umockdev's test suite now started to see this crash in current Ubuntu jammy. Simple reproducer:
$ cat tests/xorg-dummy.conf Section "Device" Identifier "test" Driver "dummy" EndSection
$ Xorg -config tests/xorg-dummy.conf -logfile /tmp/log -once :5
Then, run at least one query on it, like this:
$ env DISPLAY=:5 xinput
Then pkill/kill or Control-C the Xorg process, and it will crash:
double free or corruption (!prev) (EE) (EE) Backtrace: (EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+0x139) [0x55e2b1c75d39] (EE) 1: /lib/x86_64-linux-gnu/libc.so.6 (__sigaction+0x50) [0x7f384162f520] (EE) 2: /lib/x86_64-linux-gnu/libc.so.6 (pthread_kill+0xf8) [0x7f3841683808] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (raise+0x16) [0x7f384162f476] (EE) 4: /lib/x86_64-linux-gnu/libc.so.6 (abort+0xd7) [0x7f38416157b7] (EE) 5: /lib/x86_64-linux-gnu/libc.so.6 (__fsetlocking+0x426) [0x7f38416765e6] (EE) 6: /lib/x86_64-linux-gnu/libc.so.6 (timer_settime+0x2cc) [0x7f384168dadc] (EE) 7: /lib/x86_64-linux-gnu/libc.so.6 (__default_morecore+0x8bc) [0x7f384168f84c] (EE) 8: /lib/x86_64-linux-gnu/libc.so.6 (free+0x55) [0x7f3841691ce5] (EE) 9: /usr/lib/xorg/Xorg (config_fini+0x402) [0x55e2b1b6cb22] (EE) 10: /usr/lib/xorg/Xorg (ddxGiveUp+0x62) [0x55e2b1b4fa22] (EE) 11: /usr/lib/xorg/Xorg (InitFonts+0x669) [0x55e2b1b12d69] (EE) 12: /lib/x86_64-linux-gnu/libc.so.6 (__libc_init_first+0x90) [0x7f3841616fd0] (EE) 13: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0x7d) [0x7f384161707d] (EE) 14: /usr/lib/xorg/Xorg (_start+0x2e) [0x55e2b1afbf0e] (EE) (EE) Received signal 6 sent by process 520, uid 0
After that it hangs and can't be cleaned up any more (zombie)
umockdev's test suite now started to see this crash in current Ubuntu jammy. Simple reproducer:
$ cat tests/xorg- dummy.conf
Section "Device"
Identifier "test"
Driver "dummy"
EndSection
$ Xorg -config tests/xorg- dummy.conf -logfile /tmp/log -once :5
Then, run at least one query on it, like this:
$ env DISPLAY=:5 xinput
Then pkill/kill or Control-C the Xorg process, and it will crash:
double free or corruption (!prev) 0x139) [0x55e2b1c75d39] 64-linux- gnu/libc. so.6 (__sigaction+0x50) [0x7f384162f520] 64-linux- gnu/libc. so.6 (pthread_kill+0xf8) [0x7f3841683808] 64-linux- gnu/libc. so.6 (raise+0x16) [0x7f384162f476] 64-linux- gnu/libc. so.6 (abort+0xd7) [0x7f38416157b7] 64-linux- gnu/libc. so.6 (__fsetlocking+ 0x426) [0x7f38416765e6] 64-linux- gnu/libc. so.6 (timer_ settime+ 0x2cc) [0x7f384168dadc] 64-linux- gnu/libc. so.6 (__default_ morecore+ 0x8bc) [0x7f384168f84c] 64-linux- gnu/libc. so.6 (free+0x55) [0x7f3841691ce5] 64-linux- gnu/libc. so.6 (__libc_ init_first+ 0x90) [0x7f3841616fd0] 64-linux- gnu/libc. so.6 (__libc_ start_main+ 0x7d) [0x7f384161707d]
(EE)
(EE) Backtrace:
(EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+
(EE) 1: /lib/x86_
(EE) 2: /lib/x86_
(EE) 3: /lib/x86_
(EE) 4: /lib/x86_
(EE) 5: /lib/x86_
(EE) 6: /lib/x86_
(EE) 7: /lib/x86_
(EE) 8: /lib/x86_
(EE) 9: /usr/lib/xorg/Xorg (config_fini+0x402) [0x55e2b1b6cb22]
(EE) 10: /usr/lib/xorg/Xorg (ddxGiveUp+0x62) [0x55e2b1b4fa22]
(EE) 11: /usr/lib/xorg/Xorg (InitFonts+0x669) [0x55e2b1b12d69]
(EE) 12: /lib/x86_
(EE) 13: /lib/x86_
(EE) 14: /usr/lib/xorg/Xorg (_start+0x2e) [0x55e2b1afbf0e]
(EE)
(EE) Received signal 6 sent by process 520, uid 0
After that it hangs and can't be cleaned up any more (zombie)