Ati Radeon driver xf86-video-ati (6.13) causes segfaults xorg-xserver 1.8.0

[Dale Gulledge]

>
> On Wed, 2010-04-14 at 16:48 +0200, courten at web.de <http://lists.freedesktop.org/mailman/listinfo/xorg> wrote:
> >* *>* from time to time when using firefox my xserver crashing*>* *>* Meanwhile i could trace this bug*
> Might be https://bugs.freedesktop.org/attachment.cgi?id=34759 .
>
>
Those symptoms are familiar, but I'm using a different configuration
(cutting some lines from /var/log/Xorg.0.log for brevity):

X.Org X Server 1.6.0
Release Date: 2009-2-25


(II) Loading /usr/lib/xorg/modules/drivers//intel_drv.so
(II) Module intel: vendor="X.Org Foundation"

compiled for 1.6.0, module version = 2.6.3

Module class: X.Org Video Driver

ABI class: X.Org Video Driver, version 5.0


And the crash looked like this:

Backtrace:
0: /usr/X11R6/bin/X(xorg_backtrace+0x3b) [0x813518b]
1: /usr/X11R6/bin/X(xf86SigHandler+0x55) [0x80c7be5]
2: [0xb7813400]
3: /usr/lib/xorg/modules//libfb.so(fbBltStip+0x73) [0xb6df2583]
4: /usr/lib/xorg/modules//libfb.so(fbGetImage+0x228) [0xb6df7868]
5: /usr/lib/xorg/modules//libexa.so(exaGetImage+0x152) [0xb712e7f2]
6: /usr/X11R6/bin/X [0x81248e5]
7: /usr/X11R6/bin/X(ProcGetImage+0x56b) [0x808b45b]
8: /usr/X11R6/bin/X(Dispatch+0x33f) [0x808d57f]
9: /usr/X11R6/bin/X(main+0x3bd) [0x80722ed]
10: /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb73d2775]
11: /usr/X11R6/bin/X [0x80717a1]
Saw signal 11.  Server aborting.
(II) AT Translated Set 2 keyboard: Close
(II) UnloadModule: "evdev"
(II) Video Bus: Close
(II) UnloadModule: "evdev"
(II) Macintosh mouse button emulation: Close
(II) UnloadModule: "evdev"
(II) TPPS/2 IBM TrackPoint: Close

(II) UnloadModule: "evdev"
(II) UnloadModule: "synaptics"
(II) AIGLX: Suspending AIGLX clients for VT switch
 ddxSigGiveUp: Closing log


It is reproducible with Firefox and Chrome.  I originally thought I had
found a bug in Chrome.  I'm not entirely sure there isn't one, but even so,
it shouldn't be able to crash the X server.  Here's the bug report I
submitted to Chrome about it, with the URL of a page that triggers it:

code.google.com/p/chromium/issues/detail?id=41617

-- 
D. Dale Gulledge, Sr. Consultant & Software Craftsman,
dgulledge at gmail.com
C, C++, C#, Perl, Unix (QNX, AIX, Linux, Solaris), Oracle, MySQL, Java,
Internationalization (I18n), HTML, CGI, Real Time, Embedded, Networking
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.x.org/archives/xorg/attachments/20100415/622de00b/attachment.html>