Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1377540

Summary: metacity-2.28.0-23.el6 has crashed by SIGSEGV
Product: Red Hat Enterprise Linux 6 Reporter: kyoneyama <kyoneyam>
Component: metacityAssignee: Owen Taylor <otaylor>
Status: CLOSED WONTFIX QA Contact: Desktop QE <desktop-qa-list>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.8CC: knoha, otaylor, rick.beldin, stanislav.moravec, yzheng
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-05-17 18:33:15 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description kyoneyama 2016-09-20 04:57:18 UTC
Description of problem:

 ABRT detected metaticy has crashed by SIGSEGV.

  -- messages --
  May 16 09:23:33 ktsbk04 kernel: metacity[21087]: segfault at 8 ip 000000000041a97b sp 00007fff9cef5360 error 4 in metacity[400000+88000]
  May 16 09:23:33 ktsbk04 abrt[28687]: Saved core dump of pid 21087 (/usr/bin/metacity) to /var/spool/abrt/ccpp-2016-05-16-09:23:33-21087 (4550656 bytes)
  May 16 09:23:33 ktsbk04 abrtd: Directory 'ccpp-2016-05-16-09:23:33-21087' creation detected


  A problem seems to have occurred during a finishing process.

 $ gdb coredump
  (..snip..)
  Core was generated by `metacity'.
  Program terminated with signal 11, Segmentation fault.
  #0  0x000000000041a97b in meta_display_for_x_display (xdisplay=0x2152ee0) at core/display.c:1048
  1048	  if (the_display->xdisplay == xdisplay)
  
  (gdb) bt
  #0  0x000000000041a97b in meta_display_for_x_display (xdisplay=0x2152ee0) at core/display.c:1048
  #1  0x0000000000424a3b in x_io_error_handler (xdisplay=0x2152ee0) at core/errors.c:265
  #2  0x00000039c144497e in _XIOError (dpy=0x2152ee0) at XlibInt.c:1618
  #3  0x00000039c1443369 in _XReply (dpy=0x2152ee0, rep=0x7fff9cef5410, extra=0, discard=1) at xcb_io.c:707
  #4  0x00000039c143ec5d in XSync (dpy=0x2152ee0, discard=1) at Sync.c:44
  #5  0x00000039c141f6b0 in XCloseDisplay (dpy=0x2152ee0) at ClDisplay.c:61
  #6  0x00007f9d9a77fda8 in spi_atk_bridge_exit_func () at bridge.c:656
  #7  0x00000039be035e22 in __run_exit_handlers (status=0) at exit.c:78
  #8  exit (status=0) at exit.c:100
  #9  0x00000039be01ed24 in __libc_start_main (main=0x42be80 <main>, argc=1, ubp_av=0x7fff9cef55d8, init=<value optimized out>, 
      fini=<value optimized out>, rtld_fini=<value optimized out>, stack_end=0x7fff9cef55c8) at libc-start.c:258
  #10 0x000000000040f699 in _start ()


Version-Release number of selected component (if applicable):

  - Red Hat Enterprise Linux 6
  - metacity-2.28.0-23.el6.x86_64
  - kernel-2.6.32-504.1.3.el6.x86_64
  - glibc-2.12-1.132.el6
  - xorg-x11-server-Xorg-1.13.0-23.el6.x86_64
  - glib2-2.26.1-3.el6


How reproducible:

  This problem is not reproducible.

Steps to Reproduce:

  No reproducer.

Comment 2 kyoneyama 2016-09-21 01:05:09 UTC
A cause is that the variable `the_display` remains NULL.


# gdb -c coredump

#0  0x000000000041a97b in meta_display_for_x_display (xdisplay=0x2152ee0) at core/display.c:1048
1048	  if (the_display->xdisplay == xdisplay)
Missing separate debuginfos, use: debuginfo-install dbus-libs-1.2.24-8.el6_6.x86_64 fontconfig-2.8.0-5.el6.x86_64 libgcc-4.4.7-17.el6.x86_64 libselinux-2.0.94-7.el6.x86_64 libudev-147-2.46.el6.x86_64
(gdb) l
1043	 *          we're managing.
1044	 */
1045	MetaDisplay*
1046	meta_display_for_x_display (Display *xdisplay)
1047	{
1048	  if (the_display->xdisplay == xdisplay)
1049	    return the_display;
1050	
1051	  meta_warning ("Could not find display for X display %p, probably going to crash\n",
1052	                xdisplay);

(gdb) p the_display->xdisplay
Cannot access memory at address 0x8

(gdb) p the_display
$1 = (MetaDisplay *) 0x0

Comment 7 Owen Taylor 2017-05-17 18:33:15 UTC
Metacity and Mutter in RHEL 7 (Mutter replaces Metacity for most purposes in RHEL 7 - Metacity is only used for anaconda), both contain the fix for this crash in:

 https://bugzilla.gnome.org/show_bug.cgi?id=604319

RHEL 6 will not be updated for this issue at this point (this crash occurs at session exit so has no effect on the operation of the user's session)