Xorg crashed with SIGABRT in __libc_message "free(): invalid pointer" from xf86optionListFree

Bug #946028 reported by Insperatus
18
This bug affects 2 people
Affects Status Importance Assigned to Milestone
xorg-server (Ubuntu)
Expired
High
Unassigned

Bug Description

Don't know much for details but I was trying to start a game using optirun. It was working fine before a recent upgrade to 12.04.

#3 0x00007f30ed48d8b6 in malloc_printerr (action=3, str=0x7f30ed588201 "free(): invalid pointer", ptr=<optimized out>) at malloc.c:5007
        buf = "00007f30ed006e6f"
        cp = <optimized out>
#4 0x00007f30ef327fc1 in xf86optionListFree (opt=0x7f30efcc89b0) at ../../../../hw/xfree86/parser/Flags.c:257
        prev = <optimized out>
#5 0x00007f30ef313bcb in xf86DeleteInput (pInp=0x7f30efcc88f0, flags=<optimized out>) at ../../../../hw/xfree86/common/xf86Xinput.c:772
No locals.
#6 0x00007f30ef314ab4 in NewInputDeviceRequest (options=<optimized out>, attrs=0x0, pdev=0x7fffdc00ece8) at ../../../../hw/xfree86/common/xf86Xinput.c:992
        pInfo = 0x7f30efcc88f0
        option = <optimized out>
        rval = <optimized out>
        is_auto = <optimized out>
#7 0x00007f30ef3021b6 in InitInput (argc=<optimized out>, argv=<optimized out>) at ../../../../hw/xfree86/common/xf86Init.c:893
        pInfo = 0x7f30efb1b080
        dev = 0x7f30ef2bb62c

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: xserver-xorg-core 2:1.11.4-0ubuntu4
ProcVersionSignature: Ubuntu 3.2.0-17.27-generic 3.2.6
Uname: Linux 3.2.0-17-generic x86_64
.tmp.unity.support.test.0:

ApportVersion: 1.94-0ubuntu1
Architecture: amd64
CompizPlugins: [core,bailer,detection,composite,opengl,decor,mousepoll,vpswitch,regex,animation,snap,expo,move,compiztoolbox,place,grid,imgpng,gnomecompat,wall,ezoom,workarounds,resize,fade,unitymtgrabhandles,scale,session,unityshell]
CompositorRunning: compiz
Date: Sat Mar 3 21:18:51 2012
DistUpgraded: Log time: 2012-02-29 03:23:23.840086
DistroCodename: precise
DistroVariant: ubuntu
ExecutablePath: /usr/bin/Xorg
ExtraDebuggingInterest: No
GraphicsCard:
 Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller [8086:2a42] (rev 07) (prog-if 00 [VGA controller])
   Subsystem: ASUSTeK Computer Inc. Device [1043:1af2]
 NVIDIA Corporation GT218 [GeForce G210M] [10de:0a74] (rev ff) (prog-if ff)
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release amd64 (20110427.1)
MachineType: ASUSTeK Computer Inc. UL30VT
ProcCmdline: Xorg :8 -config /etc/bumblebee/xorg.conf.nvidia -sharevts -nolisten tcp -noreset -verbose 3 -isolateDevice PCI:01:00:0 -modulepath /usr/lib/nvidia-current/xorg,/usr/lib/xorg/modules
ProcEnviron:
 TERM=linux
 PATH=(custom, no user)
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.2.0-17-generic root=UUID=fadc3046-cc25-4dce-99c7-dc4cf4b188c7 ro quiet splash vt.handoff=7
Signal: 6
SourcePackage: xorg-server
StacktraceTop:
 raise () from /lib/x86_64-linux-gnu/libc.so.6
 abort () from /lib/x86_64-linux-gnu/libc.so.6
 ?? () from /lib/x86_64-linux-gnu/libc.so.6
 ?? () from /lib/x86_64-linux-gnu/libc.so.6
 xf86optionListFree ()
Title: Xorg crashed with SIGABRT in raise()
UpgradeStatus: Upgraded to precise on 2012-02-29 (3 days ago)
UserGroups:

dmi.bios.date: 01/11/2010
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: 207
dmi.board.asset.tag: ATN12345678901234567
dmi.board.name: UL30VT
dmi.board.vendor: ASUSTeK Computer Inc.
dmi.board.version: 1.0
dmi.chassis.asset.tag: ATN12345678901234567
dmi.chassis.type: 10
dmi.chassis.vendor: ASUSTeK Computer Inc.
dmi.chassis.version: 1.0
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvr207:bd01/11/2010:svnASUSTeKComputerInc.:pnUL30VT:pvr1.0:rvnASUSTeKComputerInc.:rnUL30VT:rvr1.0:cvnASUSTeKComputerInc.:ct10:cvr1.0:
dmi.product.name: UL30VT
dmi.product.version: 1.0
dmi.sys.vendor: ASUSTeK Computer Inc.
version.compiz: compiz 1:0.9.7.0~bzr2995-0ubuntu5
version.ia32-libs: ia32-libs 20090808ubuntu33
version.libdrm2: libdrm2 2.4.30-1ubuntu1
version.libgl1-mesa-dri: libgl1-mesa-dri 8.0.1-0ubuntu2
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 8.0.1-0ubuntu2
version.xserver-xorg-core: xserver-xorg-core 2:1.11.4-0ubuntu4
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.6.99.901+git20120126-0ubuntu2
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:6.14.99~git20111219.aacbd629-0ubuntu2
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.17.0-1ubuntu4
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:0.0.16+git20111201+b5534a1-1build2

Revision history for this message
Insperatus (jamespaulharding) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 __libc_message (do_abort=2, fmt=0x7f30ed58b250 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:201
 malloc_printerr (action=3, str=0x7f30ed588201 "free(): invalid pointer", ptr=<optimized out>) at malloc.c:5007
 xf86optionListFree (opt=0x7f30efcc89b0) at ../../../../hw/xfree86/parser/Flags.c:257
 xf86DeleteInput (pInp=0x7f30efcc88f0, flags=<optimized out>) at ../../../../hw/xfree86/common/xf86Xinput.c:772
 NewInputDeviceRequest (options=<optimized out>, attrs=0x0, pdev=0x7fffdc00ece8) at ../../../../hw/xfree86/common/xf86Xinput.c:992

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in xorg-server (Ubuntu):
importance: Undecided → Medium
summary: - Xorg crashed with SIGABRT in raise()
+ Xorg crashed with SIGABRT in __libc_message()
tags: removed: need-amd64-retrace
Revision history for this message
Launchpad Janitor (janitor) wrote : Re: Xorg crashed with SIGABRT in __libc_message()

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in xorg-server (Ubuntu):
status: New → Confirmed
Bryce Harrington (bryce)
summary: - Xorg crashed with SIGABRT in __libc_message()
+ Xorg crashed with SIGABRT in __libc_message() from xf86optionListFree
description: updated
visibility: private → public
Revision history for this message
Bryce Harrington (bryce) wrote : Re: Xorg crashed with SIGABRT in __libc_message() from xf86optionListFree

Discussing this with RAOF and cnd, this may be a symptom of a pervasive memory corruption bug in the input stack (see LP: #929408), which is fixed (we believe) in xorg-server 1.11.4-0ubuntu5 which will be uploaded today or tomorrow.

Please update to this version of the server and see if you can reproduce the crash. If you do reproduce it, and if apport prompts you to file another bug report, please do and mention the new bug # on this bug.

If you don't see it, just leave this bug report in state Incomplete, and we'll close it out in a month or two.

Changed in xorg-server (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Insperatus (jamespaulharding) wrote :

I upgraded and did get another prompt for a bug report but I accidentally selected this existing bug report instead of filing a new one. Stupid me, whoops.

How do I reset apport so I can report this as a new bug and link to it as you suggested? I tried deleting /var/crash/* but that didn't do the trick.

Just as a recap, I did upgrade to the latest xorg-server (see below) and am still getting crashes when using optirun to initialize programs.

Here's my output of Xorg -version

X.Org X Server 1.11.3
Release Date: 2011-12-16
X Protocol Version 11, Revision 0
Build Operating System: Linux 2.6.24-31-server x86_64 Ubuntu
Current Operating System: Linux garfunkle 3.2.0-18-generic #29-Ubuntu SMP Fri Mar 9 21:36:08 UTC 2012 x86_64
Kernel command line: BOOT_IMAGE=/boot/vmlinuz-3.2.0-18-generic root=UUID=fadc3046-cc25-4dce-99c7-dc4cf4b188c7 ro quiet splash vt.handoff=7
Build Date: 09 March 2012 12:17:02PM
xorg-server 2:1.11.4-0ubuntu6 (For technical support please see http://www.ubuntu.com/support)
Current version of pixman: 0.24.4

Bryce Harrington (bryce)
Changed in xorg-server (Ubuntu):
status: Incomplete → Confirmed
importance: Medium → High
tags: removed: single-occurrence
Bryce Harrington (bryce)
summary: - Xorg crashed with SIGABRT in __libc_message() from xf86optionListFree
+ Xorg crashed with SIGABRT "free(): invalid pointer" from
+ xf86optionListFree
Revision history for this message
Bryce Harrington (bryce) wrote : Re: Xorg crashed with SIGABRT "free(): invalid pointer" from xf86optionListFree

cnd thinks this bug might be related to 931397, which is caused by discrepancy between the xserver 1.11 and input layer (1.12) abis.

Bryce Harrington (bryce)
summary: - Xorg crashed with SIGABRT "free(): invalid pointer" from
- xf86optionListFree
+ Xorg crashed with SIGABRT in __libc_message "free(): invalid pointer"
+ from xf86optionListFree
Revision history for this message
Bryce Harrington (bryce) wrote :

Could you doublecheck whether this crash can be reproduced with latest updates? The current -0ubuntu8 version of xserver contains a fix for an options API mismatch that could result in crashes similar to this one.

Changed in xorg-server (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
bugbot (bugbot) wrote :

We're closing this bug since there has not been a response from the original reporter. However, the issue still exists please feel free to reopen with the requested information. If you're not the original reporter, we'd prefer you file a new bug report.

Some tips:

  * Report X.org bugs via the command: `ubuntu-bug xorg`

  * Test against the latest development Ubuntu. http://cdimage.ubuntu.com/daily-live/
    Bugs marked as affecting the development version tend to get priority attention.

  * The `xdiagnose` utility has functionality for enabling debugging and
    analyzing a few common X problems.

  * Tag your bugs with the Ubuntu versions you have reproduced the issue in.

  * See https://wiki.ubuntu.com/X/Reporting for tips on writing good bug reports.

Changed in xorg-server (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.