unity8 crashed with SIGSEGV in QSGTexture::setFiltering() when (dis)connecting to WiFi Display

[Michał Sawicz]

Connecting to WiFi Display causes unity8 to crash. Not sure yet what caused that, looking.

Seems this got introduced here:

$ system-image-cli -i
current build number: 94
device name: turbo
channel: ubuntu-touch/rc-proposed/meizu.en
last update: 2016-06-20 15:32:36
version version: 94
version ubuntu: 20160602
version device: 20160523-bcddc2c
version custom: 20160504-975-19-6

ProblemType: Crash
DistroRelease: Ubuntu 15.04
Package: unity8 8.12+15.04.20160617-0ubuntu1 [origin: LP-PPA-ci-train-ppa-service-stable-phone-overlay]
Uname: Linux 3.10.100-user-01767-gf5aa556 aarch64
ApportVersion: 2.17.2-0ubuntu1.3touch1
Architecture: armhf
CurrentDesktop: Unity
Date: Mon Jun 20 14:44:40 2016
ExecutablePath: /usr/bin/unity8
ExecutableTimestamp: 1466128494
InstallationDate: Installed on 2016-06-18 (2 days ago)
InstallationMedia: Ubuntu 15.04 - armhf (20160618-020304)
ProcCmdline: unity8 --mode=full-greeter
ProcCwd: /home/phablet
Signal: 11
SourcePackage: unity8
StacktraceTop:
 QSGTexture::setFiltering(QSGTexture::Filtering) (this=0x6d) at /usr/include/arm-linux-gnueabihf/qt5/QtCore/qscopedpointer.h:135
 QSGTexture::setFiltering(QSGTexture::Filtering) (p=...) at /usr/include/arm-linux-gnueabihf/qt5/QtCore/qglobal.h:961
 QSGTexture::setFiltering(QSGTexture::Filtering) (this=0x69) at scenegraph/util/qsgtexture.h:47
 QSGTexture::setFiltering(QSGTexture::Filtering) (this=0x69, filter=QSGTexture::Linear) at scenegraph/util/qsgtexture.cpp:445
 QQuickAnimatedSprite::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*) (this=0x4faf40) at items/qquickanimatedsprite.cpp:556
Title: unity8 crashed with SIGSEGV in QSGTexture::setFiltering()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dialout dip plugdev sudo tty video

[Michał Sawicz (saviq)]

A fuller trace for connection:
#0 0xffffffff in QSGTexture::setFiltering(QSGTexture::Filtering) (this=0x6d) at /usr/include/arm-linux-gnueabihf/qt5/QtCore/qscopedpointer.h:135
#1 0xffffffff in QSGTexture::setFiltering(QSGTexture::Filtering) (p=...) at /usr/include/arm-linux-gnueabihf/qt5/QtCore/qglobal.h:961
#2 0xffffffff in QSGTexture::setFiltering(QSGTexture::Filtering) (this=0x69) at scenegraph/util/qsgtexture.h:47
#3 0xffffffff in QSGTexture::setFiltering(QSGTexture::Filtering) (this=0x69, filter=QSGTexture::Linear) at scenegraph/util/qsgtexture.cpp:445
#4 0xffffffff in QQuickAnimatedSprite::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*) (this=0x4faf40) at items/qquickanimatedsprite.cpp:556
#5 0xffffffff in QQuickWindowPrivate::updateDirtyNode(QQuickItem*) (this=this@entry=0x38f720, item=item@entry=0x4faf40) at items/qquickwindow.cpp:2821
        clipEffectivelyChanged = <optimized out>
        dirty = 73792
        effectRefCount = <optimized out>
        effectRefEffectivelyChanged = <optimized out>
#6 0xffffffff in QQuickWindowPrivate::updateDirtyNodes() (this=this@entry=0x38f720) at items/qquickwindow.cpp:2646
        item = 0x4faf40
        updateList = 0x0
#7 0xffffffff in QQuickWindowPrivate::syncSceneGraph() (this=this@entry=0x38f720) at items/qquickwindow.cpp:338
        _qml_memory_scope = {pushed = false}
        mode = <optimized out>
#8 0xffffffff in QSGRenderThread::sync(bool) (this=this@entry=0x10b6510, inExpose=inExpose@entry=true) at scenegraph/qsgthreadedrenderloop.cpp:510
        hadRenderer = false
        current = <optimized out>
#9 0xffffffff in QSGRenderThread::syncAndRender() (this=this@entry=0x10b6510) at scenegraph/qsgthreadedrenderloop.cpp:553
        profileFrames = <optimized out>
        pending = 7
        current = <optimized out>
        waitTimer = {t1 = 74, t2 = 669961659}
#10 0xffffffff in QSGRenderThread::run() (this=0x10b6510) at scenegraph/qsgthreadedrenderloop.cpp:663
#11 0xffffffff in () at /usr/lib/arm-linux-gnueabihf/libQt5Core.so.5
#12 0xffffffff in start_thread (arg=0x0) at pthread_create.c:335
        pd = 0x0
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1453893696, -2045006455, -651332592, -6283480, 0, -651334112, -651332028, 0, -145804768, 0 <repeats 55 times>}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0,
0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#13 0xffffffff in () at ../sysdeps/unix/sysv/linux/arm/clone.S:89

[Michał Sawicz (saviq)]

And disconnection:
#0 0xffffffff in QSGNode::markDirty(QFlags<QSGNode::DirtyStateBit>) (this=0xde870cf8, bits=bits@entry=...) at scenegraph/coreapi/qsgnode.cpp:658
        renderableCountDiff = 0
        p = 0xcf9
#1 0xffffffff in QQuickAnimatedSprite::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*) (this=0x35ad90) at items/qquickanimatedsprite.cpp:561
#2 0xffffffff in QQuickWindowPrivate::updateDirtyNode(QQuickItem*) (this=this@entry=0x1e8750, item=item@entry=0x35ad90) at items/qquickwindow.cpp:2821
        clipEffectivelyChanged = <optimized out>
        dirty = 73792
        effectRefCount = <optimized out>
        effectRefEffectivelyChanged = <optimized out>
#3 0xffffffff in QQuickWindowPrivate::updateDirtyNodes() (this=this@entry=0x1e8750) at items/qquickwindow.cpp:2646
        item = 0x35ad90
        updateList = 0x0
#4 0xffffffff in QQuickWindowPrivate::syncSceneGraph() (this=this@entry=0x1e8750) at items/qquickwindow.cpp:338
        _qml_memory_scope = {pushed = false}
        mode = <optimized out>
#5 0xffffffff in QSGRenderThread::sync(bool) (this=this@entry=0x1316050, inExpose=inExpose@entry=true) at scenegraph/qsgthreadedrenderloop.cpp:510
        hadRenderer = false
        current = <optimized out>
#6 0xffffffff in QSGRenderThread::syncAndRender() (this=this@entry=0x1316050) at scenegraph/qsgthreadedrenderloop.cpp:553
        profileFrames = <optimized out>
        pending = 7
        current = <optimized out>
        waitTimer = {t1 = 455, t2 = 422721340}
#7 0xffffffff in QSGRenderThread::run() (this=0x1316050) at scenegraph/qsgthreadedrenderloop.cpp:663
#8 0xffffffff in () at /usr/lib/arm-linux-gnueabihf/libQt5Core.so.5
#9 0xffffffff in start_thread (arg=0x0) at pthread_create.c:335
        pd = 0x0
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1891707838, -1857794549, -396315632, -6982648, 0, -396317152, -396315068, 0, -150482400, 0 <repeats 55 times>}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0,
0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#10 0xffffffff in () at ../sysdeps/unix/sysv/linux/arm/clone.S:89

[Michał Sawicz (saviq)]

The problem seems to be:

https://errors.ubuntu.com/bucket/?id=failed%3A/usr/bin/unity8%3A11%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bc1fe2%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bc2874%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bc3758%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bc6acc%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bcd600%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bcd988%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bd8354%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2B10af30%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Beb7d8%3A/usr/lib/arm-linux-gnueabihf/libQt5Quick.so.5.4.1%2Bec9a8%3A/usr/lib/arm-linux-gnueabihf/libQt5Core.so.5.4.1%2B7b4c6%3A/lib/arm-linux-gnueabihf/libpthread-2.21.so%2B5490%3A/lib/arm-linux-gnueabihf/libc-2.21.so%2B93c4c

[Apport retracing service (apport)]

Stacktrace:
 #0 0xf6d90c44 in ?? ()
 No symbol table info available.
 #1 0xf6e4f55c in ?? ()
 No symbol table info available.
 Backtrace stopped: previous frame identical to this frame (corrupt stack?)
StacktraceTop:
 ?? ()
 ?? ()

[Apport retracing service (apport)]

Thank you for your report!

However, processing it in order to get sufficient information for the
developers failed (it does not generate a useful symbolic stack trace). This
might be caused by some outdated packages which were installed on your system
at the time of the report:

libqgsttools-p1 version 5.4.1-1ubuntu19~overlay4 required, but 5.4.1-1ubuntu1 is available
no debug symbol package found for libprocess-cpp2
gstreamer1.0-plugins-good version 1.6.1-1ubuntu1~overlay1 required, but 1.4.5-1ubuntu2 is available
qtdeclarative5-ubuntu-thumbnailer0.1 version 2.4+15.04.20160530.3-0ubuntu1 required, but 1.3+15.04.20150312-0ubuntu1 is available
no debug symbol package found for qtdeclarative5-ubuntu-thumbnailer0.1
libhistoryservice0 version 0.1+15.04.20160425-0ubuntu1 required, but 0.1+15.04.20150409-0ubuntu1 is available
no debug symbol package found for libhistoryservice0
package aethercast-tools does not exist, ignoring
libsystemd0 version 219-7ubuntu6vividtouch1 required, but 219-7ubuntu6 is available
libandroid-properties1 version 0.1.0+git20151016+6d424c9-0ubuntu10~overlay1 required, but 0.1.0+git20131207+e452e83-0ubuntu39 is available
no debug symbol package found for libandroid-properties1
ubuntu-download-manager version 1.2+15.04.20160408-0ubuntu1 required, but 0.9+15.04.20150203-0ubuntu1 is available
no debug symbol package found for ubuntu-download-manager
wpasupplicant version 2.4-0ubuntu7~overlay4 required, but 2.1-0ubuntu7.3 is available
package libmircookie2 does not exist, ignoring
accountsservice-ubuntu-schemas version 0.0.6+15.04.20160414-0ubuntu1 required, but 0.0.4+15.04.20150211-0ubuntu1 is available
ubuntu-mobile-icons version 14.04+15.04.20160615.1-0ubuntu1 required, but 14.04+15.04.20150410-0ubuntu1 is available
no debug symbol package found for cgmanager
no debug symbol package found for libfribidi0
libsystemsettings1 version 0.4+15.04.20160609-0ubuntu1 required, but 0.3+15.04.20150413-0ubuntu1 is available
no debug symbol package found for libsystemsettings1
package libudm-common1 does not exist, ignoring
mediascanner2.0 version 0.111+15.04.20160526-0ubuntu1 required, but 0.105+15.04.20150128-0ubuntu1 is available
no debug symbol package found for mediascanner2.0
unity8-private version 8.12+15.04.20160617-0ubuntu1 required, but 8.02+15.04.20150409.1-0ubuntu1 is available
no debug symbol package found for unity8-private
libsignon-extension1 version 8.58+15.04.20151106-0ubuntu1 required, but 8.57+15.04.20150204.1-0ubuntu1 is available
no debug symbol package found for libsignon-extension1
no debug symbol package found for libgflags2
system-image-common version 3.1+15.04.20160407-0ubuntu1 required, but 2.5-0ubuntu1 is available
no debug symbol package found for libproxy1
package libgeonames0 does not exist, ignoring
package libqt5purchasing5 does not exist, ignoring
click version 0.4.43+15.04.20160203-0ubuntu1 required, but 0.4.38.5ubuntu0.2 is available
no debug symbol package found for click
unity-scope-mediascanner2 version 0.2+15.04.20160225-0ubuntu1 required, but 0.2+15.04.20150411-0ubuntu1 is available
no debug symbol package found for unity-scope-mediascanner2
signon-plugin-oauth2 version 0.23+15.04.20151209-0ubun...

[Launchpad Janitor (janitor)]

This bug was fixed in the package unity8 - 8.12+16.10.20160627.5-0ubuntu1

---------------
unity8 (8.12+16.10.20160627.5-0ubuntu1) yakkety; urgency=medium

  [ Albert Astals Cid ]
  * Stop watching the old header item height once it's not our header
    anymore
  * LVWPH: cull the header item when not on view to save some painting
  * Adapt test to new mock behaviour
  * Don't let the mouse go outside the parentItem (LP: #1525350)
  * Use non deprecated package names
  * Mark system includes as such
  * Fix initialization order warning
  * Do not rely on deleteLater not crashing on null pointers
  * Add more headers of classes we use for automoc to be run
  * CardTool: Fix the fallback value to be a size and not an integer
  * CardTool: Include Ubuntu Components since we're using units.gu
  * Rework tst_PreviewRatingDisplayCreationRanges

  [ Daniel d'Andrada ]
  * Cursor: Let AnimatedSprite run only on animated cursors and while
    the display is on (LP: #1588873, #1594358)
  * Fix missing screenshot when orientation changes while shell rotation
    ongoing (LP: #1587796)

  [ Josh Arenson ]
  * Make PreviewRatingSingleDisplay visible again after editing a
    review. (LP: #1587097)
  * Correct errors in all png images to prevent libpng warnings.

  [ Lukáš Tinkl ]
  * Fix some smaller issues with OOBE wizard password pages (LP:
    #1590467)
  * Prevent mouse wheel events from going through shell elements (LP:
    #1536268)
  * Do not let mouse and wheel events pass thru the titlebar (LP:
    #1588424)
  * Hide the maximize window button based on size restrictions (LP:
    #1541982)

  [ Marco Trevisan (Treviño) ]
  * Unity8.conf: ensure MIR_SOCKET is set for future customers (such as
    the dash)
  * ClientIndicator: be more informative about loading failures for
    dynamically created objects

  [ Michael Terry ]
  * Stop unity8 from getting in a "switch-to-greeter" loop when locking
    on a desktop. (LP: #1593718)

  [ Michael Zanetti ]
  * set minimum window sizes on dash
  * displace application windows when the OSK would cover them

  [ Nick Dedekind ]
  * Force dash to always stay in the main stage. (lp:#1592404) (LP:
    #1592404)
  * Save the last surface stage on stage drop. (LP: #1579003)
  * Default portrait only apps to the side stage. (LP: #1573153)

  [ Albert Astals Cid, Andrea Cimitan, Michał Sawicz, Nick Dedekind ]
  * Added live video playback in dash previews

 -- Michael Zanetti <email address hidden> Mon, 27 Jun 2016 18:48:59 +0000