Description of problem:

 On Altix IA64 with FireMV 2200 graphics running
 RHEL5.2-Snapshot1, starting nautilus causes the
 system to hang.  If nautilus is disabled in
 /usr/share/gnome/default.session, the gnome
 desktop runs without any problems.  When run with
 the --no-desktop option, there is no problem
 either.  However, even without the gnome desktop
 (just using 'xinit' to start the X server with
 an xterm and no window manager), running nautilus
 without any options prints the following and
 causes the system to hang:

   Initializing nautilus-open-terminal extension

   ** (nautilus:4557): WARNING **: Can not caclulate _NET_NUMBER_OF_DESKTOPS

   ** (nautilus:4557): WARNING **: Can not calculate _NET_NUMBER_OF_DESKTOPS

   ** (nautilus:4557): WARNING **: Can not get _NET_WORKAREA

   ** (nautilus:4557): WARNING **: Can not determine workarea, guessing at layout

Supporting Materials: This issue was initially held up by bug 448139 (fixed in RHEL 5.3). Now that we've provided them with test packages, they were able to do a bit of debugging (see https://enterprise.redhat.com/issue-tracker/?module=issues&action=view&tid=170845&gid=707&view_type=lifoall#eid_2361662 ). If a sysreport is required let me know and I'll get one, but they seem to have narrowed it down.

Requested Action from SEG: Fix/Escalate. I'd like to generate a release note for 5.3, so a bugzilla sooner rather than later would be appreciated!



How reproducible:

 Always.

Steps to Reproduce:

 Run 'xinit' to start the X server with just an
 xterm and no window manager, then run 'nautilus'.

Actual results:

 System hangs without any error messages,
 requiring reboot.

Expected results:

 nautilus and window system run normally.

Additional info:

  Event posted 09-23-2008 05:57pm EDT by jlim-sgi 
	
I've narrowed the problem down:

#0  fbBlt (srcLine=0x2000000005807800, srcStride=5120, srcX=0,
   dstLine=0x600000000033fcf0, dstStride=5120, dstX=0, width=5120,
   height=1024, alu=3, pm=4294967295, bpp=32, reverse=0, upsidedown=0)
   at fbblt.c:96
#1  0x2000000004ffadf0 in fbCopyNtoN (pSrcDrawable=0x60000000002f7e10,
   pDstDrawable=0x6000000000301d30, pGC=0x6000000000214510,
   pbox=0x60000fffffc3f0f0, nbox=0, dx=0, dy=1030, reverse=0, upsidedown=0,
   bitplane=0, closure=0x0) at fbcopy.c:85
#2  0x2000000004ffdfa0 in fbCopyRegion (pSrcDrawable=0x60000000002f7e10,
   pDstDrawable=0x6000000000301d30, pGC=0x6000000000214510,
   pDstRegion=0x60000fffffc3f0f0, dx=0, dy=1030, copyProc=0x2000000000a81940,
   bitPlane=0, closure=0x0) at fbcopy.c:394
#3  0x2000000004fff410 in fbDoCopy (pSrcDrawable=0x60000000002f7e10,
   pDstDrawable=0x6000000000301d30, pGC=0x6000000000214510, xIn=0, yIn=1030,
   widthSrc=1280, heightSrc=1024, xOut=0, yOut=0, copyProc=0x2000000000a81940,
   bitPlane=0, closure=0x0) at fbcopy.c:594
#4  0x2000000004fff960 in fbCopyArea (pSrcDrawable=0x60000000002f7e10,
   pDstDrawable=0x6000000000301d30, pGC=0x6000000000214510, xIn=0, yIn=0,
   widthSrc=1280, heightSrc=1024, xOut=0, yOut=0) at fbcopy.c:632
#5  0x20000000050d3c80 in XAACopyAreaPixmap (pSrc=0x60000000002f7e10,
   pDst=0x6000000000301d30, pGC=0x6000000000214510, srcx=0, srcy=0,
   width=1280, height=1024, dstx=0, dsty=0) at xaaGC.c:400
#6  0x40000000004dd4f0 in cwCopyArea (pSrc=0x60000000002f7e10,
   pDst=0x6000000000301d30, pGC=0x6000000000214510, srcx=0, srcy=0, w=1280,
   h=1024, dstx=0, dsty=0) at cw_ops.c:202
#7  0x40000000004c3d60 in damageCopyArea (pSrc=0x60000000002f7e10,
   pDst=0x6000000000301d30, pGC=0x6000000000214510, srcx=0, srcy=0,
   width=1280, height=1024, dstx=0, dsty=0) at damage.c:790
#8  0x200000000515ff80 in XAAMoveOutOffscreenPixmap (pPix=0x60000000002f7e10)
   at xaaOffscreen.c:149
#9  0x200000000515f8d0 in XAARemoveAreaCallback (area=0x60000000002fe170)
   at xaaOffscreen.c:114
#10 0x20000000050cf580 in XAAValidateGC (pGC=0x60000000002c9600,
   changes=8388607, pDraw=0x600000000031f8b0) at xaaGC.c:104
#11 0x40000000004d6660 in cwValidateGC (pGC=0x60000000002c9600,
   stateChanges=8388607, pDrawable=0x600000000031f8b0) at cw.c:166
#12 0x40000000004bdcc0 in damageValidateGC (pGC=0x60000000002c9600,
   changes=8388607, pDrawable=0x600000000031f8b0) at damage.c:410
#13 0x40000000000f4e30 in ValidateGC (pDraw=0x600000000031f8b0,
   pGC=0x60000000002c9600) at gc.c:79
#14 0x40000000000a3300 in ProcPolyFillRectangle (client=0x6000000000293ef0)
   at dispatch.c:1948
#15 0x4000000000091c70 in Dispatch () at dispatch.c:459
#16 0x400000000003b400 in main (argc=1, argv=0x60000fffffc3fc78,
   envp=0x60000fffffc3fc88) at main.c:447

    46 fbBlt (FbBits   *srcLine,
    ...
    85         CARD8 *src = (CARD8 *) srcLine;
    ...
    96                 memcpy(dst + i * dstStride, src + i * srcStride, width);

The hang occurs in memcpy(); src appears to be out of bounds.

Xorg uses XAA for acceleration by default.  To prevent the hang, one of
the following entries may be specified in the "Device" section (for the
Radeon driver) in /etc/X11/xorg.conf:

 Option "NoAccel" "on"

 Option "AccelMethod" "EXA"

David: can you open a BZ against Xorg?  Thanks. 


SEG NOTES:

Waiting on sysreport.