Bug 27510

Summary: Xorg crashes when right-clicking on NoScript Icon in Firefox
Product: xorg Reporter: Thomas Haider <t.haider>
Component: Server/Acceleration/EXAAssignee: Xorg Project Team <xorg-team>
Status: RESOLVED FIXED QA Contact: Xorg Project Team <xorg-team>
Severity: major    
Priority: medium CC: t.haider
Version: git   
Hardware: x86 (IA32)   
OS: Linux (All)   
Whiteboard:
i915 platform: i915 features:
Attachments:
Description Flags
Xorg log after crash
none
dmesg.log
none
backtrace
none
Possible fix none

Description Thomas Haider 2010-04-07 05:02:09 UTC
Created attachment 34759 [details]
Xorg log after crash

After upgrading to xserver 1.8 it started to crash every time i right-click on the NoScript-icon in Firefox. Only happens when using KMS and with both the git version and 6.12.192 of radeon.

Using following components:
Card: Radeon Mobility M6 LY
OS: Archlinux (testing)
Xorg: 1.8.0
radeon: git (20100407) with KMS
libdrm/libgl/mesa/etc: git (20100407)
firefox: 3.6.3
noscript: 1.9.9.61
Comment 1 Thomas Haider 2010-04-07 05:05:09 UTC
Created attachment 34760 [details]
dmesg.log
Comment 2 Michel Dänzer 2010-04-07 05:06:42 UTC
Please try to get a full backtrace with gdb.
Comment 3 Thomas Haider 2010-04-07 12:32:30 UTC
Created attachment 34775 [details]
backtrace

sorry it took so long, I had to recompile for debug symbols
Comment 4 Michel Dänzer 2010-04-08 01:51:17 UTC
Created attachment 34804 [details] [review]
Possible fix

Does this xserver patch fix the crash?
Comment 5 Thomas Haider 2010-04-08 03:00:27 UTC
Yes, the crash no longer occurs with this patch applied. Thanks for looking into it.
Comment 6 Michel Dänzer 2010-04-08 03:19:00 UTC
Thanks for testing it.

BTW this indicates that the client is using a picture without any defined contents as the source of a Composite operation, which seems pointless at best but might even result in visual corruption - do you notice any?
Comment 7 Thomas Haider 2010-04-08 03:40:31 UTC
No, haven't seen any corruption. Is there a way of finding out whats causing this?
Comment 8 Michel Dänzer 2010-04-08 06:22:26 UTC
(In reply to comment #7)
> Is there a way of finding out whats causing this?

Might be tricky... One possibility might be to reproduce the crash while running Firefox with --sync, attaching gdb to Firefox and setting a breakpoint in a strategic place which allows seeing which Xlib call causes the X display connection to drop. But I don't know offhand where that breakpoint could be placed.
Comment 9 Thomas Haider 2010-04-12 01:56:36 UTC
Okay, I will try and see if I can come up with some results.
Comment 10 Michel Dänzer 2010-04-15 01:46:57 UTC
Fix has landed in xserver master.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.