| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added bug |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'Xorg.strace' (Xorg.strace) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'Dependencies.txt' (Dependencies.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'LsHal.txt' (LsHal.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'LsMod.txt' (LsMod.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'LsPci.txt' (LsPci.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'XorgConf.txt' (XorgConf.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'XorgLog.txt' (XorgLog.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'XorgLogOld.txt' (XorgLogOld.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'Xrandr.txt' (Xrandr.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'glxinfo.txt' (glxinfo.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'setxkbmap.txt' (setxkbmap.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'system.txt' (system.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'xdpyinfo.txt' (xdpyinfo.txt) |
| 2009-02-11 11:56:40 |
Matt Zimmerman |
bug |
|
|
added attachment 'xkbcomp.txt' (xkbcomp.txt) |
| 2009-02-11 18:21:33 |
Bryce Harrington |
xorg: status |
New |
Triaged |
|
| 2009-02-11 18:21:33 |
Bryce Harrington |
xorg: title |
Bug #328035 in xorg (Ubuntu): "*** glibc detected *** free(): invalid next size (fast)" |
Bug #328035 in xorg-server (Ubuntu): "*** glibc detected *** free(): invalid next size (fast)" |
|
| 2009-02-11 18:21:33 |
Bryce Harrington |
xorg: importance |
Undecided |
High |
|
| 2009-02-11 18:21:33 |
Bryce Harrington |
xorg: bugtargetname |
xorg (Ubuntu) |
xorg-server (Ubuntu) |
|
| 2009-02-11 18:21:33 |
Bryce Harrington |
xorg: statusexplanation |
|
|
|
| 2009-02-11 18:21:33 |
Bryce Harrington |
xorg: bugtargetdisplayname |
xorg (Ubuntu) |
xorg-server (Ubuntu) |
|
| 2009-02-18 02:39:12 |
Bryce Harrington |
title |
*** glibc detected *** free(): invalid next size (fast) |
*** glibc detected *** free(): invalid next size (fast) for xf86Wakeup() call |
|
| 2009-03-05 23:24:46 |
Bryce Harrington |
description |
Binary package hint: xorg
I have been experiencing X server crashes during suspend/resume testing, but no apport report was being left behind. By stracing the X server, I was able to see that this was due to glibc detecting heap corruption and aborting the process.
strace output attached.
ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xorg 1:7.4~5ubuntu12
ProcEnviron:
LC_COLLATE=C
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-7-generic (buildd@yellow) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu2) ) #20-Ubuntu SMP Mon Feb 9 15:42:34 UTC 2009
SourcePackage: xorg
Uname: Linux 2.6.28-7-generic x86_64 |
Binary package hint: xorg
I have been experiencing X server crashes during suspend/resume testing, but no apport report was being left behind. By stracing the X server, I was able to see that this was due to glibc detecting heap corruption and aborting the process.
strace output attached.
ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xorg 1:7.4~5ubuntu12
ProcEnviron:
LC_COLLATE=C
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-7-generic (buildd@yellow) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu2) ) #20-Ubuntu SMP Mon Feb 9 15:42:34 UTC 2009
SourcePackage: xorg
Uname: Linux 2.6.28-7-generic x86_64
[lspci]
00:00.0 Host bridge [0600]: Intel Corporation Mobile PM965/GM965/GL960 Memory Controller Hub [8086:2a00] (rev 0c)
Subsystem: Lenovo Device [17aa:20b3]
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller [8086:2a02] (rev 0c)
Subsystem: Lenovo Device [17aa:20b5]
|
|
| 2009-03-06 11:02:48 |
Martin Pitt |
xorg-server: assignee |
|
bryce |
|
| 2009-03-06 11:02:48 |
Martin Pitt |
xorg-server: statusexplanation |
|
|
|
| 2009-03-06 11:03:10 |
Martin Pitt |
xorg-server: assignee |
bryce |
bryceharrington |
|
| 2009-03-07 01:56:34 |
Steve Langasek |
xorg-server: bugtargetdisplayname |
xorg-server (Ubuntu Jaunty) |
xserver-xorg-video-intel (Ubuntu Jaunty) |
|
| 2009-03-07 01:56:34 |
Steve Langasek |
xorg-server: bugtargetname |
xorg-server (Ubuntu Jaunty) |
xserver-xorg-video-intel (Ubuntu Jaunty) |
|
| 2009-03-07 01:56:34 |
Steve Langasek |
xorg-server: statusexplanation |
|
Was going to bisect, then noticed that the first xserver-xorg-video-intel version where I started seeing the problem had a changelog entry describing a single fix related to switching video output - which is precisely what appears to trigger the bug for me. Have downgraded to 2:2.6.1-1ubuntu1, and so far X is stable for me again, in the face of being exercised with lid open/close, suspend/resume, toggling video output, etc.
No clue why that small patch from -1ubuntu2 is triggering heap corruption - clearly the corruption is happening in some other part of the code. But I'm about 98% certain that this is the change that introduced the problem. I'll continue to run with this version for the time being and try to trigger the crash in the usual ways (you know, suspend/resume, sneezing, etc). |
|
| 2009-03-07 01:56:34 |
Steve Langasek |
xorg-server: title |
Bug #328035 in xorg-server (Ubuntu Jaunty): "*** glibc detected *** free(): invalid next size (fast) for xf86Wakeup() call" |
Bug #328035 in xserver-xorg-video-intel (Ubuntu Jaunty): "*** glibc detected *** free(): invalid next size (fast) for xf86Wakeup() call" |
|
| 2009-03-19 05:09:50 |
Bryce Harrington |
xserver-xorg-video-intel (Ubuntu Jaunty): assignee |
bryceharrington |
|
|
| 2009-03-23 08:54:26 |
Nafallo Bjälevik |
attachment added |
|
backtrace http://launchpadlibrarian.net/24244032/%3A0.log.1 |
|
| 2009-03-24 08:27:42 |
Matt Zimmerman |
description |
Binary package hint: xorg
I have been experiencing X server crashes during suspend/resume testing, but no apport report was being left behind. By stracing the X server, I was able to see that this was due to glibc detecting heap corruption and aborting the process.
strace output attached.
ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xorg 1:7.4~5ubuntu12
ProcEnviron:
LC_COLLATE=C
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-7-generic (buildd@yellow) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu2) ) #20-Ubuntu SMP Mon Feb 9 15:42:34 UTC 2009
SourcePackage: xorg
Uname: Linux 2.6.28-7-generic x86_64
[lspci]
00:00.0 Host bridge [0600]: Intel Corporation Mobile PM965/GM965/GL960 Memory Controller Hub [8086:2a00] (rev 0c)
Subsystem: Lenovo Device [17aa:20b3]
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller [8086:2a02] (rev 0c)
Subsystem: Lenovo Device [17aa:20b5]
|
Binary package hint: xorg
I have been experiencing X server crashes during suspend/resume testing, but no apport report was being left behind. The crash is due to heap corruption detected by glibc. This is logged to /var/log/gdm/:0.log.1 and looks like this:
*** glibc detected *** /usr/X11R6/bin/X: free(): invalid next size (fast): 0x0000000005f124e0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f096ada6cb8]
/lib/libc.so.6(cfree+0x76)[0x7f096ada9276]
/usr/X11R6/bin/X(LogVMessageVerb+0x104)[0x4fb964]
/usr/X11R6/bin/X(xf86MsgVerb+0x8f)[0x48f26f]
/usr/X11R6/bin/X[0x4708a6]
/usr/X11R6/bin/X(xf86DeleteInput+0x1a)[0x491b3a]
/usr/X11R6/bin/X(DeleteInputDeviceRequest+0xf2)[0x496872]
/usr/X11R6/bin/X[0x46bf5e]
/usr/X11R6/bin/X[0x46c037]
/usr/lib/libhal.so.1[0x7f096bf53ee9]
/lib/libdbus-1.so.3(dbus_connection_dispatch+0x33b)[0x7f096bd1990b]
/lib/libdbus-1.so.3[0x7f096bd19ccb]
/usr/X11R6/bin/X[0x46b2fb]
/usr/X11R6/bin/X(WakeupHandler+0x4b)[0x451ebb]
/usr/X11R6/bin/X(WaitForSomething+0x1ef)[0x4ef41f]
/usr/X11R6/bin/X(Dispatch+0x80)[0x44e070]
/usr/X11R6/bin/X(main+0x3bd)[0x433ddd]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f096ad4d5a6]
/usr/X11R6/bin/X[0x433269]
ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xorg 1:7.4~5ubuntu12
ProcEnviron:
LC_COLLATE=C
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-7-generic (buildd@yellow) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu2) ) #20-Ubuntu SMP Mon Feb 9 15:42:34 UTC 2009
SourcePackage: xorg
Uname: Linux 2.6.28-7-generic x86_64
[lspci]
00:00.0 Host bridge [0600]: Intel Corporation Mobile PM965/GM965/GL960 Memory Controller Hub [8086:2a00] (rev 0c)
Subsystem: Lenovo Device [17aa:20b3]
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller [8086:2a02] (rev 0c)
Subsystem: Lenovo Device [17aa:20b5]
|
|
| 2009-03-24 10:29:23 |
Matt Zimmerman |
attachment added |
|
gdm log from crash during install on Acer Aspire One http://launchpadlibrarian.net/24302506/%3A0.log.1 |
|
| 2009-03-24 10:33:16 |
Matt Zimmerman |
description |
Binary package hint: xorg
I have been experiencing X server crashes during suspend/resume testing, but no apport report was being left behind. The crash is due to heap corruption detected by glibc. This is logged to /var/log/gdm/:0.log.1 and looks like this:
*** glibc detected *** /usr/X11R6/bin/X: free(): invalid next size (fast): 0x0000000005f124e0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f096ada6cb8]
/lib/libc.so.6(cfree+0x76)[0x7f096ada9276]
/usr/X11R6/bin/X(LogVMessageVerb+0x104)[0x4fb964]
/usr/X11R6/bin/X(xf86MsgVerb+0x8f)[0x48f26f]
/usr/X11R6/bin/X[0x4708a6]
/usr/X11R6/bin/X(xf86DeleteInput+0x1a)[0x491b3a]
/usr/X11R6/bin/X(DeleteInputDeviceRequest+0xf2)[0x496872]
/usr/X11R6/bin/X[0x46bf5e]
/usr/X11R6/bin/X[0x46c037]
/usr/lib/libhal.so.1[0x7f096bf53ee9]
/lib/libdbus-1.so.3(dbus_connection_dispatch+0x33b)[0x7f096bd1990b]
/lib/libdbus-1.so.3[0x7f096bd19ccb]
/usr/X11R6/bin/X[0x46b2fb]
/usr/X11R6/bin/X(WakeupHandler+0x4b)[0x451ebb]
/usr/X11R6/bin/X(WaitForSomething+0x1ef)[0x4ef41f]
/usr/X11R6/bin/X(Dispatch+0x80)[0x44e070]
/usr/X11R6/bin/X(main+0x3bd)[0x433ddd]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f096ad4d5a6]
/usr/X11R6/bin/X[0x433269]
ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xorg 1:7.4~5ubuntu12
ProcEnviron:
LC_COLLATE=C
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-7-generic (buildd@yellow) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu2) ) #20-Ubuntu SMP Mon Feb 9 15:42:34 UTC 2009
SourcePackage: xorg
Uname: Linux 2.6.28-7-generic x86_64
[lspci]
00:00.0 Host bridge [0600]: Intel Corporation Mobile PM965/GM965/GL960 Memory Controller Hub [8086:2a00] (rev 0c)
Subsystem: Lenovo Device [17aa:20b3]
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller [8086:2a02] (rev 0c)
Subsystem: Lenovo Device [17aa:20b5]
|
Binary package hint: xorg
The X server has been observed to crash on a variety of different intel chipsets. This most often happens during a resume (where the symptom is that the system resumes to a gdm login dialog rather than to the user session), but has been seen in other circumstances as well.
The crash is due to heap corruption detected by glibc. This is logged to /var/log/gdm/:0.log.1 and looks like this:
*** glibc detected *** /usr/X11R6/bin/X: free(): invalid next size (fast): 0x0000000005f124e0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f096ada6cb8]
/lib/libc.so.6(cfree+0x76)[0x7f096ada9276]
/usr/X11R6/bin/X(LogVMessageVerb+0x104)[0x4fb964]
/usr/X11R6/bin/X(xf86MsgVerb+0x8f)[0x48f26f]
/usr/X11R6/bin/X[0x4708a6]
/usr/X11R6/bin/X(xf86DeleteInput+0x1a)[0x491b3a]
/usr/X11R6/bin/X(DeleteInputDeviceRequest+0xf2)[0x496872]
/usr/X11R6/bin/X[0x46bf5e]
/usr/X11R6/bin/X[0x46c037]
/usr/lib/libhal.so.1[0x7f096bf53ee9]
/lib/libdbus-1.so.3(dbus_connection_dispatch+0x33b)[0x7f096bd1990b]
/lib/libdbus-1.so.3[0x7f096bd19ccb]
/usr/X11R6/bin/X[0x46b2fb]
/usr/X11R6/bin/X(WakeupHandler+0x4b)[0x451ebb]
/usr/X11R6/bin/X(WaitForSomething+0x1ef)[0x4ef41f]
/usr/X11R6/bin/X(Dispatch+0x80)[0x44e070]
/usr/X11R6/bin/X(main+0x3bd)[0x433ddd]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f096ad4d5a6]
/usr/X11R6/bin/X[0x433269]
ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: xorg 1:7.4~5ubuntu12
ProcEnviron:
LC_COLLATE=C
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/zsh
ProcVersion: Linux version 2.6.28-7-generic (buildd@yellow) (gcc version 4.3.3 (Ubuntu 4.3.3-3ubuntu2) ) #20-Ubuntu SMP Mon Feb 9 15:42:34 UTC 2009
SourcePackage: xorg
Uname: Linux 2.6.28-7-generic x86_64
[lspci]
00:00.0 Host bridge [0600]: Intel Corporation Mobile PM965/GM965/GL960 Memory Controller Hub [8086:2a00] (rev 0c)
Subsystem: Lenovo Device [17aa:20b3]
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller [8086:2a02] (rev 0c)
Subsystem: Lenovo Device [17aa:20b5]
|
|
| 2009-03-24 10:33:52 |
Matt Zimmerman |
summary |
*** glibc detected *** free(): invalid next size (fast) for xf86Wakeup() call |
X server crash: *** glibc detected *** free(): in valid next size (fast) |
|
| 2009-03-24 14:06:32 |
Matt Zimmerman |
xserver-xorg-video-intel (Ubuntu Jaunty): assignee |
|
bryceharrington |
|
| 2009-03-24 15:16:27 |
Tormod Volden |
attachment added |
|
xorg-server_1.6.0-0ubuntu5.debdiff http://launchpadlibrarian.net/24308920/xorg-server_1.6.0-0ubuntu5.debdiff |
|
| 2009-03-24 16:21:27 |
Tormod Volden |
attachment added |
|
xorg-server_1.6.0-0ubuntu5.debdiff http://launchpadlibrarian.net/24310497/xorg-server_1.6.0-0ubuntu5.debdiff |
|
| 2009-03-24 17:33:34 |
Tormod Volden |
attachment added |
|
xorg-server_1.6.0-0ubuntu5.debdiff http://launchpadlibrarian.net/24311966/xorg-server_1.6.0-0ubuntu5.debdiff |
|
| 2009-03-24 20:23:04 |
Bryce Harrington |
attachment added |
|
25076.txt http://launchpadlibrarian.net/24315629/25076.txt |
|
| 2009-03-24 20:28:39 |
Kees Cook |
attachment added |
|
160_log_timestamping.patch http://launchpadlibrarian.net/24315729/160_log_timestamping.patch |
|
| 2009-03-25 13:09:17 |
Matt Zimmerman |
xorg-server (Ubuntu Jaunty): status |
Triaged |
Fix Committed |
|
| 2009-03-27 06:38:52 |
Launchpad Janitor |
xorg-server: status |
Fix Committed |
Fix Released |
|
| 2010-02-22 22:34:53 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/xorg-server |
|
