[Bug 434647] New: X server segfaults in libXfont fs_cleanup_bfont()

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/show_bug.cgi?id=434647

           Summary: X server segfaults in libXfont fs_cleanup_bfont()
           Product: Fedora
           Version: 8
          Platform: i386
        OS/Version: Linux
            Status: NEW
          Severity: high
          Priority: low
         Component: libXfont
        AssignedTo: sandmann(a)redhat.com
        ReportedBy: trq(a)astro.washington.edu
         QAContact: extras-qa(a)fedoraproject.org
                CC: fedora-fonts-bugs-list(a)redhat.com


Description of problem:

The X server dies with a segmentation fault.  Here is the backtrace:

Backtrace:
0: /usr/bin/X(xf86SigHandler+0x81) [0x80c2f01]
1: [0x110420]
2: /usr/lib/libXfont.so.1 [0xa56d14]
3: /usr/lib/libXfont.so.1 [0xa573ff]
4: /usr/lib/libXfont.so.1 [0xa594ae]
5: /usr/lib/libXfont.so.1 [0xa59647]
6: /usr/bin/X(FontWakeup+0x4d) [0x808920d]
7: /usr/bin/X(WakeupHandler+0x59) [0x808c959]
8: /usr/bin/X(WaitForSomething+0x1ae) [0x81b64be]
9: /usr/bin/X(Dispatch+0x8d) [0x80886fd]
10: /usr/bin/X(main+0x49a) [0x807054a]
11: /lib/libc.so.6(__libc_start_main+0xe0) [0x884390]
12: /usr/bin/X(FontFileCompleteXLFD+0x1f1) [0x806f831]

Fatal server error:
Caught signal 11.  Server aborting

Here is symbol information for libXfont:
0xa56d14 <fs_cleanup_bfont+20>: mov    0x78(%eax),%edi
0xa573ff <fs_abort_blockrec+143>:       lea    0x20(%esi),%eax
0xa594ae <_fs_check_reconnect+142>:     mov    0x6c(%edi),%esi
0xa59647 <fs_wakeup+215>:       jmp    0xa595c6 <fs_wakeup+86>

0xa56d14 is in fs_cleanup_bfont (fserve.c:563).
558     {
559         FSFontDataRec *fsd;
560
561         if (bfont->pfont)
562         {
563             fsd = (FSFontDataRec *) bfont->pfont->fpePrivate;
564         
565             /* make sure the FS knows we choked on it */
566             fs_send_close_font(bfont->pfont->fpe, bfont->fontid);
567


Version-Release number of selected component (if applicable):

Name   : libXfont
Arch   : i386
Version: 1.3.1
Release: 2.fc8

How reproducible:

I'm not sure how to reproduce it, although it seems to correlate with use of
firefox.  The crash happens about every other day since an update in mid February.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.