[Bug 93720] Random crashes on (EE) TouchListenerGone: couldn't allocate events

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=93720

--- Comment #5 from Franck Delache <franck.delache at grassvalley.com> ---
I got a Segmentation fault when closing an XClient application (see attached
core file).
Message displayed in the journal:
Jan 23 00:59:00 kxslot26 kernel: Xorg[1913]: segfault at 24 ip b6a0e700 sp
bfd402fc error 4 in intel_drv.so[b69ae000+1c7000]

When opening the core file in gdb, I get the following stack trace:

(gdb) bt full
#0  list_is_empty (head=head at entry=0x24) at ../../../src/intel_list.h:269
No locals.
#1  free_list (head=head at entry=0x24) at ../../../src/sna/sna_damage.c:206
No locals.
#2  0xb6a0fddc in __sna_damage_destroy (damage=0x0) at
../../../src/sna/sna_damage.c:1605
No locals.
#3  0xb6a00e2c in sna_damage_destroy (damage=0xba581ec8) at
../../../src/sna/sna_damage.h:325
No locals.
#4  sna_destroy_pixmap (pixmap=pixmap at entry=0xba581e28) at
../../../src/sna/sna_accel.c:1480
No locals.
#5  0xb6a00fa9 in sna_destroy_pixmap (pixmap=0xba581e28) at
../../../src/sna/sna_accel.c:1461
No locals.
#6  0xb75df832 in ?? ()
No symbol table info available.
#7  0xb7599f85 in ?? ()
No symbol table info available.
#8  0xb759855f in ?? ()
No symbol table info available.
#9  0xb75cea8a in FreePicture ()
No symbol table info available.
#10 0xb7518fde in ?? ()
No symbol table info available.
#11 0xb751a19c in FreeClientResources ()
No symbol table info available.
#12 0xb74f4453 in CloseDownClient ()
No symbol table info available.
#13 0xb74f50bf in ?? ()
No symbol table info available.
#14 0xb74f926a in ?? ()
No symbol table info available.
#15 0xb74e2f2a in ?? ()
No symbol table info available.
#16 0xb70c2723 in __libc_start_main (main=0xb74e2f00, argc=10, argv=0xbfd40634,
init=0xb766f870 <__libc_csu_init>, fini=0xb766f8e0 <__libc_csu_fini>,
rtld_fini=0xb74a5c90 <_dl_fini>, stack_end=0xbfd4062c) at libc-start.c:287
        result = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1222549504, 0, 0, 0,
-956705371, 1992249780}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0xa,
0xb74e2f37 <_start>}, data = {prev = 0x0, cleanup = 0x0, 
              canceltype = 10}}}
        not_first_call = <optimized out>
#17 0xb74e2f68 in _start ()


I also monitored the i915_gem_objects:
==== i915_gem_objects 2 minutes before the crash ====
41101 objects, 325840896 bytes
28483 [28483] objects, 240922624 [240922624] bytes in gtt
  0 [0] active objects, 0 [0] bytes
  28483 [28483] inactive objects, 240922624 [240922624] bytes
12614 unbound objects, 101982208 bytes
0 purgeable objects, 0 bytes
893 pinned mappable objects, 72069120 bytes
17302 fault mappable objects, 180113408 bytes
268435456 [268435456] gtt total

Xorg: 41099 objects, 325705728 bytes (0 active, 219521024 inactive, 219521024
global, 9216000 shared, 101982208 unbound)
======================================================

==== i915_gem_objects after a fresh restart of Xorg ====
327 objects, 74973184 bytes
322 [322] objects, 169943040 [169943040] bytes in gtt
  6 [6] active objects, 85413888 [85413888] bytes
  316 [316] inactive objects, 84529152 [84529152] bytes
0 unbound objects, 0 bytes
0 purgeable objects, 0 bytes
82 pinned mappable objects, 161804288 bytes
124 fault mappable objects, 52559872 bytes
268435456 [268435456] gtt total

Xorg: 325 objects, 74838016 bytes (56397824 active, 13975552 inactive, 70373376
global, 9216000 shared, 0 unbound)
========================================================

Fell free to ask if you need more information.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20160125/107756dc/attachment.html>