[Bug 94465] Xorg crashes in VT switch

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=94465

--- Comment #15 from JM9 <jhnmlkvch9 at gmail.com> ---
(In reply to Chris Wilson from comment #14)
> Yes! Almost there:
> 
> We just need a few more symbols. Can you install the debug symbols for the
> Xserver?

(full log attached in next post)
Here is the same portion with debug symbols:

==549== Invalid read of size 8
==549==    at 0x4C2F316: memcpy@@GLIBC_2.14 (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==549==    by 0xC02B5CD: memcpy_blt (in
/usr/lib/xorg/modules/drivers/intel_drv.so)
==549==    by 0xC06F5D6: sna_composite_fb (in
/usr/lib/xorg/modules/drivers/intel_drv.so)
==549==    by 0xC06F91E: sna_composite (in
/usr/lib/xorg/modules/drivers/intel_drv.so)
==549==    by 0x5185E0: damageComposite (damage.c:503)
==549==    by 0x50DFF6: ProcRenderComposite (render.c:708)
==549==    by 0x4361BE: Dispatch (dispatch.c:430)
==549==    by 0x43A1D2: dix_main (main.c:300)
==549==    by 0x69B770F: (below main) (in /usr/lib/libc-2.23.so)
==549==  Address 0x7fa6b36a4010 is not stack'd, malloc'd or (recently) free'd
==549== 
==549== Invalid free() / delete / delete[] / realloc()
==549==    at 0x4C2BCEA: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==549==    by 0x4C2CAB0: realloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==549==    by 0x4B413D: xf86RandR12CrtcSetGamma (xf86RandR12.c:1253)
==549==    by 0x4B4F7A: xf86RandR12EnterVT (xf86RandR12.c:1814)
==549==    by 0x9527BBE: glxDRIEnterVT (glxdri2.c:815)
==549==    by 0x477377: xf86VTEnter (xf86Events.c:570)
==549==    by 0x49CA06: systemd_logind_vtenter (systemd-logind.c:255)
==549==    by 0x49CD0A: message_filter (systemd-logind.c:427)
==549==    by 0x4E4D084: dbus_connection_dispatch (in
/usr/lib/libdbus-1.so.3.14.6)
==549==    by 0x4E4D3EC: ??? (in /usr/lib/libdbus-1.so.3.14.6)
==549==    by 0x496400: wakeup_handler (dbus-core.c:57)
==549==    by 0x43AD5C: WakeupHandler (dixutils.c:423)
==549==  Address 0x116b82e0 is 0 bytes inside a block of size 1,536 free'd
==549==    at 0x4C2BCEA: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==549==    by 0x4C2CAB0: realloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==549==    by 0x4B413D: xf86RandR12CrtcSetGamma (xf86RandR12.c:1253)
==549==    by 0x4B4F7A: xf86RandR12EnterVT (xf86RandR12.c:1814)
==549==    by 0x9527BBE: glxDRIEnterVT (glxdri2.c:815)
==549==    by 0x477377: xf86VTEnter (xf86Events.c:570)
==549==    by 0x49CA06: systemd_logind_vtenter (systemd-logind.c:255)
==549==    by 0x49CD0A: message_filter (systemd-logind.c:427)
==549==    by 0x4E4D084: dbus_connection_dispatch (in
/usr/lib/libdbus-1.so.3.14.6)
==549==    by 0x4E4D3EC: ??? (in /usr/lib/libdbus-1.so.3.14.6)
==549==    by 0x496400: wakeup_handler (dbus-core.c:57)
==549==    by 0x43AD5C: WakeupHandler (dixutils.c:423)
==549==  Block was alloc'd at
==549==    at 0x4C2ABD0: malloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==549==    by 0x4C2CA9E: realloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==549==    by 0x4A9D3F: xf86CrtcCreate (xf86Crtc.c:121)
==549==    by 0xC0818A8: add_fake_output (in
/usr/lib/xorg/modules/drivers/intel_drv.so)
==549==    by 0xC081C50: sna_output_detect (in
/usr/lib/xorg/modules/drivers/intel_drv.so)
==549==    by 0x4AB214: xf86ProbeOutputModes (xf86Crtc.c:1637)
==549==    by 0x4B4776: xf86RandR12GetInfo12 (xf86RandR12.c:1511)
==549==    by 0x4F642A: RRGetInfo (rrinfo.c:196)
==549==    by 0x4FF18F: rrGetScreenResources (rrscreen.c:500)
==549==    by 0x4361BE: Dispatch (dispatch.c:430)
==549==    by 0x43A1D2: dix_main (main.c:300)
==549==    by 0x69B770F: (below main) (in /usr/lib/libc-2.23.so)
==549==

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20160314/b73998f3/attachment-0001.html>