Bug 98321 - Segmentation fault in xcb_send_request64 () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
Summary: Segmentation fault in xcb_send_request64 () from /usr/lib/x86_64-linux-gnu/li...
Status: RESOLVED FIXED
Alias: None
Product: Mesa
Classification: Unclassified
Component: Drivers/DRI/i965 (show other bugs)
Version: 11.2
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: Intel 3D Bugs Mailing List
QA Contact: Intel 3D Bugs Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-10-19 14:36 UTC by Olivier
Modified: 2018-07-26 14:08 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments

Description Olivier 2016-10-19 14:36:44 UTC
Creating and destroying the video window multiple times causes a Segmentation Fault error.

Test case with MPV:

$ mpv /srv/player/data/media/58060421-9578-46c9-b500-4485ac110005/media/axa-logo.png --idle --keep-open

Then pressing the `_` key multiple times in the CLI on terminal

See this mpv bug for context:

https://github.com/mpv-player/mpv/issues/3678

```
# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 16.04.1 LTS
Release:    16.04
Codename:   xenial
```

```
# glxinfo | grep -i mesa
    GLX_EXT_visual_rating, GLX_INTEL_swap_event, GLX_MESA_copy_sub_buffer, 
client glx vendor string: Mesa Project and SGI
    GLX_INTEL_swap_event, GLX_MESA_copy_sub_buffer, 
    GLX_MESA_multithread_makecurrent, GLX_MESA_query_renderer, 
    GLX_MESA_swap_control, GLX_OML_swap_method, GLX_OML_sync_control, 
    GLX_EXT_visual_rating, GLX_INTEL_swap_event, GLX_MESA_copy_sub_buffer, 
    GLX_MESA_multithread_makecurrent, GLX_MESA_query_renderer, 
    GLX_MESA_swap_control, GLX_OML_swap_method, GLX_OML_sync_control, 
Extended renderer info (GLX_MESA_query_renderer):
    Device: Mesa DRI Intel(R) HD Graphics 520 (Skylake GT2)  (0x1916)
OpenGL renderer string: Mesa DRI Intel(R) HD Graphics 520 (Skylake GT2) 
OpenGL core profile version string: 3.3 (Core Profile) Mesa 11.2.0
    GL_MESA_pack_invert, GL_MESA_texture_signed_rgba, 
OpenGL version string: 3.0 Mesa 11.2.0
    GL_MESA_pack_invert, GL_MESA_texture_signed_rgba, GL_MESA_window_pos, 
OpenGL ES profile version string: OpenGL ES 3.1 Mesa 11.2.0
```
Comment 1 Olivier 2016-10-19 14:38:24 UTC
Backtrace:

```
Thread 24 "mpv/vo" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffc7fff700 (LWP 20437)]
0x00007fffeda4982d in xcb_send_request64 () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
(gdb) thread apply all backtrace

Thread 26 (Thread 0x7fffc77fe700 (LWP 20439)):
#0  0x00007ffff628d867 in futex_abstimed_wait_cancelable (private=0, abstime=0x0, expected=0, futex_word=0x7fffc045d820) at ../sysdeps/unix/sysv/linux/futex-internal.h:205
#1  do_futex_wait (sem=sem@entry=0x7fffc045d820, abstime=0x0) at sem_waitcommon.c:111
#2  0x00007ffff628d914 in __new_sem_wait_slow (sem=0x7fffc045d820, abstime=0x0) at sem_waitcommon.c:181
#3  0x00007ffff628d9ba in __new_sem_wait (sem=<optimized out>) at sem_wait.c:29
#4  0x00005555557ca048 in ?? ()
#5  0x00007ffff62856fa in start_thread (arg=0x7fffc77fe700) at pthread_create.c:333
#6  0x00007fffed165b5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 24 (Thread 0x7fffc7fff700 (LWP 20437)):
#0  0x00007fffeda4982d in xcb_send_request64 () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#1  0x00007fffeda49969 in xcb_send_request () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#2  0x00007fffeda4e723 in xcb_get_geometry () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#3  0x00007fffef1fec44 in ?? () from /usr/lib/x86_64-linux-gnu/mesa-egl/libEGL.so.1
#4  0x00007fffef1ff071 in ?? () from /usr/lib/x86_64-linux-gnu/mesa-egl/libEGL.so.1
#5  0x00007fffef1f1372 in ?? () from /usr/lib/x86_64-linux-gnu/mesa-egl/libEGL.so.1
#6  0x00005555557a56e1 in ?? ()
#7  0x00005555557a3b7c in ?? ()
#8  0x00005555557a3cfb in ?? ()
#9  0x00005555557bf6d6 in ?? ()
#10 0x00005555557bbf20 in ?? ()
#11 0x00007ffff62856fa in start_thread (arg=0x7fffc7fff700) at pthread_create.c:333
#12 0x00007fffed165b5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 6 (Thread 0x7fffd4e16700 (LWP 20336)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x0000555555715d63 in ?? ()
#2  0x00007ffff62856fa in start_thread (arg=0x7fffd4e16700) at pthread_create.c:333
#3  0x00007fffed165b5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 4 (Thread 0x7fffd588a700 (LWP 20334)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225
#1  0x0000555555747b93 in ?? ()
#2  0x0000555555749ccb in ?? ()
#3  0x00005555557618f3 in ?? ()
#4  0x00007fffeefc28ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#5  0x00007fffeefce4ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#6  0x00007fffeefc2c2e in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#7  0x00007fffeefbeccb in lua_callk () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#8  0x0000555555760a12 in ?? ()
#9  0x00007fffeefc28ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#10 0x00007fffeefc2c22 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#11 0x00007fffeefc226f in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#12 0x00007fffeefc2e71 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#13 0x00007fffeefbed91 in lua_pcallk () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
---Type <return> to continue, or q <return> to quit---
#14 0x000055555576258c in ?? ()
#15 0x00007fffeefc28ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#16 0x00007fffeefc2c22 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#17 0x00007fffeefc226f in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#18 0x00007fffeefc2e71 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#19 0x00007fffeefbed91 in lua_pcallk () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#20 0x0000555555762a8a in ?? ()
#21 0x0000555555767d79 in ?? ()
#22 0x00007ffff62856fa in start_thread (arg=0x7fffd588a700) at pthread_create.c:333
#23 0x00007fffed165b5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 3 (Thread 0x7fffd608b700 (LWP 20333)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225
#1  0x0000555555747b93 in ?? ()
#2  0x0000555555749ccb in ?? ()
#3  0x00005555557618f3 in ?? ()
#4  0x00007fffeefc28ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#5  0x00007fffeefce4ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#6  0x00007fffeefc2c2e in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#7  0x00007fffeefbeccb in lua_callk () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#8  0x0000555555760a12 in ?? ()
#9  0x00007fffeefc28ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#10 0x00007fffeefc2c22 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#11 0x00007fffeefc226f in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#12 0x00007fffeefc2e71 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#13 0x00007fffeefbed91 in lua_pcallk () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#14 0x000055555576258c in ?? ()
#15 0x00007fffeefc28ed in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#16 0x00007fffeefc2c22 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#17 0x00007fffeefc226f in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#18 0x00007fffeefc2e71 in ?? () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#19 0x00007fffeefbed91 in lua_pcallk () from /usr/lib/x86_64-linux-gnu/liblua5.2.so.0
#20 0x0000555555762a8a in ?? ()
#21 0x0000555555767d79 in ?? ()
#22 0x00007ffff62856fa in start_thread (arg=0x7fffd608b700) at pthread_create.c:333
#23 0x00007fffed165b5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 2 (Thread 0x7fffd688c700 (LWP 20332)):
#0  0x00007fffed159e8d in poll () at ../sysdeps/unix/syscall-template.S:84
#1  0x00005555557d02e1 in ?? ()
#2  0x00007ffff62856fa in start_thread (arg=0x7fffd688c700) at pthread_create.c:333
#3  0x00007fffed165b5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 1 (Thread 0x7ffff7eef980 (LWP 20311)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x000055555573533b in ?? ()
---Type <return> to continue, or q <return> to quit---
#2  0x00005555557bad7d in ?? ()
#3  0x00005555557bb0f9 in ?? ()
#4  0x000055555576a176 in ?? ()
#5  0x000055555575aaf8 in ?? ()
#6  0x0000555555750650 in ?? ()
#7  0x0000555555741aff in ?? ()
#8  0x0000555555741e89 in ?? ()
#9  0x00005555557530d4 in ?? ()
#10 0x0000555555754860 in ?? ()
#11 0x0000555555741aff in ?? ()
#12 0x0000555555741e89 in ?? ()
#13 0x00005555557530d4 in ?? ()
#14 0x0000555555754860 in ?? ()
#15 0x0000555555756162 in ?? ()
#16 0x0000555555764a4d in ?? ()
#17 0x0000555555766987 in ?? ()
#18 0x000055555575c75f in ?? ()
#19 0x000055555575d5ef in ?? ()
#20 0x00007fffed07f830 in __libc_start_main (main=0x5555556f6010 <main>, argc=4, argv=0x7fffffffe4d8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe4c8) at ../csu/libc-start.c:291
#21 0x00005555556f6049 in ?? ()
(gdb) 
```
Comment 2 Matt Turner 2017-03-22 05:28:06 UTC
FWIW, I just tried and I cannot reproduce.
Comment 3 Matt Turner 2017-03-22 05:28:42 UTC
Oh, your Mesa is really old. Please try Mesa 17.0 and reopen if you can still reproduce.
Comment 4 Denis 2018-07-26 09:53:47 UTC
Hello. I re-checked this issue on latest 18.2.0-git mesa. Issue is not actual anymore.


upd - I reproduced issue with 10.6.0 mesa version exactly by specified steps (log below):

den@den-Latitude-E5470:~/Downloads/test/53288 bug$ mpv /home/den/Desktop/cartman.jpg --idle --keep-open
Playing: /home/den/Desktop/cartman.jpg
 (+) Video --vid=1 (mjpeg)
VO: [opengl] 184x184 yuv420p
(Paused) V: 00:00:00 (0%)
Track switched:
     Video --vid=1 (mjpeg)

(Paused) : 00:00:00 (0%)
Track switched:
 (+) Video --vid=1 (mjpeg)
Track switched:
     Video --vid=1 (mjpeg)
Track switched:
 (+) Video --vid=1 (mjpeg)
Track switched:
     Video --vid=1 (mjpeg)
[vo/opengl/x11] X11 error: BadRequest (invalid request code or no such operation)
[vo/opengl/x11] Type: 0, display: 0x7f4dac00edb0, resourceid: 5400002, serial: 31
[vo/opengl/x11] Error code: 1, request code: 8a, minor code: 5
Track switched:
 (+) Video --vid=1 (mjpeg)
Track switched:
     Video --vid=1 (mjpeg)
Segmentation fault (core dumped)

_________________________________________________________________

mesa 18.2.0 works fine.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.