[Spice-devel] spice-server: the guest crash

[Alon Levy]

(re-adding spice-devel; please don't drop it)

Hmm, no idea - can you try this under valgrind, since it looks like it might be memory corruption (not likely, but I don't have any other idea - well, you can instrument with some prints where the ring is touched). If you do valgrind, make sure you use openssl build with -DPURIFY (http://spice-space.org/page/Valgrind)

----- Original Message -----
> 
> 
> detail log:
> 
> red_peer_handle_outgoing: Connection reset by peer
> red_channel_client_disconnect: 0x7f23c8422830 (channel 0x7f23c821d0c0
> type 2 id 0)
> ((null):32572): Spice-Info **: reds.c:4673:reds_stream_free: close
> socket fd 31
> ((null):32572): SpiceWorker-Info **:
> red_worker.c:9073:display_channel_client_on_disconnect:
> ((null):32572): SpiceWorker-Debug **:
> red_worker.c:9095:display_channel_client_on_disconnect: #draw=2,
> #red_draw=2, #glz_draw=0
> ((null):32572): SpiceWorker-ERROR **:
> ../spice-common/common/ring.h:121:ring_next: assertion `pos->next !=
> NULL && pos->prev != NULL' failed
> ((null):32572): Spice-Warning **:
> reds.c:2834:reds_handle_read_link_done: Peer doesn't support AUTH
> selection
> ((null):32572): Spice-Info **: reds.c:4673:reds_stream_free: close
> socket fd 32
> ((null):32572): Spice-Debug **:
> snd_worker.c:214:snd_disconnect_channel: 0x7f24039c87d0
> red_channel_client_disconnect: 0x7f24039e3160 (channel 0x7f2403990260
> type 5 id 0)
> ((null):32572): Spice-Info **: reds.c:4673:reds_stream_free: close
> socket fd 28
> snd_channel_put: sound channel freed
> snd_playback_send: snd_send_playback_write failed
> ((null):32572): Spice-Debug **:
> snd_worker.c:214:snd_disconnect_channel: 0x7f24039d2c90
> red_channel_client_disconnect: 0x7f24039bd2c0 (channel 0x7f24039883c0
> type 6 id 0)
> ((null):32572): Spice-Info **: reds.c:4673:reds_stream_free: close
> socket fd 29
> snd_channel_put: sound channel freed
> red_channel_client_disconnect: 0x7f24039b0ff0 (channel 0x7f24036f3760
> type 1 id 0)
> ((null):32572): Spice-Info **: reds.c:4673:reds_stream_free: close
> socket fd 27
> main_channel_client_on_disconnect: rcc=0x7f24039b0ff0
> ((null):32572): Spice-Info **: reds.c:702:reds_client_disconnect:
> client=0x7f24039b0450,client->disconnecting:0
> red_client_destroy: destroy client with #channels 5
> red_dispatcher_disconnect_display_peer:
> Thread 5 (Thread 0x7f23fc098700 (LWP 32587)):
> #0 0x00007f2400d1775b in pthread_cond_timedwait@@GLIBC_2.3.2 () from
> /lib64/libpthread.so.0
> #1 0x00007f2402287cdf in ?? ()
> #2 0x00007f2400d137f1 in start_thread () from /lib64/libpthread.so.0
> #3 0x00007f23fea9292d in clone () from /lib64/libc.so.6
> Thread 4 (Thread 0x7f23fa4f9700 (LWP 32588)):
> #0 0x00007f23fea8aa67 in ioctl () from /lib64/libc.so.6
> #1 0x00007f2402335fb9 in ?? ()
> #2 0x00007f2402336fd1 in ?? ()
> #3 0x00007f240230be21 in ?? ()
> #4 0x00007f2400d137f1 in start_thread () from /lib64/libpthread.so.0
> #5 0x00007f23fea9292d in clone () from /lib64/libc.so.6
> Thread 3 (Thread 0x7f23f8bca700 (LWP 32589)):
> #0 0x00007f2400d1a4ed in read () from /lib64/libpthread.so.0
> #1 0x00007f23ff247c04 in spice_backtrace_gstack () from
> /usr/lib64/libspice-server.so.1
> #2 0x00007f23ff24fde5 in spice_logv () from
> /usr/lib64/libspice-server.so.1
> #3 0x00007f23ff24ff2a in spice_log () from
> /usr/lib64/libspice-server.so.1
> #4 0x00007f23ff20eefc in ring_next () from
> /usr/lib64/libspice-server.so.1
> #5 0x00007f23ff221ee1 in red_pipes_add_drawable () from
> /usr/lib64/libspice-server.so.1
> #6 0x00007f23ff223d89 in red_current_add () from
> /usr/lib64/libspice-server.so.1
> #7 0x00007f23ff225080 in red_process_commands.clone.0 () from
> /usr/lib64/libspice-server.so.1
> #8 0x00007f23ff226ebb in handle_dev_display_connect () from
> /usr/lib64/libspice-server.so.1
> #9 0x00007f23ff208123 in dispatcher_handle_recv_read () from
> /usr/lib64/libspice-server.so.1
> #10 0x00007f23ff227e9e in red_worker_main () from
> /usr/lib64/libspice-server.so.1
> #11 0x00007f2400d137f1 in start_thread () from /lib64/libpthread.so.0
> #12 0x00007f23fea9292d in clone () from /lib64/libc.so.6
> Thread 2 (Thread 0x7f23ce1fb700 (LWP 32597)):
> #0 0x00007f2400d1775b in pthread_cond_timedwait@@GLIBC_2.3.2 () from
> /lib64/libpthread.so.0
> #1 0x00007f2402287cdf in ?? ()
> #2 0x00007f2400d137f1 in start_thread () from /lib64/libpthread.so.0
> #3 0x00007f23fea9292d in clone () from /lib64/libc.so.6
> Thread 1 (Thread 0x7f2402132900 (LWP 32572)):
> #0 0x00007f2400d1a4ed in read () from /lib64/libpthread.so.0
> #1 0x00007f23ff207d53 in read_safe () from
> /usr/lib64/libspice-server.so.1
> #2 0x00007f23ff207fb6 in dispatcher_send_message () from
> /usr/lib64/libspice-server.so.1
> #3 0x00007f23ff20906d in red_dispatcher_disconnect_display_peer ()
> from /usr/lib64/libspice-server.so.1
> #4 0x00007f23ff207585 in red_client_destroy () from
> /usr/lib64/libspice-server.so.1
> #5 0x00007f23ff236f4a in reds_client_disconnect () from
> /usr/lib64/libspice-server.so.1
> #6 0x00007f23ff202ce1 in red_channel_client_receive () from
> /usr/lib64/libspice-server.so.1
> #7 0x00007f23ff20350c in red_channel_client_event () from
> /usr/lib64/libspice-server.so.1
> #8 0x00007f240220d637 in ?? ()
> #9 0x00007f2402279fff in ?? ()
> #10 0x00007f2402273534 in main ()
> 2012-11-12 10:06:46.120+0000: shutting down
> 
> 
> wangyingying
> 
> 
> 
> From: Alon Levy
> Date: 2012-11-10 16:34
> To: wangyingying
> CC: spice-devel
> Subject: Re: [Spice-devel] spice-server: the guest crash
> 
> > 
> > 
> > 
> > The client connect the guest serval times when the guest play the
> > movie, the guest is crash.
> > The error is spice-server : "SpiceWorker-ERROR **:
> > ../spice-common/common/ring.h:121:ring_next: assertion `pos->next
> > !=
> > NULL && pos->prev != NULL' failed "
> 
> What is the stack trace when this happens? are you using latest
> spice-server?
> 
> > 
> > 
> > wangyingying
> > _______________________________________________
> > Spice-devel mailing list
> > Spice-devel at lists.freedesktop.org
> > http://lists.freedesktop.org/mailman/listinfo/spice-devel
> > 
> 
>