Bug 2397697

Summary: [abrt] xorg-x11-server-Xorg: vncHooksMoveCursor(): Xorg killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Joao Carlos Mendes Luis <jonny>
Component: tigervncAssignee: Adam Jackson <ajax>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 42CC: ajax, jexposit, jgrulich, jonny, ofourdan, rstrode, xgl-maint
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/5a799dbf86d05318bd660aebb9fd68be5760f3a
Whiteboard: abrt_hash:1a75b9345ce590c21c634fb21fe4fa949ca12de0;VARIANT_ID=xfce;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-11-24 07:36:26 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: open_fds
none
File: os_info
none
File: mountinfo
none
File: environ
none
File: backtrace
none
File: limits
none
File: cpuinfo
none
File: exploitable
none
File: maps
none
File: core_backtrace
none
File: proc_pid_status none

Description Joao Carlos Mendes Luis 2025-09-23 20:30:04 UTC 
Description of problem:
Again, Tiger VNC server

Version-Release number of selected component:
xorg-x11-server-Xorg-21.1.18-1.fc42

Additional info:
reporter:       libreport-2.17.15
dso_list:       /usr/libexec/Xorg xorg-x11-server-Xorg-21.1.18-1.fc42.x86_64 (Fedora Project) 1751398857
crash_function: vncHooksMoveCursor
cgroup:         0::/system.slice/lightdm.service
backtrace_rating: 4
comment:        Again, Tiger VNC server
package:        xorg-x11-server-Xorg-21.1.18-1.fc42
runlevel:       N 5
journald_cursor: s=a78c664d9fe34b2da2768ad43d83700c;i=23fdaad;b=5c19b8be59eb4e889ef1faa9f702403a;m=3e41279810;t=63f7dc6234c67;x=16ca794716475674
reason:         Xorg killed by SIGSEGV
executable:     /usr/libexec/Xorg
rootdir:        /
kernel:         6.16.7-200.fc42.x86_64
cmdline:        /usr/libexec/Xorg -core -noreset :0 -seat seat0 -auth /run/lightdm/root/:0 -listen tcp vt1 -novtswitch
uid:            0
type:           CCpp

Truncated backtrace:
Thread no. 1 (1 frames)
 #0 vncHooksMoveCursor at ../../include/privates.h:164


Potential duplicate: bug 2356978
Comment 1 Joao Carlos Mendes Luis 2025-09-23 20:30:09 UTC 
Created attachment 2107369 [details]
File: open_fds
Comment 2 Joao Carlos Mendes Luis 2025-09-23 20:30:10 UTC 
Created attachment 2107370 [details]
File: os_info
Comment 3 Joao Carlos Mendes Luis 2025-09-23 20:30:11 UTC 
Created attachment 2107371 [details]
File: mountinfo
Comment 4 Joao Carlos Mendes Luis 2025-09-23 20:30:12 UTC 
Created attachment 2107372 [details]
File: environ
Comment 5 Joao Carlos Mendes Luis 2025-09-23 20:30:14 UTC 
Created attachment 2107373 [details]
File: backtrace
Comment 6 Joao Carlos Mendes Luis 2025-09-23 20:30:15 UTC 
Created attachment 2107374 [details]
File: limits
Comment 7 Joao Carlos Mendes Luis 2025-09-23 20:30:16 UTC 
Created attachment 2107375 [details]
File: cpuinfo
Comment 8 Joao Carlos Mendes Luis 2025-09-23 20:30:18 UTC 
Created attachment 2107376 [details]
File: exploitable
Comment 9 Joao Carlos Mendes Luis 2025-09-23 20:30:19 UTC 
Created attachment 2107377 [details]
File: maps
Comment 10 Joao Carlos Mendes Luis 2025-09-23 20:30:21 UTC 
Created attachment 2107378 [details]
File: core_backtrace
Comment 11 Joao Carlos Mendes Luis 2025-09-23 20:30:22 UTC 
Created attachment 2107379 [details]
File: proc_pid_status
Comment 12 Joao Carlos Mendes Luis 2025-11-18 23:21:51 UTC 
I installed some debuginfo RPMs and did a GDB backtrace.  The error happens in an infinite loop of

#10 0x00007fe4c9f063d9 in vncHooksMoveCursor (dev=<optimized out>, screen=<optimized out>, x=<optimized out>, y=<optimized out>)
    at /usr/src/debug/tigervnc-1.15.0-6.fc42.x86_64/unix/xserver/hw/vnc/vncHooks.c:1265

And finishes with


#261893 0x00007fe4c9f063d9 in vncHooksMoveCursor (dev=<optimized out>, screen=<optimized out>, x=<optimized out>, y=<optimized out>)
    at /usr/src/debug/tigervnc-1.15.0-6.fc42.x86_64/unix/xserver/hw/vnc/vncHooks.c:1265
#261894 0x00000000004238c9 in miPointerUpdateSprite (pDev=0x39bd0060) at ../mi/mipointer.c:440
#261895 mieqProcessInputEvents () at ../mi/mieq.c:571
#261896 0x0000000000551901 in ProcessInputEvents () at ../hw/xfree86/common/xf86Events.c:143
#261897 0x0000000000412c28 in Dispatch () at ../dix/dispatch.c:508
#261898 dix_main (argc=12, argv=0x7ffc29224f18, envp=<optimized out>) at ../dix/main.c:274
#261899 main (argc=12, argv=0x7ffc29224f18, envp=<optimized out>) at ../dix/stubmain.c:34

My card is a
10:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Raphael (rev c4)
embedded in the CPU
vendor_id       : AuthenticAMD
cpu family      : 25
model           : 97
model name      : AMD Ryzen 9 7900 12-Core Processor
stepping        : 2
microcode       : 0xa60120a
Main board:
Base Board Information
        Manufacturer: ASUSTeK COMPUTER INC.
        Product Name: PRIME X670-P
        Version: Rev 1.xx

My Xorg session is run by xfce4-session-4.20.2-1.fc42.x86_64 and lightdm-1.32.0-13.fc42.x86_64

Just in case: I don't remember having these problems in the previous board, another CPU and nVidia card.

Please tell me if I can help more.  I can even run a specially crafted libvnc.so if this helps.  Just note that the bug is VERY random.  It could happen many times a day or keep weeks without showing.  Could not find any correlation.  Every time I remember I was locally, not in a remote VNC session.
Comment 13 Jan Grulich 2025-11-24 07:36:26 UTC 

*** This bug has been marked as a duplicate of bug 2416635 ***