<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Driver 0.4.0 crashes with recent linux kernel version" href="https://bugs.freedesktop.org/show_bug.cgi?id=95420#c9">Comment # 9</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Driver 0.4.0 crashes with recent linux kernel version" href="https://bugs.freedesktop.org/show_bug.cgi?id=95420">bug 95420</a> from <a class="email" href="mailto:xavier@bachelot.org" title="Xavier Bachelot <xavier@bachelot.org>"> Xavier Bachelot</a> <pre>Hi Kevin, I agree, testing error path is hard. I guess the FB mapping error path was never exercised, so the segfault was not seen before the other bug with kernel/libpciaccess/openchrome was triggered. Anyway, I've tested 0.4.178, it still segfaults although the second call to viaFreeRec is not logged anymore. [ 137.149] (--) CHROME(0): Probed amount of VideoRAM = 65536 kB [ 137.149] (II) CHROME(0): Entered viaMapMMIO. [ 137.151] (--) CHROME(0): Mapping MMIO at address 0xdc000000 with size 0xd000. [ 137.151] (--) CHROME(0): Mapping 2D Host BitBLT space at address 0xdc200000 with size 0x200000. [ 137.151] (II) CHROME(0): Entered viaMMIOEnable. [ 137.151] (II) CHROME(0): Exiting viaMMIOEnable. [ 137.151] (II) CHROME(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0 [ 137.151] (II) CHROME(0): Exiting viaMapMMIO. [ 137.151] (II) CHROME(0): Entered viaMapFB. [ 137.153] (--) CHROME(0): Mapping a frame buffer at address 0xd8000000 with size 0x4000000. [ 137.153] (EE) CHROME(0): Unable to map a frame buffer. Error: Invalid argument (22) [ 137.153] (II) CHROME(0): Exiting viaMapFB. [ 137.153] (II) CHROME(0): VIAFreeRec [ 137.153] (II) CHROME(0): Entered viaUnmapMMIO. [ 137.153] (II) CHROME(0): Entered viaMMIODisable. [ 137.153] (II) CHROME(0): Exiting viaMMIODisable. [ 137.153] (II) CHROME(0): Exiting viaUnmapMMIO. [ 137.155] (II) CHROME(0): VIAFreeScreen [ 137.155] (EE) [ 137.155] (EE) Backtrace: [ 137.160] (EE) 0: /usr/libexec/Xorg (OsLookupColor+0x146) [0x81fb606] [ 137.165] (EE) 1: ? (?+0x146) [0xb76ffec1] [ 137.169] (EE) 2: /usr/lib/xorg/modules/drivers/openchrome_drv.so (VIAFreeScreen+0x2c) [0xb6929e1c] [ 137.171] (EE) 3: /usr/libexec/Xorg (xf86DeleteScreen+0x67) [0x80cb197] [ 137.175] (EE) 4: /usr/libexec/Xorg (InitOutput+0xdfa) [0x80c522a] [ 137.187] (EE) 5: /usr/libexec/Xorg (remove_fs_handlers+0x31a) [0x807e74a] [ 137.199] (EE) 6: /usr/libexec/Xorg (miPolyFillRect+0x2da) [0x8066f8a] [ 137.222] (EE) 7: /lib/libc.so.6 (__libc_start_main+0xf5) [0xb707c545] [ 137.227] (EE) 8: /usr/libexec/Xorg (_start+0x21) [0x8066d26] [ 137.231] (EE) [ 137.231] (EE) Segmentation fault at address 0x10c</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>