[Spice-devel] spicy crash with X11 backend

[Edgar]

Hi,All,
I found 2 scenario that may cause spicy crash with X11 backend, would you
please help to check this issue.
configure and compile spicy with parameter "--with-gtk=2.0 --with-x11 --with-coroutine=ucontext"
 
install package is:
[root at test spice-gtk-0.14]# rpm -qa |grep spice
spice-gtk-python-0.14-7.el6.x86_64
spice-gtk-0.14-7.el6.x86_64
spice-client-0.8.2-15.el6.x86_64
spice-vdagent-0.12.0-4.el6_4.1.x86_64
spice-glib-0.14-7.el6.x86_64
spice-gtk-tools-0.14-7.el6.x86_64
 
software environment:
Server:CentOS 6.4 with spice-server-0.12.0-12.el6_4.1.x86_64
Host: CentOS 6.4 with spice-gtk tools 0.14-7 /
          Fedora 18 with spice-gtk-tools-0.14-1.fc18  /
          Fedora 18 with spice-gtk-tools-0.19-1.fc18
Guest:WinXP Sp3 with virtio driver virtio-win-0.1-59 
 
scenario 1, change VM OS(winxp sp3) color deepth from 32 to 16 then change back to 32,then spicy crash.
this happened 100%.
Backtrace message as below
 [root at test spice-gtk-0.14]# spicy -h 192.168.1.100 -p 5901 
GSpice-Message: main channel: opened

(spicy:4784): GSpice-WARNING **: Warning no automount-inhibiting implementation available
(spicy:4784): GSpice-DEBUG: #0 +0+0-0x0
*** glibc detected *** spicy: free(): invalid pointer: 0x00007f5526514000 ***
======= Backtrace: =========
/lib64/libc.so.6[0x3bf76760e6]
/usr/lib64/libspice-client-gtk-2.0.so.4(+0x10cb0)[0x7f5535979cb0]
/usr/lib64/libspice-client-gtk-2.0.so.4(+0xb0b8)[0x7f55359740b8]
/usr/lib64/libspice-client-gtk-2.0.so.4(+0xb213)[0x7f5535974213]
/usr/lib64/libspice-client-glib-2.0.so.8(+0x479fb)[0x7f553569f9fb]
/lib64/libgobject-2.0.so.0(g_closure_invoke+0x15e)[0x3bf9a0bb3e]
/lib64/libgobject-2.0.so.0[0x3bf9a20e23]
/lib64/libgobject-2.0.so.0(g_signal_emit_valist+0x7ef)[0x3bf9a220af]
/lib64/libgobject-2.0.so.0(g_signal_emit+0x83)[0x3bf9a225f3]
/usr/lib64/libspice-client-glib-2.0.so.8(+0x211e7)[0x7f55356791e7]
/usr/lib64/libspice-client-glib-2.0.so.8(+0x1d425)[0x7f5535675425]
/lib64/libglib-2.0.so.0(g_main_context_dispatch+0x22e)[0x3bf8a38f0e]
/lib64/libglib-2.0.so.0[0x3bf8a3c938]
/lib64/libglib-2.0.so.0(g_main_loop_run+0x195)[0x3bf8a3cd55]
spicy[0x409c1e]
/lib64/libc.so.6(__libc_start_main+0xfd)[0x3bf761ecdd]
spicy[0x406f39]
======= Memory map: ========
...
 
scenario 2,  video website online  playing,  spicy crash.it occurs occasionly,playing 2 or more hours may happen.
error message is:
/var/log/message
Jun 20 17:15:03 localhost kernel: [10324.171250] spicy[5780]: segfault at 7fe042ac4ff8 ip 000000364c07f8ec sp 00007fff39c0d818 error 4 in libc-2.16.so[364c000000+1ad000]
Jun 20 17:15:28 localhost abrt[5789]: Saved core dump of pid 5780 (/usr/bin/spicy) to /var/spool/abrt/ccpp-2013-06-20-17:15:03-5780 (512180224 bytes)
 
reason:
Process /usr/bin/spicy was killed by signal 11 (SIGSEGV)
 
core_backtrace
5f6632d75fd027f5b7b410787f3f06c6bf73eee6 0x7f8ec free /lib64/libc.so.6 8ab35d9e553bf1b0cdd88062d0aba6b4c4f8e086
9442c0d3ccde3c8dbc81f858e03246a133f086d6 0x4d79f g_free /lib64/libglib-2.0.so.0 e256aa64ea4f21c9e32cd0f782dbc840f150a5b3
be22cf917929ebfff1dfd3c30fad351844a2cd49 0x116d0 spicex_image_destroy /lib64/libspice-client-gtk-2.0.so.4 03333b3efd28e7be168d28889f950a3add839b5e
be22cf917929ebfff1dfd3c30fad351844a2cd49 0xade8 update_area /lib64/libspice-client-gtk-2.0.so.4 e7c4a9529e966312821dbe1e63b466360f1d4452
be22cf917929ebfff1dfd3c30fad351844a2cd49 0xb092 update_monitor_area /lib64/libspice-client-gtk-2.0.so.4 8d0fbb05a50ea31db27bc510bed47191865066b0
ccacc20701ce55674fb22a3c1c499f8cdd25e606 0x4df79 g_cclosure_user_marshal_VOID__INT_INT_INT_INT_INT_POINTER /lib64/libspice-client-glib-2.0.so.8 86c22a33c00b902b844e0557b88f3a7376665634
3cd608e38b6f7a1661faaec7a8fb639f78446dd4 0xf910 g_closure_invoke /lib64/libgobject-2.0.so.0 18bb14e4f5989b8fb8aac7b42c3d4ba84b0e7873
3cd608e38b6f7a1661faaec7a8fb639f78446dd4 0x20d08 signal_emit_unlocked_R /lib64/libgobject-2.0.so.0 9b492a2266d9c6e0eaea3876ce28de2322af2fbe
3cd608e38b6f7a1661faaec7a8fb639f78446dd4 0x28c8d g_signal_emit_valist /lib64/libgobject-2.0.so.0 422d331afcc2ab8d621d244e2d7993cbfe0cbb1f
3cd608e38b6f7a1661faaec7a8fb639f78446dd4 0x28de2 g_signal_emit /lib64/libgobject-2.0.so.0 873467898f10716cc58dc3912c428c76ffeb8d49
ccacc20701ce55674fb22a3c1c499f8cdd25e606 0x23397 do_emit_main_context /lib64/libspice-client-glib-2.0.so.8 b98b85bdcf8613aa95ef3e26ffda6277a278e80e
ccacc20701ce55674fb22a3c1c499f8cdd25e606 0x1fb55 emit_main_context /lib64/libspice-client-glib-2.0.so.8 dc5e42dd5dc20787934af4fb18cb612db5e073d5
9442c0d3ccde3c8dbc81f858e03246a133f086d6 0x47a55 g_main_context_dispatch /lib64/libglib-2.0.so.0 d4b6d4f2836ef32bd9d5847446bdcc7c19cfa379
9442c0d3ccde3c8dbc81f858e03246a133f086d6 0x47d88 g_main_context_iterate.isra.24 /lib64/libglib-2.0.so.0 ba0d551b7f0614ded38071cba2b37e156703e7f2
9442c0d3ccde3c8dbc81f858e03246a133f086d6 0x48182 g_main_loop_run /lib64/libglib-2.0.so.0 97ad0c44e2f6c8d6c6037025add5aa29f54a351c
7d661ff256a4a809876bb060ccad1098b6037868 0x7962 main /usr/bin/spicy cabff8877dae31e8b025f9021c9f992481dbe339


Best Regards

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/spice-devel/attachments/20130624/8a3e7576/attachment.html>