Bug #435559 “Xorg crashed with SIGSEGV in RADEONInit3DEngineMMIO...” : Bugs : xserver-xorg-video-ati package : Ubuntu

Revision history for this message

Brian Murray (brian-murray) wrote on 2009-09-24:

#1

BootDmesg.txt Edit (55.4 KiB, text/plain; charset="utf-8")
CurrentDmesg.txt Edit (684 bytes, text/plain; charset="utf-8")
Dependencies.txt Edit (4.0 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (1.1 KiB, text/plain; charset="utf-8")
GdmLog.txt Edit (73.9 KiB, text/plain; charset="utf-8")
GdmLogOld.txt Edit (36.4 KiB, text/plain; charset="utf-8")
Lspci.txt Edit (24.3 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (436 bytes, text/plain; charset="utf-8")
PciDisplay.txt Edit (3.1 KiB, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (1.3 KiB, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (1.3 KiB, text/plain; charset="utf-8")
ProcMaps.txt Edit (21.1 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (4.3 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (723 bytes, text/plain; charset="utf-8")
Registers.txt Edit (966 bytes, text/plain; charset="utf-8")
Stacktrace.txt Edit (2.5 KiB, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (2.5 KiB, text/plain; charset="utf-8")
UdevDb.txt Edit (133.3 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (165.0 KiB, text/plain; charset="utf-8")
XorgConf.txt Edit (1.0 KiB, text/plain; charset="utf-8")
XorgLog.txt Edit (78.7 KiB, text/plain; charset="utf-8")
XorgLogOld.txt Edit (41.0 KiB, text/plain; charset="utf-8")
Xrandr.txt Edit (3.8 KiB, text/plain; charset="utf-8")
glxinfo.txt Edit (18.3 KiB, text/plain; charset="utf-8")
setxkbmap.txt Edit (310 bytes, text/plain; charset="utf-8")
xdpyinfo.txt Edit (17.2 KiB, text/plain; charset="utf-8")
xkbcomp.txt Edit (53.9 KiB, text/plain; charset="utf-8")

Revision history for this message

Apport retracing service (apport) wrote on 2009-09-24: Stacktrace.txt (retraced)

#2

Stacktrace.txt (retraced) Edit (3.0 KiB, text/plain)

StacktraceTop:RADEONInit3DEngine (pScrn=0xeb3a80)
R300DisplayTexturedVideoMMIO (
RADEONPutImageTextured (pScrn=0xeb3a80,
xf86XVPutImage (client=<value optimized out>,
ProcXvShmPutImage (client=0x1b7e5b0)

Revision history for this message

Apport retracing service (apport) wrote on 2009-09-24: ThreadStacktrace.txt (retraced)

#3

ThreadStacktrace.txt (retraced) Edit (3.0 KiB, text/plain)

Changed in xserver-xorg-video-ati (Ubuntu):
importance:	Undecided → Medium
tags:	removed: need-amd64-retrace

Bryce Harrington (bryce) on 2009-09-24

tags:	added: crash
Changed in xserver-xorg-video-ati (Ubuntu):
status:	New → Confirmed

Brian Murray (brian-murray) on 2009-09-24

visibility:

private → public

Revision history for this message

In freedesktop.org Bugzilla #24158, Bryce Harrington (bryce) wrote on 2009-09-25:

#4

Forwarding this bug report from Ubuntu reporter Brian Murray:
https://bugs.edge.launchpad.net/ubuntu/+source/xserver-xorg-video-ati/+bug/435559

[Problem]
Segfault in RADEONInit3DEngineMMIO.

src/radeon_commonfuncs.c:85 indicates perhaps this line is at fault?

if (info->dri->pKernelDRMVersion->version_major < 2) {

Perhaps dri and pKernelDRMVersion need checks for NULL prior to being dereferenced?

[Original Bug Report]
I've had this occur semi-regularly and probably could make it happen again if more information is need.

This information also appears in dmesg after it happens:

[91522.826463] [drm:radeon_ib_schedule] *ERROR* radeon: couldn't schedule IB(2).
[91522.826467] [drm:radeon_cs_ioctl] *ERROR* Faild to schedule IB !
[91522.826526] [drm:radeon_ib_schedule] *ERROR* radeon: couldn't schedule IB(2).
[91522.826529] [drm:radeon_cs_ioctl] *ERROR* Faild to schedule IB !
[91582.827185] [drm:radeon_bo_move] *ERROR* CP is not ready use memcpy.

ProblemType: Crash
Architecture: amd64
Date: Wed Sep 23 15:32:32 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/Xorg
MachineType: Dell Inc. Dell DXP051
Package: xserver-xorg-core 2:1.6.3-1ubuntu6
ProcCmdLine: root=/dev/md1 ro radeon.modeset=1
ProcCmdline: /usr/bin/X :0 -br -verbose -auth /var/run/gdm/auth-for-gdm-DGBOB6/database -nolisten tcp vt7
ProcCwd: /etc/X11
ProcEnviron:
LANG=en_US.UTF-8
PATH=(custom, no user)
ProcVersionSignature: Ubuntu 2.6.31-10.35-generic
RelatedPackageVersions:
xserver-xorg 1:7.4+3ubuntu5
libgl1-mesa-glx 7.6.0~git20090817.7c422387-0ubuntu5
libdrm2 2.4.13-1ubuntu1
xserver-xorg-video-intel 2:2.8.1-1ubuntu1
xserver-xorg-video-ati 1:6.12.99+git20090825.fc74e119-0ubuntu2
SegvAnalysis:
Segfault happened at: 0x7f9907bf81ed <RADEONInit3DEngine+15901>: cmpl $0x1,(%rcx)
PC (0x7f9907bf81ed) ok
source "$0x1" ok
destination "(%rcx)" (0x00000000) not located in a known VMA region (needed writable region)!
SegvReason: writing NULL VMA
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
RADEONInit3DEngineMMIO (pScrn=0xeb3a80)
RADEONInit3DEngine (pScrn=0xeb3a80) at ../../src/radeon_accel.c:1129
R300DisplayTexturedVideoMMIO (
RADEONPutImageTextured (pScrn=0xeb3a80,
?? ()
Title: Xorg crashed with SIGSEGV in RADEONInit3DEngineMMIO()
Uname: Linux 2.6.31-10-generic x86_64
UserGroups:

dmi.bios.date: 10/28/2005
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A02
dmi.board.name: 0YC523
dmi.board.vendor: Dell Inc.
dmi.chassis.type: 7
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.:bvrA02:bd10/28/2005:svnDellInc.:pnDellDXP051:pvr:rvnDellInc.:rn0YC523:rvr:cvnDellInc.:ct7:cvr:
dmi.product.name: Dell DXP051
dmi.sys.vendor: Dell Inc.
fglrx: Not loaded
system:
distro: Ubuntu
architecture: x86_64kernel: 2.6.31-10-generic

Forwarding this bug report from Ubuntu reporter Brian Murray:
https://bugs.edge.launchpad.net/ubuntu/+source/xserver-xorg-video-ati/+bug/435559

[Problem]
Segfault in RADEONInit3DEngineMMIO.

src/radeon_commonfuncs.c:85 indicates perhaps this line is at fault?

if (info->dri->pKernelDRMVersion->version_major < 2) {

Perhaps dri and pKernelDRMVersion need checks for NULL prior to being dereferenced?

[Original Bug Report]
I've had this occur semi-regularly and probably could make it happen again if more information is need.

This information also appears in dmesg after it happens:

[91522.826463] [drm:radeon_ib_schedule] *ERROR* radeon: couldn't schedule IB(2).
[91522.826467] [drm:radeon_cs_ioctl] *ERROR* Faild to schedule IB !
[91522.826526] [drm:radeon_ib_schedule] *ERROR* radeon: couldn't schedule IB(2).
[91522.826529] [drm:radeon_cs_ioctl] *ERROR* Faild to schedule IB !
[91582.827185] [drm:radeon_bo_move] *ERROR* CP is not ready use memcpy.

ProblemType: Crash
Architecture: amd64
Date: Wed Sep 23 15:32:32 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/Xorg
MachineType: Dell Inc. Dell DXP051
Package: xserver-xorg-core 2:1.6.3-1ubuntu6
ProcCmdLine: root=/dev/md1 ro radeon.modeset=1
ProcCmdline: /usr/bin/X :0 -br -verbose -auth /var/run/gdm/auth-for-gdm-DGBOB6/database -nolisten tcp vt7
ProcCwd: /etc/X11
ProcEnviron:
 LANG=en_US.UTF-8
 PATH=(custom, no user)
ProcVersionSignature: Ubuntu 2.6.31-10.35-generic
RelatedPackageVersions:
 xserver-xorg 1:7.4+3ubuntu5
 libgl1-mesa-glx 7.6.0~git20090817.7c422387-0ubuntu5
 libdrm2 2.4.13-1ubuntu1
 xserver-xorg-video-intel 2:2.8.1-1ubuntu1
 xserver-xorg-video-ati 1:6.12.99+git20090825.fc74e119-0ubuntu2
SegvAnalysis:
 Segfault happened at: 0x7f9907bf81ed <RADEONInit3DEngine+15901>: cmpl $0x1,(%rcx)
 PC (0x7f9907bf81ed) ok
 source "$0x1" ok
 destination "(%rcx)" (0x00000000) not located in a known VMA region (needed writable region)!
SegvReason: writing NULL VMA
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
 RADEONInit3DEngineMMIO (pScrn=0xeb3a80)
 RADEONInit3DEngine (pScrn=0xeb3a80) at ../../src/radeon_accel.c:1129
 R300DisplayTexturedVideoMMIO (
 RADEONPutImageTextured (pScrn=0xeb3a80,
 ?? ()
Title: Xorg crashed with SIGSEGV in RADEONInit3DEngineMMIO()
Uname: Linux 2.6.31-10-generic x86_64
UserGroups:

dmi.bios.date: 10/28/2005
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A02
dmi.board.name: 0YC523
dmi.board.vendor: Dell Inc.
dmi.chassis.type: 7
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.:bvrA02:bd10/28/2005:svnDellInc.:pnDellDXP051:pvr:rvnDellInc.:rn0YC523:rvr:cvnDellInc.:ct7:cvr:
dmi.product.name: Dell DXP051
dmi.sys.vendor: Dell Inc.
fglrx: Not loaded
system:
 distro: Ubuntu
 architecture: x86_64kernel: 2.6.31-10-generic

Revision history for this message

In freedesktop.org Bugzilla #24158, Bryce Harrington (bryce) wrote on 2009-09-25:

#5

Created an attachment (id=29854)
Lspci.txt

Revision history for this message

In freedesktop.org Bugzilla #24158, Bryce Harrington (bryce) wrote on 2009-09-25:

#6

Created an attachment (id=29855)
BootDmesg.txt

Revision history for this message

In freedesktop.org Bugzilla #24158, Bryce Harrington (bryce) wrote on 2009-09-25:

#7

Created an attachment (id=29856)
CurrentDmesg.txt

Revision history for this message

In freedesktop.org Bugzilla #24158, Bryce Harrington (bryce) wrote on 2009-09-25:

#8

Created an attachment (id=29857)
Stacktrace.txt

Revision history for this message

In freedesktop.org Bugzilla #24158, Bryce Harrington (bryce) wrote on 2009-09-25:

#9

Created an attachment (id=29858)
ThreadStacktrace.txt

Revision history for this message

In freedesktop.org Bugzilla #24158, agd5f (agd5f) wrote on 2009-09-25:

#10

should be fixed in 7968e1fb89f6b59d1654df48249bf4b81990c008

Revision history for this message

Bryce Harrington (bryce) wrote on 2009-09-25:

#11

Hmm, line 85 is this:

if (info->dri->pKernelDRMVersion->version_major < 2) {

Perhaps one element in that change is null, and resuts in a null pointer deref?

Revision history for this message

Bryce Harrington (bryce) wrote on 2009-09-25:

#12

Brian, I've forwarded this bug upstream to https://bugs.freedesktop.org/show_bug.cgi?id=24158 - please subscribe to this bug in case upstream needs more information or wishes you to test something. Thanks ahead of time.

Bug Watch Updater (bug-watch-updater) on 2009-09-25

Changed in xserver-xorg-driver-ati:
status:	Unknown → Confirmed

Revision history for this message

Bryce Harrington (bryce) wrote on 2009-09-26:

#13

radeoninit3dengine_crash.patch Edit (1.6 KiB, text/plain)

here's the patch from upstream

Bug Watch Updater (bug-watch-updater) on 2009-09-26

Changed in xserver-xorg-driver-ati:
status:	Confirmed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2009-10-07:

#14

This bug was fixed in the package xserver-xorg-video-ati - 1:6.12.99+git20090825.fc74e119-0ubuntu3

---------------
xserver-xorg-video-ati (1:6.12.99+git20090825.fc74e119-0ubuntu3) karmic; urgency=low

  * Add 100_radeoninit3dengine_crash.patch: Fix segfault in MMIO path in
    RADEONInit3DEngine.
    (LP: #435559)

-- Bryce Harrington <email address hidden> Wed, 07 Oct 2009 00:29:04 -0700

Changed in xserver-xorg-video-ati (Ubuntu):
status:	Confirmed → Fix Released

Bug Watch Updater (bug-watch-updater) on 2010-09-13

Changed in xserver-xorg-driver-ati:
importance:	Unknown → High

Bug Watch Updater (bug-watch-updater) on 2011-01-25

Changed in xserver-xorg-driver-ati:
importance:	High → Unknown

Bug Watch Updater (bug-watch-updater) on 2011-02-06

Changed in xserver-xorg-driver-ati:
importance:	Unknown → High

Ubuntu
xserver-xorg-video-ati package

Xorg crashed with SIGSEGV in RADEONInit3DEngineMMIO()

Bug Description

Related branches

Duplicates of this bug

Other bug subscribers

Patches

Bug attachments

Remote bug watches

Affects		Status	Importance	Assigned to	Milestone
	xserver-xorg-driver-ati	Fix Released	High	freedesktop-bugs #24158
	xserver-xorg-video-ati (Ubuntu)	Fix Released	Medium	Unassigned

Ubuntuxserver-xorg-video-ati package

Xorg crashed with SIGSEGV in RADEONInit3DEngineMMIO()

Bug Description

Related branches

Duplicates of this bug

Other bug subscribers

Patches

Bug attachments

Remote bug watches

Ubuntu
xserver-xorg-video-ati package