Ubuntu
xserver-xorg-video-intel package

Xorg keeps crashing in memcpy <- intel_uxa_pixmap_put_image <- intel_uxa_put_image <- uxa_copy_n_to_n <- miCopyRegion

  1. Precise (12.04)
  2. Bug #1055429
Bug #1055429 reported by Daniel van Vugt
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Compiz
Invalid
High
Unassigned
xf86-video-intel
Invalid
Critical
xserver-xorg-video-intel (Ubuntu)
Fix Released
High
Timo Aaltonen
Precise
Won't Fix
High
Unassigned

Bug Description

TEST CASE:
"Unredirect cancelation by transformed windows" from
http://bazaar.launchpad.net/~compiz-team/compiz/0.9.8/view/head:/tests/manual/Unredirect.txt

... frequently crashes my X server with:

(gdb) bt
#0 __memcpy_ssse3_back ()
    at ../sysdeps/x86_64/multiarch/memcpy-ssse3-back.S:1520
#1 0x00007fbd0d2424d6 in intel_uxa_pixmap_put_image (pixmap=<optimised out>,
    src=<optimised out>, src_pitch=7680, x=<optimised out>, y=<optimised out>,
    w=<optimised out>, h=1200)
    at /usr/include/x86_64-linux-gnu/bits/string3.h:52
#2 0x00007fbd0d244187 in intel_uxa_put_image (pixmap=0x7fbd119001c0, x=0,
    y=0, w=<optimised out>, h=1200, src=0x7fbd11b4c710 "p", src_pitch=7680)
    at ../../src/intel_uxa.c:809
#3 0x00007fbd0d26389d in uxa_copy_n_to_n (pSrcDrawable=0x7fbd11b4c6b0,
    pDstDrawable=0x7fbd11c82400, pGC=0x7fbd1169a9c0, pbox=0x7fff31b0b600,
    nbox=<optimised out>, dx=0, dy=0, reverse=0, upsidedown=0, bitplane=0,
    closure=0x0) at ../../uxa/uxa-accel.c:452
#4 0x00007fbd10fdb0da in miCopyRegion (pSrcDrawable=0x7fbd11b4c6b0,
    pDstDrawable=<optimised out>, pGC=0x7fbd1169a9c0,
    pDstRegion=<optimised out>, dx=0, dy=0,
    copyProc=0x7fbd0d263290 <uxa_copy_n_to_n>, bitPlane=0, closure=0x0)
    at ../../mi/micopy.c:137
#5 0x00007fbd10fdb5d2 in miDoCopy (pSrcDrawable=0x7fbd11b4c6b0,
    pDstDrawable=0x7fbd11c82400, pGC=0x7fbd1169a9c0, xIn=0, yIn=0,
    widthSrc=1920, heightSrc=1200, xOut=0, yOut=0,
    copyProc=0x7fbd0d263290 <uxa_copy_n_to_n>, bitPlane=0, closure=0x0)
    at ../../mi/micopy.c:334
#6 0x00007fbd0d26481e in uxa_copy_area (dsty=0, dstx=0, height=1200,
    width=<optimised out>, srcy=<optimised out>, srcx=<optimised out>,
    pGC=<optimised out>, pDstDrawable=<optimised out>,
    pSrcDrawable=<optimised out>) at ../../uxa/uxa-accel.c:498
#7 uxa_copy_area (pSrcDrawable=<optimised out>, pDstDrawable=<optimised out>,
    pGC=<optimised out>, srcx=<optimised out>, srcy=<optimised out>,
    width=<optimised out>, height=1200, dstx=0, dsty=0)
    at ../../uxa/uxa-accel.c:487
#8 0x00007fbd10f8d6ec in damageCopyArea (pSrc=0x7fbd11b4c6b0,
    pDst=0x7fbd11c82400, pGC=0x7fbd1169a9c0, srcx=<optimised out>, srcy=0,
    width=1920, height=1200, dstx=0, dsty=0)
    at ../../../miext/damage/damage.c:864
#9 0x00007fbd0d2559d5 in I830DRI2CopyRegion (drawable=0x7fbd11c82400,
    pRegion=0x7fff31b0b7e0, destBuffer=<optimised out>,
    sourceBuffer=<optimised out>) at ../../src/intel_dri.c:582
#10 0x00007fbd0d2574ce in I830DRI2FlipEventHandler (frame=27239,
    tv_sec=1348483279, tv_usec=575746, flip_info=0x7fbd11d1dae0)
    at ../../src/intel_dri.c:1048
#11 0x00007fbd0d68f583 in drmHandleEvent ()
   from /usr/lib/x86_64-linux-gnu/libdrm.so.2
#12 0x00007fbd10ec67eb in WakeupHandler (result=1, pReadmask=0x7fbd11282500)
    at ../../dix/dixutils.c:428
#13 0x00007fbd10ff9c46 in WaitForSomething (pClientsReady=0x7fbd11813950)
    at ../../os/WaitFor.c:235
#14 0x00007fbd10ec25f2 in Dispatch () at ../../dix/dispatch.c:366
#15 0x00007fbd10eb17ba in main (argc=8, argv=<optimised out>,
    envp=<optimised out>) at ../../dix/main.c:287

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: xserver-xorg-video-intel 2:2.17.0-1ubuntu4.1
ProcVersionSignature: Ubuntu 3.2.0-31.50-generic 3.2.28
Uname: Linux 3.2.0-31-generic x86_64
.tmp.unity.support.test.0:

ApportVersion: 2.0.1-0ubuntu13
Architecture: amd64
CompizPlugins: [core,composite,opengl,compiztoolbox,decor,mousepoll,gnomecompat,resize,vpswitch,grid,move,imgpng,regex,animation,wall,place,fade,session,expo,workarounds,scale,ezoom,unityshell]
CompositorRunning: compiz
Date: Mon Sep 24 18:46:33 2012
DistUpgraded: Fresh install
DistroCodename: precise
DistroVariant: ubuntu
ExtraDebuggingInterest: Yes,
GraphicsCard:
 Intel Corporation 2nd Generation Core Processor Family Integrated Graphics Controller [8086:0102] (rev 09) (prog-if 00 [VGA controller])
   Subsystem: Dell Device [1028:047e]
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
MachineType: Dell Inc. OptiPlex 990
ProcEnviron:
 LANGUAGE=en_AU:en
 TERM=xterm
 PATH=(custom, no user)
 LANG=en_AU.UTF-8
 SHELL=/bin/bash
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.2.0-31-generic root=UUID=9f6f99e2-1189-4bf1-bff7-af137071f572 ro quiet splash vt.handoff=7
SourcePackage: xserver-xorg-video-intel
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 09/10/2011
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A07
dmi.board.name: 0D6H9T
dmi.board.vendor: Dell Inc.
dmi.board.version: A00
dmi.chassis.type: 15
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.:bvrA07:bd09/10/2011:svnDellInc.:pnOptiPlex990:pvr01:rvnDellInc.:rn0D6H9T:rvrA00:cvnDellInc.:ct15:cvr:
dmi.product.name: OptiPlex 990
dmi.product.version: 01
dmi.sys.vendor: Dell Inc.
version.compiz: compiz 1:0.9.7.8-0ubuntu1.4
version.ia32-libs: ia32-libs N/A
version.libdrm2: libdrm2 2.4.32-1ubuntu1
version.libgl1-mesa-dri: libgl1-mesa-dri 8.0.3+8.0.2-0ubuntu3.2
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 8.0.3+8.0.2-0ubuntu3.2
version.xserver-xorg-core: xserver-xorg-core 2:1.11.4-0ubuntu10.7
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.7.0-0ubuntu1.2
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:6.14.99~git20111219.aacbd629-0ubuntu2
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.17.0-1ubuntu4.1
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:0.0.16+git20111201+b5534a1-1build2

Revision history for this message
Daniel van Vugt (vanvugt) wrote :
Changed in compiz:
status: New → Triaged
importance: Undecided → High
summary: - X keeps crashing in memcpy <- intel_uxa_pixmap_put_image <-
+ Xorg keeps crashing in memcpy <- intel_uxa_pixmap_put_image <-
intel_uxa_put_image <- uxa_copy_n_to_n <- miCopyRegion
Revision history for this message
In , Daniel van Vugt (vanvugt) wrote :
Download full text (3.2 KiB)

TEST CASE:
"Unredirect cancelation by transformed windows" from
http://bazaar.launchpad.net/~compiz-team/compiz/0.9.8/view/head:/tests/manual/Unredirect.txt

... frequently crashes my X server with:

(gdb) bt
#0 __memcpy_ssse3_back ()
    at ../sysdeps/x86_64/multiarch/memcpy-ssse3-back.S:1520
#1 0x00007fbd0d2424d6 in intel_uxa_pixmap_put_image (pixmap=<optimised out>,
    src=<optimised out>, src_pitch=7680, x=<optimised out>, y=<optimised out>,
    w=<optimised out>, h=1200)
    at /usr/include/x86_64-linux-gnu/bits/string3.h:52
#2 0x00007fbd0d244187 in intel_uxa_put_image (pixmap=0x7fbd119001c0, x=0,
    y=0, w=<optimised out>, h=1200, src=0x7fbd11b4c710 "p", src_pitch=7680)
    at ../../src/intel_uxa.c:809
#3 0x00007fbd0d26389d in uxa_copy_n_to_n (pSrcDrawable=0x7fbd11b4c6b0,
    pDstDrawable=0x7fbd11c82400, pGC=0x7fbd1169a9c0, pbox=0x7fff31b0b600,
    nbox=<optimised out>, dx=0, dy=0, reverse=0, upsidedown=0, bitplane=0,
    closure=0x0) at ../../uxa/uxa-accel.c:452
#4 0x00007fbd10fdb0da in miCopyRegion (pSrcDrawable=0x7fbd11b4c6b0,
    pDstDrawable=<optimised out>, pGC=0x7fbd1169a9c0,
    pDstRegion=<optimised out>, dx=0, dy=0,
    copyProc=0x7fbd0d263290 <uxa_copy_n_to_n>, bitPlane=0, closure=0x0)
    at ../../mi/micopy.c:137
#5 0x00007fbd10fdb5d2 in miDoCopy (pSrcDrawable=0x7fbd11b4c6b0,
    pDstDrawable=0x7fbd11c82400, pGC=0x7fbd1169a9c0, xIn=0, yIn=0,
    widthSrc=1920, heightSrc=1200, xOut=0, yOut=0,
    copyProc=0x7fbd0d263290 <uxa_copy_n_to_n>, bitPlane=0, closure=0x0)
    at ../../mi/micopy.c:334
#6 0x00007fbd0d26481e in uxa_copy_area (dsty=0, dstx=0, height=1200,
    width=<optimised out>, srcy=<optimised out>, srcx=<optimised out>,
    pGC=<optimised out>, pDstDrawable=<optimised out>,
    pSrcDrawable=<optimised out>) at ../../uxa/uxa-accel.c:498
#7 uxa_copy_area (pSrcDrawable=<optimised out>, pDstDrawable=<optimised out>,
    pGC=<optimised out>, srcx=<optimised out>, srcy=<optimised out>,
    width=<optimised out>, height=1200, dstx=0, dsty=0)
    at ../../uxa/uxa-accel.c:487
#8 0x00007fbd10f8d6ec in damageCopyArea (pSrc=0x7fbd11b4c6b0,
    pDst=0x7fbd11c82400, pGC=0x7fbd1169a9c0, srcx=<optimised out>, srcy=0,
    width=1920, height=1200, dstx=0, dsty=0)
    at ../../../miext/damage/damage.c:864
#9 0x00007fbd0d2559d5 in I830DRI2CopyRegion (drawable=0x7fbd11c82400,
    pRegion=0x7fff31b0b7e0, destBuffer=<optimised out>,
    sourceBuffer=<optimised out>) at ../../src/intel_dri.c:582
#10 0x00007fbd0d2574ce in I830DRI2FlipEventHandler (frame=27239,
    tv_sec=1348483279, tv_usec=575746, flip_info=0x7fbd11d1dae0)
    at ../../src/intel_dri.c:1048
#11 0x00007fbd0d68f583 in drmHandleEvent ()
   from /usr/lib/x86_64-linux-gnu/libdrm.so.2
#12 0x00007fbd10ec67eb in WakeupHandler (result=1, pReadmask=0x7fbd11282500)
    at ../../dix/dixutils.c:428
#13 0x00007fbd10ff9c46 in WaitForSomething (pClientsReady=0x7fbd11813950)
    at ../../os/WaitFor.c:235
#14 0x00007fbd10ec25f2 in Dispatch () at ../../dix/dispatch.c:366
#15 0x00007fbd10eb17ba in main (argc=8, argv=<optimised out>,
    envp=<optimised out>) at ../../dix/main.c:287

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: xserver-xorg-video-intel 2:2.17.0-1ubuntu4.1
ProcVersionS...

Read more...

Daniel van Vugt (vanvugt)
Changed in compiz:
status: Triaged → Invalid
Revision history for this message
In , Chris Wilson (ickle) wrote :

Again, please retest using upstream components before filing an upstream bug. And please remember to include your Xorg.log and dmesg.

Revision history for this message
In , Daniel van Vugt (vanvugt) wrote :

Thanks again.

Do you have a bug number or commit URL to point me to?

Revision history for this message
Daniel van Vugt (vanvugt) wrote :

Upstream bug claims this issue is fixed already. But there are no details of how/what/when was fixed.

Revision history for this message
In , Chris Wilson (ickle) wrote :

To be honest, I don't think it is a single bug but rather a catrasophe of errors, which is why I want dmesg and Xorg.log to be sure there are not other things going on. Since the traces are about 12 months old, I first want to verify that it is not going to be a wild goose chase.

Revision history for this message
Timo Aaltonen (tjaalton) wrote :

please rerun the test on quantal, does it crash there as well?

Changed in xserver-xorg-video-intel (Ubuntu):
status: New → Incomplete
Timo Aaltonen (tjaalton)
Changed in xserver-xorg-video-intel (Ubuntu):
assignee: nobody → Timo Aaltonen (tjaalton)
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

Testing the same code on quantal with Intel HD 3000, I can't reproduce this or any of the other Xorg crashes.

Changed in xserver-xorg-video-intel (Ubuntu):
status: Incomplete → New
Revision history for this message
In , Daniel van Vugt (vanvugt) wrote :

I keep getting different Xorg crashes from Ubuntu 12.04 so can't get log files for this yet.

On 12.10 with much newer intel drivers and similar hardware, I can't crash it any more.

Revision history for this message
Timo Aaltonen (tjaalton) wrote :

Thanks, closing for quantal, accepted for precise.

Changed in xserver-xorg-video-intel (Ubuntu):
status: New → Fix Released
Changed in xserver-xorg-video-intel (Ubuntu Precise):
importance: Undecided → High
status: New → Confirmed
Bug Watch Updater (bug-watch-updater)
Changed in xserver-xorg-video-intel:
importance: Unknown → Critical
status: Unknown → Invalid
Revision history for this message
Steve Langasek (vorlon) wrote :

The Precise Pangolin has reached end of life, so this bug will not be fixed for that release

Changed in xserver-xorg-video-intel (Ubuntu Precise):
status: Confirmed → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.