Bug 1086820

Summary: qemu sometimes crashes in spice-server with "rate_control->num_recent_enc_frames" assertion
Product: Red Hat Enterprise Linux 6 Reporter: David Jaša <djasa>
Component: spice-serverAssignee: Default Assignee for SPICE Bugs <rh-spice-bugs>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: high Docs Contact:
Priority: urgent    
Version: 6.5CC: acalleja, acavalla, cfergeau, dblechte, jjongsma, llozoya, mkalinin, mkenneth, mkrcmari, rbalakri, rh-spice-bugs
Target Milestone: rcKeywords: ZStream
Target Release: 6.6   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: spice-server-0.12.4-9.el6 Doc Type: Bug Fix
Doc Text:
Cause: invalid assertion in the video streaming code Consequence: when the assert triggers,the hypervisor would exit with 'qemu sometimes crashes in spice-server with "rate_control->num_recent_enc_frames" assertion' in the log Fix: fix the invalid assertion Result: no more crashes
 Story Points: ---
Clone Of:
: 1086823 1103827 (view as bug list) Environment:
Last Closed: 2014-10-14 05:04:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1086823, 1103827    
Attachments:
Description Flags
partial log with increased debugging output
none
backtrace none

Description David Jaša 2014-04-11 15:10:44 UTC 
Description of problem:
Sometimes, qemu process crashes with failed assertion: "rate_control->num_recent_enc_frames". The issue was also reported upstream in this ML thread:
http://lists.freedesktop.org/archives/spice-devel/2014-February/thread.html#16030

Version-Release number of selected component (if applicable):
spice-server-0.12.4-6.el6_5.1.x86_64
guest:
  * in my case: RHEL 6.5
  * upstream report: Windows 7 when working in Outlook

How reproducible:
random

Steps to Reproduce:
1. use of guest over wan could make bug more likely to occur
2.
3.

Actual results:
qemu crashes

Expected results:
no crash occurs

Additional info:
Comment 1 Jonathon Jongsma 2014-05-16 18:47:50 UTC 
Created attachment 896501 [details]
partial log with increased debugging output

I captured this log from a run where I reproduced this assert. I ran qemu by hand, and the assert happened soon after logging into the desktop (rhel6 host / rhel6 guest)

commandline:

QEMU_AUDIO_DRV=spice SPICE_DEBUG_LEVEL=5 qemu-kvm -spice port=5990,disable-ticketing -drive file=/var/lib/libvirt/images/Ambystoma.img,format=raw -m 1024 -vga qxl -device virtio-serial -chardev spicevmc,id=vdagent,debug=0,name=vdagent -device virtserialport,chardev=vdagent,name=com.redhat.spice.0 -device intel-hda,id=sound0


This line looks slightly suspicious:
(/usr/bin/qemu-kvm:3165): Spice-Debug **: mjpeg_encoder.c:937:mjpeg_encoder_decrease_bit_rate: during warmup. ignoring
Comment 2 Jonathon Jongsma 2014-05-16 20:36:10 UTC 
Created attachment 896516 [details]
backtrace
Comment 3 Christophe Fergeau 2014-05-30 14:43:57 UTC 
For the record, this is being discussed at http://lists.freedesktop.org/archives/spice-devel/2014-May/016889.html with patches
Comment 9 Jonathon Jongsma 2014-05-30 19:30:10 UTC 
committed fix upstream.
Comment 29 errata-xmlrpc 2014-10-14 05:04:51 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1435.html