Bug 258345

Summary:	Crash in ibnvidia-tls
Product:	[Plasma] kwin	Reporter:	Piotr <deszynski>
Component:	general	Assignee:	KWin default assignee <kwin-bugs-null>
Status:	RESOLVED UPSTREAM
Severity:	crash	CC:	alpha_one_x86, kde, Martin.vGagern, mckisick, whiplash
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Ubuntu
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description Piotr 2010-11-30 07:23:38 UTC

Application: kwin (4.5.1 (KDE 4.5.1))
KDE Platform Version: 4.5.1 (KDE 4.5.1)
Qt Version: 4.7.0
Operating System: Linux 2.6.35-23-generic i686
Distribution: Ubuntu 10.10

-- Information about the crash:
- What I was doing when the application crashed:
KWin crashed after waking up my laptop and after trying to restore window (Kontact) from tray to maximized state.

The crash can be reproduced some of the time.

-- Backtrace:
Application: KWin (kwin), signal: Segmentation fault
[Current thread is 1 (Thread 0xb77c7720 (LWP 2281))]

Thread 3 (Thread 0xb5528b70 (LWP 2282)):
#0  0x00f1b416 in __kernel_vsyscall ()
#1  0x00981113 in __lll_lock_wait_private () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/lowlevellock.S:95
#2  0x0091565f in _L_lock_9687 () from /lib/libc.so.6
#3  0x00913e56 in __libc_free (mem=0x942a6c0) at malloc.c:3736
#4  0x001fea20 in ?? () from /usr/lib/nvidia-current/tls/libnvidia-tls.so.260.19.06
#5  0x06e50205 in QEventDispatcherUNIXPrivate::~QEventDispatcherUNIXPrivate (this=0x942a6c0, __in_chrg=<value optimized out>) at kernel/qeventdispatcher_unix.cpp:175
#6  0x06e37f81 in cleanup (this=0x93bf588, __in_chrg=<value optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:62
#7  ~QScopedPointer (this=0x93bf588, __in_chrg=<value optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:100
#8  QObject::~QObject (this=0x93bf588, __in_chrg=<value optimized out>) at kernel/qobject.cpp:963
#9  0x06e0f7c8 in QAbstractEventDispatcher::~QAbstractEventDispatcher (this=0x93bf588, __in_chrg=<value optimized out>) at kernel/qabstracteventdispatcher.cpp:231
#10 0x06e4e36a in QEventDispatcherUNIX::~QEventDispatcherUNIX (this=0x93bf588, __in_chrg=<value optimized out>) at kernel/qeventdispatcher_unix.cpp:627
#11 0x06d1b5ba in QThreadPrivate::finish (arg=0x6f51888) at thread/qthread_unix.cpp:302
#12 0x06d1be01 in ~__pthread_cleanup_class (arg=0x6f51888) at /usr/include/pthread.h:545
#13 QThreadPrivate::start (arg=0x6f51888) at thread/qthread_unix.cpp:271
#14 0x00e54ba8 in ?? () from /usr/lib/nvidia-current/libGL.so.1

Thread 2 (Thread 0xadee8b70 (LWP 2284)):
#0  0x00f1b416 in __kernel_vsyscall ()
#1  0x00981113 in __lll_lock_wait_private () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/lowlevellock.S:95
#2  0x0091565f in _L_lock_9687 () from /lib/libc.so.6
#3  0x00913e56 in __libc_free (mem=0x97a8ee0) at malloc.c:3736
#4  0x001fea20 in ?? () from /usr/lib/nvidia-current/tls/libnvidia-tls.so.260.19.06
#5  0x06e4e24a in QEventDispatcherUNIX::unregisterSocketNotifier (this=0x9750428, notifier=0xadee822c) at kernel/qeventdispatcher_unix.cpp:802
#6  0x06e3b1da in QSocketNotifier::setEnabled (this=0xfffffe00, enable=false) at kernel/qsocketnotifier.cpp:298
#7  0x06e4f359 in QEventDispatcherUNIXPrivate::doSelect (this=0x985a888, flags=..., timeout=0x0) at kernel/qeventdispatcher_unix.cpp:261
#8  0x06e4fc25 in QEventDispatcherUNIX::processEvents (this=0x9750428, flags=...) at kernel/qeventdispatcher_unix.cpp:919
#9  0x06e1c609 in QEventLoop::processEvents (this=0xadee81d0, flags=) at kernel/qeventloop.cpp:149
#10 0x06e1ca8a in QEventLoop::exec (this=0xadee81d0, flags=...) at kernel/qeventloop.cpp:201
#11 0x06d18b7e in QThread::exec (this=0x97a4be8) at thread/qthread.cpp:490
#12 0x06dfb35b in QInotifyFileSystemWatcherEngine::run (this=0x97a4be8) at io/qfilesystemwatcher_inotify.cpp:248
#13 0x06d1bdf9 in QThreadPrivate::start (arg=0x97a4be8) at thread/qthread_unix.cpp:266
#14 0x00e54ba8 in ?? () from /usr/lib/nvidia-current/libGL.so.1

Thread 1 (Thread 0xb77c7720 (LWP 2281)):
[KCrash Handler]
#7  0x00910ba4 in _int_free (av=<value optimized out>, p=0xae28618) at malloc.c:4973
#8  0x00913e5d in __libc_free (mem=0xae28620) at malloc.c:3738
#9  0x001fea20 in ?? () from /usr/lib/nvidia-current/tls/libnvidia-tls.so.260.19.06
#10 0x03c7c0f1 in QX11PixmapData::~QX11PixmapData (this=0xae28620, __in_chrg=<value optimized out>) at image/qpixmap_x11.cpp:1245
#11 0x03c67096 in ~QExplicitlySharedDataPointer (this=0x94d8790, __in_chrg=<value optimized out>) at ../../include/QtCore/../../src/corelib/tools/qshareddata.h:159
#12 QPixmap::~QPixmap (this=0x94d8790, __in_chrg=<value optimized out>) at image/qpixmap.cpp:324
#13 0x03bc079e in QWidgetPrivate::deleteExtra (this=0xaa13548) at kernel/qwidget.cpp:1741
#14 0x03bc09af in QWidgetPrivate::~QWidgetPrivate (this=0xaa13548, __in_chrg=<value optimized out>) at kernel/qwidget.cpp:318
#15 0x06e37f81 in cleanup (this=0xadfe108, __in_chrg=<value optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:62
#16 ~QScopedPointer (this=0xadfe108, __in_chrg=<value optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:100
#17 QObject::~QObject (this=0xadfe108, __in_chrg=<value optimized out>) at kernel/qobject.cpp:963
#18 0x03bced86 in QWidget::~QWidget (this=0xadfe108, __in_chrg=<value optimized out>) at kernel/qwidget.cpp:1609
#19 0x0015eee3 in KDecoration::~KDecoration() () from /usr/lib/libkdecorations.so.4
#20 0x0015ef98 in KDecorationUnstable::~KDecorationUnstable() () from /usr/lib/libkdecorations.so.4
#21 0x001686d9 in ?? () from /usr/lib/libkdecorations.so.4
#22 0x00a52695 in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#23 0x00a53778 in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#24 0x00a898dd in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#25 0x00a8afa4 in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#26 0x00a8b7e4 in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#27 0x00a62b32 in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#28 0x03beceb0 in qt_x11EventFilter (ev=0x9a72968) at kernel/qapplication_x11.cpp:408
#29 0x03bfdab0 in QApplication::x11ProcessEvent (this=0xbfe39004, event=0xbfe38e1c) at kernel/qapplication_x11.cpp:3248
#30 0x03c2efc7 in QEventDispatcherX11::processEvents (this=0x937ae40, flags=...) at kernel/qeventdispatcher_x11.cpp:132
#31 0x06e1c609 in QEventLoop::processEvents (this=0xbfe38f54, flags=) at kernel/qeventloop.cpp:149
#32 0x06e1ca8a in QEventLoop::exec (this=0xbfe38f54, flags=...) at kernel/qeventloop.cpp:201
#33 0x06e2100f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1009
#34 0x03b6ae07 in QApplication::exec () at kernel/qapplication.cpp:3672
#35 0x00a64c54 in kdemain () from /usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#36 0x080485ab in _start ()

Reported using DrKonqi

Comment 1 Martin Flöser 2011-04-28 21:16:07 UTC

*** Bug 268968 has been marked as a duplicate of this bug. ***

Comment 2 Martin Flöser 2011-04-28 21:16:17 UTC

*** Bug 270946 has been marked as a duplicate of this bug. ***

Comment 3 Thomas Lübking 2011-04-28 21:25:42 UTC

*** Bug 269148 has been marked as a duplicate of this bug. ***

Comment 4 Thomas Lübking 2011-04-28 21:30:05 UTC

from bug #270946 comment #1
---------------
libnvidia-tls.so.260.19.36 not thread-safe? We received several bug reports
about crashes in that library in combination with multiple threads. If this is
reproducible, please try downgrading to a previous NVIDIA binary driver version
(or upgrading, if there is a version that fixes it).

---------------

try "export __GL_SINGLE_THREADED=1" - no idea whether this will fix it (was supposed to work around a /really/ old ld/dlopen issue but might still work nevertheless ;-)

Comment 5 Martin Flöser 2011-05-06 22:15:28 UTC

*** Bug 253882 has been marked as a duplicate of this bug. ***

Comment 6 Martin Flöser 2012-03-09 07:05:15 UTC

We have not seen any nvidia-tls related bug in quite some time. I assume this has been resolved in a more recent version of the nvidia driver. Because of that I change the bug state to upstream to indicate that the crash had been triggered by an upstream component.