[Xcb] [Bug 36716] New: xv crashed at _xcb_map_remove (list=0x828d9c0, key=2818) at xcb_list.c:89

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Sat Apr 30 10:09:31 PDT 2011


https://bugs.freedesktop.org/show_bug.cgi?id=36716

           Summary: xv crashed at _xcb_map_remove (list=0x828d9c0,
                    key=2818) at xcb_list.c:89
           Product: XCB
           Version: unspecified
          Platform: x86 (IA32)
        OS/Version: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: Library
        AssignedTo: xcb at lists.freedesktop.org
        ReportedBy: mmokrejs at fold.natur.cuni.cz
         QAContact: xcb at lists.freedesktop.org


Hi,
  I found a core file of my xv (image viewer) crash. I looks XCB is at fault
and not the xv:

Core was generated by `xv ../file.png'.
Program terminated with signal 11, Segmentation fault.
#0  _xcb_map_remove (list=0x828d9c0, key=2818) at xcb_list.c:89
89      xcb_list.c: No such file or directory.
        in xcb_list.c
(gdb) where
#0  _xcb_map_remove (list=0x828d9c0, key=2818) at xcb_list.c:89
#1  0xb73acafe in poll_for_reply (c=0x828dc40, request=<value optimized out>,
reply=0xbfb04c8c, error=0xbfb04cec) at xcb_in.c:297
#2  0xb73acf17 in xcb_wait_for_reply (c=0x828dc40, request=2818, e=0xbfb04cec)
at xcb_in.c:377
#3  0xb763db85 in _XReply (dpy=0x828d018, rep=0xbfb04d30, extra=0, discard=1)
at xcb_io.c:533
#4  0xb7623425 in XAllocColor (dpy=0x828d018, cmap=32, def=0xbfb04de0) at
GetHColor.c:48
#5  0x08068bfa in screen_init (pic24=0xb7147008 '?' <repeats 200 times>...,
wide=1123, high=666) at xvimage.c:140
#6  Pic24ToXImage (pic24=0xb7147008 '?' <repeats 200 times>..., wide=1123,
high=666) at xvimage.c:2190
#7  0x080695af in CreateXImage () at xvimage.c:1735
#8  0x08050fbc in openPic (filenum=<value optimized out>) at xv.c:2917
#9  0x080529a8 in openFirstPic () at xv.c:3657
#10 mainLoop () at xv.c:3776
#11 0x08055f15 in main (argc=2, argv=0xbfb05f04) at xv.c:1037
(gdb) bt full
#0  _xcb_map_remove (list=0x828d9c0, key=2818) at xcb_list.c:89
        cur = 0x828d9c0
#1  0xb73acafe in poll_for_reply (c=0x828dc40, request=<value optimized out>,
reply=0xbfb04c8c, error=0xbfb04cec) at xcb_in.c:297
        head = <value optimized out>
#2  0xb73acf17 in xcb_wait_for_reply (c=0x828dc40, request=2818, e=0xbfb04cec)
at xcb_in.c:377
        cond = {__data = {__lock = 0, __futex = 0, __total_seq = 0,
__wakeup_seq = 0, __woken_seq = 0, __mutex = 0x0, __nwaiters = 0,
__broadcast_seq = 0}, __size = '\000' <repeats 47 times>, __align = 0}
        reader = {request = 2818, data = 0xbfb04c50, next = 0x0}
        prev_reader = <value optimized out>
        widened_request = <value optimized out>
        ret = 0x0
#3  0xb763db85 in _XReply (dpy=0x828d018, rep=0xbfb04d30, extra=0, discard=1)
at xcb_io.c:533
        error = 0x0
        c = 0x828dc40
        current = <value optimized out>
        __PRETTY_FUNCTION__ = "_XReply"
#4  0xb7623425 in XAllocColor (dpy=0x828d018, cmap=32, def=0xbfb04de0) at
GetHColor.c:48
        status = <value optimized out>
        rep = {type = 0 '\000', pad1 = 0 '\000', sequenceNumber = 0, length =
1, red = 37824, green = 2066, blue = 0, pad2 = 0, pixel = 3076567184, pad3 = 0,
pad4 = 135476064, pad5 = 3216002528}
#5  0x08068bfa in screen_init (pic24=0xb7147008 '?' <repeats 200 times>...,
wide=1123, high=666) at xvimage.c:140
        check_map = 44041082
        check_col = {pixel = 1123, red = 0, green = 0, blue = 0, flags = -80
'\260', pad = -65 '\277'}
        ci = 0
        i = 0
        init_flag = 1
        check_gc = 0x829efe8
        check_image = <value optimized out>
#6  Pic24ToXImage (pic24=0xb7147008 '?' <repeats 200 times>..., wide=1123,
high=666) at xvimage.c:2190
        xcol = <value optimized out>
        lip = <value optimized out>
        pp = <value optimized out>
        bperpix = 32
        ip = <value optimized out>
        i = <value optimized out>
        j = <value optimized out>
        xim = <value optimized out>
#7  0x080695af in CreateXImage () at xvimage.c:1735
No locals.
#8  0x08050fbc in openPic (filenum=<value optimized out>) at xv.c:2917
        pinfo = {pic = 0xb7147008 '?' <repeats 200 times>..., w = 1123, h =
666, type = 1, r = '\000' <repeats 255 times>, g = '\000' <repeats 255 times>,
b = '\000' <repeats 255 times>, normw = 1123, normh = 666, 
          frmType = 0, colType = 0, fullInfo = "PNG, 24 bit truecolor,
non-interlaced. (125056 bytes)", '\000' <repeats 74 times>, shrtInfo =
"1123x666 PNG", '\000' <repeats 115 times>, 
          comment = 0x828d9b0 "Comment::Created with GIMP\n", exifInfo = 0x0,
exifInfoSize = 0, numpages = 1, pagebname = '\000' <repeats 63 times>}
        i = <value optimized out>
        filetype = <value optimized out>
        freename = 1
        frompipe = 0
        frompoll = 0
        fromint = 0
        killpage = 0
        oldeWIDE = 0
        oldeHIGH = 0
        oldpWIDE = 0
        oldpHIGH = 0
        oldCXOFF = 0
        oldCYOFF = 0
        oldCWIDE = 0
        oldCHIGH = 0
        wascropped = 0
        tmp = <value optimized out>
        fullname = <value optimized out>
        filename =
"/home/XXXXXX/file.png\000mm\221\221\221\221\266\266\266\266\332\332\332\332\377\377\377\377\000\000\000\000$$$$HHHHmmmm\221\221\221\221\266\266\266\266\332\332\332\332\377\377\377\377\000\000\000\000$$$$HHHHmmmm\221\221\221\221\266\266\266\266\332\332\332\332\377\377\377\377\000\000\000\000$$$$HHHHmmmm\221\221\221\221\266\266\266\266\332\332\332\332\377\377\377\377\000\000\000\000$$$$HHHHmmmm\221\221\221\221\266\266\266\266\332\332\332\332\377\377\377\377",
'\000' <repeats 32 times>, '$' <repeats 32 times>...
#9  0x080529a8 in openFirstPic () at xv.c:3657
        i = 0
#10 mainLoop () at xv.c:3776
---Type <return> to continue, or q <return> to quit---
        i = <value optimized out>
#11 0x08055f15 in main (argc=2, argv=0xbfb05f04) at xv.c:1037
        i = <value optimized out>
        ecdef = {pixel = 9148853, red = 35584, green = 39168, blue = 46336,
flags = 7 '\a', pad = -65 '\277'}
        rootReturn = 125
        parentReturn = 0
        children = 0x829d068
        numChildren = 122
(gdb)


I am on a Gentoo Linux with x11-misc/xcb-2.4, x11-base/xorg-server-1.9.2.902,
x11-base/xorg-drivers-1.9, x11-proto/xextproto-7.1.2, and regarding the
application itself it is media-gfx/xv-3.10a-r15.

$ ldd /usr/bin/xv
        linux-gate.so.1 =>  (0xffffe000)
        libz.so.1 => /lib/libz.so.1 (0xb7794000)
        libX11.so.6 => /usr/lib/libX11.so.6 (0xb767d000)
        libm.so.6 => /lib/libm.so.6 (0xb7657000)
        libjpeg.so.8 => /usr/lib/libjpeg.so.8 (0xb761c000)
        libpng14.so.14 => /usr/lib/libpng14.so.14 (0xb75f7000)
        libtiff.so.5 => /usr/lib/libtiff.so.5 (0xb7590000)
        libc.so.6 => /lib/libc.so.6 (0xb7436000)
        libxcb.so.1 => /usr/lib/libxcb.so.1 (0xb741c000)
        libdl.so.2 => /lib/libdl.so.2 (0xb7418000)
        /lib/ld-linux.so.2 (0xb77dc000)
        libjbig.so => /usr/lib/libjbig.so (0xb740b000)
        libXau.so.6 => /usr/lib/libXau.so.6 (0xb7407000)
        libXdmcp.so.6 => /usr/lib/libXdmcp.so.6 (0xb7401000)
$

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.


More information about the Xcb mailing list