Segfault after Xserver exit

Julien Cristau jcristau at debian.org
Thu Aug 23 11:14:00 PDT 2007


On Thu, Aug 23, 2007 at 09:20:13 +0100, Brian Paul wrote:

> On 8/22/07, Lukas Hejtmanek <xhejtman at ics.muni.cz> wrote:
> > On Wed, Aug 22, 2007 at 12:56:42PM +0100, Brian Paul wrote:
> > > No.  It looks like we're putting 8 visuals into the array, but setting
> > > the screen->num_vis field to 9.  Later, when we loop over the visuals
> > > to free them, we're going too far.  At least, that's what I think is
> > > happening - I can't readily test it right now.
> > >
> > > Try the attached patch.
> >
> > This fixes the problem, thanks. It should be commited to mainstream. And
> > possibly 'backported' to 1.3.0 release.
> 
> Could someone check in the patch for me?  I don't have a write-able
> xserver tree here at the moment.
> 
Pushed to master:
commit ff089e6cae634ac3eb509abd448a250bcbb17275
Author: Brian Paul <brian.paul at tungstengraphics.com>
Date:   Thu Aug 23 19:38:53 2007 +0200

    glx: fix crash when freeing visuals
    
    Don't set screen->num_vis to a value greater than the actual number of visuals.
    
    X.Org Bug #10809 <http://bugs.freedesktop.org/show_bug.cgi?id=10809>

Cheers,
Julien



More information about the xorg mailing list