The server crashes when the mouse pointer hovers over a specific gtk button of the pavucontrol interface. Otherwise it never crashes.

I see this in /var/log/Xorg.0.log.old

[    73.117] (EE)
[    73.117] (EE) Backtrace:
[    73.127] (EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+0x139) [0x55e578a89cc9]
[    73.128] (EE) 1: /lib/x86_64-linux-gnu/libc.so.6 (__sigaction+0x40) [0x7fee08244f90]
[    73.128] (EE) 2: /lib/x86_64-linux-gnu/libc.so.6 (pthread_key_delete+0x14c) [0x7fee08293ccc]
[    73.129] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (gsignal+0x12) [0x7fee08244ef2]
[    73.129] (EE) 4: /lib/x86_64-linux-gnu/libc.so.6 (abort+0xd3) [0x7fee0822f472]
[    73.130] (EE) 5: /lib/x86_64-linux-gnu/libc.so.6 (__fsetlocking+0x290) [0x7fee082882d0]
[    73.131] (EE) 6: /lib/x86_64-linux-gnu/libc.so.6 (timer_settime+0x37a) [0x7fee0829d64a]
[    73.131] (EE) 7: /lib/x86_64-linux-gnu/libc.so.6 (__default_morecore+0x8a0) [0x7fee0829f6b0]
[    73.131] (EE) 8: /lib/x86_64-linux-gnu/libc.so.6 (__libc_free+0x6f) [0x7fee082a1d2f]
[    73.132] (EE) unw_get_proc_name failed: no unwind info found [-10]
[    73.132] (EE) 9: /usr/lib/xorg/modules/drivers/intel_drv.so (?+0x0) [0x7fee075d8a0f]
[    73.132] (EE) 10: /usr/lib/xorg/Xorg (DamageDestroy+0x23e) [0x55e5789f627e]
[    73.132] (EE) 11: /usr/lib/xorg/Xorg (ShmRegisterFbFuncs+0x80e) [0x55e5789b084e]
[    73.132] (EE) 12: /usr/lib/xorg/Xorg (SyncVerifyFence+0x3354) [0x55e5789af214]
[    73.132] (EE) 13: /usr/lib/xorg/Xorg (RegisterExtensionNames+0x1dd) [0x55e57893d22d]
[    73.133] (EE) 14: /usr/lib/xorg/Xorg (FreeResource+0xe9) [0x55e57893de19]
[    73.133] (EE) 15: /usr/lib/xorg/Xorg (dixDestroyPixmap+0x27e) [0x55e57891196e]
[    73.133] (EE) 16: /usr/lib/xorg/Xorg (SendErrorToClient+0x3d4) [0x55e578916734]
[    73.133] (EE) 17: /usr/lib/xorg/Xorg (InitFonts+0x3bc) [0x55e57891a6cc]
[    73.133] (EE) 18: /lib/x86_64-linux-gnu/libc.so.6 (__libc_init_first+0x8a) [0x7fee0823018a]
[    73.134] (EE) 19: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0x85) [0x7fee08230245]
[    73.134] (EE) 20: /usr/lib/xorg/Xorg (_start+0x21) [0x55e578903b71]
[    73.134] (EE)
[    73.134] (EE)
Fatal server error:
[    73.134] (EE) Caught signal 6 (Aborted). Server aborting
[    73.134] (EE)
[    73.134] (EE)
Please consult the The X.Org Foundation support
         at http://wiki.x.org
 for help.
[    73.134] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information.
[    73.134] (EE)

Hello,

No idea if it helps in any way, but here is a video of the crash:

https://fleuret.org/tmp/bug_1030919.mp4

Cheers,

Dear Maintainer,
I tried to add line information using the dbgsym packages.
That led me to libc trying to print the
message "double free or corruption (out)".

Kind regards,
Bernhard


https://sources.debian.org/src/glibc/2.36-8/malloc/malloc.c/
4584	malloc_printerr ("double free or corruption (out)");


0:  Xorg         (OsLookupColor+0x139)          [0x55e578a89cc9] in OsSigHandler at ../../../../os/osinit.c:138
1:  libc.so.6    (__sigaction+0x40)             [0x7fee08244f90]
2:  libc.so.6    (pthread_key_delete+0x14c)     [0x7fee08293ccc] in __pthread_kill_implementation at ./nptl/pthread_kill.c:43
3:  libc.so.6    (gsignal+0x12)                 [0x7fee08244ef2] in __GI_raise at ../sysdeps/posix/raise.c:26
4:  libc.so.6    (abort+0xd3)                   [0x7fee0822f472] in __GI_abort at ./stdlib/abort.c:79
5:  libc.so.6    (__fsetlocking+0x290)          [0x7fee082882d0] in __libc_message at ../sysdeps/posix/libc_fatal.c:155
6:  libc.so.6    (timer_settime+0x37a)          [0x7fee0829d64a] in malloc_printerr at ./malloc/malloc.c:5660
7:  libc.so.6    (__default_morecore+0x8a0)     [0x7fee0829f6b0] in _int_free at ./malloc/malloc.c:4584
8:  libc.so.6    (__libc_free+0x6f)             [0x7fee082a1d2f] in __GI___libc_free at ./malloc/malloc.c:3385
9:  intel_drv.so (?+0x0)                        [0x7fee075d8a0f] in I810SetPortAttribute / RegionUninit at /usr/include/xorg/regionstr.h:166
10: Xorg         (DamageDestroy+0x23e)          [0x55e5789f627e] in damageDestroyPixmap at ../../../../../miext/damage/damage.c:1504
11: Xorg         (ShmRegisterFbFuncs+0x80e)     [0x55e5789b084e] in XvDestroyPixmap at ../../../../Xext/xvmain.c:369
12: Xorg         (SyncVerifyFence+0x3354)       [0x55e5789af214] in ShmDestroyPixmap at ../../../../Xext/shm.c:260
13: Xorg         (RegisterExtensionNames+0x1dd) [0x55e57893d22d] in doFreeResource at ../../../../dix/resource.c:885
14: Xorg         (FreeResource+0xe9)            [0x55e57893de19] in FreeResource at ../../../../dix/resource.c:915
15: Xorg         (dixDestroyPixmap+0x27e)       [0x55e57891196e] in ProcFreePixmap at ../../../../dix/dispatch.c:1538
16: Xorg         (SendErrorToClient+0x3d4)      [0x55e578916734] in Dispatch at ../../../../dix/dispatch.c:550
17: Xorg         (InitFonts+0x3bc)              [0x55e57891a6cc] in dix_main at ../../../../dix/main.c:272