Bug 2748

Summary:	SIGBUS in MPlayer-050302 on Aurora Linux 2.0 Corona/Kashmir sparc64
Product:	xorg	Reporter:	Dominik Mierzejewski <rathann>
Component:	Lib/Xlib	Assignee:	Xorg Project Team <xorg-team>
Status:	RESOLVED WORKSFORME	QA Contact:	Xorg Project Team <xorg-team>
Severity:	normal
Priority:	high	CC:	roland.mainz
Version:	6.8.1
Hardware:	SPARC
OS:	Linux (All)
Whiteboard:
i915 platform:		i915 features:

Description Dominik Mierzejewski 2005-03-16 12:05:14 UTC

Copy and paste of relevant parts from
http://bugzilla.mplayerhq.hu/show_bug.cgi?id=250 :

% gdb ./mplayer
GNU gdb Red Hat Linux (6.3.0.0-0.29rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "sparc64-redhat-linux"...Using host libthread_db
library "/lib64/libthread_db.so.1".

(gdb) run -v -vo x11 /mnt/space/dominik/*.avi
[Thread debugging using libthread_db enabled]
[New Thread 16384 (LWP 32192)]
Using GNU internationalization
Original domain: messages
Original dirname: /usr/share/locale
Current domain: mplayer
Current dirname: /usr/share/locale

MPlayer dev-RPM-CVS-050302-06:00-3.4.2 (C) 2000-2005 MPlayer Team
CPU: Sun Sparc
[...]
VO Config (640x360->640x360,flags=0,'MPlayer',0x32315659)
VO: [x11] 640x360 => 640x360 Planar YV12
VO: Description: X11 ( XImage/Shm )
VO: Author: Aaron Holtzman <aholtzma@ess.engr.uvic.ca>

Program received signal SIGBUS, Bus error.
0xfffff80000df3b68 in _XData32 () from /usr/X11R6/lib64/libX11.so.6
(gdb) bt
#0  0xfffff80000df3b68 in _XData32 () from /usr/X11R6/lib64/libX11.so.6
#1  0xfffff80000dcbb04 in XChangeProperty () from /usr/X11R6/lib64/libX11.so.6
#2  0x000000000013090c in vo_x11_classhint (display=0x7119e0, window=29360130,
name=0x44e510 "x11")
    at x11_common.c:943
#3  0x0000000000134c40 in config (width=640, height=360, d_width=640,
d_height=360, flags=6640640,
    title=0x44d8f0 "MPlayer", format=7419236) at vo_x11.c:404
#4  0x000000000015ab74 in config (vf=0x718cd0, width=640, height=360,
d_width=640, d_height=360,
    flags=0, outfmt=842094169) at vf_vo.c:48
#5  0x000000000015a308 in vf_config_wrapper (vf=0x718cd0, width=640, height=360,
d_width=640,
    d_height=360, flags=0, outfmt=7419232) at vf.c:573
#6  0x0000000000154c2c in mpcodecs_config_vo (sh=0x6fe320, w=6652928, h=4538368,
    preferred_outfmt=0) at vd.c:312
#7  0x0000000000157908 in init_vo (sh=0x6fe320, pix_fmt=PIX_FMT_YUV420P) at
vd_ffmpeg.c:511
#8  0x0000000000157a78 in get_buffer (avctx=0x718f70, pic=0x71c850) at
vd_ffmpeg.c:562
#9  0x00000000002275a4 in alloc_picture (s=0x7192c0, pic=0x71c850, shared=0) at
mpegvideo.c:354
#10 0x000000000022a234 in MPV_frame_start (s=0x7192c0, avctx=0x718f70) at
mpegvideo.c:1478
#11 0x000000000039be48 in ff_h263_decode_frame (avctx=0x718f70, data=0x718e50,
    data_size=0x7ffffffde2c,
    buf=0x700310
"\tq\003\003Äx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205á"...,
buf_size=1166) at h263dec.c:687
#12 0x0000000000225b38 in avcodec_decode_video (avctx=0x718f70, picture=0x718e50,
    got_picture_ptr=0x7ffffffde2c,
    buf=0x700310
"\tq\003\003Äx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205á"...,
buf_size=1166) at utils.c:592
#13 0x0000000000157f78 in decode (sh=0x6fe320, data=0x700310, len=1166, flags=1166)
    at vd_ffmpeg.c:764
#14 0x0000000000154518 in decode_video (sh_video=0x6fe320,
    start=0x700310
"\tq\003\003Äx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205áx^\027\205á"...,
in_size=1166, drop_frame=0)
    at dec_video.c:309
#15 0x000000000010a964 in main (argc=6268928, argv=0x7fffffff490) at mplayer.c:2325

relevant code snippet from x11_common.c:
void vo_x11_classhint(Display * display, Window window, char *name)
{
    XClassHint wmClass;
    pid_t pid = getpid();

    wmClass.res_name = name;
    wmClass.res_class = "MPlayer";
    XSetClassHint(display, window, &wmClass);
    XChangeProperty(display, window, XA_NET_WM_PID, XA_CARDINAL, 32,
                    PropModeReplace, (unsigned char *) &pid, 1);
}

(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0xfffff80000df3b48 to 0xfffff80000df3b88:
0xfffff80000df3b48 <_XData32+40>:       movl  %xcc, %g1, %g2
0xfffff80000df3b4c <_XData32+44>:       add  %g3, %g2, %g1
0xfffff80000df3b50 <_XData32+48>:       sub  %i2, %g2, %i2
0xfffff80000df3b54 <_XData32+52>:       stx  %g1, [ %i0 + 0xb0 ]
0xfffff80000df3b58 <_XData32+56>:       srax  %g2, 2, %g2
0xfffff80000df3b5c <_XData32+60>:       add  %g2, -1, %g2
0xfffff80000df3b60 <_XData32+64>:       brlz,pn   %g2, 0xfffff80000df3b24
<_XData32+4>
0xfffff80000df3b64 <_XData32+68>:       add  %g2, -1, %g2
0xfffff80000df3b68 <_XData32+72>:       ldx  [ %i1 ], %g1
0xfffff80000df3b6c <_XData32+76>:       add  %i1, 8, %i1
0xfffff80000df3b70 <_XData32+80>:       st  %g1, [ %g3 ]
0xfffff80000df3b74 <_XData32+84>:       b  %xcc, 0xfffff80000df3b60 <_XData32+64>
0xfffff80000df3b78 <_XData32+88>:       add  %g3, 4, %g3
0xfffff80000df3b7c <_XData32+92>:       call  0xfffff80000f8a060 <_XFlush@plt>
0xfffff80000df3b80 <_XData32+96>:       mov  %i0, %o0
0xfffff80000df3b84 <_XData32+100>:      cmp  %i2, 0
End of assembler dump.
(gdb) info all-registers
g0             0x0      0
g1             0x713564 7419236
g2             0xffffffffffffffff       -1
g3             0x713560 7419232
g4             0x5f47e4 6244324
g5             0x3000000        50331648
g6             0xfffff80000dcb880       -8796078557056
g7             0xfffff800010a15e0       -8796075584032
o0             0x81c04000       2176860160
o1             0x0      0
o2             0x8a116080       2316394624
o3             0x8a116000       2316394496
o4             0x372e   14126
o5             0xb000000        184549376
sp             0x7ffffffc861    0x7ffffffc861
o7             0xb00372e        184563502
l0             0x80     128
l1             0x0      0
l2             0xc      12
l3             0x7119c0 7412160
l4             0x0      0
l5             0x0      0
l6             0x0      0
l7             0xfffff8000011b658       -8796091861416
i0             0x7119e0 7412192
i1             0x7ffffffd2cc    8796093010636
i2             0x0      0
i3             0xaf0    2800
i4             0xc      12
i5             0x3      3
fp             0x7ffffffc921    0x7ffffffc921
i7             0xfffff80000dcbafc       -8796078556420
f0             0        (raw 0x00000000)
f1             0        (raw 0x00000000)
f2             0        (raw 0x00000000)
f3             0        (raw 0x00000000)
f4             0        (raw 0x00000000)
f5             0        (raw 0x00000000)
f6             0        (raw 0x00000000)
f7             0        (raw 0x00000000)
f8             0        (raw 0x00000000)
f9             0        (raw 0x00000000)
f10            0        (raw 0x00000000)
f11            0        (raw 0x00000000)
f12            5.04467447e-43   (raw 0x00000168)
f13            0        (raw 0x00000000)
f14            4.125    (raw 0x40840000)
f15            0        (raw 0x00000000)
f16            0        (raw 0x00000000)
f17            0        (raw 0x00000000)
f18            0        (raw 0x00000000)
f19            0        (raw 0x00000000)
f20            0        (raw 0x00000000)
f21            0        (raw 0x00000000)
f22            0        (raw 0x00000000)
f23            0        (raw 0x00000000)
f24            0        (raw 0x00000000)
f25            0        (raw 0x00000000)
f26            0        (raw 0x00000000)
f27            0        (raw 0x00000000)
f28            0        (raw 0x00000000)
f29            0        (raw 0x00000000)
f30            0        (raw 0x00000000)
f31            0        (raw 0x00000000)
f32            1.4953049604536891e-31   (raw 0x39884340f8f82d4e)
f34            5.4686469267146436e-16   (raw 0x3cc3b3efbf673000)
f36            0        (raw 0x0000000000000000)
f38            2.9906099209065515e-31   (raw 0x39984340f8f825ee)
f40            0.50000000000013822      (raw 0x3fe00000000004dd)
f42            1        (raw 0x3ff0000000000000)
f44            1        (raw 0x3ff0000000000000)
f46            0        (raw 0x0000000000000000)
f48            0        (raw 0x0000000000000000)
f50            9.1144115445262417e-17   (raw 0x3c9a453fa9def07c)
f52            0.50000000000013811      (raw 0x3fe00000000004dc)
f54            0.16666666666670024      (raw 0x3fc5555555555a0f)
f56            -2.1938006966593093e-13  (raw 0xbd4ee00000000000)
f58            2.199269343586024e-13    (raw 0x3d4ef3b3efbf6730)
f60            -2.1938006966593093e-13  (raw 0xbd4ee00000000000)
f62            0        (raw 0x0000000000000000)
pc             0xfffff80000df3b68       0xfffff80000df3b68 <_XData32+72>
npc            0xfffff80000df3b6c       0xfffff80000df3b6c <_XData32+76>
state          0x99f0000205     661156528645
fsr            0x1100000020     73014444064
fprs           0x0      0
y              0x0      0
cwp            0x5      5
pstate         0x2      2
asi            0xf0     240
ccr            0x99     153
d0             0        (raw 0x0000000000000000)
d2             0        (raw 0x0000000000000000)
d4             0        (raw 0x0000000000000000)
d6             0        (raw 0x0000000000000000)
d8             0        (raw 0x0000000000000000)
d10            0        (raw 0x0000000000000000)
d12            7.6391848474749803e-312  (raw 0x0000016800000000)
d14            640      (raw 0x4084000000000000)
d16            0        (raw 0x0000000000000000)
d18            0        (raw 0x0000000000000000)
d20            0        (raw 0x0000000000000000)
d22            0        (raw 0x0000000000000000)
d24            0        (raw 0x0000000000000000)
d26            0        (raw 0x0000000000000000)
d28            0        (raw 0x0000000000000000)
d30            0        (raw 0x0000000000000000)
d32            1.4953049604536891e-31   (raw 0x39884340f8f82d4e)
d34            5.4686469267146436e-16   (raw 0x3cc3b3efbf673000)
d36            0        (raw 0x0000000000000000)
d38            2.9906099209065515e-31   (raw 0x39984340f8f825ee)
d40            0.50000000000013822      (raw 0x3fe00000000004dd)
d42            1        (raw 0x3ff0000000000000)
d44            1        (raw 0x3ff0000000000000)
d46            0        (raw 0x0000000000000000)
d48            0        (raw 0x0000000000000000)
d50            9.1144115445262417e-17   (raw 0x3c9a453fa9def07c)
d52            0.50000000000013811      (raw 0x3fe00000000004dc)
d54            0.16666666666670024      (raw 0x3fc5555555555a0f)
d56            -2.1938006966593093e-13  (raw 0xbd4ee00000000000)
d58            2.199269343586024e-13    (raw 0x3d4ef3b3efbf6730)
d60            -2.1938006966593093e-13  (raw 0xbd4ee00000000000)
d62            0        (raw 0x0000000000000000)
q0             0        (raw 0x00000000000000000000000000000000)
q4             0        (raw 0x00000000000000000000000000000000)
q8             0        (raw 0x00000000000000000000000000000000)
q12            0        (raw 0x00000168000000004084000000000000)
q16            0        (raw 0x00000000000000000000000000000000)
q20            0        (raw 0x00000000000000000000000000000000)
q24            0        (raw 0x00000000000000000000000000000000)
q28            0        (raw 0x00000000000000000000000000000000)
q32            0        (raw 0x39884340f8f82d4e3cc3b3efbf673000)
q36            0        (raw 0x000000000000000039984340f8f825ee)
q40            4.656612873097993507241665319511092e-10  (raw
0x3fe00000000004dd3ff0000000000000)
q44            3.0517578125e-05 (raw 0x3ff00000000000000000000000000000)
q48            0        (raw 0x00000000000000003c9a453fa9def07c)
q52            4.6566128730979769528588333663411316e-10 (raw
0x3fe00000000004dc3fc5555555555a0f)
q56            -7.3001916145734170349303589012664991e-208       (raw
0xbd4ee000000000003d4ef3b3efbf6730)
q60            -7.3001916145734137222978780384067959e-208       (raw
0xbd4ee000000000000000000000000000)

System information:

Aurora Linux 2.0 (FC3 Kashmir)

kernel:
Linux bark.icm.edu.pl 2.6.10-2002 #1 SMP Wed Feb 9 08:01:47 CET 2005 sparc64
sparc64 sparc64 GNU/Linux

% cat /proc/cpuinfo
cpu             : TI UltraSparc IIi (Sabre)
fpu             : UltraSparc IIi integrated FPU
promlib         : Version 3 Revision 19
prom            : 3.19.4
type            : sun4u
ncpus probed    : 1
ncpus active    : 1
Cpu0Bogo        : 874.49
Cpu0ClkTck      : 000000001a39de00
MMU Type        : Spitfire
State:
CPU0:           online

cat /var/log/Xorg.0.log:
[...]
X Window System Version 6.8.1
Release Date: 17 September 2004
X Protocol Version 11, Revision 0, Release 6.8.1
Build Operating System: Linux 2.6.9-1.1032sp1smp sparc [ELF]
Current Operating System: Linux bark.icm.edu.pl 2.6.10-2002 #1 SMP Wed Feb 9
08:01:47 CET 2005 sparc64
Build Date: 07 February 2005
Build Host: arthur.devel.redhat.com
[...]
(II) SUNFFB: driver for Creator, Creator 3D and Elite 3D
[...]
(==) SUNFFB(0): RGB weight 888
(==) SUNFFB(0): Default visual is TrueColor
[...]
(II) /dev/fb0: AFB: Detected Elite3D/M3.
(II) /dev/fb0: BT498 (PAC2) ramdac detected
(II) /dev/fb0: Detected Elite3D M3/M6, checking firmware...
(II) /dev/fb0: ... AFB firmware is loaded
(==) SUNFFB(0): Backing store disabled
(==) SUNFFB(0): Silken mouse enabled
(II) /dev/fb0: Using acceleration
(II) /dev/fb0: DGA support initialized.
(**) Option "dpms"
(**) SUNFFB(0): DPMS enabled
(==) RandR enabled
[...]
(II) /dev/fb0: Setting up double-buffer acceleration.

Comment 1 Adam Jackson 2005-03-16 13:13:00 UTC

since the server will never send a signal to the application, or force it to
read from a particular location in memory, i don't see how this is an Xorg bug.

Comment 2 Dominik Mierzejewski 2005-03-17 05:25:15 UTC

It dies on calling _XData32 () from within a call to XChangeProperty(display,
window, XA_NET_WM_PID, XA_CARDINAL, 32, PropModeReplace, (unsigned char *) &pid, 1);
All parameters are proper, so what is it, if not Xorg bug?

Comment 3 Dominik Mierzejewski 2005-03-17 18:09:57 UTC

I'll try rebuilding Xorg with debuginfo to see where it breaks inside Xlib.

Comment 4 Erik Andren 2006-05-31 01:54:37 UTC

Are you still experiencing this issue?

Comment 5 Daniel Stone 2007-02-27 01:25:45 UTC

Sorry about the phenomenal bug spam, guys.  Adding xorg-team@ to the QA contact so bugs don't get lost in future.

Comment 6 Jeremy Huddleston Sequoia 2011-09-26 00:58:40 UTC

No response or other reports.  Closing.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.