Bug 9217 - X server crash while drawing long string
Summary: X server crash while drawing long string
Status: RESOLVED FIXED
Alias: None
Product: xorg
Classification: Unclassified
Component: Server/General (show other bugs)
Version: 6.9.0
Hardware: x86 (IA32) Linux (All)
: high major
Assignee: Xorg Project Team
QA Contact: Xorg Project Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: xorg-7.4
  Show dependency treegraph
 
Reported: 2006-12-01 13:06 UTC by M Welinder
Modified: 2008-05-06 10:42 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:


Attachments
xdpyinfo output (45.01 KB, text/plain)
2006-12-01 13:32 UTC, M Welinder
no flags Details
/var/log/Xorg.0.log.old (29.86 KB, text/plain)
2006-12-01 13:36 UTC, M Welinder
no flags Details

Description M Welinder 2006-12-01 13:06:39 UTC
With a standard SuSE 10.1 system:

1. Start Gnumeric
2. Enter =rept("x",1e6)

*poof*  X server dies and takes all programs with it.

With the above recipe, Gnumeric will ask pango to draw a string that is a
million characters long.  This used to work in the sense of not crashing
anything but, if memory serves, pango pango would wrap around.
Comment 1 M Welinder 2006-12-01 13:32:17 UTC
Created attachment 7941 [details]
xdpyinfo output

The xdpyinfo output for the display.  May or may not be relevant.
Comment 2 M Welinder 2006-12-01 13:36:32 UTC
Created attachment 7942 [details]
/var/log/Xorg.0.log.old

Server log file.
Comment 3 Daniel Stone 2007-02-27 01:34:57 UTC
Sorry about the phenomenal bug spam, guys.  Adding xorg-team@ to the QA contact so bugs don't get lost in future.
Comment 4 Erik 2008-02-28 03:24:30 UTC
I tried to enter the formula
   =rept("x";1000000)
in Gnumeric 1.8.1 and X Window System Version 1.3.0 (Gentoo package x11-base/xorg-server-1.3.0.0-r5). It does not crash. It does show a lot of "x" in the cell though.

I tried to add another 0 and it started swapping like crazy but still no server crash. It does not show any "x"-es any more and Gnumeric becomes very unresponsive (several seconds) when clicking in the cell with the formula or switching to it from another application.
Comment 5 Adam Jackson 2008-05-06 10:42:44 UTC
worksforme on server-1.5-branch.  closing.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.