548536 - X server crash with java plugin at openprocessing.org

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Mikko Rantalainen]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a2pre) Gecko/20100224 Minefield/3.7a2pre
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a2pre) Gecko/20100224 Minefield/3.7a2pre

X server crashes during Java plugin rendering when content is scrolled (/clipped?).

Reproducible: Always

Steps to Reproduce:
1. Go to http://www.openprocessing.org/visuals/?visualID=2097
2. Resize the browser window (make window shorter)
3. Scroll the plugin display (big black square with rendering) out of the top of the window
Actual Results:  
X server crashes, the user is dropped to text virtual terminal and GDM restarts the X server (user graphical session is aborted and the user must relogin to do anything)

Expected Results:  
Window should scroll normally and plugin should continue to render the result. X server should not crash.

This may be a java bug, X server bug, X server display adapter driver bug or a Firefox bug. The same page works fine with Google Chrome with the same plugin.

Environment:
Ubuntu 9.10 amd64 (running on Intel Core 2 Duo)
intel X4500 display adapter (Q43/Q45 integrated, pci device [8086:2e12])
$ apt-cache policy sun-java6-jre xserver-xorg-video-intel xserver-xorg | egrep '(^[^ ]|Installed)'
sun-java6-jre:
  Installed: 6-15-1
xserver-xorg-video-intel:
  Installed: 2:2.9.0-1ubuntu2.1
xserver-xorg:
  Installed: 1:7.4+3ubuntu10

The only hint of crash in the X server log is
 ddxSigGiveUp: Closing log
(the space at the start of the line is in the log, looking around with Google suggests that the actual log should be following:

Saw signal 11. Server aborting.
 ddxSigGiveUp: Closing log
 ddxSigGiveUp: re-raising 11

I don't know why my log has only that line.)

Setting Severity: Critical because this loses all unsaved data in any open application in user's X server session. I'm also able to reproduce with Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.8) Gecko/20100214 Ubuntu/9.10 (karmic) Firefox/3.5.8

Comment 1

[Mikko Rantalainen]

Additional notes: I'm also running
compiz:
  Installed: 1:0.8.4-0ubuntu2.1
which is enabled by default on this hardware with Ubuntu 9.10.

Comment 2

[Mikko Rantalainen]

I was able to produce a backtrace of X server process (with lots of missing symbols) which hints that this is a problem in Intel display driver:

Program received signal SIGSEGV, Segmentation fault.
memcpy () at ../sysdeps/x86_64/memcpy.S:267
267	../sysdeps/x86_64/memcpy.S: No such file or directory.
	in ../sysdeps/x86_64/memcpy.S
...
#0  memcpy () at ../sysdeps/x86_64/memcpy.S:267
No locals.
#1  0x00007f74cec76f67 in fbBlt () from /usr/lib/xorg/modules//libfb.so
No symbol table info available.
#2  0x00007f74cec77340 in fbBltStip () from /usr/lib/xorg/modules//libfb.so
No symbol table info available.
#3  0x00007f74cec7c4f8 in fbGetImage () from /usr/lib/xorg/modules//libfb.so
No symbol table info available.
#4  0x00007f74cf7038c5 in uxa_get_image ()
   from /usr/lib/xorg/modules/drivers//intel_drv.so
No symbol table info available.
#5  0x00000000004dfefd in ?? ()
No symbol table info available.
#6  0x000000000050e90a in ?? ()
No symbol table info available.
#7  0x000000000050f3e0 in ?? ()
No symbol table info available.
#8  0x000000000044e174 in Dispatch ()
No symbol table info available.
#9  0x0000000000434085 in main ()
No symbol table info available.
Continuing.

Program terminated with signal SIGSEGV, Segmentation fault.
The program no longer exists.

Comment 3

[Mikko Rantalainen]

Reported at https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/527770

Comment 4

[Matthias Versen [:Matti]]

A X server crash is always the fault of the X server.
marking invalid