X crash

[Matthew Monaco]

On 03/29/2011 02:53 PM, Adam Jackson wrote:
> On Tue, 2011-03-29 at 11:12 -0500, dgbaley27 at verizon.net wrote:
>>> On Mar 29, 2011, Adam Jackson<ajax at nwnk.net>  wrote:
>>>> On Mon, 2011-03-28 at 20:45 -0400, Matthew Monaco wrote:
>>>> Xorg.log: http://pastebin.com/4YD47x83
>>>> bt full : http://pastebin.com/BGagSzUH
>>>
>>> #2 0x00007f4b4695c479 in realloc () from /lib/libc.so.6
>>> No symbol table info available.
>>> #3 0x0000000000459c91 in ReadRequestFromClient (client=0x20aed80) at
>> i>o.c:325
>>>
>>> Well now you're in trouble. That's a sign that something has corrupted
>>> malloc's arena and it can no longer continue. The job is now much more
>>> difficult, since you have to work backwards to figure out how that
>>> corruption happened.
>>
>> This isn't because I didn't rebuild glibc with debuggging? I thought some of the
>> missing info was because of -O2. I'll try to get some more output, but if I can't
>> this is above my pay grade. I'll just hope 1.10.1 and 2.6.38.2 do some magic.
>
> That frames 0 and 1 are uninformative is because you don't have
> debugging symbols in glibc.
>
> That your malloc arena is corrupted, is not.
>
> - ajax

I still don't get what the sign is that my malloc arena (heap?) is corrupt. Is 
it that the top of the stack is realloc?

Here's another stack with glibc symbols (not that it seems to matter):
http://pastebin.com/9U4YHwKf

And in the meantime I upgraded to kernel 2.6.38.2 and xserver to 1.10.0.901.

Adam, is there a chance the crash could be related to this:

http://projects.archlinux.org/svntogit/packages.git/tree/xorg-server/trunk/vbe-fix-malloc-size-bug.patch?id=560212880dc81a984cab90db4e56a4e2b5f31145

Arch cherry picked it for 1.10, but now it's gone for 1.10.901.


Thanks again,

Matt