Bug 1755201

Summary: gnome-shell occasionally crashes when expanding ESXi web console
Product: Red Hat Enterprise Linux 7 Reporter: Yuki Okada <yuokada>
Component: gnome-shellAssignee: Florian Müllner <fmuellner>
Status: CLOSED WONTFIX QA Contact: Desktop QE <desktop-qa-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.6CC: fmuellner, jadahl, jraising
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-08-27 15:42:23 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Yuki Okada 2019-09-25 03:02:37 UTC
Description of problem:
- When expanding a VMware web console, the console occasionally goes black.
- At that time, gnome-shell receives an X Window System error and crashes with SIGTRAP. Specifically, the error is "BadValue (integer parameter out of range for operation)".

Version-Release number of selected component (if applicable):
gnome-shell-3.28.3-6.el7.x86_64

How reproducible:
Not always reproducible.

Steps to Reproduce:
n/a

Actual results:
gnome-shell fails with SIGTRAP

Expected results:
gnome-shell should not fail

Additional info:
$ gdb /usr/bin/gnome-shell coredump
[...]
Core was generated by `/usr/bin/gnome-shell'.
Program terminated with signal 5, Trace/breakpoint trap.
#0  0x00007f979359749b in raise (sig=sig@entry=5) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:36
36	  return INLINE_SYSCALL (tgkill, 3, pid, THREAD_GETMEM (THREAD_SELF, tid),
(gdb) bt
#0  0x00007f979359749b in raise (sig=sig@entry=5) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:36
#1  0x00000000004026cc in dump_gjs_stack_on_signal_handler (signo=5) at ../src/main.c:368
#2  <signal handler called>
#3  _g_log_abort (breakpoint=breakpoint@entry=1) at gmessages.c:583
#4  0x00007f97953313d2 in g_log_writer_default (log_level=<optimized out>, log_level@entry=G_LOG_LEVEL_ERROR, fields=fields@entry=0x7ffd30a79fb0, n_fields=n_fields@entry=6, user_data=user_data@entry=0x0) at gmessages.c:2735
#5  0x00007f979532f685 in g_log_structured_array (log_level=G_LOG_LEVEL_ERROR, fields=0x7ffd30a79fb0, n_fields=6) at gmessages.c:1970
#6  0x00007f979533016e in g_log_structured_standard (log_domain=log_domain@entry=0x7f9792b107ce "Gdk", log_level=log_level@entry=G_LOG_LEVEL_ERROR, file=file@entry=0x7f9792b2e4ee "gdkdisplay-x11.c", 
    line=line@entry=0x7f9792b2e5c0 "2766", func=func@entry=0x7f9792b2f250 <__FUNCTION__.75262> "_gdk_x11_display_error_event", message_format=message_format@entry=0x7f9792b2f8b0 "%s") at gmessages.c:2027
#7  0x00007f9792ad9327 in _gdk_x11_display_error_event (display=display@entry=0xdcf120, error=error@entry=0x7ffd30a7a620) at gdkdisplay-x11.c:2766
#8  0x00007f9792ae5e39 in gdk_x_error (xdisplay=0xdbee30, error=0x7ffd30a7a620) at gdkmain-x11.c:307
#9  0x00007f9791f6ee8b in _XError (dpy=dpy@entry=0xdbee30, rep=rep@entry=0x4199980) at XlibInt.c:1434
#10 0x00007f9791f6bee7 in handle_error (dpy=0xdbee30, err=0x4199980, in_XReply=<optimized out>) at xcb_io.c:199
#11 0x00007f9791f6bfa5 in handle_response (dpy=dpy@entry=0xdbee30, response=0x4199980, in_XReply=in_XReply@entry=1) at xcb_io.c:311
#12 0x00007f9791f6ce98 in _XReply (dpy=0xdbee30, rep=0x7ffd30a7a840, extra=0, discard=0) at xcb_io.c:621
#13 0x00007f9789206d4c in doGetScreenResources () from /lib64/libXrandr.so.2
#14 0x00007f9792ae7f6d in init_randr15 (changed=<synthetic pointer>, screen=0xdd2090) at gdkscreen-x11.c:419
#15 init_multihead (screen=screen@entry=0xdd2090) at gdkscreen-x11.c:872
#16 0x00007f9792ae8d99 in process_monitors_change (screen=0xdd2090) at gdkscreen-x11.c:1022
#17 0x00007f9792ae918d in _gdk_x11_screen_size_changed (screen=screen@entry=0xdd2090, event=event@entry=0x7ffd30a7ab30) at gdkscreen-x11.c:1061
#18 0x00007f9792adaa8a in gdk_x11_display_translate_event (translator=<optimized out>, display=0xdcf120, event=0x344e040, xevent=0x7ffd30a7ab30) at gdkdisplay-x11.c:1200
#19 0x00007f9792ae0d42 in _gdk_x11_event_translator_translate (translator=0xdcf120, display=0xdcf120, xevent=xevent@entry=0x7ffd30a7ab30) at gdkeventtranslator.c:51
#20 0x00007f9792ae08cd in gdk_event_source_translate_event (xevent=0x7ffd30a7ab30, event_source=0xd9ce60) at gdkeventsource.c:243
#21 _gdk_x11_display_queue_events (display=0xdcf120) at gdkeventsource.c:341
#22 0x00007f9792aab2d9 in gdk_display_get_event (display=display@entry=0xdcf120) at gdkdisplay.c:438
#23 0x00007f9792ae0492 in gdk_event_source_dispatch (source=<optimized out>, callback=<optimized out>, user_data=<optimized out>) at gdkeventsource.c:363
#24 0x00007f9795329049 in g_main_dispatch (context=0x9dd5c0) at gmain.c:3175
#25 g_main_context_dispatch (context=context@entry=0x9dd5c0) at gmain.c:3828
#26 0x00007f97953293a8 in g_main_context_iterate (context=0x9dd5c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3901
#27 0x00007f979532967a in g_main_loop_run (loop=0xda0770) at gmain.c:4097
#28 0x00007f979384e69c in meta_run () at core/main.c:666
#29 0x000000000040217c in main (argc=1, argv=0x7ffd30a7aef8) at ../src/main.c:534

(gdb) bt full
[...]
#6  0x00007f979533016e in g_log_structured_standard (log_domain=log_domain@entry=0x7f9792b107ce "Gdk", log_level=log_level@entry=G_LOG_LEVEL_ERROR, file=file@entry=0x7f9792b2e4ee "gdkdisplay-x11.c", 
    line=line@entry=0x7f9792b2e5c0 "2766", func=func@entry=0x7f9792b2f250 <__FUNCTION__.75262> "_gdk_x11_display_error_event", message_format=message_format@entry=0x7f9792b2f8b0 "%s") at gmessages.c:2027
        fields = {{key = 0x7f979537aa21 "PRIORITY", value = 0x7f979537a8f5, length = -1}, {key = 0x7f979537aa2a "CODE_FILE", value = 0x7f9792b2e4ee, length = -1}, {key = 0x7f979537aa34 "CODE_LINE", value = 0x7f9792b2e5c0, length = -1}, {
            key = 0x7f979537aa3e "CODE_FUNC", value = 0x7f9792b2f250 <__FUNCTION__.75262>, length = -1}, {key = 0x7f979537aa0e "MESSAGE", value = 0x449b130, length = -1}, {key = 0x7f979537aa7b "GLIB_DOMAIN", value = 0x7f9792b107ce, 
            length = -1}}
        n_fields = 6
        message_allocated = 0x449b130 "The program 'gnome-shell' received an X Window System error.\nThis probably reflects a bug in the program.\nThe error was 'BadValue (integer parameter out of range for operation)'.\n  (Details: serial 35"...
        buffer = "\322\320P>\322\320P>\322\320P>\322\320P>\322\320P>\322\320P>\322\320P>\322\320P>", '\000' <repeats 32 times>, "\332\330X>\332\330X>\332\330X>\332\330X>\332\330X>\332\330X>\332\330X>\332\330X>", '\000' <repeats 160 times>...
        args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7ffd30a7a548, reg_save_area = 0x7ffd30a7a450}}
[...]

Comment 2 Yuki Okada 2019-09-25 03:04:00 UTC
Similar issues are reported in Fedora, but they are closed with EOL.

1216131 – [abrt] gnome-shell: doGetScreenResources(): gnome-shell killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1216131
1227809 – [abrt] gnome-shell: _g_log_abort(): gnome-shell killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1227809

Comment 5 Tomas Popela 2020-08-27 14:42:52 UTC
Closing the bug as the attached customer case is closed.