X crashes on key press

[Luke]

Conditions: gdm, fluxbox, xbmc, A PS3 remote controller
Action: press cross button inside XBMC in fullscreen-mode

/var/log/Xorg.0.log:

Backtrace:
0: /usr/bin/X (xorg_backtrace+0x3b) [0x80e937b]
1: /usr/bin/X (0x8048000+0x61c7d) [0x80a9c7d]
2: (vdso) (__kernel_rt_sigreturn+0x0) [0xc68410]
3: /usr/bin/X (mieqProcessDeviceEvent+0xd3) [0x80e8633]
4: /usr/bin/X (mieqProcessInputEvents+0x6c) [0x80e87dc]
5: /usr/bin/X (ProcessInputEvents+0x17) [0x80b57e7]
6: /usr/bin/X (0x8048000+0x2a1a0) [0x80721a0]
7: /usr/bin/X (0x8048000+0x1ed7a) [0x8066d7a]
8: /lib/tls/i686/cmov/libc.so.6 (__libc_start_main+0xe6) [0x199bd6]
9: /usr/bin/X (0x8048000+0x1e961) [0x8066961]
Segmentation fault at address 0x64

Caught signal 11 (Segmentation fault). Server aborting

Please consult the The X.Org Foundation support
  at http://wiki.x.org
 for help.
Please also check the log file at "/var/log/Xorg.0.log" for additional information.

(II) Power Button: Close
(II) UnloadModule: "evdev"
(II) Video Bus: Close
(II) UnloadModule: "evdev"
(II) Power Button: Close
(II) UnloadModule: "evdev"
(II) Logitech Optical USB Mouse: Close
(II) UnloadModule: "evdev"
(II) NOVATEK USB Keyboard: Close
(II) UnloadModule: "evdev"
(II) NOVATEK USB Keyboard: Close
(II) UnloadModule: "evdev"
(II) Macintosh mouse button emulation: Close
(II) UnloadModule: "evdev"
(II) PS3 Remote Controller: Close
(II) UnloadModule: "evdev"
(II) AIGLX: Suspending AIGLX clients for VT switch

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: xserver-xorg-core 2:1.7.6-2ubuntu7.1
ProcVersionSignature: Ubuntu 2.6.32-22.36-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic i686
Architecture: i386
Date: Thu Jun 24 00:20:11 2010
DkmsStatus: Error: [Errno 2] No such file or directory
ExecutablePath: /usr/bin/Xorg
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.32-22-generic root=UUID=177eb462-4768-40c6-96d3-cc875fefcc4c ro quiet splash
ProcEnviron:
 LANG=de_AT.UTF-8
 PATH=(custom, no user)
SourcePackage: xorg-server
dmi.bios.date: 12/18/2009
dmi.bios.vendor: Intel Corp.
dmi.bios.version: JT94510H.86A.0040.2009.1218.1345
dmi.board.name: D945GSEJT
dmi.board.vendor: Intel Corporation
dmi.board.version: AAE57850-401
dmi.chassis.type: 3
dmi.modalias: dmi:bvnIntelCorp.:bvrJT94510H.86A.0040.2009.1218.1345:bd12/18/2009:svn:pn:pvr:rvnIntelCorporation:rnD945GSEJT:rvrAAE57850-401:cvn:ct3:cvr:
glxinfo:
 Error: couldn't find RGB GLX visual or fbconfig
 name of display: localhost:11.0
system:
 distro: Ubuntu
 codename: lucid
 architecture: i686
 kernel: 2.6.32-22-generic

[Bob (loosen)]

I have similar crashes when running XBMC fullscreen, I don't have a ps3 remote.
The crashes seem to happen at random times.

[Bob (loosen)]

I disconnected my bluetooth keyboard, and now it doesn't seem to crash anymore.
It's interesting that xorg crashes in DGAProcessPointerEvent, even with the mouse disconnected.

[Bob (loosen)]

This patch is from http://bugs.freedesktop.org/show_bug.cgi?id=27573
It seems to have fixed it.

[Bob (loosen)]

Spoke too soon, yesterday it ran stable for over 3 hours but today it crashed twice again.

[Bob (loosen)]

A very friendly Xorg developer made a patch for my issue, apparently my bluetooth keyboard exposes 4 axes but no buttons.
The first axis is the battery voltage, when that goes down the keyboard sends an axis event, causing Xorg to dereference a NULL pointer on the button.

I don't know for sure if this patch will fix the issue in this ticket until I see a backtrace with debug symbols or the output of evtest on the ps3 remote.

[Bob (loosen)]

And now it crashes differently.
The very friendly Xorg developer is working on it.

[Jack Deslippe (jdeslip)]

I have a similar problem with the d-link boxee remote when I try to use Boxee full screen. Whenever I press a button on the remote, X segfaults and dies.

This is in Ubuntu 10.10 (32 bit). I get a backtrace very similar to the one reported in the first post. Did anyone find a solution to this?

[Jack Deslippe (jdeslip)]

For further info, it also occurs on XBMC when full screen. Here is the backtrace I get from my xorg log

Backtrace:
[ 10271.990] 0: /usr/bin/X (xorg_backtrace+0x3b) [0x80e82fb]
[ 10271.990] 1: /usr/bin/X (0x8048000+0x5da8d) [0x80a5a8d]
[ 10271.990] 2: (vdso) (__kernel_rt_sigreturn+0x0) [0x91640c]
[ 10271.990] 3: /usr/bin/X (mieqProcessDeviceEvent+0xd3) [0x80e75b3]
[ 10271.991] 4: /usr/bin/X (mieqProcessInputEvents+0x6c) [0x80e775c]
[ 10271.991] 5: /usr/bin/X (ProcessInputEvents+0x17) [0x80b1797]
[ 10271.991] 6: /usr/bin/X (0x8048000+0x25d2e) [0x806dd2e]
[ 10271.991] 7: /usr/bin/X (0x8048000+0x1a5ba) [0x80625ba]
[ 10271.991] 8: /lib/libc.so.6 (__libc_start_main+0xe7) [0x15fce7]
[ 10271.991] 9: /usr/bin/X (0x8048000+0x1a191) [0x8062191]
[ 10271.991] Segmentation fault at address 0x6
[ 10271.991]
Caught signal 11 (Segmentation fault). Server aborting
[ 10271.991]

[Bob (loosen)]

Jack Deslippe, if you follow https://wiki.ubuntu.com/DebuggingXorg you can make a backtrace with debug symbols, which is far more useful to the developers.

[Bob (loosen)]

This patch prevents my second crash.

[Bob (loosen)]

This patch prevents the mousepointer from moving on an input device with a "misc" axis, in other words an input device with an axis that has no specified direction.

[Sebastien Bacher (seb128)]

thank you for your work on the issue, you listed several patches are all those in upstream git now and required to fix your bug?

[Timo Aaltonen (tjaalton)]

Bob: have you given those patches for Peter to review?

[Bob (loosen)]

These patches I got from peter:
0001-xfree86-Check-for-existance-of-button-class-before-d.patch
master_device.patch
dix_dont_create_core_motion_events_for_non_xy_valuators.diff

I talked with him on irc a while back, I'm bobo1on1 from XBMC, he probably remembers me (he emailed me master_device.patch).
I don't know if he committed these patches upstream.
master_device.patch should also fix the issue where xorg crashes when XBMC or boxee runs fullscreen and one uses the boxee remote,

I don't know for sure if 0001-xfree86-dga-needs-to-use-the-master-keyboard-state-2.patch has fixed my issue, or does anything useful for me at all, because (I found this out later) my keyboard has the battery voltage on an analog axis, and an event on this axis would crash xorg, since I don't know when the battery voltage changes, the crashes appeared random to me.

[Robert Hooker (sarvatt)]

The fourth patch: dix_dont_create_core_motion_events_for_non_xy_valuators.diff caused quite a few regressions when it was introduced as well as made the test suite which is run at build time fail.

https://bugs.freedesktop.org/show_bug.cgi?id=30267

[Bob (loosen)]

dix_dont_create_core_motion_events_for_non_xy_valuators.diff doesn't fix any crashes, it just prevents the mouse pointer moving when the battery voltage on my keyboard changes.

[Bryce Harrington (bryce)]

Alright, since there's issues with that one, would you mind handling that as a separate bug? For this bug report we'll focus on the crash fixes since that seems to be the thrust of the original bug report.

[Bryce Harrington (bryce)]

I've verified the changes for these two patches are already present in natty's xserver:
  * 0001-xfree86-Check-for-existance-of-button-class-before-d.patch
  * 0001-xfree86-dga-needs-to-use-the-master-keyboard-state-2.patch

[Bryce Harrington (bryce)]

The one remaining patch, master_device.patch, is present in the xserver git tree, but not in natty's xserver. I'll go ahead and backport that, and I *think* that should be sufficient to close this bug report.

[Bryce Harrington (bryce)]

Patch added to git, testing build and then will upload.

[Bryce Harrington (bryce)]

Right, built fine. Uploading.

[Launchpad Janitor (janitor)]

This bug was fixed in the package xorg-server - 2:1.9.0.902-1ubuntu3

---------------
xorg-server (2:1.9.0.902-1ubuntu3) natty; urgency=low

  * Add 207_dga_master_device.patch: Cherrypick from upstream xserver git
    to fix crash with a bluetooth keyboard when using XBMC full screen.
    (LP: #597895)
 -- Bryce Harrington <email address hidden> Thu, 06 Jan 2011 12:17:16 -0800

[Dmitry (pfzim)]

I don't understand, this bug fixed only in natty and later releases?
I have same error then connect bluetooth keyboard in ubuntu 10.04.3 lucid