Bug 1135587 - [abrt] xorg-x11-server-Xorg: present_set_tree_pixmap(): Xorg.bin killed by SIGSEGV
Summary: [abrt] xorg-x11-server-Xorg: present_set_tree_pixmap(): Xorg.bin killed by SI...
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: xorg-x11-server
Version: 21
Hardware: x86_64
OS: Unspecified
high
high
Target Milestone: ---
Assignee: X/OpenGL Maintenance List
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:9196195afcbb52900eebaea8f0d...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-08-29 17:38 UTC by Jared Smith
Modified: 2015-12-02 16:14 UTC (History)
176 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-12-02 03:36:40 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (12.32 KB, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: cgroup (186 bytes, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: core_backtrace (6.50 KB, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: dso_list (5.08 KB, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: environ (96 bytes, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: exploitable (82 bytes, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: limits (1.29 KB, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: maps (44.19 KB, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: open_fds (45 bytes, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: proc_pid_status (914 bytes, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details
File: var_log_messages (2.41 KB, text/plain)
2014-08-29 17:38 UTC, Jared Smith
no flags Details

Description Jared Smith 2014-08-29 17:38:27 UTC
Description of problem:
Unlocked the screensaver

Version-Release number of selected component:
xorg-x11-server-Xorg-1.16.0-3.fc21

Additional info:
reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-bnvu7F/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.16.1-301.fc21.x86_64
runlevel:       N 5
type:           CCpp
uid:            0

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 present_set_tree_pixmap at present.c:378
 #1 present_unflip at present.c:415
 #2 present_flip_notify at present.c:459
 #3 present_event_notify at present.c:484
 #4 present_flip_handler at sna_present.c:314
 #5 sna_mode_wakeup at sna_display.c:6837
 #6 sna_mode_reset at sna_display.c:6108
 #7 sna_leave_vt at sna_driver.c:898
 #13 present_set_tree_pixmap at present.c:378
 #14 present_set_abort_flip at present.c:398

Comment 1 Jared Smith 2014-08-29 17:38:29 UTC
Created attachment 932766 [details]
File: backtrace

Comment 2 Jared Smith 2014-08-29 17:38:30 UTC
Created attachment 932767 [details]
File: cgroup

Comment 3 Jared Smith 2014-08-29 17:38:30 UTC
Created attachment 932768 [details]
File: core_backtrace

Comment 4 Jared Smith 2014-08-29 17:38:31 UTC
Created attachment 932769 [details]
File: dso_list

Comment 5 Jared Smith 2014-08-29 17:38:32 UTC
Created attachment 932770 [details]
File: environ

Comment 6 Jared Smith 2014-08-29 17:38:32 UTC
Created attachment 932771 [details]
File: exploitable

Comment 7 Jared Smith 2014-08-29 17:38:33 UTC
Created attachment 932772 [details]
File: limits

Comment 8 Jared Smith 2014-08-29 17:38:34 UTC
Created attachment 932773 [details]
File: maps

Comment 9 Jared Smith 2014-08-29 17:38:35 UTC
Created attachment 932774 [details]
File: open_fds

Comment 10 Jared Smith 2014-08-29 17:38:36 UTC
Created attachment 932775 [details]
File: proc_pid_status

Comment 11 Jared Smith 2014-08-29 17:38:36 UTC
Created attachment 932776 [details]
File: var_log_messages

Comment 12 Anonymous 2014-09-28 13:55:37 UTC
Another user experienced a similar problem:

I think crash happened when I wanted to update system. I logged out, changed vt via alt-ctrl-F2, logged in as root in vt, service gdm stop, yum update and this is all.

reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-RIGtLS/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.16.3-300.fc21.x86_64
package:        xorg-x11-server-Xorg-1.16.0-10.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            0

Comment 13 Ankur Sinha (FranciscoD) 2014-10-07 14:59:38 UTC
Another user experienced a similar problem:

I think this is what happened:

I locked my screen and went for a walk. When I got back, I pressed a key to remove the lock screen. At this time, it seemed to crash and bring up gdm. I entered my password in gdm - it took me back to a locked gnome-shell. I entered my password - it brought it up - all my GUI apps had been killed. Only byobu had detached and survived.

reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-VauEH9/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.17.0-0.rc7.git3.1.fc22.x86_64
package:        xorg-x11-server-Xorg-1.16.1-1.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            0

Comment 14 Ankur Sinha (FranciscoD) 2014-10-07 15:18:50 UTC
Happening quite often here - 3 times today already.

Comment 15 Anonymous 2014-10-11 10:18:53 UTC
This time I experienced this bug under weston + Xwayland. I opened Firefox in the same terminal that I opened Xwayland and htop.

Comment 16 Martin Bengtsson 2014-12-11 09:22:52 UTC
Another user experienced a similar problem:

init3
startx

reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-bxKGcv/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.17.4-301.fc21.x86_64
package:        xorg-x11-server-Xorg-1.16.2-1.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       5 3
type:           CCpp
uid:            0

Comment 17 Parth 2015-01-09 03:55:15 UTC
Another user experienced a similar problem:

The problem is reported by OS. I didn't have much chance to check or reproduce the problem.

reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-qo103z/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.17.4-301.fc21.i686
package:        xorg-x11-server-Xorg-1.16.1-1.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            0

Comment 18 Moe Hein Kyaw 2015-02-07 07:41:37 UTC
Another user experienced a similar problem:

My pc shut down again and again while I am using. 

reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-3PSlhb/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.18.3-201.fc21.x86_64
package:        xorg-x11-server-Xorg-1.16.3-2.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            0

Comment 19 Massimiliano Maniscalco 2015-03-05 09:27:37 UTC
Another user experienced a similar problem:

Problem occurred when trying to shut down

reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-szhb5r/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.18.7-200.fc21.x86_64
package:        xorg-x11-server-Xorg-1.16.3-2.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            0

Comment 20 Joe Doss 2015-03-07 03:50:55 UTC
Another user experienced a similar problem:

Woke the Lenovo x230 laptop from sleep and Xorg crashed and logged me out.

reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-3FEYCR/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.18.6-200.fc21.x86_64
package:        xorg-x11-server-Xorg-1.16.3-2.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            0

Comment 21 divay pandey 2015-03-16 15:59:08 UTC
Another user experienced a similar problem:

i do not remember to be honest.. a lot of things just crashed and a few dependencies were hindering the update procedure..

reporter:       libreport-2.3.0
backtrace_rating: 3
cmdline:        /usr/libexec/Xorg.bin :0 -background none -noreset -verbose 3 -logfile /dev/null -auth /run/gdm/auth-for-gdm-nLASGa/database -seat seat0 -nolisten tcp vt1
crash_function: present_set_tree_pixmap
executable:     /usr/libexec/Xorg.bin
kernel:         3.17.4-301.fc21.x86_64
package:        xorg-x11-server-Xorg-1.16.3-2.fc21
reason:         Xorg.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            0

Comment 22 Michal Jurosz 2015-03-26 18:39:54 UTC
Not sure if it is related, but my login screen show many (>10) failed login attempts.

Comment 23 Daniel Helgenberger 2015-04-22 08:31:50 UTC
Also not sure it is related, but I seem to encounter this when attaching to a docking station thus changing screen settings.

Comment 24 Bruce-Robert Pocock 2015-05-19 19:48:42 UTC
Seems to have been caused by trying to run VNC+GDM?

Comment 25 Ulrik Dickow 2015-06-05 10:34:57 UTC
I reproduced it consistently this way locally on my laptop (GDM, Gnome 3):

1) Login as one user (will be at Virtual Console #1);
2) Switch user via menu to login concurrently as another Gnome user on VC#2;
3) Ctrl-Alt-F1 to switch back to first user, enter password to unlock;
4) Ctrl-Alt-F2 to switch back to second user (no password needed);
5) Ctrl-Alt-F1 to first user (no password needed now either, fine);
6) Ctrl-Alt-F2 to second user (quite fast, fine, optionally do more switches);
7) Logout second user => black screen, Ctrl-Alt-* useless, all VC's inaccessible;
8) Powerbutton short press fortunately shuts down cleanly and powers off laptop;

The latest crash, after installing xorg-x11-{server,drv-intel}-debuginfo (2 packages):

kernel:  4.0.4-202.fc21.x86_64
package: xorg-x11-server-Xorg-1.16.3-2.fc21

and using xorg-x11-drv-intel-2.99.916-3.20141117.fc21.x86_64 & default xorg.conf.d/ :

=====================================================================================
# cd /var/tmp/abrt/ccpp-2015-06*
# gdb /usr/libexec/Xorg.bin coredump
[...]
Program terminated with signal SIGSEGV, Segmentation fault.
#0  present_set_tree_pixmap (window=0x0, pixmap=0x23bb410) at present.c:378
378         visit.old = (*screen->GetWindowPixmap)(window);

(gdb) bt    ### Backtrace edited, removing less important info
#0  present_set_tree_pixmap (window=0x0, pixmap=0x23bb410) at present.c:378
#1  0x... in present_unflip (screen=0x22fea20) at present.c:415
#2  0x... in present_flip_notify (...) at present.c:459
#3  present_event_notify (...) at present.c:484
#4  0x... in present_flip_handler (...) at sna_present.c:319
#5  0x... in sna_mode_wakeup (...) at sna_display.c:7419
#6  0x... in sna_mode_reset (...) at sna_display.c:6549
#7  0x... in sna_leave_vt (...) at sna_driver.c:932
#10 0x... in FatalError (..."Caught signal %d (%s). Server aborting\n")
#13 present_set_tree_pixmap (window=0x0, pixmap=0x23bb410) at present.c:378
#14 0x... in present_set_abort_flip (screen=0x22fea20) at present.c:398

(gdb) up 14
#14 0x... in present_set_abort_flip (screen=0x22fea20) at present.c:398
398         present_set_tree_pixmap(screen->root, (*screen->GetScreenPixmap)(screen));

(gdb) print screen->root
$1 = (WindowPtr) 0x0	### As we already knew by "window=0x0" in #13 above

(gdb) list
393
394         if (screen_priv->flip_window)
395             present_set_tree_pixmap(screen_priv->flip_window,
396                                       (*screen->GetScreenPixmap)(screen));
397
398         present_set_tree_pixmap(screen->root, (*screen->GetScreenPixmap)(screen));
399
400         screen_priv->flip_pending->abort_flip = TRUE;
401     }
402
=====================================================================================

The crash is avoided by not calling preset_set_tree_pixmap when screen->root is NULL.
That fix was in fact committed upstream already on 2014-07-31, only 14 days too late for the 1.16 branch, but included in 1.17 and later (including fc22!??), AFAICS:

   http://cgit.freedesktop.org/xorg/xserver/commit/present/present.c?id=40dc81154ad38514793f2181447d597b57d39e80

Yesterday I verified that that commit indeed fixes the crash problem on my laptop (by installing xorg-x11-server-1.16.3-2.fc21.src.rpm, adding the patch to SOURCES-dir and .spec file, building updated packages, updating xorg-x11-server-{Xorg,common} to the patched versions).

As a side note, before installing debuginfo, ABRT directed me to one of the Intel bugs instead, probably rhbz #1172232.  I therefore tested applying the 2 patches there to the Intel driver, but they didn't help.  The reason is now obvious.  The bugs are similar, but unrelated.

Comment 26 Fedora End Of Life 2015-11-04 10:08:40 UTC
This message is a reminder that Fedora 21 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 21. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as EOL if it remains open with a Fedora  'version'
of '21'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 21 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 27 Fedora End Of Life 2015-12-02 03:37:30 UTC
Fedora 21 changed to end-of-life (EOL) status on 2015-12-01. Fedora 21 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.