<font><div><br></div><div>spice-gtk version spice-gtk-0.11</div><div>usb-redir version 0.4.3</div><div>server ubuntu 10.0.4 server</div><div>client ubuntu 11.10 alternate 64 bit</div><div><br></div><div>It can be reproduce,I plug and unplug U storage for about 30 times,and this coredump occured. I guest it crash when logging below is the coredump info. if you use export SPICE_DEBUG=1, it will crash more frequently.</div><div><br></div><div><br></div><div>GSpice-Message: main channel: opened</div><div>going to redirect usb device 2</div><div><br></div><div>(spicy:1916): GSpice-CRITICAL **: usbredirhost error: resetting device: -5</div><div>libusb:error [_open_sysfs_attr] open /sys/bus/usb/devices/1-3/descriptors failed ret=-1 errno=2</div><div><br></div><div>(spicy:1916): GSpice-CRITICAL **: usbredirhost error: resetting device: -5</div><div>libusb:error [_open_sysfs_attr] open /sys/bus/usb/devices/2-3/descriptors failed ret=-1 errno=2</div><div><br></div><div>(spicy:1916): GSpice-CRITICAL **: usbredirhost error: resetting device: -5</div><div>libusb:error [_open_sysfs_attr] open /sys/bus/usb/devices/2-3/descriptors failed ret=-1 errno=2</div><div><br></div><div>(spicy:1916): GSpice-CRITICAL **: usbredirhost error: submitting bulk transfer on ep 02: -4</div><div><br></div><div>(spicy:1916): GSpice-CRITICAL **: usbredirhost error: submitting bulk transfer on ep 02: -4</div><div><br></div><div>(spicy:1916): GSpice-CRITICAL **: usbredirhost error: submitting bulk transfer on ep 81: -4</div><div>Segmentation fault (core dumped)</div><div>noc@ubuntu:~$ gdb /usr/local/bin/spicy core </div><div>GNU gdb (Ubuntu/Linaro 7.3-0ubuntu2) 7.3-2011.08</div><div>Copyright (C) 2011 Free Software Foundation, Inc.</div><div>License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html></div><div>This is free software: you are free to change and redistribute it.</div><div>There is NO WARRANTY, to the extent permitted by law. Type "show copying"</div><div>and "show warranty" for details.</div><div>This GDB was configured as "x86_64-linux-gnu".</div><div>For bug reporting instructions, please see:</div><div><http://bugs.launchpad.net/gdb-linaro/>...</div><div>Reading symbols from /usr/local/bin/spicy...done.</div><div>[New LWP 1916]</div><div>[New LWP 1995]</div><div><br></div><div>warning: Can't read pathname for load map: Input/output error.</div><div>[Thread debugging using libthread_db enabled]</div><div>Core was generated by `spicy -h 172.16.0.7 -p 6100'.</div><div>Program terminated with signal 11, Segmentation fault.</div><div>#0 usbredirhost_bulk_packet_complete (libusb_transfer=0x2248880) at usbredirhost.c:1934</div><div>1934 usbredirhost.c: No such file or directory.</div><div> in usbredirhost.c</div><div>(gdb) bt</div><div>#0 usbredirhost_bulk_packet_complete (libusb_transfer=0x2248880) at usbredirhost.c:1934</div><div>#1 0x00007fec7e32343a in usbredirparser_call_type_func (parser_pub=0x22492d0) at usbredirparser.c:673</div><div>#2 usbredirparser_do_read (parser_pub=0x22492d0) at usbredirparser.c:777</div><div>#3 0x0000000000439691 in usbredir_handle_msg (c=<optimized out>, in=0x25044a0) at channel-usbredir.c:609</div><div>#4 0x000000000042aa04 in spice_channel_recv_msg (channel=0x2248880, msg_handler=0x4390f0 <spice_usbredir_handle_msg>, data=0x0) at spice-channel.c:1835</div><div>#5 0x000000000042b451 in spice_channel_iterate_read (channel=0x2248880) at spice-channel.c:1997</div><div>#6 spice_channel_iterate_read (channel=0x2248880) at spice-channel.c:1981</div><div>#7 0x00000000004291d4 in spice_channel_iterate (channel=0x2248880) at spice-channel.c:2055</div><div>#8 spice_channel_coroutine (data=0x2248880) at spice-channel.c:2208</div><div>#9 0x00000000004bc65b in coroutine_trampoline (cc=<optimized out>) at coroutine_ucontext.c:56</div><div>#10 0x00000000004c8163 in continuation_trampoline (i0=<optimized out>, i1=<optimized out>) at continuation.c:49</div><div>#11 0x00007fec7bdaf180 in ?? () from /lib/x86_64-linux-gnu/libc.so.6</div><div>#12 0x0000000002248d00 in ?? ()</div><div>#13 0x0000000000000000 in ?? ()</div><div>(gdb) p host</div><div>$1 = <optimized out></div><div>(gdb) p host->log_func</div><div>value has been optimized out</div><div>(gdb) p host->lock</div><div>value has been optimized out</div><div>(gdb) p libusb_transfer->buffer</div><div>$2 = (unsigned char *) 0x0</div><div>(gdb) p libusb_transfer->actual_length</div><div>$3 = 0</div><div><br></div><div>I dont know why the pointer libusb_transfer->buffer is zero, I saw hot->log_func is 0 at previous core dump.</div><div><br></div><div>------------------</div><div>Best Regards</div><div>zhouwei54321@qq.com</div><div>周伟</div><div> </div></font>