** Description changed: - SRU Impact/Description + [Impact] Fixes frequent xorg segv's for radeon r300/r400 users introduced as a "severe regression since jaunty". The patch prevents memory from being used after it's free'd and it has been confirmed to solve two upstream bugs (the linked one plus another bug that Michel Dänzer mentions in the upstream bug report). Examples of hardware that is known to be affected: 01:00.0 VGA compatible controller [0300]: ATI Technologies Inc RV380 [Radeon X600 (PCIE)] [1002:5b62] 01:00.0 VGA compatible controller [0300]: ATI Technologies Inc RV350 AP [Radeon 9600] [1002:4150] - TESTCASE + [Karmic - Development] + This same patch has been uploaded to Karmic. Also, we will soon be updating to a newer version of mesa which already includes this change. + + [Jaunty - Stable] + This patch, a cherrypick from the upstream release, is proposed for jaunty: + http://launchpadlibrarian.net/26309613/lp368049_jaunty_proposed.debdiff + + [Testcase] 1. boot jaunty on the affected hardware 2. install "compizconfig-settings-manager" 3. activate the "ring switcher" plugin (launch settings manager from system::preferences) and make sure it's Initiate keybinding is SUPER+TAB 4. hold down SUPER-TAB for 2-3 seconds so that the windows swirl around full speed. 5. SEGV in xorg, back to gdm. (there are very likely several other compiz operations/transformations that trigger the crash but the ring switcher seems to be the most reliable repro. For example in the upstream bug report one uses reported he had a crash that happened when he was "constantly resizing a gnome-terminal" and that this crash stopped happening when he installed the testing DEB that held the patch in this SRU). + + [Regression Potential] + The scope of the patch is limited by the fact that the code changes are against the r300* files. + + The patch changes the handler of a texstate pointer; like any change + involving pointers this carries some regression risk, but probably no + worse than the existing bug. In any case, this patch should receive + extra testing by r300/r400 users before deployment. TODO FOR SRU Not subscribing the SRU team yet because this patch is not in karmic yet. I've upgraded my ATI machine to create and test a karmic debdiff but right now compiz refuses to install properly due to dependency problems / broken package. _________________________________ ORIGINAL BUG REPORT BELOW _________________________________ Binary package hint: xorg I have Compiz configured for Ring Switcher. When I hold Alt-Tab and get windows swirling around a bunch, gnome eventually crashes and restarts. I find this in syslog: Apr 26 19:38:22 ipsn-hordp2 kernel: [ 1180.965338] [drm] Num pipes: 1 Apr 26 19:38:22 ipsn-hordp2 x-session-manager[4016]: WARNING: Detected that screensaver has left the bus Apr 26 19:38:22 ipsn-hordp2 gdm[3506]: WARNING: gdm_slave_xioerror_handler: Fatal X error - Restarting :0 Apr 26 19:38:23 ipsn-hordp2 acpid: client connected from 5037[0:0] Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.932084] [drm] Setting GART location based on new memory map Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.933712] [drm] Loading R300 Microcode Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.933752] [drm] Num pipes: 1 Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.933760] [drm] writeback test succeeded in 1 usecs Apr 26 19:38:32 ipsn-hordp2 pulseaudio[5209]: pid.c: Stale PID file, overwriting. Apr 26 19:38:34 ipsn-hordp2 pulseaudio[5209]: module-x11-xsmp.c: X11 session manager not running. Apr 26 19:38:34 ipsn-hordp2 pulseaudio[5209]: module.c: Failed to load module "module-x11-xsmp" (argument: ""): initialization failed. Apr 26 19:38:35 ipsn-hordp2 NetworkManager: <info> Unmanaged Device found; state CONNECTED forced. (see http://bugs.launchpad.net/bugs/191889) Apr 26 19:40:01 ipsn-hordp2 /USR/SBIN/CRON[5468]: (root) CMD ([ -x /usr/sbin/update-motd ] && /usr/sbin/update-motd 2>/dev/null) Apr 26 19:42:23 ipsn-hordp2 kernel: [ 1421.504431] [drm] Num pipes: 1 $ lsb_release -rd Description: Ubuntu 9.04 Release: 9.04 $ apt-cache policy xorg gdm xorg: Installed: 1:7.4~5ubuntu18 Candidate: 1:7.4~5ubuntu18 Version table: *** 1:7.4~5ubuntu18 0 500 cdrom://Ubuntu 9.04 _Jaunty Jackalope_ - Release i386 (20090420.1) jaunty/main Packages 500 http://us.archive.ubuntu.com jaunty/main Packages 100 /var/lib/dpkg/status gdm: Installed: 2.20.10-0ubuntu2 Candidate: 2.20.10-0ubuntu2 Version table: *** 2.20.10-0ubuntu2 0 500 cdrom://Ubuntu 9.04 _Jaunty Jackalope_ - Release i386 (20090420.1) jaunty/main Packages 500 http://us.archive.ubuntu.com jaunty/main Packages 100 /var/lib/dpkg/status ProblemType: Bug Architecture: i386 DistroRelease: Ubuntu 9.04 Package: xorg 1:7.4~5ubuntu18 ProcEnviron: SHELL=/bin/zsh PATH=(custom, user) LANG=en_US.UTF-8 ProcVersion: Linux version 2.6.28-11-generic (bui...@palmer) (gcc version 4.3.3 (Ubuntu 4.3.3-5ubuntu4) ) #42-Ubuntu SMP Fri Apr 17 01:57:59 UTC 2009 SourcePackage: xorg Uname: Linux 2.6.28-11-generic i686
** Description changed: [Impact] Fixes frequent xorg segv's for radeon r300/r400 users introduced as a "severe regression since jaunty". The patch prevents memory from being used after it's free'd and it has been confirmed to solve two upstream bugs (the linked one plus another bug that Michel Dänzer mentions in the upstream bug report). Examples of hardware that is known to be affected: 01:00.0 VGA compatible controller [0300]: ATI Technologies Inc RV380 [Radeon X600 (PCIE)] [1002:5b62] 01:00.0 VGA compatible controller [0300]: ATI Technologies Inc RV350 AP [Radeon 9600] [1002:4150] [Karmic - Development] This same patch has been uploaded to Karmic. Also, we will soon be updating to a newer version of mesa which already includes this change. [Jaunty - Stable] This patch, a cherrypick from the upstream release, is proposed for jaunty: http://launchpadlibrarian.net/26309613/lp368049_jaunty_proposed.debdiff [Testcase] 1. boot jaunty on the affected hardware 2. install "compizconfig-settings-manager" 3. activate the "ring switcher" plugin (launch settings manager from system::preferences) and make sure it's Initiate keybinding is SUPER+TAB 4. hold down SUPER-TAB for 2-3 seconds so that the windows swirl around full speed. 5. SEGV in xorg, back to gdm. (there are very likely several other compiz operations/transformations that trigger the crash but the ring switcher seems to be the most reliable repro. For example in the upstream bug report one uses reported he had a crash that happened when he was "constantly resizing a gnome-terminal" and that this crash stopped happening when he installed the testing DEB that held the patch in this SRU). [Regression Potential] The scope of the patch is limited by the fact that the code changes are against the r300* files. The patch changes the handler of a texstate pointer; like any change involving pointers this carries some regression risk, but probably no worse than the existing bug. In any case, this patch should receive extra testing by r300/r400 users before deployment. - TODO FOR SRU - Not subscribing the SRU team yet because this patch is not in karmic yet. - I've upgraded my ATI machine to create and test a karmic debdiff but right now - compiz refuses to install properly due to dependency problems / broken package. - - - - _________________________________ - ORIGINAL BUG REPORT BELOW - _________________________________ - - Binary package hint: xorg + [Original Bug Report] I have Compiz configured for Ring Switcher. When I hold Alt-Tab and get windows swirling around a bunch, gnome eventually crashes and restarts. I find this in syslog: Apr 26 19:38:22 ipsn-hordp2 kernel: [ 1180.965338] [drm] Num pipes: 1 Apr 26 19:38:22 ipsn-hordp2 x-session-manager[4016]: WARNING: Detected that screensaver has left the bus Apr 26 19:38:22 ipsn-hordp2 gdm[3506]: WARNING: gdm_slave_xioerror_handler: Fatal X error - Restarting :0 Apr 26 19:38:23 ipsn-hordp2 acpid: client connected from 5037[0:0] Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.932084] [drm] Setting GART location based on new memory map Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.933712] [drm] Loading R300 Microcode Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.933752] [drm] Num pipes: 1 Apr 26 19:38:24 ipsn-hordp2 kernel: [ 1182.933760] [drm] writeback test succeeded in 1 usecs Apr 26 19:38:32 ipsn-hordp2 pulseaudio[5209]: pid.c: Stale PID file, overwriting. Apr 26 19:38:34 ipsn-hordp2 pulseaudio[5209]: module-x11-xsmp.c: X11 session manager not running. Apr 26 19:38:34 ipsn-hordp2 pulseaudio[5209]: module.c: Failed to load module "module-x11-xsmp" (argument: ""): initialization failed. Apr 26 19:38:35 ipsn-hordp2 NetworkManager: <info> Unmanaged Device found; state CONNECTED forced. (see http://bugs.launchpad.net/bugs/191889) Apr 26 19:40:01 ipsn-hordp2 /USR/SBIN/CRON[5468]: (root) CMD ([ -x /usr/sbin/update-motd ] && /usr/sbin/update-motd 2>/dev/null) Apr 26 19:42:23 ipsn-hordp2 kernel: [ 1421.504431] [drm] Num pipes: 1 $ lsb_release -rd Description: Ubuntu 9.04 Release: 9.04 $ apt-cache policy xorg gdm xorg: Installed: 1:7.4~5ubuntu18 Candidate: 1:7.4~5ubuntu18 Version table: *** 1:7.4~5ubuntu18 0 500 cdrom://Ubuntu 9.04 _Jaunty Jackalope_ - Release i386 (20090420.1) jaunty/main Packages 500 http://us.archive.ubuntu.com jaunty/main Packages 100 /var/lib/dpkg/status gdm: Installed: 2.20.10-0ubuntu2 Candidate: 2.20.10-0ubuntu2 Version table: *** 2.20.10-0ubuntu2 0 500 cdrom://Ubuntu 9.04 _Jaunty Jackalope_ - Release i386 (20090420.1) jaunty/main Packages 500 http://us.archive.ubuntu.com jaunty/main Packages 100 /var/lib/dpkg/status ProblemType: Bug Architecture: i386 DistroRelease: Ubuntu 9.04 Package: xorg 1:7.4~5ubuntu18 ProcEnviron: SHELL=/bin/zsh PATH=(custom, user) LANG=en_US.UTF-8 ProcVersion: Linux version 2.6.28-11-generic (bui...@palmer) (gcc version 4.3.3 (Ubuntu 4.3.3-5ubuntu4) ) #42-Ubuntu SMP Fri Apr 17 01:57:59 UTC 2009 SourcePackage: xorg Uname: Linux 2.6.28-11-generic i686 -- compiz crashes gnome desktop using default ati driver (radeon X600) https://bugs.launchpad.net/bugs/368049 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
