Activity log for bug #324368

Date Who What changed Old value New value Message
2009-02-02 15:59:12 Matt Zimmerman bug added bug
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'CoreDump.gz' (CoreDump.gz)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'Dependencies.txt' (Dependencies.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'Disassembly.txt' (Disassembly.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'LsHal.txt' (LsHal.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'LsMod.txt' (LsMod.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'LsPci.txt' (LsPci.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'ProcMaps.txt' (ProcMaps.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'ProcStatus.txt' (ProcStatus.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'Registers.txt' (Registers.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'Stacktrace.txt' (Stacktrace.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'ThreadStacktrace.txt' (ThreadStacktrace.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'XorgConf.txt' (XorgConf.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'XorgLog.txt' (XorgLog.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'XorgLogOld.txt' (XorgLogOld.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'Xrandr.txt' (Xrandr.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'glxinfo.txt' (glxinfo.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'setxkbmap.txt' (setxkbmap.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'system.txt' (system.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'xdpyinfo.txt' (xdpyinfo.txt)
2009-02-02 15:59:12 Matt Zimmerman bug added attachment 'xkbcomp.txt' (xkbcomp.txt)
2009-02-02 16:00:17 Matt Zimmerman bug added subscriber Bryce Harrington
2009-02-02 16:27:10 Apport retracing service bug added subscriber Crash bug triagers for Ubuntu packages
2009-02-02 16:27:22 Apport retracing service bug added attachment 'Stacktrace.txt' (Stacktrace.txt (retraced))
2009-02-02 16:27:25 Apport retracing service bug added attachment 'ThreadStacktrace.txt' (ThreadStacktrace.txt (retraced))
2009-02-02 17:01:40 Bryce Harrington who_made_private mdz
2009-02-02 17:03:07 Bryce Harrington description This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible. ProblemType: Crash Architecture: amd64 DistroRelease: Ubuntu 9.04 ExecutablePath: /usr/bin/Xorg Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1 ProcAttrCurrent: unconfined ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7 ProcEnviron: LC_COLLATE=C PATH=(custom, no user) LANG=en_GB.UTF-8 SHELL=/bin/zsh ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009 Signal: 11 SourcePackage: xorg-server StacktraceTop: XisbRead () ?? () ?? () xf86Wakeup () WakeupHandler () Title: Xorg crashed with SIGSEGV in XisbRead() Uname: Linux 2.6.28-6-generic x86_64 UserGroups: This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible. #0 XisbRead (b=0x0) at ../../../../hw/xfree86/common/xisb.c:101 ret = <value optimized out> #1 0x00007f06594f4309 in ?? () from /usr/lib/xorg/modules/input//synaptics_drv.so #2 0x00007f06594f0c8a in ?? () from /usr/lib/xorg/modules/input//synaptics_drv.so #3 0x00000000004858bb in xf86Wakeup (blockData=<value optimized out>, err=<value optimized out>, pReadmask=<value optimized out>) at ../../../../hw/xfree86/common/xf86Events.c:271 sigstate = 1 LastSelectMask = (fd_set *) 0x7ddf20 devicesWithInput = {fds_bits = {16384, 0 <repeats 15 times>}} pInfo = (InputInfoPtr) 0x23ddfd0 #4 0x0000000000451cdb in WakeupHandler (result=1, pReadmask=0x7ddf20) at ../../dix/dixutils.c:418 i = 0 #5 0x00000000004ee4bf in WaitForSomething (pClientsReady=0x23dfaf0) at ../../os/WaitFor.c:231 i = 1 waittime = {tv_sec = 0, tv_usec = 923976} wt = (struct timeval *) 0x7fff79106740 timeout = <value optimized out> clientsReadable = {fds_bits = {0 <repeats 16 times>}} clientsWritable = {fds_bits = {35506112, 35585208, 35477280, 139665605120774, 108834960, 139665575263122, 126616504, 5472109, 35591776, 35591776, 35591776, 108834960, 35585208, 139665608215040, 84144416, 23161482}} curclient = <value optimized out> selecterr = 11 nready = <value optimized out> devicesReadable = {fds_bits = {0 <repeats 16 times>}} now = <value optimized out> someReady = 0 #6 0x000000000044dea0 in Dispatch () at ../../dix/dispatch.c:367 result = 0 client = (ClientPtr) 0x27bbe30 nready = -1 start_tick = <value optimized out> #7 0x0000000000433c0d in main (argc=10, argv=0x7fff79106938, envp=<value optimized out>) at ../../dix/main.c:397 i = 1 alwaysCheckForInput = {0, 1} ProblemType: Crash Architecture: amd64 DistroRelease: Ubuntu 9.04 ExecutablePath: /usr/bin/Xorg Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1 ProcAttrCurrent: unconfined ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7 ProcEnviron: LC_COLLATE=C PATH=(custom, no user) LANG=en_GB.UTF-8 SHELL=/bin/zsh ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009 Signal: 11 SourcePackage: xorg-server StacktraceTop: XisbRead () ?? () ?? () xf86Wakeup () WakeupHandler () Title: Xorg crashed with SIGSEGV in XisbRead() Uname: Linux 2.6.28-6-generic x86_64 UserGroups:
2009-02-02 17:04:24 Bryce Harrington xorg-server: status New Triaged
2009-02-02 17:04:24 Bryce Harrington xorg-server: assignee bryceharrington
2009-02-02 17:04:24 Bryce Harrington xorg-server: importance Undecided High
2009-02-02 17:04:24 Bryce Harrington xorg-server: statusexplanation
2009-02-02 20:58:21 Bryce Harrington bug added attachment 'nullptr_xisbread.patch' (nullptr_xisbread.patch)
2009-02-02 21:07:08 Bryce Harrington bug assigned to xorg-server
2009-02-02 21:11:15 Bug Watch Updater xorg-server: status Unknown Confirmed
2009-02-10 17:51:59 Bryce Harrington xorg-server: status Triaged Incomplete
2009-02-10 17:51:59 Bryce Harrington xorg-server: statusexplanation Patching for the null ptr seems to be an insufficient fix. But for a better fix upstream needs a reproducible test case. Kees or Matt, either of you have steps for reproducing this crash? If it was a one-time only thing, it could be hard to find a fix.
2009-02-10 17:53:40 Bryce Harrington bug added attachment 'xserver-xorg-input-evdev_2.1.1-1ubuntu3~errmsgs1.debdiff' (xserver-xorg-input-evdev_2.1.1-1ubuntu3~errmsgs1.debdiff)
2009-02-17 21:26:33 Bryce Harrington xorg-server: importance High Medium
2009-02-17 21:26:33 Bryce Harrington xorg-server: statusexplanation Patching for the null ptr seems to be an insufficient fix. But for a better fix upstream needs a reproducible test case. Kees or Matt, either of you have steps for reproducing this crash? If it was a one-time only thing, it could be hard to find a fix. > Kees and I both experienced it independently, so it wasn't a one-time thing. > There is surely a bug here. Right, pretty clearly from the backtrace something did go wrong. It is exceptionally weird that this happened for both you and kees at roughly the same time, yet I gather that neither of you have seen it since then, and it appears few others have seen it (neither google nor launchpad turn up other bugs with 'XisbRead' crashes). It makes me think there is something very specific that is done to produce this bug, that both of you did. Kees mentioned he'd been plugging/unplugging from projectors, which seems unlikely to cause a crash in the mouse code, but stranger things have been known to happen. > Have you considered possible cases where the null pointer could be passed in via the synaptics driver? Yes, unfortunately the backtrace did not include symbols for the synaptics routines, so it's a bit of detective work to guess at the codepath, but XisbRead() only gets called a few places and it always passes the same parameter - a comm buffer. There's a few places where this is set to NULL, once at the beginning of driver initialization, and again in the code to turn the driver on and off. However, there are errors/warnings that would normally get printed in those conditions, which aren't appearing in your log. Very strange. I wonder if perhaps there is a race condition where the suspend/resume occurred while the driver was in the middle of either the init, or in the middle of turning the device on/off. Some of the other warnings in the log indicate it was having trouble opening the device and retrying after a delay; maybe suspending while it was in the middle of a delay revealed the problem. I wish we had kees' Xorg.0.log for comparison. I'm tentatively going to drop the priority on this to Medium for now since while it's a bad issue, it seems to occur quite infrequently. Although if we see more reports of this problem I'll bump it back up to High.
2009-02-18 02:22:36 Bryce Harrington bug added attachment 'Xorg.0.log' (Xorg.0.log)
2009-03-06 05:46:07 Bryce Harrington description This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible. #0 XisbRead (b=0x0) at ../../../../hw/xfree86/common/xisb.c:101 ret = <value optimized out> #1 0x00007f06594f4309 in ?? () from /usr/lib/xorg/modules/input//synaptics_drv.so #2 0x00007f06594f0c8a in ?? () from /usr/lib/xorg/modules/input//synaptics_drv.so #3 0x00000000004858bb in xf86Wakeup (blockData=<value optimized out>, err=<value optimized out>, pReadmask=<value optimized out>) at ../../../../hw/xfree86/common/xf86Events.c:271 sigstate = 1 LastSelectMask = (fd_set *) 0x7ddf20 devicesWithInput = {fds_bits = {16384, 0 <repeats 15 times>}} pInfo = (InputInfoPtr) 0x23ddfd0 #4 0x0000000000451cdb in WakeupHandler (result=1, pReadmask=0x7ddf20) at ../../dix/dixutils.c:418 i = 0 #5 0x00000000004ee4bf in WaitForSomething (pClientsReady=0x23dfaf0) at ../../os/WaitFor.c:231 i = 1 waittime = {tv_sec = 0, tv_usec = 923976} wt = (struct timeval *) 0x7fff79106740 timeout = <value optimized out> clientsReadable = {fds_bits = {0 <repeats 16 times>}} clientsWritable = {fds_bits = {35506112, 35585208, 35477280, 139665605120774, 108834960, 139665575263122, 126616504, 5472109, 35591776, 35591776, 35591776, 108834960, 35585208, 139665608215040, 84144416, 23161482}} curclient = <value optimized out> selecterr = 11 nready = <value optimized out> devicesReadable = {fds_bits = {0 <repeats 16 times>}} now = <value optimized out> someReady = 0 #6 0x000000000044dea0 in Dispatch () at ../../dix/dispatch.c:367 result = 0 client = (ClientPtr) 0x27bbe30 nready = -1 start_tick = <value optimized out> #7 0x0000000000433c0d in main (argc=10, argv=0x7fff79106938, envp=<value optimized out>) at ../../dix/main.c:397 i = 1 alwaysCheckForInput = {0, 1} ProblemType: Crash Architecture: amd64 DistroRelease: Ubuntu 9.04 ExecutablePath: /usr/bin/Xorg Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1 ProcAttrCurrent: unconfined ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7 ProcEnviron: LC_COLLATE=C PATH=(custom, no user) LANG=en_GB.UTF-8 SHELL=/bin/zsh ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009 Signal: 11 SourcePackage: xorg-server StacktraceTop: XisbRead () ?? () ?? () xf86Wakeup () WakeupHandler () Title: Xorg crashed with SIGSEGV in XisbRead() Uname: Linux 2.6.28-6-generic x86_64 UserGroups: This happened during, or immediately after, a resume from RAM. I've suspended and resumed many other times without incident, so this may not be reproducible. #0 XisbRead (b=0x0) at ../../../../hw/xfree86/common/xisb.c:101 ret = <value optimized out> #1 0x00007f06594f4309 in ?? () from /usr/lib/xorg/modules/input//synaptics_drv.so #2 0x00007f06594f0c8a in ?? () from /usr/lib/xorg/modules/input//synaptics_drv.so #3 0x00000000004858bb in xf86Wakeup (blockData=<value optimized out>, err=<value optimized out>, pReadmask=<value optimized out>) at ../../../../hw/xfree86/common/xf86Events.c:271 sigstate = 1 LastSelectMask = (fd_set *) 0x7ddf20 devicesWithInput = {fds_bits = {16384, 0 <repeats 15 times>}} pInfo = (InputInfoPtr) 0x23ddfd0 #4 0x0000000000451cdb in WakeupHandler (result=1, pReadmask=0x7ddf20) at ../../dix/dixutils.c:418 i = 0 #5 0x00000000004ee4bf in WaitForSomething (pClientsReady=0x23dfaf0) at ../../os/WaitFor.c:231 i = 1 waittime = {tv_sec = 0, tv_usec = 923976} wt = (struct timeval *) 0x7fff79106740 timeout = <value optimized out> clientsReadable = {fds_bits = {0 <repeats 16 times>}} clientsWritable = {fds_bits = {35506112, 35585208, 35477280, 139665605120774, 108834960, 139665575263122, 126616504, 5472109, 35591776, 35591776, 35591776, 108834960, 35585208, 139665608215040, 84144416, 23161482}} curclient = <value optimized out> selecterr = 11 nready = <value optimized out> devicesReadable = {fds_bits = {0 <repeats 16 times>}} now = <value optimized out> someReady = 0 #6 0x000000000044dea0 in Dispatch () at ../../dix/dispatch.c:367 result = 0 client = (ClientPtr) 0x27bbe30 nready = -1 start_tick = <value optimized out> #7 0x0000000000433c0d in main (argc=10, argv=0x7fff79106938, envp=<value optimized out>) at ../../dix/main.c:397 i = 1 alwaysCheckForInput = {0, 1} ProblemType: Crash Architecture: amd64 DistroRelease: Ubuntu 9.04 ExecutablePath: /usr/bin/Xorg Package: xserver-xorg-core 2:1.5.99.902-0ubuntu1 ProcAttrCurrent: unconfined ProcCmdline: /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth -nolisten tcp vt7 ProcEnviron: LC_COLLATE=C PATH=(custom, no user) LANG=en_GB.UTF-8 SHELL=/bin/zsh ProcVersion: Linux version 2.6.28-6-generic (buildd@crested) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu1) ) #17-Ubuntu SMP Fri Jan 30 15:35:08 UTC 2009 Signal: 11 SourcePackage: xorg-server StacktraceTop: XisbRead () ?? () ?? () xf86Wakeup () WakeupHandler () Title: Xorg crashed with SIGSEGV in XisbRead() Uname: Linux 2.6.28-6-generic x86_64 UserGroups: [lspci] 00:00.0 Host bridge [0600]: Intel Corporation Mobile PM965/GM965/GL960 Memory Controller Hub [8086:2a00] (rev 0c) Subsystem: Lenovo Device [17aa:20b3] 00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller [8086:2a02] (rev 0c) Subsystem: Lenovo Device [17aa:20b5]
2009-03-19 07:02:07 Bryce Harrington xorg-server (Ubuntu): status Incomplete Fix Committed
2009-03-19 07:20:17 Launchpad Janitor xorg-server: status Fix Committed Fix Released
2009-11-06 16:47:22 Bug Watch Updater xorg-server: status Confirmed Fix Released
2010-02-22 22:34:53 Launchpad Janitor branch linked lp:ubuntu/xorg-server
2010-09-14 06:57:12 Bug Watch Updater xorg-server: importance Unknown High
2011-01-25 15:14:27 Bug Watch Updater xorg-server: importance High Unknown
2011-02-03 17:03:31 Bug Watch Updater xorg-server: importance Unknown High