8")
ProcMaps.txt Edit (48.3 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (2.6 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (760 bytes, text/plain; charset="utf-8")
Registers.txt Edit (800 bytes, text/plain; charset="utf-8")
Stacktrace.txt Edit (2.3 KiB, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (2.3 KiB, text/plain; charset="utf-8")
UdevDb.txt Edit (131.5 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (291.1 KiB, text/plain; charset="utf-8")
UnitySupportTest.txt Edit (600 bytes, text/plain; charset="utf-8")
XorgLog.txt Edit (35.0 KiB, text/plain; charset="utf-8")
XorgLogOld.txt Edit (36.6 KiB, text/plain; charset="utf-8")
Xrandr.txt Edit (3.4 KiB, text/plain; charset="utf-8")
dmidecode.txt.txt Edit (17.9 KiB, text/plain; charset="utf-8")
locale.txt Edit (263 bytes, text/plain; charset="utf-8")
peripherals.txt Edit (513 bytes, text/plain; charset="utf-8")
setxkbmap.txt Edit (233 bytes, text/plain; charset="utf-8")
xdpyinfo.txt Edit (9.7 KiB, text/plain; charset="utf-8")
xinput.txt Edit (994 bytes, text/plain; charset="utf-8")
xkbcomp.txt Edit (55.9 KiB, text/plain; charset="utf-8")

Revision history for this message

Apport retracing service (apport) wrote on 2012-03-07: Possible regression detected

This crash has the same stack trace characteristics as bug #925341. However, the latter was already fixed in an earlier package version than the one in this report. This might be a regression or because the problem is in a dependent package.

tags:

added: regression-retracer

Revision history for this message

Apport retracing service (apport) wrote on 2012-03-07:

StacktraceTop:
WriteToClient (who=0x7ff1bfb3d0c0, count=32, __buf=0x7fff0ab9e5b0) at /usr/include/x86_64-linux-gnu/bits/string3.h:58
WriteEventsToClient (events=0x7fff0ab9e5b0, count=1, pClient=<optimized out>) at ../../dix/events.c:6131
WriteEventsToClient (pClient=0x7ff1bfb3d0c0, count=<optimized out>, events=<optimized out>) at ../../dix/events.c:6015
TryClientEvents (mask=<optimized out>, count=<optimized out>, pEvents=0x7fff0ab9e5b0, dev=<optimized out>, client=0x7ff1bfb3d0c0, filter=<optimized out>, grab=<optimized out>) at ../../dix/events.c:1965
TryClientEvents (client=0x7ff1bfb3d0c0, dev=<optimized out>, pEvents=0x7fff0ab9e5b0, count=<optimized out>, mask=<optimized out>, filter=<optimized out>, grab=0x0) at ../../dix/events.c:1856

Revision history for this message

Apport retracing service (apport) wrote on 2012-03-07: Stacktrace.txt

Stacktrace.txt Edit (21.3 KiB, text/plain)

Revision history for this message

Apport retracing service (apport) wrote on 2012-03-07: ThreadStacktrace.txt

ThreadStacktrace.txt Edit (21.4 KiB, text/plain)

Changed in xorg-server (Ubuntu):
importance:	Undecided → Medium
tags:	removed: need-amd64-retrace

Bryce Harrington (bryce) on 2012-03-07

visibility:	private → public
description:	updated

Bryce Harrington (bryce) on 2012-03-07

description:

updated

Bryce Harrington (bryce) on 2012-03-17

Changed in xorg-server (Ubuntu):
importance:	Medium → High

Bryce Harrington (bryce) on 2012-03-17

summary:

- Xorg crashed with SIGSEGV in WriteToClient()
+ Xorg crashed with SIGSEGV in WriteToClient() from CloseDownClient()

Revision history for this message

penalvch (penalvch) wrote on 2014-01-06:

Anshul Jain, this bug was reported a while ago and there hasn't been any activity in it recently. We were wondering if this is still an issue? If so, could you please test for this with the latest development release of Ubuntu? ISO images are available from http://cdimage.ubuntu.com/daily-live/current/ .

If it remains an issue, could you please run the following command in the development release from a Terminal (Applications->Accessories->Terminal), as it will automatically gather and attach updated debug information to this report:

apport-collect -p xorg-server REPLACE-WITH-BUG-NUMBER

Please note, given that the information from the prior release is already available, doing this on a release prior to the development one would not be helpful.

Thank you for your understanding.

Helpful bug reporting tips:
https://wiki.ubuntu.com/ReportingBugs

Changed in xorg-server (Ubuntu):
importance:	High → Low
status:	New → Incomplete

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-03-08:

[Expired for xorg-server (Ubuntu) because there has been no activity for 60 days.]

Changed in xorg-server (Ubuntu):
status:	Incomplete → Expired

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntuxorg-server package

Xorg crashed with SIGSEGV in WriteToClient() from CloseDownClient()

Bug Description

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
xorg-server package