Bug 901880 - [abrt] python-2.7.3-13.fc18: spice_channel_recv_link_msg: Process /usr/bin/python2.7 was killed by signal 11 (SIGSEGV)
Summary: [abrt] python-2.7.3-13.fc18: spice_channel_recv_link_msg: Process /usr/bin/py...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: spice-gtk
Version: 18
Hardware: Unspecified
OS: Unspecified
unspecified
urgent
Target Milestone: ---
Assignee: Marc-Andre Lureau
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:82dc90a62a5e13175c57a9e8d91...
: 926881 929184 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-01-19 19:00 UTC by Tim Brandt
Modified: 2013-07-05 02:12 UTC (History)
27 users (show)

Fixed In Version: spice-gtk-0.18-2.fc18
Clone Of:
Environment:
Last Closed: 2013-07-05 02:12:28 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (129.78 KB, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: cgroup (126 bytes, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: core_backtrace (405 bytes, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: dso_list (19.92 KB, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: environ (1.47 KB, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: limits (1.29 KB, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: maps (60.53 KB, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: open_fds (872 bytes, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
File: proc_pid_status (784 bytes, text/plain)
2013-01-19 19:00 UTC, Tim Brandt
no flags Details
Guest log. Shutdown triggered virt-manager crash. (63.79 KB, text/plain)
2013-06-07 21:29 UTC, Ian Pilcher
no flags Details

Description Tim Brandt 2013-01-19 19:00:10 UTC
Version-Release number of selected component:
python-2.7.3-13.fc18

Additional info:
backtrace_rating: 4
cmdline:        python /usr/share/virt-manager/virt-manager.py
crash_function: spice_channel_recv_link_msg
executable:     /usr/bin/python2.7
kernel:         3.7.2-201.fc18.i686
remote_result:  NOTFOUND
uid:            1000
var_log_messages: Jan 19 19:50:17 tbr-desk-fc18 abrt[3983]: Saved core dump of pid 1774 (/usr/bin/python2.7) to /var/spool/abrt/ccpp-2013-01-19-19:50:14-1774 (373956608 bytes)

Truncated backtrace:
Thread no. 1 (6 frames)
 #0 spice_channel_recv_link_msg at spice-channel.c:1675
 #1 spice_channel_coroutine at spice-channel.c:2299
 #2 coroutine_trampoline at coroutine_ucontext.c:56
 #3 continuation_trampoline at continuation.c:49
 #4 makecontext at ../sysdeps/unix/sysv/linux/i386/makecontext.S:87
 #5 ??

Comment 1 Tim Brandt 2013-01-19 19:00:16 UTC
Created attachment 683188 [details]
File: backtrace

Comment 2 Tim Brandt 2013-01-19 19:00:19 UTC
Created attachment 683189 [details]
File: cgroup

Comment 3 Tim Brandt 2013-01-19 19:00:21 UTC
Created attachment 683190 [details]
File: core_backtrace

Comment 4 Tim Brandt 2013-01-19 19:00:24 UTC
Created attachment 683191 [details]
File: dso_list

Comment 5 Tim Brandt 2013-01-19 19:00:27 UTC
Created attachment 683192 [details]
File: environ

Comment 6 Tim Brandt 2013-01-19 19:00:30 UTC
Created attachment 683193 [details]
File: limits

Comment 7 Tim Brandt 2013-01-19 19:00:39 UTC
Created attachment 683194 [details]
File: maps

Comment 8 Tim Brandt 2013-01-19 19:00:42 UTC
Created attachment 683195 [details]
File: open_fds

Comment 9 Tim Brandt 2013-01-19 19:00:47 UTC
Created attachment 683196 [details]
File: proc_pid_status

Comment 10 Luke Macken 2013-02-24 20:02:14 UTC
I just hit this crash when going from a full-screened VM back to a normal window. This SELinux violation came with it:


type=AVC msg=audit(1361729857.879:6056): avc:  denied  { create } for  pid=29170 comm="qemu-kvm" scontext=unconfined_u:system_r:svirt_t:s0:c305,c959 tcontext=unconfined_u:system_r:svirt_t:s0:c305,c959 tclass=rawip_socket


type=SYSCALL msg=audit(1361729857.879:6056): arch=x86_64 syscall=socket success=no exit=EACCES a0=2 a1=80002 a2=1 a3=a8 items=0 ppid=1 pid=29170 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=2 tty=(none) comm=qemu-kvm exe=/usr/bin/qemu-kvm subj=unconfined_u:system_r:svirt_t:s0:c305,c959 key=(null)

Comment 11 Cole Robinson 2013-04-01 10:08:07 UTC
*** Bug 929184 has been marked as a duplicate of this bug. ***

Comment 12 Cole Robinson 2013-04-01 10:08:17 UTC
*** Bug 926881 has been marked as a duplicate of this bug. ***

Comment 13 Cole Robinson 2013-04-01 10:09:42 UTC
Also got a hit from gnome-boxes, so moving to spice-gtk.

Comment 14 Jens Petersen 2013-04-03 11:12:27 UTC
Usually crashes happen for me when a guest powers down
which brings down the whole of virt-manager.

Comment 15 Sander Salazar 2013-04-05 11:19:10 UTC
It occurred to me in 2 circumstances: a restart and a rescale.

Comment 16 Josh Bressers 2013-04-10 17:30:04 UTC
I can hit this by opening and closing the VM guest window repeatedly in virt-manager. Generally somewhere between try 5 and 10 it takes down all of virt-manager.

Comment 17 Bruno Martins 2013-05-07 22:48:25 UTC
It happened to me when I had finished installing a Debian 7 guest, on the last reboot, before the guest comes up again.

When starting virt-manager again, this particular guest was down, but all others were unaffected.

Comment 18 Jens Petersen 2013-05-15 03:17:08 UTC
This causes https://retrace.fedoraproject.org/faf/reports/87147/.

Comment 19 Richard Henderson 2013-06-07 03:48:51 UTC
Any progress on this?  This happens to me on every single guest
powerdown or reboot.

Comment 20 Christophe Fergeau 2013-06-07 08:10:58 UTC
Is there anything in the VM log when this happens? They are in /var/log/libvirt/qemu/logs/
What spice-gtk version are you using?
Looking at the retrace/faf report, this may have been fixed in f19 (though I would have liked to get more detailed on the 4 f19 reports there to know if they are old or not).

Comment 21 Ian Pilcher 2013-06-07 21:29:05 UTC
Created attachment 758323 [details]
Guest log.  Shutdown triggered virt-manager crash.

Comment 22 Frank Murphy 2013-06-08 14:49:03 UTC
Will any fix be backported to F18, or just use F19-preview?

Comment 23 Marc-Andre Lureau 2013-06-21 09:45:47 UTC
I managed to reproduce with 0.15.3 in f19.

Comment 24 Marc-Andre Lureau 2013-06-21 10:57:14 UTC
The crash occurs because of "incomplete link header", and c->peer_msg is NULL

It is solved by the following commit in 0.19.

commit b19acbca339a3a630f7f19e1fe5b7cc21fccd737
Author: Dunrong Huang <riegamaths>
Date:   Mon Mar 11 16:30:02 2013 +0800

    spice-channel: Do not segfault fault if peer_msg was a NULL pointer
    
    $ remote-viewer spice://192.168.0.233:111 # 111 is not a valid spice port
    (remote-viewer:29381): GSpice-WARNING **: incomplete link header (-104/16)
    Segmentation fault (core dumped)
    


I updated the f18 package, build follows soon

Comment 25 Fedora Update System 2013-06-21 11:59:37 UTC
spice-gtk-0.18-2.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/spice-gtk-0.18-2.fc18

Comment 26 Fedora Update System 2013-06-23 05:52:53 UTC
Package spice-gtk-0.18-2.fc18:
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing spice-gtk-0.18-2.fc18'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-11496/spice-gtk-0.18-2.fc18
then log in and leave karma (feedback).

Comment 27 Fedora Update System 2013-07-05 02:12:28 UTC
spice-gtk-0.18-2.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.