xserver SEGV in glamor/glamor_xv.c:291

[Anton Blanchard]

Hi,

I just hit a SEGV in the xserver when running:

# gst-launch-1.0 v4l2src ! xvimagesink

Thread 1 "Xorg" received signal SIGSEGV, Segmentation fault.
glamor_xv_render (port_priv=0x0, port_priv@entry=0x9a6668)
    at ../../../../glamor/glamor_xv.c:291
291 ../../../../glamor/glamor_xv.c: No such file or directory.
(gdb) backtrace
#0 glamor_xv_render (port_priv=0x0, port_priv@entry=0x9a6668)
    at ../../../../glamor/glamor_xv.c:291
#1 0x76313b88 in glamor_xv_put_image (port_priv=0x9a6668, pDrawable=0xfcc8b8,
    src_x=<optimized out>, src_y=<optimized out>, drw_x=640, drw_y=66,
    src_w=1280, src_h=960, drw_w=1280, drw_h=960, id=842094169,
    buf=0x71aff000 '\250' <repeats 160 times>, '\243' <repeats 32 times>, "\250\250\250\250\250\250\250\250"..., width=1280, height=960, sync=0,
    clipBoxes=0x7ece5b8c) at ../../../../glamor/glamor_xv.c:508
#2 0x00099e90 in xf86XVPutImage (pDraw=0xfcc8b8, pPort=0x93f420,
    pGC=<optimized out>, src_x=<optimized out>, src_y=0, src_w=1280,
    src_h=960, drw_x=0, drw_y=0, drw_w=1280, drw_h=960, format=0x996250,
    data=0x71aff000 '\250' <repeats 160 times>, '\243' <repeats 32 times>, "\250\250\250\250\250\250\250\250"..., sync=0, width=1280, height=960)
    at ../../../../../../hw/xfree86/common/xf86xv.c:1649
#3 0x000ea6dc in ProcXvShmPutImage (client=0xfccd68)
    at ../../../../Xext/xvdisp.c:928
#4 0x00043080 in Dispatch () at ../../../../dix/dispatch.c:479
#5 0x000472fc in dix_main (argc=291580, argv=0x76f55cf0 <_rtld_global_ro>,
    envp=<optimized out>) at ../../../../dix/main.c:287
#6 0x7698a678 in __libc_start_main (main=0x7ece5e94, argc=1990914048,
    argv=0x7698a678 <__libc_start_main+276>, init=<optimized out>,
    fini=0x1c2080 <__libc_csu_fini>, rtld_fini=0x76f369b8 <_dl_fini>,
    stack_end=0x7ece5e94) at libc-start.c:291

Looks like a bug was reported for this issue here:

https://bugs.freedesktop.org/show_bug.cgi?id=100710

And a fix made it upstream here:

https://cgit.freedesktop.org/xorg/xserver/commit/glamor/glamor_xv.c?id=7bfb87a2137853295ecc9e544a15626cfd773a02