[Openchrome-devel] [Bug 95420] Driver 0.4.0 crashes with recent linux kernel version

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=95420

--- Comment #9 from Xavier Bachelot <xavier at bachelot.org> ---
Hi Kevin,

I agree, testing error path is hard. I guess the FB mapping error path was
never exercised, so the segfault was not seen before the other bug with
kernel/libpciaccess/openchrome was triggered.

Anyway, I've tested 0.4.178, it still segfaults although the second call to
viaFreeRec is not logged anymore.

[   137.149] (--) CHROME(0): Probed amount of VideoRAM = 65536 kB
[   137.149] (II) CHROME(0): Entered viaMapMMIO.
[   137.151] (--) CHROME(0): Mapping MMIO at address 0xdc000000 with size
0xd000.
[   137.151] (--) CHROME(0): Mapping 2D Host BitBLT space at address 0xdc200000
with size 0x200000.
[   137.151] (II) CHROME(0): Entered viaMMIOEnable.
[   137.151] (II) CHROME(0): Exiting viaMMIOEnable.
[   137.151] (II) CHROME(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0
[   137.151] (II) CHROME(0): Exiting viaMapMMIO.
[   137.151] (II) CHROME(0): Entered viaMapFB.
[   137.153] (--) CHROME(0): Mapping a frame buffer at address 0xd8000000 with
size 0x4000000.
[   137.153] (EE) CHROME(0): Unable to map a frame buffer.
Error: Invalid argument (22)
[   137.153] (II) CHROME(0): Exiting viaMapFB.
[   137.153] (II) CHROME(0): VIAFreeRec
[   137.153] (II) CHROME(0): Entered viaUnmapMMIO.
[   137.153] (II) CHROME(0): Entered viaMMIODisable.
[   137.153] (II) CHROME(0): Exiting viaMMIODisable.
[   137.153] (II) CHROME(0): Exiting viaUnmapMMIO.
[   137.155] (II) CHROME(0): VIAFreeScreen
[   137.155] (EE) 
[   137.155] (EE) Backtrace:
[   137.160] (EE) 0: /usr/libexec/Xorg (OsLookupColor+0x146) [0x81fb606]
[   137.165] (EE) 1: ? (?+0x146) [0xb76ffec1]
[   137.169] (EE) 2: /usr/lib/xorg/modules/drivers/openchrome_drv.so
(VIAFreeScreen+0x2c) [0xb6929e1c]
[   137.171] (EE) 3: /usr/libexec/Xorg (xf86DeleteScreen+0x67) [0x80cb197]
[   137.175] (EE) 4: /usr/libexec/Xorg (InitOutput+0xdfa) [0x80c522a]
[   137.187] (EE) 5: /usr/libexec/Xorg (remove_fs_handlers+0x31a) [0x807e74a]
[   137.199] (EE) 6: /usr/libexec/Xorg (miPolyFillRect+0x2da) [0x8066f8a]
[   137.222] (EE) 7: /lib/libc.so.6 (__libc_start_main+0xf5) [0xb707c545]
[   137.227] (EE) 8: /usr/libexec/Xorg (_start+0x21) [0x8066d26]
[   137.231] (EE) 
[   137.231] (EE) Segmentation fault at address 0x10c

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/openchrome-devel/attachments/20160611/c96340fa/attachment-0001.html>