Your message dated Sun, 3 Apr 2005 18:55:01 -0500
with message-id <[EMAIL PROTECTED]>
and subject line Bug#235914: xlibmesa-dri: fontglide screensaver totally locks 
up machine every time
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 3 Mar 2004 05:43:18 +0000
>From [EMAIL PROTECTED] Tue Mar 02 21:43:18 2004
Return-path: <[EMAIL PROTECTED]>
Received: from houseofdistraction.com [206.63.251.121] (mail)
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1AyPA6-0002zp-00; Tue, 02 Mar 2004 21:43:18 -0800
Received: from (belly) [192.168.1.4] (jlb)
        by houseofdistraction.com with smtp (Exim 3.35 #1 (Debian))
        id 1AyPA5-0006oJ-00; Tue, 02 Mar 2004 21:43:17 -0800
Received: by belly (sSMTP sendmail emulation); Tue,  2 Mar 2004 21:43:16 -0800
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Jeff Bowden <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: xlibmesa-dri: fontglide screensaver totally locks up machine every time
Bcc: Jeff Bowden <[EMAIL PROTECTED]>
X-Mailer: reportbug 2.49
Date: Tue, 02 Mar 2004 21:43:16 -0800
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_01 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-5.0 required=4.0 tests=HAS_PACKAGE autolearn=no 
        version=2.60-bugs.debian.org_2004_03_01
X-Spam-Level: 

Package: xlibmesa-dri
Version: 4.3.0-3
Severity: normal


In the same update that brought me 4.3 I also got new xscreensaver hacks.
Unfortunately one of them called "fontglide" totally locks up the system.
I have no real evidence that dri is the problem, just a hunch.

This happens on a Radeon 9200 and also on an M9.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.3-mppe
Locale: LANG=C, LC_CTYPE=C

Versions of packages xlibmesa-dri depends on:
ii  xlibmesa-gl                   4.3.0-3    Mesa 3D graphics library [XFree86]

-- no debconf information

---------------------------------------
Received: (at 235914-done) by bugs.debian.org; 3 Apr 2005 23:55:03 +0000
>From [EMAIL PROTECTED] Sun Apr 03 16:55:03 2005
Return-path: <[EMAIL PROTECTED]>
Received: from cpe-65-26-182-85.indy.res.rr.com (sisyphus.deadbeast.net) 
[65.26.182.85] 
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1DIEvn-0002hT-00; Sun, 03 Apr 2005 16:55:03 -0700
Received: by sisyphus.deadbeast.net (Postfix, from userid 1000)
        id DCACE68C019; Sun,  3 Apr 2005 18:55:01 -0500 (EST)
Date: Sun, 3 Apr 2005 18:55:01 -0500
From: Branden Robinson <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Re: Bug#235914: xlibmesa-dri: fontglide screensaver totally locks up 
machine every time
Message-ID: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL 
PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL 
PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
        protocol="application/pgp-signature"; boundary="kLVKJMuKEUFaIs8+"
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
Mail-Copies-To: nobody
X-No-CC: I subscribe to this list; do not CC me on replies.
User-Agent: Mutt/1.5.8i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 2


--kLVKJMuKEUFaIs8+
Content-Type: multipart/mixed; boundary="cYG5ZC/RuVsIq1ir"
Content-Disposition: inline


--cYG5ZC/RuVsIq1ir
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

tag 235914 - help
retitle 235914 xfree86: [libXfont] SEGV in fs_read_list_info() (see #294320)
thanks

I believe this bug was fixed in xfree86 4.3.0.dfsg.1-11; sometime
subsequent to your report, Guillem Jover filed a bug with a patch, and it
looks like it may be a duplicate of this report.

xfree86 (4.3.0.dfsg.1-11) unstable; urgency=3Dmedium
[...]
  * Add patch #099v by Guillem Jover to fix a SEGV in font server code
    shared between xfs and the X server.  Thanks, Guillem!  (Closes: #29432=
0)
[...]
 -- Branden Robinson <[EMAIL PROTECTED]>  Fri, 11 Feb 2005 02:14:27 -0500

I'm attaching the patch in question, which does indeed fix a SEGV in
fs_read_list_info() which is caused by a bad assumption that "rep" is a
valid pointer when it's not.  While I can't see from the backtrace what the
local variables are (buf and rep, particularly), I suspect this to be the
same issue.

I am therefore closing this report.  Thank you for reporting it.

On Mon, Mar 08, 2004 at 04:00:07PM -0500, Branden Robinson wrote:
> retitle 235914 xfree86: [libXfont] SEGV in fs_read_list_info()
> tag 235914 + upstream help
> thanks
>=20
> On Sat, Mar 06, 2004 at 02:46:07PM -0800, Jeff Bowden wrote:
> > OK, I finally figured out to run XFree86-debug  with the "-ac" flag fro=
m=20
> > the console and connect to the process with gdb --pid=3D<pid>.   When I=
=20
> > run /usr/lib/xscreensaver/fontglide from another remote shell I get the=
=20
> > crash with the following output:
> >=20
> > Program received signal SIGSEGV, Segmentation fault.
> > 0x40146fbf in memcpy () from /lib/tls/libc.so.6
> > (gdb) bt
> > #0  0x40146fbf in memcpy () from /lib/tls/libc.so.6
> > #1  0x08c31070 in ?? ()
> > #2  0xbffff7e0 in ?? ()
> > #3  0x088cfadd in fs_read_list_info (fpe=3D0x8b566c0, blockrec=3D0x8c31=
070)=20
> > at fserve.c:2376
> > #4  0x088ce1b4 in fs_read_reply (fpe=3D0x8b566c0, client=3D0x0) at fser=
ve.c:1310
> > #5  0x088ce2c8 in fs_wakeup (fpe=3D0x8b566c0, mask=3D0x8acb3e0) at fser=
ve.c:1349
> > #6  0x084b0eb5 in FontWakeup (data=3D0x0, count=3D1,=20
> > LastSelectMask=3D0x8acb3e0) at dixfonts.c:190
> > #7  0x0848d67f in WakeupHandler (result=3D1, pReadmask=3D0x8acb3e0) at=
=20
> > dixutils.c:459
> > #8  0x084b685f in WaitForSomething (pClientsReady=3D0xbffff834) at=20
> > WaitFor.c:353
> > #9  0x084842bc in Dispatch () at dispatch.c:379
> > #10 0x0849b95c in main (argc=3D2, argv=3D0xbffffd24, envp=3D0xbffffd30)=
 at=20
> > main.c:469
>=20
> Here's the part of fserve.c in question:
>=20
>    2356     buf =3D (char *) rep + SIZEOF (fsListFontsWithXInfoReply);
>    2357
>    2358     /*
>    2359      * The original FS implementation didn't match
>    2360      * the spec, version 1 was respecified to match the FS.
>    2361      * Version 2 matches the original intent
>    2362      */
>    2363     if (conn->fsMajorVersion <=3D 1)
>    2364     {
>    2365         memcpy (binfo->name, buf, rep->nameLength);
>    2366         buf +=3D _fs_pad_length (rep->nameLength);
>    2367     }
>    2368     pi =3D (fsPropInfo *) buf;
>    2369     buf +=3D SIZEOF (fsPropInfo);
>    2370     po =3D (fsPropOffset *) buf;
>    2371     buf +=3D pi->num_offsets * SIZEOF (fsPropOffset);
>    2372     pd =3D (pointer) buf;
>    2373     buf +=3D pi->data_len;
>    2374     if (conn->fsMajorVersion > 1)
>    2375     {
>    2376         memcpy (binfo->name, buf, rep->nameLength);
>    2377         buf +=3D _fs_pad_length (rep->nameLength);
>    2378     }
>=20
> Help wanted!
>=20
> --=20
> G. Branden Robinson                |    Somewhere, there is a .sig so fun=
ny
> Debian GNU/Linux                   |    that reading it will cause an
> [EMAIL PROTECTED]                 |    aneurysm.  This is not that .sig.
> http://people.debian.org/~branden/ |



--=20
G. Branden Robinson                |       If we believe absurdities, we
Debian GNU/Linux                   |       shall commit atrocities.
[EMAIL PROTECTED]                 |       -- Voltaire
http://people.debian.org/~branden/ |

--cYG5ZC/RuVsIq1ir
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="099v_fontserver_fix_SEGV.diff"
Content-Transfer-Encoding: quoted-printable

$Id: 099v_fontserver_fix_SEGV.diff 2181 2005-02-09 09:04:58Z branden $

Fix a SEGV in fs_read_list_info() to correctly handle a reply type of
FS_Error from fsListFontsWithXInfoReply().  This mirrors a similar check in
fs_read_open_font(), fs_read_query_info(), fs_read_extent_info(),
fs_read_glyphs(), and fs_read_list(), so why it was missing from this
function was a mystery.

This patch by Guillem Jover.  See Debian #294320.

Not submitted to XFree86 or X.Org yet.

--- xc/lib/font/fc/fserve.c~    2005-02-09 03:27:04.000000000 -0500
+++ xc/lib/font/fc/fserve.c     2005-02-09 03:27:48.000000000 -0500
@@ -2332,7 +2332,7 @@
     _fs_free_props (&binfo->info);
=20
     rep =3D (fsListFontsWithXInfoReply *) fs_get_reply (conn, &ret);
-    if (rep =3D=3D 0)
+    if (!rep || rep->type =3D=3D FS_Error)
     {
        if (ret =3D=3D FSIO_BLOCK)
            return StillWorking;

--cYG5ZC/RuVsIq1ir--

--kLVKJMuKEUFaIs8+
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iEYEARECAAYFAkJQglUACgkQ6kxmHytGonwOsQCdE7tj6ZhPPp1qysZX0Lx8Zkct
I80AnRlUGX8xdwE2MopzcwB8NJXjtYYX
=QSvY
-----END PGP SIGNATURE-----

--kLVKJMuKEUFaIs8+--


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to