2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added bug |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'CoreDump.gz' (CoreDump.gz) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'Dependencies.txt' (Dependencies.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'Disassembly.txt' (Disassembly.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'LsHal.txt' (LsHal.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'LsMod.txt' (LsMod.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'LsPci.txt' (LsPci.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'ProcMaps.txt' (ProcMaps.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'ProcStatus.txt' (ProcStatus.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'Registers.txt' (Registers.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'Stacktrace.txt' (Stacktrace.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'ThreadStacktrace.txt' (ThreadStacktrace.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'XorgConf.txt' (XorgConf.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'XorgLog.txt' (XorgLog.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'XorgLogOld.txt' (XorgLogOld.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'Xrandr.txt' (Xrandr.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'glxinfo.txt' (glxinfo.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'setxkbmap.txt' (setxkbmap.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'system.txt' (system.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'xdpyinfo.txt' (xdpyinfo.txt) |
2009-02-02 15:59:12 |
Matt Zimmerman |
bug |
|
|
added attachment 'xkbcomp.txt' (xkbcomp.txt) |
2009-02-02 16:00:17 |
Matt Zimmerman |
bug |
|
|
added subscriber Bryce Harrington |
2009-02-02 16:27:10 |
Apport retracing service |
bug |
|
|
added subscriber Crash bug triagers for Ubuntu packages |
2009-02-02 16:27:22 |
Apport retracing service |
bug |
|
|
added attachment 'Stacktrace.txt' (Stacktrace.txt (retraced)) |
2009-02-02 16:27:25 |
Apport retracing service |
bug |
|
|
added attachment 'ThreadStacktrace.txt' (ThreadStacktrace.txt (retraced)) |
2009-02-02 17:01:40 |
Bryce Harrington |
who_made_private |
mdz |
|
|
2009-02-02 17:03:07 |
Bryce Harrington |
description |
This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible.
ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/bin/Xorg
Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7
ProcEnviron:
LC_COLLATE=C
PATH=(custom, no user)
LANG=en_GB.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
XisbRead ()
?? ()
?? ()
xf86Wakeup ()
WakeupHandler ()
Title: Xorg crashed with SIGSEGV in XisbRead()
Uname: Linux 2.6.28-6-generic x86_64
UserGroups: |
This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible.
#0 XisbRead (b=0x0) at ../../../../hw/xfree86/common/xisb.c:101
ret = <value optimized out>
#1 0x00007f06594f4309 in ?? ()
from /usr/lib/xorg/modules/input//synaptics_drv.so
#2 0x00007f06594f0c8a in ?? ()
from /usr/lib/xorg/modules/input//synaptics_drv.so
#3 0x00000000004858bb in xf86Wakeup (blockData=<value optimized out>,
err=<value optimized out>, pReadmask=<value optimized out>)
at ../../../../hw/xfree86/common/xf86Events.c:271
sigstate = 1
LastSelectMask = (fd_set *) 0x7ddf20
devicesWithInput = {fds_bits = {16384, 0 <repeats 15 times>}}
pInfo = (InputInfoPtr) 0x23ddfd0
#4 0x0000000000451cdb in WakeupHandler (result=1, pReadmask=0x7ddf20)
at ../../dix/dixutils.c:418
i = 0
#5 0x00000000004ee4bf in WaitForSomething (pClientsReady=0x23dfaf0)
at ../../os/WaitFor.c:231
i = 1
waittime = {tv_sec = 0, tv_usec = 923976}
wt = (struct timeval *) 0x7fff79106740
timeout = <value optimized out>
clientsReadable = {fds_bits = {0 <repeats 16 times>}}
clientsWritable = {fds_bits = {35506112, 35585208, 35477280,
139665605120774, 108834960, 139665575263122, 126616504, 5472109,
35591776, 35591776, 35591776, 108834960, 35585208, 139665608215040,
84144416, 23161482}}
curclient = <value optimized out>
selecterr = 11
nready = <value optimized out>
devicesReadable = {fds_bits = {0 <repeats 16 times>}}
now = <value optimized out>
someReady = 0
#6 0x000000000044dea0 in Dispatch () at ../../dix/dispatch.c:367
result = 0
client = (ClientPtr) 0x27bbe30
nready = -1
start_tick = <value optimized out>
#7 0x0000000000433c0d in main (argc=10, argv=0x7fff79106938,
envp=<value optimized out>) at ../../dix/main.c:397
i = 1
alwaysCheckForInput = {0, 1}
ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/bin/Xorg
Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7
ProcEnviron:
LC_COLLATE=C
PATH=(custom, no user)
LANG=en_GB.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
XisbRead ()
?? ()
?? ()
xf86Wakeup ()
WakeupHandler ()
Title: Xorg crashed with SIGSEGV in XisbRead()
Uname: Linux 2.6.28-6-generic x86_64
UserGroups: |
|
2009-02-02 17:04:24 |
Bryce Harrington |
xorg-server: status |
New |
Triaged |
|
2009-02-02 17:04:24 |
Bryce Harrington |
xorg-server: assignee |
|
bryceharrington |
|
2009-02-02 17:04:24 |
Bryce Harrington |
xorg-server: importance |
Undecided |
High |
|
2009-02-02 17:04:24 |
Bryce Harrington |
xorg-server: statusexplanation |
|
|
|
2009-02-02 20:58:21 |
Bryce Harrington |
bug |
|
|
added attachment 'nullptr_xisbread.patch' (nullptr_xisbread.patch) |
2009-02-02 21:07:08 |
Bryce Harrington |
bug |
|
|
assigned to xorg-server |
2009-02-02 21:11:15 |
Bug Watch Updater |
xorg-server: status |
Unknown |
Confirmed |
|
2009-02-10 17:51:59 |
Bryce Harrington |
xorg-server: status |
Triaged |
Incomplete |
|
2009-02-10 17:51:59 |
Bryce Harrington |
xorg-server: statusexplanation |
|
Patching for the null ptr seems to be an insufficient fix. But for a better fix upstream needs a reproducible test case.
Kees or Matt, either of you have steps for reproducing this crash? If it was a one-time only thing, it could be hard to find a fix. |
|
2009-02-10 17:53:40 |
Bryce Harrington |
bug |
|
|
added attachment 'xserver-xorg-input-evdev_2.1.1-1ubuntu3~errmsgs1.debdiff' (xserver-xorg-input-evdev_2.1.1-1ubuntu3~errmsgs1.debdiff) |
2009-02-17 21:26:33 |
Bryce Harrington |
xorg-server: importance |
High |
Medium |
|
2009-02-17 21:26:33 |
Bryce Harrington |
xorg-server: statusexplanation |
Patching for the null ptr seems to be an insufficient fix. But for a better fix upstream needs a reproducible test case.
Kees or Matt, either of you have steps for reproducing this crash? If it was a one-time only thing, it could be hard to find a fix. |
> Kees and I both experienced it independently, so it wasn't a one-time thing.
> There is surely a bug here.
Right, pretty clearly from the backtrace something did go wrong. It is exceptionally weird that this happened for both you and kees at roughly the same time, yet I gather that neither of you have seen it since then, and it appears few others have seen it (neither google nor launchpad turn up other bugs with 'XisbRead' crashes). It makes me think there is something very specific that is done to produce this bug, that both of you did. Kees mentioned he'd been plugging/unplugging from projectors, which seems unlikely to cause a crash in the mouse code, but stranger things have been known to happen.
> Have you considered possible cases where the null pointer could be passed in via the synaptics driver?
Yes, unfortunately the backtrace did not include symbols for the synaptics routines, so it's a bit of detective work to guess at the codepath, but XisbRead() only gets called a few places and it always passes the same parameter - a comm buffer. There's a few places where this is set to NULL, once at the beginning of driver initialization, and again in the code to turn the driver on and off. However, there are errors/warnings that would normally get printed in those conditions, which aren't appearing in your log. Very strange.
I wonder if perhaps there is a race condition where the suspend/resume occurred while the driver was in the middle of either the init, or in the middle of turning the device on/off. Some of the other warnings in the log indicate it was having trouble opening the device and retrying after a delay; maybe suspending while it was in the middle of a delay revealed the problem. I wish we had kees' Xorg.0.log for comparison.
I'm tentatively going to drop the priority on this to Medium for now since while it's a bad issue, it seems to occur quite infrequently. Although if we see more reports of this problem I'll bump it back up to High. |
|
2009-02-18 02:22:36 |
Bryce Harrington |
bug |
|
|
added attachment 'Xorg.0.log' (Xorg.0.log) |
2009-03-06 05:46:07 |
Bryce Harrington |
description |
This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible.
#0 XisbRead (b=0x0) at ../../../../hw/xfree86/common/xisb.c:101
ret = <value optimized out>
#1 0x00007f06594f4309 in ?? ()
from /usr/lib/xorg/modules/input//synaptics_drv.so
#2 0x00007f06594f0c8a in ?? ()
from /usr/lib/xorg/modules/input//synaptics_drv.so
#3 0x00000000004858bb in xf86Wakeup (blockData=<value optimized out>,
err=<value optimized out>, pReadmask=<value optimized out>)
at ../../../../hw/xfree86/common/xf86Events.c:271
sigstate = 1
LastSelectMask = (fd_set *) 0x7ddf20
devicesWithInput = {fds_bits = {16384, 0 <repeats 15 times>}}
pInfo = (InputInfoPtr) 0x23ddfd0
#4 0x0000000000451cdb in WakeupHandler (result=1, pReadmask=0x7ddf20)
at ../../dix/dixutils.c:418
i = 0
#5 0x00000000004ee4bf in WaitForSomething (pClientsReady=0x23dfaf0)
at ../../os/WaitFor.c:231
i = 1
waittime = {tv_sec = 0, tv_usec = 923976}
wt = (struct timeval *) 0x7fff79106740
timeout = <value optimized out>
clientsReadable = {fds_bits = {0 <repeats 16 times>}}
clientsWritable = {fds_bits = {35506112, 35585208, 35477280,
139665605120774, 108834960, 139665575263122, 126616504, 5472109,
35591776, 35591776, 35591776, 108834960, 35585208, 139665608215040,
84144416, 23161482}}
curclient = <value optimized out>
selecterr = 11
nready = <value optimized out>
devicesReadable = {fds_bits = {0 <repeats 16 times>}}
now = <value optimized out>
someReady = 0
#6 0x000000000044dea0 in Dispatch () at ../../dix/dispatch.c:367
result = 0
client = (ClientPtr) 0x27bbe30
nready = -1
start_tick = <value optimized out>
#7 0x0000000000433c0d in main (argc=10, argv=0x7fff79106938,
envp=<value optimized out>) at ../../dix/main.c:397
i = 1
alwaysCheckForInput = {0, 1}
ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/bin/Xorg
Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7
ProcEnviron:
LC_COLLATE=C
PATH=(custom, no user)
LANG=en_GB.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
XisbRead ()
?? ()
?? ()
xf86Wakeup ()
WakeupHandler ()
Title: Xorg crashed with SIGSEGV in XisbRead()
Uname: Linux 2.6.28-6-generic x86_64
UserGroups: |
This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible.
#0 XisbRead (b=0x0) at ../../../../hw/xfree86/common/xisb.c:101
ret = <value optimized out>
#1 0x00007f06594f4309 in ?? ()
from /usr/lib/xorg/modules/input//synaptics_drv.so
#2 0x00007f06594f0c8a in ?? ()
from /usr/lib/xorg/modules/input//synaptics_drv.so
#3 0x00000000004858bb in xf86Wakeup (blockData=<value optimized out>,
err=<value optimized out>, pReadmask=<value optimized out>)
at ../../../../hw/xfree86/common/xf86Events.c:271
sigstate = 1
LastSelectMask = (fd_set *) 0x7ddf20
devicesWithInput = {fds_bits = {16384, 0 <repeats 15 times>}}
pInfo = (InputInfoPtr) 0x23ddfd0
#4 0x0000000000451cdb in WakeupHandler (result=1, pReadmask=0x7ddf20)
at ../../dix/dixutils.c:418
i = 0
#5 0x00000000004ee4bf in WaitForSomething (pClientsReady=0x23dfaf0)
at ../../os/WaitFor.c:231
i = 1
waittime = {tv_sec = 0, tv_usec = 923976}
wt = (struct timeval *) 0x7fff79106740
timeout = <value optimized out>
clientsReadable = {fds_bits = {0 <repeats 16 times>}}
clientsWritable = {fds_bits = {35506112, 35585208, 35477280,
139665605120774, 108834960, 139665575263122, 126616504, 5472109,
35591776, 35591776, 35591776, 108834960, 35585208, 139665608215040,
84144416, 23161482}}
curclient = <value optimized out>
selecterr = 11
nready = <value optimized out>
devicesReadable = {fds_bits = {0 <repeats 16 times>}}
now = <value optimized out>
someReady = 0
#6 0x000000000044dea0 in Dispatch () at ../../dix/dispatch.c:367
result = 0
client = (ClientPtr) 0x27bbe30
nready = -1
start_tick = <value optimized out>
#7 0x0000000000433c0d in main (argc=10, argv=0x7fff79106938,
envp=<value optimized out>) at ../../dix/main.c:397
i = 1
alwaysCheckForInput = {0, 1}
ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/bin/Xorg
Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7
ProcEnviron:
LC_COLLATE=C
PATH=(custom, no user)
LANG=en_GB.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
XisbRead ()
?? ()
?? ()
xf86Wakeup ()
WakeupHandler ()
Title: Xorg crashed with SIGSEGV in XisbRead()
Uname: Linux 2.6.28-6-generic x86_64
UserGroups:
[lspci]
00:00.0 Host bridge [0600]: Intel Corporation Mobile PM965/GM965/GL960 Memory Controller Hub [8086:2a00] (rev 0c)
Subsystem: Lenovo Device [17aa:20b3]
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller [8086:2a02] (rev 0c)
Subsystem: Lenovo Device [17aa:20b5]
|
|
2009-03-19 07:02:07 |
Bryce Harrington |
xorg-server (Ubuntu): status |
Incomplete |
Fix Committed |
|
2009-03-19 07:20:17 |
Launchpad Janitor |
xorg-server: status |
Fix Committed |
Fix Released |
|
2009-11-06 16:47:22 |
Bug Watch Updater |
xorg-server: status |
Confirmed |
Fix Released |
|
2010-02-22 22:34:53 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/xorg-server |
|
2010-09-14 06:57:12 |
Bug Watch Updater |
xorg-server: importance |
Unknown |
High |
|
2011-01-25 15:14:27 |
Bug Watch Updater |
xorg-server: importance |
High |
Unknown |
|
2011-02-03 17:03:31 |
Bug Watch Updater |
xorg-server: importance |
Unknown |
High |
|