Issue 8 of Bugs, issues and feature requests collector [pgui]
Title: | pgserver segmentation fault in x11 driver | ||
Status: | Pending | Security related: | No |
Description: | See epterm, create a second tab (f12), then log out of the first SIGSEGV: x11_rect (dest=0x0, x=11, y=60, w=464, h=28, c=65535, lgop=1) at x11_pr... | ||
From: | Anonymous User | on |
Mar 24, 03 19:41
|
Anonymous User | Last update: |
Mar 25, 03 08:41
|
|
Topic/class: | pgserver/bug | Importance: | critical |
Version info: | Latest CVS | ||
Transcript for Issue 8 (2 )
= Comment - Entry #2 by micah on Mar 25, 2003 8:41 am
This isn't actually the x11 driver's fault- it shouldn't be called with a NULL destination bitmap. If you try the same thing on the sdlfb driver, instead of crashing it will draw a blank rectangle where the terminal should be. I plan on using valgrind to get to the bottom of this.
________________________________________
= Request - Entry #1 by Anonymous User on Mar 24, 2003 7:42 pm
See epterm, create a second tab (f12), then log out of the first
SIGSEGV:
x11_rect (dest=0x0, x=11, y=60, w=464, h=28, c=65535, lgop=1)
at x11_primitives.c:68
68 XB(a)->using_shm = shmflag;
(gdb) bt
#0 x11_rect (dest=0x0, x=11, y=60, w=464, h=28, c=65535, lgop=1)
at x11_primitives.c:68
#1 0x0805d5f7 in gropnode_draw (r=0xbffff3d0, n=0xbffff430) at render.c:796
#2 0x0805c522 in grop_render (div=0x80f7f1c, clip=0x3c) at render.c:236
#3 0x0805f1e3 in divnode_redraw (n=0x3c, all=-1073744848) at div.c:441
#4 0x0805f517 in update (subtree=0x80f7f1c, show=1) at div.c:566
#5 0x0806a35a in terminal_trigger (self=0x80f7e3c, type=16, param=0x1)
at terminal_frontend.c:452
#6 0x0805b25a in send_trigger (w=0x810006c, type=16, param=0x1c)
at input_util.c:74
#7 0x0805b164 in request_focus (self=0x1) at input_util.c:51
#8 0x08063e52 in rqh_focus (r=0x1d0) at requests.c:620
#9 0x08062f97 in request_exec (r=0x1) at requests.c:81
#10 0x08052c07 in readfd (from=7) at request.c:323
#11 0x08053310 in net_iteration () at request.c:598
#12 0x08052625 in pgserver_mainloop_iteration () at mainloop.c:91
#13 0x0805259e in pgserver_mainloop () at mainloop.c:55
#14 0x0804d0c5 in pgserver_main (flags=28, argc=28, argv=0x1c) at init.c:194
#15 0x0804cdb3 in main (argc=28, argv=0x1c) at pgmain.c:35
#16 0x4057ca44 in __libc_start_main () from /lib/libc.so.6
This isn't actually the x11 driver's fault- it shouldn't be called with a NULL destination bitmap. If you try the same thing on the sdlfb driver, instead of crashing it will draw a blank rectangle where the terminal should be. I plan on using valgrind to get to the bottom of this.
________________________________________
= Request - Entry #1 by Anonymous User on Mar 24, 2003 7:42 pm
See epterm, create a second tab (f12), then log out of the first
SIGSEGV:
x11_rect (dest=0x0, x=11, y=60, w=464, h=28, c=65535, lgop=1)
at x11_primitives.c:68
68 XB(a)->using_shm = shmflag;
(gdb) bt
#0 x11_rect (dest=0x0, x=11, y=60, w=464, h=28, c=65535, lgop=1)
at x11_primitives.c:68
#1 0x0805d5f7 in gropnode_draw (r=0xbffff3d0, n=0xbffff430) at render.c:796
#2 0x0805c522 in grop_render (div=0x80f7f1c, clip=0x3c) at render.c:236
#3 0x0805f1e3 in divnode_redraw (n=0x3c, all=-1073744848) at div.c:441
#4 0x0805f517 in update (subtree=0x80f7f1c, show=1) at div.c:566
#5 0x0806a35a in terminal_trigger (self=0x80f7e3c, type=16, param=0x1)
at terminal_frontend.c:452
#6 0x0805b25a in send_trigger (w=0x810006c, type=16, param=0x1c)
at input_util.c:74
#7 0x0805b164 in request_focus (self=0x1) at input_util.c:51
#8 0x08063e52 in rqh_focus (r=0x1d0) at requests.c:620
#9 0x08062f97 in request_exec (r=0x1) at requests.c:81
#10 0x08052c07 in readfd (from=7) at request.c:323
#11 0x08053310 in net_iteration () at request.c:598
#12 0x08052625 in pgserver_mainloop_iteration () at mainloop.c:91
#13 0x0805259e in pgserver_mainloop () at mainloop.c:55
#14 0x0804d0c5 in pgserver_main (flags=28, argc=28, argv=0x1c) at init.c:194
#15 0x0804cdb3 in main (argc=28, argv=0x1c) at pgmain.c:35
#16 0x4057ca44 in __libc_start_main () from /lib/libc.so.6