X crashes when Browse views http://wiki.laptop.org/go/Hardware_specification
|Reported by:||tomeu||Owned by:||dsd|
|Priority:||blocker||Milestone:||8.2.0 (was Update.2)|
|Component:||x window system||Version:||not specified|
|Keywords:||blocks:8.2.0 8.2-759:+||Cc:||morgs, JordanCrouse, jg|
|Deployments affected:||Action Needed:||test in release|
seems like mozilla requests a pixmap too big for the available memory, then X tries to free the failed pixmap (NULL).
Program received signal SIGSEGV, Segmentation fault. XvDestroyPixmap (pPix=0x0) at xvmain.c:348 348 pScreen = pPix->drawable.pScreen; (gdb) bt #0 XvDestroyPixmap (pPix=0x0) at xvmain.c:348 #1 0x0808119f in ProcCreatePixmap (client=0x9450950) at dispatch.c:1342 #2 0x08085dbf in Dispatch () at dispatch.c:454 #3 0x0806b63d in main (argc=7, argv=0xbfa7c494, envp=0x0) at main.c:441 (gdb) l 343 XvAdaptorPtr pa; 344 int na; 345 XvPortPtr pp; 346 int np; 347 348 pScreen = pPix->drawable.pScreen; 349 350 SCREEN_PROLOGUE(pScreen, DestroyPixmap); 351 352 pxvs = (XvScreenPtr)dixLookupPrivate(&pScreen->devPrivates, XvScreenKey); (gdb) up #1 0x0808119f in ProcCreatePixmap (client=0x9450950) at dispatch.c:1342 1342 (*pDraw->pScreen->DestroyPixmap)(pMap); (gdb) l 1337 return rc; 1338 } 1339 if (AddResource(stuff->pid, RT_PIXMAP, (pointer)pMap)) 1340 return(client->noClientException); 1341 } 1342 (*pDraw->pScreen->DestroyPixmap)(pMap); 1343 return (BadAlloc); 1344 } 1345 1346 int
I guess XvDestroyPixmap should check the state of the pointer, but I guess that depends on the X conventions.
We should check if upstream has already fixed this and in that case backport the fix.
Change History (21)
comment:15 Changed 8 years ago by dsd
- Action Needed changed from test in build to approve for release
comment:16 Changed 8 years ago by mstone
- Action Needed changed from approve for release to add to release
comment:17 Changed 8 years ago by cscott
- Action Needed changed from add to release to test in release
comment:18 Changed 8 years ago by dsd
- Keywords 8.2-759:+ added
- Resolution set to fixed
- Status changed from new to closed