Bug 27510 - Xorg crashes when right-clicking on NoScript Icon in Firefox
Summary: Xorg crashes when right-clicking on NoScript Icon in Firefox
Alias: None
Product: xorg
Classification: Unclassified
Component: Server/Acceleration/EXA (show other bugs)
Version: git
Hardware: x86 (IA32) Linux (All)
: medium major
Assignee: Xorg Project Team
QA Contact: Xorg Project Team
Depends on:
Reported: 2010-04-07 05:02 UTC by Thomas Haider
Modified: 2010-04-15 01:46 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:

Xorg log after crash (39.40 KB, text/plain)
2010-04-07 05:02 UTC, Thomas Haider
no flags Details
dmesg.log (27.71 KB, text/plain)
2010-04-07 05:05 UTC, Thomas Haider
no flags Details
backtrace (3.26 KB, text/plain)
2010-04-07 12:32 UTC, Thomas Haider
no flags Details
Possible fix (485 bytes, patch)
2010-04-08 01:51 UTC, Michel Dänzer
no flags Details | Splinter Review

Description Thomas Haider 2010-04-07 05:02:09 UTC
Created attachment 34759 [details]
Xorg log after crash

After upgrading to xserver 1.8 it started to crash every time i right-click on the NoScript-icon in Firefox. Only happens when using KMS and with both the git version and 6.12.192 of radeon.

Using following components:
Card: Radeon Mobility M6 LY
OS: Archlinux (testing)
Xorg: 1.8.0
radeon: git (20100407) with KMS
libdrm/libgl/mesa/etc: git (20100407)
firefox: 3.6.3
Comment 1 Thomas Haider 2010-04-07 05:05:09 UTC
Created attachment 34760 [details]
Comment 2 Michel Dänzer 2010-04-07 05:06:42 UTC
Please try to get a full backtrace with gdb.
Comment 3 Thomas Haider 2010-04-07 12:32:30 UTC
Created attachment 34775 [details]

sorry it took so long, I had to recompile for debug symbols
Comment 4 Michel Dänzer 2010-04-08 01:51:17 UTC
Created attachment 34804 [details] [review]
Possible fix

Does this xserver patch fix the crash?
Comment 5 Thomas Haider 2010-04-08 03:00:27 UTC
Yes, the crash no longer occurs with this patch applied. Thanks for looking into it.
Comment 6 Michel Dänzer 2010-04-08 03:19:00 UTC
Thanks for testing it.

BTW this indicates that the client is using a picture without any defined contents as the source of a Composite operation, which seems pointless at best but might even result in visual corruption - do you notice any?
Comment 7 Thomas Haider 2010-04-08 03:40:31 UTC
No, haven't seen any corruption. Is there a way of finding out whats causing this?
Comment 8 Michel Dänzer 2010-04-08 06:22:26 UTC
(In reply to comment #7)
> Is there a way of finding out whats causing this?

Might be tricky... One possibility might be to reproduce the crash while running Firefox with --sync, attaching gdb to Firefox and setting a breakpoint in a strategic place which allows seeing which Xlib call causes the X display connection to drop. But I don't know offhand where that breakpoint could be placed.
Comment 9 Thomas Haider 2010-04-12 01:56:36 UTC
Okay, I will try and see if I can come up with some results.
Comment 10 Michel Dänzer 2010-04-15 01:46:57 UTC
Fix has landed in xserver master.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.