Xorg crashed with SIGSEGV in DevHasCursor()

[Timo Aaltonen]

happens after unplugging the joystick (with -joystick installed).

ProblemType: Crash
DistroRelease: Ubuntu 11.04
Package: xserver-xorg-core 2:1.9.99.902-2ubuntu2
ProcVersionSignature: Ubuntu 2.6.38-6.34-generic-pae 2.6.38-rc7
Uname: Linux 2.6.38-6-generic-pae i686
Architecture: i386
CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: compiz
DRM.card0.LVDS.1:
 status: connected
 enabled: enabled
 dpms: On
 modes: 1024x768 1024x768 1024x768 800x600 640x480
 edid-base64: AP///////wAwrgBAAAAAAAAPAQOAGRJ46u11kVdPiyYhUFQhCAABAQEBAQEBAQEBAQEBAQEBKBUAQEEAJjAYiDYA9rkAAAAY7RAAQEEAJjAYiDYA9rkAAAAYAAAADwBhQzJhQygPAQBMo1hKAAAA/gBMVE4xMjFYSi1MMDcKAAA=
DRM.card0.VGA.1:
 status: disconnected
 enabled: disabled
 dpms: Off
 modes:
 edid-base64:
Date: Thu Mar 17 16:41:46 2011
DistUpgraded: Log time: 2011-01-03 18:06:42.375527
DistroCodename: natty
DistroVariant: ubuntu
DkmsStatus:
 virtualbox-ose, 4.0.4, 2.6.38-6-generic, i686: installed
 virtualbox-ose, 4.0.4, 2.6.38-6-generic-pae, i686: installed
ExecutablePath: /usr/bin/Xorg
GraphicsCard:
 Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller (primary) [8086:2a02] (rev 0c) (prog-if 00 [VGA controller])
   Subsystem: Lenovo T61 [17aa:20b5]
   Subsystem: Lenovo T61 [17aa:20b5]
MachineType: LENOVO 7674E68
PccardctlIdent:
 Socket 0:
   no product info available
PccardctlStatus:
 Socket 0:
   no card
ProcCmdline: /usr/bin/X :0 -br -verbose -auth /var/run/gdm/auth-for-gdm-5RoirI/database -nolisten tcp
ProcEnviron:
 LANG=fi_FI.UTF-8
 LANGUAGE=fi_FI:fi:en_GB:en
 PATH=(custom, no user)
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.38-6-generic-pae root=UUID=fc3a8330-a2b0-4b18-9f6c-4157157753b8 ro crashkernel=384M-2G:64M,2G-:128M quiet splash vt.handoff=7
ProcKernelCmdLine_: BOOT_IMAGE=/boot/vmlinuz-2.6.38-6-generic-pae root=UUID=fc3a8330-a2b0-4b18-9f6c-4157157753b8 ro crashkernel=384M-2G:64M,2G-:128M quiet splash vt.handoff=7
Renderer: Unknown
SegvAnalysis:
 Segfault happened at: 0x80775cd <DevHasCursor+13>: mov 0x4(%eax),%eax
 PC (0x080775cd) ok
 source "0x4(%eax)" (0x00000004) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
 DevHasCursor (pDev=0xa34fd00) at ../../dix/events.c:295
 RemoveDevice (dev=0xa34fd00, sendevent=1 '\001') at ../../dix/devices.c:1069
 DeleteInputDeviceRequest (pDev=0xa34fd00) at ../../../../hw/xfree86/common/xf86Xinput.c:961
 xf86DisableDevice (dev=0xa34fd00, panic=1) at ../../../../hw/xfree86/common/xf86Xinput.c:1444
 ?? () from /usr/lib/xorg/modules/input/joystick_drv.so
Title: Xorg crashed with SIGSEGV in DevHasCursor()
UpgradeStatus: Upgraded to natty on 2011-02-02 (43 days ago)
UserGroups:

dmi.bios.date: 04/18/2008
dmi.bios.vendor: LENOVO
dmi.bios.version: 7NETB2WW (2.12 )
dmi.board.name: 7674E68
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr7NETB2WW(2.12):bd04/18/2008:svnLENOVO:pn7674E68:pvrThinkPadX61:rvnLENOVO:rn7674E68:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 7674E68
dmi.product.version: ThinkPad X61
dmi.sys.vendor: LENOVO
version.compiz: compiz 1:0.9.4-0ubuntu4
version.libdrm2: libdrm2 2.4.23-1ubuntu3
version.libgl1-mesa-glx: libgl1-mesa-glx 7.10.1-0ubuntu2
version.xserver-xorg: xserver-xorg 1:7.6~3ubuntu11
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:6.14.0-0ubuntu2
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.14.0-4ubuntu1
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau N/A

[Timo Aaltonen (tjaalton)]

(gdb) bt full
#0 0xb76cc658 in main_arena () from /lib/libc.so.6
No symbol table info available.
#1 0x080c4a4b in DeleteInputDeviceRequest (pDev=0xae74e10) at ../../../../hw/xfree86/common/xf86Xinput.c:966
        pInfo = 0xb76cc628
        drv = <value optimised out>
        isMaster = <value optimised out>
#2 0x080c5a2f in xf86DisableDevice (dev=0xae74e10, panic=1) at ../../../../hw/xfree86/common/xf86Xinput.c:1444
No locals.
#3 0xb64aa32a in jstkCoreUnInit (drv=0xae75960, pInfo=0xadae6d0, flags=0) at ../../src/jstk.c:627
        device = 0xae742b8
#4 0x080c4a4b in DeleteInputDeviceRequest (pDev=0xae74e10) at ../../../../hw/xfree86/common/xf86Xinput.c:966
        pInfo = 0xadae6d0
        drv = <value optimised out>
        isMaster = <value optimised out>
#5 0x080cc23f in remove_device (backend=<value optimised out>, dev=0xae74e10) at ../../config/config.c:84
No locals.
#6 0x080cc2f9 in remove_devices (backend=0x81de79d "udev",
    config_info=0xac8b458 "udev:/sys/devices/pci0000:00/0000:00:1a.1/usb4/4-1/4-1:1.0/input/input9/event7")
    at ../../config/config.c:96
        dev = <value optimised out>
        next = 0xae56f48
#7 0x080cd04a in device_removed (data=0x0, err=1, read_mask=0x820e380) at ../../config/udev.c:233
        value = 0xac8b458 "udev:/sys/devices/pci0000:00/0000:00:1a.1/usb4/4-1/4-1:1.0/input/input9/event7"
        syspath = <value optimised out>
#8 wakeup_handler (data=0x0, err=1, read_mask=0x820e380) at ../../config/udev.c:257
        udev_fd = <value optimised out>
        udev_device = <value optimised out>
        action = <value optimised out>
#9 0x080746f2 in WakeupHandler (result=1, pReadmask=0x820e380) at ../../dix/dixutils.c:419
        i = 2
        j = <value optimised out>
#10 0x080a201a in WaitForSomething (pClientsReady=0xac4a1c8) at ../../os/WaitFor.c:235
        i = <value optimised out>
        waittime = {tv_sec = 74, tv_usec = 469748}
        wt = 0xbfa91324
        timeout = <value optimised out>
        clientsReadable = {fds_bits = {0 <repeats 32 times>}}
        clientsWritable = {fds_bits = {5, -1079438712, 134693082, -1079438740, 173, 1073741824, -1218218719, 16, 0,
            -1079438632, 136294388, 32, 181785064, -1079438728, 134919486, 44, -1079438632, 1, 178075216, -1079438692,
            136294388, -1079438696, 134929695, 181785064, -1079438632, 1, 134693226, -1079438552, -1216633597, -1079438584,
            134901974, 181785064}}
        selecterr = 19
        nready = 0
        devicesReadable = {fds_bits = {0 <repeats 32 times>}}
        now = <value optimised out>
        someReady = <value optimised out>
#11 0x0807001e in Dispatch () at ../../dix/dispatch.c:367
        clientReady = 0xac4a1c8
        result = <value optimised out>
        client = <value optimised out>
        nready = <value optimised out>
        icheck = 0x820d878
        start_tick = <value optimised out>
#12 0x0806292c in main (argc=8, argv=0xbfa914b4, envp=0xbfa914d8) at ../../dix/main.c:287
        i = <value optimised out>
        alwaysCheckForInput = {0, 1}