Bug 1381718
| Summary: | X crashes when exiting application using backing store in CrushTree | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Joe Wright <jwright> |
| Component: | xorg-x11-server | Assignee: | Adam Jackson <ajax> |
| Status: | CLOSED ERRATA | QA Contact: | Desktop QE <desktop-qa-list> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.8 | CC: | aladd, alanm, jwright, mboisver, tpelka |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | xorg-x11-server-1.17.4-15.el6 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-03-21 11:17:09 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2017-0729.html |
Description of problem: - Xorg crashes when closing an application using Double Buffer and Destroy extensions in Crushtree Version-Release number of selected component (if applicable): - xorg-x11-server-Xorg-1.17.4-9.5.el6_8.x86_64 How reproducible: - 100% Steps to Reproduce: (this can be done locally or via X11 forwarding) 1. Launch application which utilizes the aforemetioned extensions 2. Exit application 3. Observe Actual results: - Xorg crashes, forcing a daemon reload and GUI reload Expected results: - X does not crash. Application closes without complaint Additional info: Backtrace: Program terminated with signal 6, Aborted. #0 0x00007f9c970ce5e5 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 64 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig); (gdb) bt #0 0x00007f9c970ce5e5 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #1 0x00007f9c970cfdc5 in abort () at abort.c:92 #2 0x00007f9c9a05fd6e in OsAbort () at utils.c:1389 #3 0x00007f9c99f2ba1c in ddxGiveUp (error=EXIT_ERR_ABORT) at xf86Init.c:1077 #4 0x00007f9c9a066fe2 in AbortServer () at log.c:804 #5 0x00007f9c9a067e74 in FatalError (f=0x7f9c9a0919a8 "Caught signal %d (%s). Server aborting\n") at log.c:945 #6 0x00007f9c9a05ef2e in OsSigHandler (signo=11, sip=<value optimized out>, unused=<value optimized out>) at osinit.c:150 #7 <signal handler called> #8 DRI2InvalidateWalk (pWin=0x7f9c9cf17d00, data=0x7f9c9c370940) at dri2.c:757 #9 0x00007f9c99f1410c in TraverseTree (pWin=0x7f9c9c3714a0, func=0x7f9c9a02a500 <DRI2InvalidateWalk>, data=0x7f9c9c370940) at window.c:316 #10 0x00007f9c9a02a5a2 in DRI2InvalidateDrawableAll (pDraw=0x7f9c9cf17be0) at dri2.c:781 #11 0x00007f9c99fd9199 in damageSetWindowPixmap (pWindow=0x7f9c9cf17be0, pPixmap=0x7f9c9c370940) at damage.c:1534 #12 0x00007f9c99f7afd8 in compSetPixmapVisitWindow (pWindow=0x7f9c9cf17be0, data=<value optimized out>) at compwindow.c:121 #13 0x00007f9c99f140c3 in TraverseTree (pWin=<value optimized out>, func=0x7f9c99f7afb0 <compSetPixmapVisitWindow>, data=0x7fff6e9ebb40) at window.c:316 #14 0x00007f9c99f7af9c in compSetPixmap (pWindow=<value optimized out>, pPixmap=<value optimized out>) at compwindow.c:142 #15 0x00007f9c99f7df91 in compFreeClientWindow (pWin=0x7f9c9cf17be0, id=<value optimized out>) at compalloc.c:286 #16 0x00007f9c99f79079 in FreeCompositeClientWindow (value=<value optimized out>, ccwid=<value optimized out>) at compext.c:85 #17 0x00007f9c99f0b6c3 in doFreeResource (res=0x7f9c9cf118a0, skip=0) at resource.c:895 #18 0x00007f9c99f0c288 in FreeResource (id=689, skipDeleteFuncType=0) at resource.c:925 #19 0x00007f9c99f7e313 in compUnredirectWindow (pClient=0x7f9c9c2e7500, pWin=<value optimized out>, update=0) at compalloc.c:331 #20 0x00007f9c99f7a334 in compCheckBackingStore (pWin=0x7f9c9cf17be0, mask=<value optimized out>) at compinit.c:123 #21 compChangeWindowAttributes (pWin=0x7f9c9cf17be0, mask=<value optimized out>) at compinit.c:144 #22 0x00007f9c99f7c0b3 in compDestroyWindow (pWin=0x7f9c9cf17be0) at compwindow.c:660 #23 0x00007f9c99fab0cd in DbeDestroyWindow (pWin=0x7f9c9cf17be0) at dbe.c:1325 #24 0x00007f9c99fd4522 in present_destroy_window (window=0x7f9c9cf17be0) at present_screen.c:122 #25 0x00007f9c99f17b24 in FreeWindowResources (pWin=0x7f9c9cf17be0) at window.c:910 #26 0x00007f9c99f17bf7 in CrushTree (value=0x7f9c9ce10cb0, wid=75497516) at window.c:943 #27 DeleteWindow (value=0x7f9c9ce10cb0, wid=75497516) at window.c:970 #28 0x00007f9c99f0b6c3 in doFreeResource (res=0x7f9c9ce10dd0, skip=0) at resource.c:895 #29 0x00007f9c99f0b74e in FreeClientResources (client=0x7f9c9c816920) at resource.c:1161 #30 0x00007f9c99ee66bf in CloseDownClient (client=0x7f9c9c816920) at dispatch.c:3426 #31 0x00007f9c99ee6e16 in Dispatch () at dispatch.c:441 #32 0x00007f9c99eea7ba in dix_main (argc=<value optimized out>, argv=0x7fff6e9ec0a8, envp=<value optimized out>) at main.c:298 #33 0x00007f9c970bad1d in __libc_start_main (main=0x7f9c99ed4810 <main>, argc=11, ubp_av=0x7fff6e9ec0a8, init=<value optimized out>, fini=<value optimized out>, rtld_fini=<value optimized out>, stack_end=0x7fff6e9ec098) at libc-start.c:226 #34 0x00007f9c99ed4741 in _start () (gdb) quit [root@qtr-chrisws ccpp-2016-10-04-12:32:22-5286]# pwd /var/spool/abrt/ccpp-2016-10-04-12:32:22-5286 [root@qtr-chrisws ccpp-2016-10-04-12:32:22-5286]# rpm -qa |grep xorg-x11-server xorg-x11-server-utils-debuginfo-7.7-14.el6.x86_64 xorg-x11-server-Xorg-1.17.4-9.5.el6_8.x86_64 xorg-x11-server-common-1.17.4-9.5.el6_8.x86_64 xorg-x11-server-utils-7.7-14.el6.x86_64 xorg-x11-server-debuginfo-1.17.4-9.5.el6_8.x86_64