Bug 1601742

Summary: [XIT] double-free corruption in PanoramiXCreateConnectionBlock
Product: Red Hat Enterprise Linux 7 Reporter: Tomas Pelka <tpelka>
Component: xorg-x11-serverAssignee: Peter Hutterer <peter.hutterer>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.6   
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: xorg-x11-server-1.20.0-2.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-10-30 08:02:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Tomas Pelka 2018-07-17 07:30:22 UTC
Description of problem:
> synaptics-driver
>   - failing tests:
> [  FAILED  ] 7 tests, listed below:
> [  FAILED  ] SynapticsTest.DevicePresent

timing issue, I think (can't reproduce it here)

> [  FAILED  ] SynapticsWarpXineramaTest.WarpScalingRelative
> [  FAILED  ] SynapticsWarpXineramaTest.WarpScaling/0, where GetParam() = (0, 0)
> [  FAILED  ] SynapticsWarpXineramaTest.WarpScaling/1, where GetParam() = (1, 1)
> [  FAILED  ] SynapticsWarpXineramaTest.WarpScaling/2, where GetParam() = (2, 2)
> [  FAILED  ] SynapticsWarpXineramaTest.WarpScaling/3, where GetParam()
> = (200, 200)
> [  FAILED  ] SynapticsWarpXineramaTest.WarpScaling/4, where GetParam()
> = (-1, -1)

Real bugs, please file one for these. They're aborting with a 
double-free corruption in PanoramiXCreateConnectionBlock


>   - dmesg: https://beaker.engineering.redhat.com/recipes/5382142/tasks/75535826/results/363091425/logs/dmesg.log
>   - stdout/err: https://beaker.engineering.redhat.com/recipes/5382142/tasks/75535826/results/363091425/logs/synaptics-driver.log
>   - other logs: https://beaker.engineering.redhat.com/recipes/5382142/tasks/75535826/logs/synaptics-driver.tar.gz
> 
> What worries me:
> [  1163.630] (EE)
> [  1163.630] (EE) Backtrace:
> [  1163.630] (EE) 0: Xorg (xorg_backtrace+0x55) [0x5600612678b5]
> [  1163.630] (EE) 1: Xorg (0x5600610b7000+0x1b4539) [0x56006126b539]
> [  1163.630] (EE) 2: /lib64/libpthread.so.0 (0x7f7776cd8000+0xf5c0)
> [0x7f7776ce75c0]
> [  1163.630] (EE) 3: /lib64/libc.so.6 (gsignal+0x37) [0x7f7776941207]
> [  1163.630] (EE) 4: /lib64/libc.so.6 (abort+0x148) [0x7f77769428f8]
> [  1163.630] (EE) 5: /lib64/libc.so.6 (0x7f777690b000+0x2f026) [0x7f777693a026]
> [  1163.630] (EE) 6: /lib64/libc.so.6 (0x7f777690b000+0x2f0d2) [0x7f777693a0d2]
> [  1163.630] (EE) 7: /usr/lib64/xorg/modules/extensions/libvnc.so
> (0x7f7773f93000+0x2bce0) [0x7f7773fbece0]
> [  1163.630] (EE) 8: /usr/lib64/xorg/modules/extensions/libvnc.so
> (0x7f7773f93000+0x36315) [0x7f7773fc9315]
> [  1163.630] (EE) 9: /usr/lib64/xorg/modules/extensions/libvnc.so
> (_ZN14XserverDesktop19computeScreenLayoutEv+0xb4) [0x7f7773fcbc84]
> [  1163.630] (EE) 10: /usr/lib64/xorg/modules/extensions/libvnc.so
> (_ZN14XserverDesktop14setFramebufferEiiPvi+0x8f) [0x7f7773fcc38f]
> [  1163.630] (EE) 11: /usr/lib64/xorg/modules/extensions/libvnc.so
> (_ZN14XserverDesktopC1EiSt4listIPN7network11TcpListenerESaIS3_EES5_PKcRKN3rfb11PixelFormatEiiPvi+0x210)
> [0x7f7773fcc6a0]
> [  1163.630] (EE) 12: /usr/lib64/xorg/modules/extensions/libvnc.so
> (vncExtensionInit+0x355) [0x7f7773fc1dc5]
> [  1163.630] (EE) 13: Xorg (InitExtensions+0x5d) [0x56006117f56d]
> [  1163.630] (EE) 14: Xorg (0x5600610b7000+0x601f6) [0x5600611171f6]
> [  1163.630] (EE) 15: /lib64/libc.so.6 (__libc_start_main+0xf5) [0x7f777692d3d5]
> [  1163.630] (EE) 16: Xorg (0x5600610b7000+0x4a4ee) [0x5600611014ee]
> [  1163.631] (EE)
> [  1163.631] (EE)
> Fatal server error:
> [  1163.631] (EE) Caught signal 6 (Aborted). Server aborting
> [  1163.631] (EE)
> [  1163.631] (EE)
> Please consult the The X.Org Foundation support
> at http://wiki.x.org
>   for help.
> [  1163.631] (EE) Please also check the log file at
> "/tmp/SynapticsWarpXineramaTest.WarpScaling.4.log" for additional
> information.
> [  1163.631] (EE)
> [  1163.631] (EE) Server terminated with error (1). Closing log file.

Version-Release number of selected component (if applicable):
xorg-x11-server-Xorg-1.20.0-1.el7
xorg-x11-drv-synaptics-1.9.0-2.el7

How reproducible:
100%

Steps to Reproduce:
1. execute XIT input/synaptics-driver tests
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Peter Hutterer 2018-07-18 02:08:02 UTC
bisected to upstream commit f84e59a4f474d22860bac8aec2947798a86db69b

Comment 3 Peter Hutterer 2018-07-22 23:11:44 UTC
xorg-x11-server-1.20.0-2.el7 is available in brew

Comment 7 errata-xmlrpc 2018-10-30 08:02:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:3059