Bug 565851

Summary: Xorg server segfaults during opening large images in firefox
Product: [Fedora] Fedora Reporter: Tomáš Bžatek <tbzatek>
Component: xorg-x11-drv-nouveauAssignee: Ben Skeggs <bskeggs>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 13CC: airlied, ajax, bskeggs, tsmetana
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: libdrm-2.4.19-1.fc13 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-03-25 22:26:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Xorg.0.log.old
none
lspci -vvv none

Description Tomáš Bžatek 2010-02-16 14:40:19 UTC 
Created attachment 394558 [details]
Xorg.0.log.old

Description of problem:
X server segfaults when trying to load big images in firefox. Midori and other gtkwebkit-based browsers work fine. This has probably something to do with pixmap handling in the xserver.

Version-Release number of selected component (if applicable):
xorg-x11-drv-nouveau-0.0.16-0.20100205gite75dd23.fc13.x86_64
xorg-x11-server-Xorg-1.7.99.3-3.20100208.fc13.x86_64
libdrm-2.4.17-3.fc13.x86_64
cairo-1.8.8-3.fc12.x86_64
pixman-0.17.4-1.fc13.x86_64
firefox-3.5.6-1.fc12.x86_64

How reproducible:
always

Steps to Reproduce:
Try to load http://www.flickr.com/photos/dos-chin/3340877332/sizes/o/ in firefox (huge picture)
  
Actual results:
X server segfaults

Additional info:
kernel is custom 2.6.32-zen1 with backported nouveau drm, not using external firmware yet.
#define DRIVER_DATE             "20090420"
#define DRIVER_PATCHLEVEL       15


dmesg log is full of
DRHD: handling fault status reg 2
DMAR:[DMA Read] Request device [60:00.0] fault addr 0 
DMAR:[fault reason 06] PTE Read access is not set

Backtrace:
[ 11879.800] 0: /usr/bin/Xorg (xorg_backtrace+0x28) [0x49faf8]
[ 11879.800] 1: /usr/bin/Xorg (0x400000+0x61bc9) [0x461bc9]
[ 11879.800] 2: /lib64/libpthread.so.0 (0x7f44bc605000+0xf780) [0x7f44bc614780]
[ 11879.800] 3: /usr/lib64/libdrm_nouveau.so.1 (0x7f44b9831000+0x338a) [0x7f44b983438a]
[ 11879.800] 4: /usr/lib64/libdrm_nouveau.so.1 (nouveau_bo_ref+0xa4) [0x7f44b9834454]
[ 11879.800] 5: /usr/lib64/libdrm_nouveau.so.1 (nouveau_bo_new_tile+0x112) [0x7f44b98347a2]
[ 11879.800] 6: /usr/lib64/xorg/modules/drivers/nouveau_drv.so (0x7f44b9a36000+0x5355) [0x7f44b9a3b355]
[ 11879.800] 7: /usr/lib64/xorg/modules/libexa.so (0x7f44b8fcb000+0x6f3b) [0x7f44b8fd1f3b]
[ 11879.800] 8: /usr/lib64/xorg/modules/libexa.so (0x7f44b8fcb000+0x7468) [0x7f44b8fd2468]
[ 11879.800] 9: /usr/lib64/xorg/modules/libexa.so (0x7f44b8fcb000+0x7bd5) [0x7f44b8fd2bd5]
[ 11879.800] 10: /usr/bin/Xorg (0x400000+0xd5a9c) [0x4d5a9c]
[ 11879.800] 11: /usr/bin/Xorg (0x400000+0x2a259) [0x42a259]
[ 11879.800] 12: /usr/bin/Xorg (0x400000+0x2c5cc) [0x42c5cc]
[ 11879.800] 13: /usr/bin/Xorg (0x400000+0x21cca) [0x421cca]
[ 11879.800] 14: /lib64/libc.so.6 (__libc_start_main+0xfd) [0x7f44bafe0d2d]
[ 11879.800] 15: /usr/bin/Xorg (0x400000+0x21879) [0x421879]
[ 11879.800] Segmentation fault at address 0xa6
Comment 1 Tomáš Bžatek 2010-02-16 14:40:57 UTC 
Created attachment 394559 [details]
lspci -vvv
Comment 2 Bug Zapper 2010-03-15 15:05:40 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 13 development cycle.
Changing version to '13'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping
Comment 3 Fedora Update System 2010-03-19 00:52:29 UTC 
libdrm-2.4.19-1.fc13 has been submitted as an update for Fedora 13.
http://admin.fedoraproject.org/updates/libdrm-2.4.19-1.fc13
Comment 4 Fedora Update System 2010-03-23 02:02:03 UTC 
libdrm-2.4.19-1.fc13 has been pushed to the Fedora 13 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update libdrm'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/libdrm-2.4.19-1.fc13
Comment 5 Fedora Update System 2010-03-25 22:26:11 UTC 
libdrm-2.4.19-1.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.