| Summary: | [GM45] High zoom in libreoffice causes a crash in i830_uxa_put_image | ||||||
|---|---|---|---|---|---|---|---|
| Product: | xorg | Reporter: | Rosita <drieteenmeeuw> | ||||
| Component: | Driver/intel | Assignee: | Chris Wilson <chris> | ||||
| Status: | RESOLVED FIXED | QA Contact: | Xorg Project Team <xorg-team> | ||||
| Severity: | critical | ||||||
| Priority: | medium | CC: | glgxg | ||||
| Version: | unspecified | ||||||
| Hardware: | x86 (IA32) | ||||||
| OS: | Linux (All) | ||||||
| Whiteboard: | |||||||
| i915 platform: | i915 features: | ||||||
| Attachments: |
|
||||||
|
Description
Rosita
2011-06-14 05:05:46 UTC
This also occurs in Impress et all. Tested in Ubuntu 10.10 and 11.04. I can easily replicate the problem using (Ubuntu)LO 3.3.2 and LO3.4.0 final. Interesting bit is that I only can replicate on a laptop with an Intel graphics chipset - I cannot replicate on an older desktop with an old nVidia graphics card. Nor can I replicate on the same Intel graphics based system using LO 3.4.0Beta3. I plan to install from beta3 upto beta5 to try and pin down where the problem starts. Rosita, can you advise what your graphic card and driver is?
$ uname -a
... 2.6.35-30-generic #54-Ubuntu SMP Tue Jun 7 18:41:54 UTC 2011 x86_64 GNU/Linux
/var/log/Xorg.0.log.old:
> > Backtrace:
> > [ 183.009] 0: /usr/bin/X (xorg_backtrace+0x28) [0x45c5a8]
> > [ 183.009] 1: /usr/bin/X (0x400000+0x5a87d) [0x45a87d]
> > [ 183.009] 2: /lib/libpthread.so.0 (0x7f3370d3b000+0xfb40) [0x7f3370d4ab40]
> > [ 183.009] 3: /usr/lib/xorg/modules/drivers/intel_drv.so (0x7f336debe000+0x1eed4) [0x7f336dedced4]
> > [ 183.009] 4: /usr/lib/xorg/modules/drivers/intel_drv.so (0x7f336debe000+0x37ac4) [0x7f336def5ac4]
> > [ 183.009] 5: /usr/bin/X (0x400000+0xd34fa) [0x4d34fa]
> > [ 183.009] 6: /usr/bin/X (0x400000+0x3f979) [0x43f979]
> > [ 183.009] 7: /usr/bin/X (0x400000+0x2187b) [0x42187b]
> > [ 183.009] 8: /lib/libc.so.6 (__libc_start_main+0xfe) [0x7f336fca6d8e]
> > [ 183.009] 9: /usr/bin/X (0x400000+0x21409) [0x421409]
> > [ 183.009] Segmentation fault at address 0x3b
I'll post back with additional details after testing further.
Bumped to high critical as this causes a complete loss of all data and applications opened on the desktop at the time of the crash. Testing on Ubuntu 11.04 (all on the same machine). $ uname -a ... 2.6.38-10-generic #44-Ubuntu SMP Thu Jun 2 21:32:22 UTC 2011 x86_64 x86_64 x86_64 GNU/Linu: 1. Open LO blank presentation. Move the zoom slider as far to the right as possible. 2. What is expected: zoom will go to at least 2879%. 3. What happens: LO creats an Xorg segfault killing the desktop and reverting to the gdm login manager. Does not crash: LibreOffice 3.4.0 DEV300m103 (Build:3) $ cat /opt/libreoffice/program/versionrc [Version] AllLanguages=en-US BuildVersion= buildid=300m103(Build:3) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.4 ProductBuildid=3 ProductMajor=300 ProductMinor=103 ProductSource=DEV300 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) Vendor=The Document Foundation Crashes: cat /usr/lib/libreoffice/program/versionrc [Version] AllLanguages=en-US BuildVersion=tag libreoffice-3.3.2.2, Ubuntu package 1:3.3.2-1ubuntu5 buildid=330m19(Build:202) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.3 ProductBuildid=202 ProductMajor=330 ProductMinor=19 ProductSource=OOO330 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) Vendor=The Document Foundation, Debian and Ubuntu and cat /opt/libreoffice3.4/program/versionrc [Version] AllLanguages=en-US BuildVersion= buildid=340m1(Build:12) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.4 ProductBuildid=12 ProductMajor=340 ProductMinor=1 ProductSource=OOO340 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) Vendor=The Document Foundation Note: LO 3.4.0beta3 was purged before installing LO 3.4.0 final. Extract from /var/log/Xorg.0.log.old following the LO 3.4.0 final crash: Backtrace: [ 1524.321] 0: /usr/bin/X (xorg_backtrace+0x26) [0x4a2656] [ 1524.321] 1: /usr/bin/X (0x400000+0x621ca) [0x4621ca] [ 1524.321] 2: /lib/x86_64-linux-gnu/libpthread.so.0 (0x7f8e426c3000+0xfc60) [0x7f8e426d2c60] [ 1524.321] 3: /usr/lib/xorg/modules/drivers/intel_drv.so (0x7f8e3f80b000+0x20373) [0x7f8e3f82b373] [ 1524.321] 4: /usr/lib/xorg/modules/drivers/intel_drv.so (0x7f8e3f80b000+0x21777) [0x7f8e3f82c777] [ 1524.321] 5: /usr/lib/xorg/modules/drivers/intel_drv.so (0x7f8e3f80b000+0x2b0e5) [0x7f8e3f8360e5] [ 1524.321] 6: /usr/bin/X (0x400000+0xdc215) [0x4dc215] [ 1524.321] 7: /usr/bin/X (0x400000+0xd5698) [0x4d5698] [ 1524.321] 8: /usr/bin/X (0x400000+0x2e2a9) [0x42e2a9] [ 1524.321] 9: /usr/bin/X (0x400000+0x21a7e) [0x421a7e] [ 1524.321] 10: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xff) [0x7f8e4160ceff] [ 1524.321] 11: /usr/bin/X (0x400000+0x21629) [0x421629] [ 1524.321] Segmentation fault at address 0x18 [ 1524.321] Caught signal 11 (Segmentation fault). Server aborting Crashes with LO 3.4.0beta4: $ cat /opt/libreoffice/program/versionrc [Version] AllLanguages=en-US BuildVersion= buildid=300m103(Build:4) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.4 ProductBuildid=4 ProductMajor=300 ProductMinor=103 ProductSource=DEV300 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) Vendor=The Document Foundation From LO 3.4.0beta4: Backtrace: [ 2274.121] 0: /usr/bin/X (xorg_backtrace+0x26) [0x4a2656] [ 2274.121] 1: /usr/bin/X (0x400000+0x621ca) [0x4621ca] [ 2274.121] 2: /lib/x86_64-linux-gnu/libpthread.so.0 (0x7f8bf72db000+0xfc60) [0x7f8bf72eac60] [ 2274.121] 3: /usr/lib/xorg/modules/drivers/intel_drv.so (0x7f8bf4423000+0x118c4) [0x7f8bf44348c4] [ 2274.121] 4: /usr/lib/xorg/modules/drivers/intel_drv.so (0x7f8bf4423000+0x2b510) [0x7f8bf444e510] [ 2274.121] 5: /usr/bin/X (0x400000+0xdc215) [0x4dc215] [ 2274.121] 6: /usr/bin/X (0x400000+0xd5698) [0x4d5698] [ 2274.121] 7: /usr/bin/X (0x400000+0x2e2a9) [0x42e2a9] [ 2274.121] 8: /usr/bin/X (0x400000+0x21a7e) [0x421a7e] [ 2274.121] 9: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xff) [0x7f8bf6224eff] [ 2274.121] 10: /usr/bin/X (0x400000+0x21629) [0x421629] [ 2274.121] Segmentation fault at address 0x3e [ 2274.121] Caught signal 11 (Segmentation fault). Server aborting Same 11.04 machine. Does not crash in LO 3.3.2 final: cat /usr/lib/libreoffice/program/versionrc [Version] AllLanguages=en-US BuildVersion=tag libreoffice-3.3.2.2, Ubuntu package 1:3.3.2-1ubuntu5 buildid=330m19(Build:202) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.3 ProductBuildid=202 ProductMajor=330 ProductMinor=19 ProductSource=OOO330 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) Vendor=The Document Foundation, Debian and Ubuntu Apologies. Comment #5 was the wrong versionrc. This is the correct one for LO 3.3.0 final that I just tested (does not crash): cat /opt/libreoffice/program/versionrc [Version] AllLanguages=en-US buildid=330m19(Build:202) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.3 ProductBuildid=202 ProductMajor=330 ProductMinor=19 ProductSource=OOO330 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) LO 3.3.0 final *does* crash on Ubuntu 10.10: $ uname -a ... 2.6.35-30-generic #54-Ubuntu SMP Tue Jun 7 18:41:54 UTC 2011 x86_64 GNU/Linux I've been at this too long... so I'll quit for now. Comments # 6 & 7 should be: LO 3.3.2 Final. In response to Comment 1: Intel graphics chipset indeed: lcpi -v Intel Corporation 4 Series Chipset Integrated Graphics Controller (rev 03) (prog-if 00 [VGA controller]) Subsystem: Hewlett-Packard Company Device 3647 Flags: bus master, fast devsel, latency 0, IRQ 47 Memory at f0000000 (64-bit, non-prefetchable) [size=4M] Memory at e0000000 (64-bit, prefetchable) [size=256M] I/O ports at 1230 [size=8] Expansion ROM at <unassigned> [disabled] Capabilities: <access denied> Kernel driver in use: i915 Kernel modules: i915 modinfo video filename: /lib/modules/2.6.35.13-92.fc14.i686/kernel/drivers/acpi/video.ko license: GPL description: ACPI Video Driver author: Bruno Ducrot srcversion: 07FBB443C510A688460802F alias: acpi*:LNXVIDEO:* depends: output vermagic: 2.6.35.13-92.fc14.i686 SMP mod_unload 686 parm: brightness_switch_enabled:bool parm: allow_duplicates:bool uname -a ... 2.6.35.13-92.fc14.i686 #1 SMP Sat May 21 17:39:42 UTC 2011 i686 i686 i386 GNU/Linux cat /opt/libreoffice/program/versionrc [Version] AllLanguages=en-US buildid=330m19(Build:8) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.3 ProductBuildid=8 ProductMajor=330 ProductMinor=19 ProductSource=OOO330 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) Thanks Rosita. It's beginning to look Intel Graphics driver related (possibly openGL as well?). Just found another with the same Intel chipset as mine. This one is on openSUSE: https://bugzilla.novell.com/show_bug.cgi?id=686725 [Bug 686725 - intel [GM45] High zoom in libreoffice causes a crash in X] Note: that reporter experienced no crash in VirtualBox because the VM uses it's own drivers. On my dell XPS M1330 laptop the same happens: uname -a ... 2.6.35.13-92.fc14.i686.PAE #1 SMP Sat May 21 17:33:09 UTC 2011 i686 i686 i386 GNU/Linux cat /opt/libreoffice/program/versionrc [Version] AllLanguages=en-US buildid=330m19(Build:8) ExtensionUpdateURL=http://updateexte.libreoffice.org/ExtensionUpdateService/check.Update OOOBaseVersion=3.3 ProductBuildid=8 ProductMajor=330 ProductMinor=19 ProductSource=OOO330 UpdateID=LibreOffice_3_en-US UpdateURL= UpdateUserAgent=<PRODUCT> (${buildid}; ${_OS}; ${_ARCH}; BundledLanguages=${AllLanguages}) lscpi -v 00:02.0 VGA compatible controller: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller (rev 0c) (prog-if 00 [VGA controller]) Subsystem: Dell Device 0209 Flags: bus master, fast devsel, latency 0, IRQ 44 Memory at f6e00000 (64-bit, non-prefetchable) [size=1M] Memory at e0000000 (64-bit, prefetchable) [size=256M] I/O ports at efe8 [size=8] Expansion ROM at <unassigned> [disabled] Capabilities: <access denied> Kernel driver in use: i915 Kernel modules: i915 00:02.1 Display controller: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller (rev 0c) Subsystem: Dell Device 0209 Flags: bus master, fast devsel, latency 0 Memory at f6f00000 (64-bit, non-prefetchable) [size=1M] Capabilities: <access denied> There appear to be other LO/Intel Graphics related bugs: <https://bugs.freedesktop.org/buglist.cgi?query_format=specific&order=relevance+desc&bug_status=__open__&product=LibreOffice&content=Intel> Samples: https://bugs.freedesktop.org/show_bug.cgi?id=35032 [Presentation regressions wrt openoffice.org] https://bugs.freedesktop.org/show_bug.cgi?id=30519 [Bad transitions if "use hardware acceleration" is enabled] https://bugs.freedesktop.org/show_bug.cgi?id=34954 [Horizontal Lines in Start Center] https://bugs.freedesktop.org/show_bug.cgi?id=36547 [Impress: Rendering problems with some .odp files] https://bugs.freedesktop.org/show_bug.cgi?id=30961 [Animation related rendering glitches in Impress when Hardware Acceleration is disabled] Now if we can get a dev to take notice of this bug report we might be able to help sort out the cause. I'll try posting to the dev list to see if we can get someone to have a look. For the crash reported here in comment #0 follow... http://www.x.org/wiki/Development/Documentation/ServerDebugging and try and get a backtrace with symbols Created attachment 48545 [details] backtrace with symbols output from gdb as requested by comment 13 (In reply to comment #13) > For the crash reported here in comment #0 follow... > http://www.x.org/wiki/Development/Documentation/ServerDebugging > and try and get a backtrace with symbols Should I report a separate bug as suggested in the wiki page? Ok, so we try to create an 15000x17000 intermediate image and fail. Did you say which version of xserver-xorg-video-intel (nee xf86-video-intel) you were using? commit 4c66b28870b050493ad96f7b0fe2d70d7ee539c7 Author: Chris Wilson <chris@chris-wilson.co.uk> Date: Thu Feb 17 16:48:24 2011 +0000 uxa: Fallback if the temporary is too large If the render operation requires a temporary source Picture and the operation is large, larger than the maximum permitted bo, then we will fail to allocate the bo. In this case, we need to fallback and perform the operation on the CPU rather than dereference a NULL bo. Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=34399 Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk> (In reply to comment #16) > Ok, so we try to create an 15000x17000 intermediate image and fail. Did you say > which version of xserver-xorg-video-intel (nee xf86-video-intel) you were > using? How do I find out which version I am using? (In reply to comment #16) > Ok, so we try to create an 15000x17000 intermediate image and fail. Did you say > which version of xserver-xorg-video-intel (nee xf86-video-intel) you were > using? Does this help? [maarten@Pollo ~]$ rpm -qa | grep intel xorg-x11-drv-intel-2.12.0-6.fc14.1.i686 xorg-x11-drv-intel-debuginfo-2.12.0-6.fc14.1.i686 [maarten@Pollo ~]$ rpm -qa | grep xf86 libXxf86dga-1.1.1-2.fc14.i686 libXxf86misc-devel-1.0.2-1.fc13.i686 libXxf86vm-1.1.0-1.fc13.i686 libXxf86vm-devel-1.1.0-1.fc13.i686 pyxf86config-0.3.37-10.fc14.i686 libXxf86misc-1.0.2-1.fc13.i686 libXxf86dga-devel-1.1.1-2.fc14.i686 (In reply to comment #19) > (In reply to comment #16) > > Ok, so we try to create an 15000x17000 intermediate image and fail. Did you say > > which version of xserver-xorg-video-intel (nee xf86-video-intel) you were > > using? > Does this help? > [maarten@Pollo ~]$ rpm -qa | grep intel > xorg-x11-drv-intel-2.12.0-6.fc14.1.i686 > xorg-x11-drv-intel-debuginfo-2.12.0-6.fc14.1.i686 so it's xf86-video-intel 2.12 Same here:
$ apt-cache policy xserver-xorg-video-intel
xserver-xorg-video-intel:
Installed: 2:2.12.0-1ubuntu5.2
Candidate: 2:2.12.0-1ubuntu5.2
Version table:
*** 2:2.12.0-1ubuntu5.2 0
500 http://us.archive.ubuntu.com/ubuntu/ maverick-updates/main amd64 Packages
100 /var/lib/dpkg/status
2:2.12.0-1ubuntu5 0
500 http://us.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages
And on Ubuntu 11.04:
$ apt-cache policy xserver-xorg-video-intel
xserver-xorg-video-intel:
Installed: 2:2.14.0-4ubuntu7.1
Candidate: 2:2.14.0-4ubuntu7.1
Version table:
*** 2:2.14.0-4ubuntu7.1 0
500 http://archive.ubuntu.com/ubuntu/ natty-updates/main amd64 Packages
100 /var/lib/dpkg/status
2:2.14.0-4ubuntu7 0
500 http://archive.ubuntu.com/ubuntu/ natty/main amd64 Packages
LibreOffice 3.4.1
OOO340m1 (Build:103)
Not crashing. (Zoom level goes to 600%)
LibreOffice 3.3.2
OOO330m19 (Build:202)
tag libreoffice-3.3.2.2
Not crashing. (Zoom level goes to 600%)
LibreOffice 3.3.2
OOO330m19 (Build:202)
tag libreoffice-3.3.2.2, Ubuntu package 1:3.3.2-1ubuntu5
Not crashing. (Zoom level goes to 600%)
Unfortunately, the problem still happens on my machine even after installing LibreOffice 3.4.1 Obviously no version of LibreOffice itself is going to include a specific fix for this. (In reply to comment #24) > Obviously no version of LibreOffice itself is going to include a specific fix > for this. So how should I try to fix it? Rosita, can you please try 3.3.3? Note that it still crashes for me in 3.4.1, but not in 3.3.3: http://www.libreoffice.org/download/ LibreOffice 3.3.3 Final (2011-06-16) If 3.3.3 works for you, then perhaps the devs can figure out the difference between 3.3.3 and 3.4.1 to fix in 3.4.x. Correction: does *not* crash for me in 3.4.1. If 3.3.3 works for you, then perhaps the devs can figure out the difference between 3.3.3 and 3.4.1 to fix in 3.4.x. BTW: is your 3.4.1 final (ala 3.4.1rc3)? What zoom level does it go to when it crashes? My zoom levels only go to 600% now, whereas before they were going to around 2879%. (In reply to comment #27) > Correction: does *not* crash for me in 3.4.1. If 3.3.3 works for you, then > perhaps the devs can figure out the difference between 3.3.3 and 3.4.1 to fix > in 3.4.x. > > BTW: is your 3.4.1 final (ala 3.4.1rc3)? What zoom level does it go to when it > crashes? My zoom levels only go to 600% now, whereas before they were going to > around 2879%. Both 3.4.1 and 3.3.3 crash on my system. Writer of 3.3.3 zooms until 600%, impress crashed when zooming in beyond some value still unknown to me. (In reply to comment #27) > Correction: does *not* crash for me in 3.4.1. If 3.3.3 works for you, then > perhaps the devs can figure out the difference between 3.3.3 and 3.4.1 to fix > in 3.4.x. > > BTW: is your 3.4.1 final (ala 3.4.1rc3)? What zoom level does it go to when it > crashes? My zoom levels only go to 600% now, whereas before they were going to > around 2879%. 3.3.3: LibreOffice 3.3.3 OOO330m19 (Build:301) tag libreoffice-3.3.2.2 3.4.1: LibreOffice 3.4.1 OOO340m1 (Build:103) Both are the "final" versions from http://www.libreoffice.org/download/ Impress in 3.3.3 crashes when zooming an empty slide until c. 1121%, in 3.4.1 this happens at 1137%. Let me just reiterate that this major bug is just 1 innocent mouse-click away. Clicking by accident on the right part of the zoom scale will crash the entire session, loosing all work within and outside libreoffice. Its not LibreOffice that's crashing. Re: comment #30: As long as LO is causing xorg to crash, then it is IMO LO related. While it may no longer be crashing my system, it is still crashing Rosita's system & the bug is serious enough (again IMO) to reopen. The bug causes complete system data loss. Chris Wilson, can you please have another look? You haven't even tested the fix I pointed out. Actually I have (comments #21 & #22). Both of those versions contain the patch: <https://launchpad.net/ubuntu/+source/xserver-xorg-video-intel/2:2.12.0-1ubuntu5.2> <https://bugs.launchpad.net/ubuntu/+source/xserver-xorg-video-intel/+bug/696957> <https://launchpad.net/ubuntu/+source/xserver-xorg-video-intel/2:2.14.0-4ubuntu1> Perhaps Rosita can actually try your fix if you point her on where to actually get it to try. Also note my other comments in this bug report where different versions of LO caused the crash even when my version contain the 'fix'. I can try to replicate those again if you'd like. |
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.