Bug 716494

Summary: [Clarkdale] xorg crashes with segfault
Product: [Fedora] Fedora Reporter: Andrew <travneff>
Component: xorg-x11-drv-intelAssignee: Adam Jackson <ajax>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 15CC: ajax, mcepl, xgl-maint
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard: [cat:crash]
Fixed In Version: xorg-x11-drv-intel-2.15.0-4.fc15 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-07-12 04:52:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
xorg log
none
dmesg output
none
/var/log/messages file
none
[2]: xorg log none

Description Andrew 2011-06-24 16:16:13 UTC
Created attachment 509806 [details]
xorg log

Sometimes X is crashes with segfault. Happens from none to several times per day, most often while scrolling some window using drag-n-drop the scrollbar.

Log snippet (full version with logverbose=7 attached):

Backtrace:
[ 28153.422] 0: /usr/bin/X (xorg_backtrace+0x2f) [0x46207f]
[ 28153.422] 1: /usr/bin/X (0x400000+0x66dc6) [0x466dc6]
[ 28153.422] 2: /lib64/libpthread.so.0 (0x30ddc00000+0xeeb0) [0x30ddc0eeb0]
[ 28153.422] 3: /usr/lib64/libdrm_intel.so.1 (drm_intel_bo_emit_reloc+0x0) [0x7fb9d26f7d20]
[ 28153.430] 4: /usr/lib64/xorg/modules/drivers/intel_drv.so (0x7fb9d2901000+0x232c4) [0x7fb9d29242c4]
[ 28153.430] 5: /usr/lib64/xorg/modules/drivers/intel_drv.so (0x7fb9d2901000+0x27efa) [0x7fb9d2928efa]
[ 28153.430] 6: /usr/bin/X (0x400000+0x154ddf) [0x554ddf]
[ 28153.430] 7: /usr/bin/X (0x400000+0x15507c) [0x55507c]
[ 28153.431] 8: /usr/bin/X (0x400000+0x155845) [0x555845]
[ 28153.431] 9: /usr/bin/X (miWideLine+0x1a3) [0x5575e3]
[ 28153.431] 10: /usr/bin/X (miPolySegment+0x44) [0x54fc44]
[ 28153.431] 11: /usr/bin/X (0x400000+0xdc941) [0x4dc941]
[ 28153.431] 12: /usr/bin/X (0x400000+0x2fe1f) [0x42fe1f]
[ 28153.431] 13: /usr/bin/X (0x400000+0x33831) [0x433831]
[ 28153.431] 14: /usr/bin/X (0x400000+0x22bc5) [0x422bc5]
[ 28153.431] 15: /lib64/libc.so.6 (__libc_start_main+0xed) [0x30dd42139d]
[ 28153.431] 16: /usr/bin/X (0x400000+0x22eb1) [0x422eb1]
[ 28153.431] Segmentation fault at address (nil)

Components version: I've tried both current packages from stable repos

xorg-x11-drv-intel          2.15.0-3.fc15
xorg-x11-server-Xorg        1.10.2-1.fc15
xorg-x11-server-common      1.10.2-1.fc15

and rawhide versions

xorg-x11-server-common       1.10.99.1-7.20110510.fc16
xorg-x11-server-Xorg         1.10.99.1-7.20110510.fc16
xorg-x11-drv-intel           2.15.0-4.fc16

results are same.

xorg.conf: none

Comment 1 Andrew 2011-06-27 14:16:55 UTC
Reproduced for Xorg from current stable repo as described above. drm.debug is set to 0x04, X logverbose = 7

Comment 2 Andrew 2011-06-27 14:17:54 UTC
Created attachment 510101 [details]
dmesg output

Comment 3 Andrew 2011-06-27 14:18:34 UTC
Created attachment 510102 [details]
/var/log/messages file

Comment 4 Andrew 2011-06-27 14:19:12 UTC
Created attachment 510103 [details]
[2]: xorg log

Comment 5 Matěj Cepl 2011-07-04 23:44:23 UTC
In function intel_batch_emit_dword:
(from frame 4: /usr/lib64/xorg/modules/drivers/intel_drv.so (0x7fb9d2901000+0x232c4) [0x7fb9d29242c4])
79: {
80: 	intel_screen_private *intel = intel_get_screen_private(scrn);
81: 
82: 	assert(intel->in_batch_atomic);
83: 	assert(intel->batch_used <= intel->batch_atomic_limit);
84: 	intel->in_batch_atomic = FALSE;
85: }
86: 
87: static inline void intel_batch_emit_dword(intel_screen_private *intel, uint32_t dword)
88: {
89: >>>>>>> 	intel->batch_ptr[intel->batch_used++] = dword;
90: }
91: 
92: static inline void intel_batch_align(intel_screen_private *intel, uint32_t align)
93: {
94: 	uint32_t delta;
95: 
96: 	align /= 4;
97: 	assert(align);
98: 
99: 	if ((delta = intel->batch_used & (align - 1))) {


Frame 5: /usr/lib64/xorg/modules/drivers/intel_drv.so (0x7fb9d2901000+0x27efa) [0x7fb9d2928efa]
	/usr/src/debug/xf86-video-intel-2.15.0/uxa/uxa-accel.c:170
	uxa_fill_spans
Frame 6: /usr/bin/X (0x400000+0x154ddf) [0x554ddf]
	/usr/src/debug/xorg-server-20110510/mi/miwideline.c:122
	fillSpans
Frame 7: /usr/bin/X (0x400000+0x15507c) [0x55507c]
	/usr/src/debug/xorg-server-20110510/mi/miwideline.c:235
	miFillPolyHelper
Frame 8: /usr/bin/X (0x400000+0x155845) [0x555845]
	/usr/src/debug/xorg-server-20110510/mi/miwideline.c:1481
	miWideSegment
Frame 9: /usr/bin/X (miWideLine+0x1a3) [0x5575e3]
	/usr/src/debug/xorg-server-20110510/mi/miwideline.c:1589
	miWideLine
Frame 10: /usr/bin/X (miPolySegment+0x44) [0x54fc44]
	/usr/src/debug/xorg-server-20110510/mi/mipolyseg.c:74
	miPolySegment
Frame 11: /usr/bin/X (0x400000+0xdc941) [0x4dc941]
	/usr/src/debug/xorg-server-20110510/miext/damage/damage.c:1097
	damagePolySegment
Frame 12: /usr/bin/X (0x400000+0x2fe1f) [0x42fe1f]
	/usr/src/debug/xorg-server-20110510/dix/dispatch.c:1769
	ProcPolySegment
Frame 13: /usr/bin/X (0x400000+0x33831) [0x433831]
	/usr/src/debug/xorg-server-20110510/dix/dispatch.c:432
	Dispatch
Frame 14: /usr/bin/X (0x400000+0x22bc5) [0x422bc5]
	/usr/src/debug/xorg-server-20110510/dix/main.c:291
	main
bradford:debug $

Comment 6 Fedora Update System 2011-07-05 17:52:46 UTC
xorg-x11-drv-intel-2.15.0-4.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/xorg-x11-drv-intel-2.15.0-4.fc15

Comment 7 Fedora Update System 2011-07-06 21:35:49 UTC
Package xorg-x11-drv-intel-2.15.0-4.fc15:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing xorg-x11-drv-intel-2.15.0-4.fc15'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/xorg-x11-drv-intel-2.15.0-4.fc15
then log in and leave karma (feedback).

Comment 8 Andrew 2011-07-09 11:44:22 UTC
Used xorg-x11-drv-intel-2.15.0-4.fc15 for 3 days, current issue doesn't appear.

Comment 9 Fedora Update System 2011-07-12 04:52:39 UTC
xorg-x11-drv-intel-2.15.0-4.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.