Bug 98820

Summary: Google chrome crashed with SIGSEGV in context_get_server_info_callback
Product: PulseAudio Reporter: gvrb <gnome.vrb>
Component: coreAssignee: pulseaudio-bugs
Status: RESOLVED MOVED QA Contact: pulseaudio-bugs
Severity: normal    
Priority: medium CC: lennart
Version: unspecified   
Hardware: Other   
OS: All   
Whiteboard:
i915 platform: i915 features:

Description gvrb 2016-11-22 19:30:03 UTC
user@unstable:~# uname -a
Linux unstable 4.8.0-1-amd64 #1 SMP Debian 4.8.5-1 (2016-10-28) x86_64 GNU/Linux

user@unstable:/cores# file core.threaded-ml.31348
core.threaded-ml.31348: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/opt/google/chrome/chrome', real uid: 1000, effective uid: 1000, real gid: 1000, effective gid: 1000, platform: 'x86_64'

Short backtrace:

(gdb) bt
#0  0x00005619300244c0 in  ()
#1  0x00007fcbf0ed9783 in context_get_server_info_callback (pd=pd@entry=0x13b0474ae820, command=command@entry=1, tag=tag@entry=28, t=t@entry=0x0, userdata=userdata@entry=0x13b048992d80)
    at pulse/introspect.c:122
#2  0x00007fcbf0a70cb1 in run_action (pd=0x13b0474ae820, r=0x13b0495e3d40, command=1, ts=0x0) at pulsecore/pdispatch.c:288
#3  0x00007fcbf0ee4a9e in pa_mainloop_dispatch (m=0x13b047442b00) at pulse/mainloop.c:758
#4  0x00007fcbf0ee4a9e in pa_mainloop_dispatch (m=m@entry=0x13b047442b00) at pulse/mainloop.c:892
#5  0x00007fcbf0ee4d2c in pa_mainloop_iterate (m=0x13b047442b00, block=<optimized out>, retval=0x0) at pulse/mainloop.c:929
#6  0x00007fcbf0ee4dd0 in pa_mainloop_run (m=0x13b047442b00, retval=retval@entry=0x0) at pulse/mainloop.c:944
#7  0x00007fcbf0ef2df9 in thread (userdata=0x13b0474dc7c0) at pulse/thread-mainloop.c:100
#8  0x00007fcbf0a87238 in internal_thread_func (userdata=0x13b047554510) at pulsecore/thread-posix.c:81
#9  0x00007fcc08930464 in start_thread (arg=0x7fcbeeac6700) at pthread_create.c:333
#10 0x00007fcc0276d9df in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105
Comment 1 gvrb 2016-11-22 19:30:58 UTC
Full backtrace:

(gdb) bt full
#0  0x00005619300244c0 in  ()
#1  0x00007fcbf0ed9783 in context_get_server_info_callback (pd=pd@entry=0x13b0474ae820, command=command@entry=1, tag=tag@entry=28, t=t@entry=0x0, userdata=userdata@entry=0x13b048992d80)
    at pulse/introspect.c:122
        cb = <optimized out>
        o = 0x13b048992d80
        i = {
          user_name = 0x0, 
          host_name = 0x0, 
          server_version = 0x0, 
          server_name = 0x0, 
          sample_spec = {
            format = PA_SAMPLE_U8, 
            rate = 0, 
            channels = 0 '\000'
          }, 
          default_sink_name = 0x0, 
          default_source_name = 0x0, 
          cookie = 0, 
          channel_map = {
            channels = 0 '\000', 
            map = {PA_CHANNEL_POSITION_MONO <repeats 32 times>}
          }
        }
        p = 0x7fcbeeac57c0
        __func__ = "context_get_server_info_callback"
        __PRETTY_FUNCTION__ = "context_get_server_info_callback"
#2  0x00007fcbf0a70cb1 in run_action (pd=0x13b0474ae820, r=0x13b0495e3d40, command=1, ts=0x0) at pulsecore/pdispatch.c:288
        callback = 0x7fcbf0ed9700 <context_get_server_info_callback>
        userdata = 0x13b048992d80
        tag = 28
#3  0x00007fcbf0ee4a9e in pa_mainloop_dispatch (m=0x13b047442b00) at pulse/mainloop.c:758
        tv = {
          tv_sec = 84512, 
          tv_usec = 1074719793
        }
        e = 0x13b04b83cac0
        now = 84513008044
        r = 0
        dispatched = 0
        __func__ = "pa_mainloop_dispatch"
        __PRETTY_FUNCTION__ = "pa_mainloop_dispatch"
#4  0x00007fcbf0ee4a9e in pa_mainloop_dispatch (m=m@entry=0x13b047442b00) at pulse/mainloop.c:892
        dispatched = 0
        __func__ = "pa_mainloop_dispatch"
        __PRETTY_FUNCTION__ = "pa_mainloop_dispatch"
#5  0x00007fcbf0ee4d2c in pa_mainloop_iterate (m=0x13b047442b00, block=<optimized out>, retval=0x0) at pulse/mainloop.c:929
        r = 0
#6  0x00007fcbf0ee4dd0 in pa_mainloop_run (m=0x13b047442b00, retval=retval@entry=0x0) at pulse/mainloop.c:944
        r = <optimized out>
#7  0x00007fcbf0ef2df9 in thread (userdata=0x13b0474dc7c0) at pulse/thread-mainloop.c:100
        m = 0x13b0474dc7c0
        mask = {
          __val = {18446744067267100671, 18446744073709551615 <repeats 15 times>}
        }
        prev_mask = {
          __val = {0 <repeats 16 times>}
        }
        sa = {
          __sigaction_handler = {
            sa_handler = 0x0, 
            sa_sigaction = 0x0
          }, 
          sa_mask = {
            __val = {0 <repeats 16 times>}
          }, 
          sa_flags = 0, 
          sa_restorer = 0x0
        }
#8  0x00007fcbf0a87238 in internal_thread_func (userdata=0x13b047554510) at pulsecore/thread-posix.c:81
        t = 0x13b047554510
#9  0x00007fcc08930464 in start_thread (arg=0x7fcbeeac6700) at pthread_create.c:333
        __res = <optimized out>
        pd = 0x7fcbeeac6700
        now = <optimized out>
        unwind_buf = {
          cancel_jmp_buf = {{
              jmp_buf = {140513859364608, -2024484355634723562, 0, 140731911459967, 0, 140514298335296, 2049220761411814678, 2053508468116325654}, 
              mask_was_saved = 0
            }}, 
          priv = {
            pad = {0x0, 0x0, 0x0, 0x0}, 
            data = {
              prev = 0x0, 
              cleanup = 0x0, 
              canceltype = 0
            }
          }
        }
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#10 0x00007fcc0276d9df in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105
Comment 2 Tanu Kaskinen 2016-11-22 20:44:24 UTC
Thanks for the report!

This is what I can gather from the backtrace: Chrome asks pulseaudio to give server information, and when Chrome receives that information, it crashes somewhere in its own code. With the available information, this looks like a Chrome bug. In any case, a backtrace with Chrome debug symbols installed is required, because now the exact crashing line in the Chrome code is not known.
Comment 3 GitLab Migration User 2018-07-30 10:31:59 UTC
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/pulseaudio/pulseaudio/issues/491.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.