I got a random crash (SIGABRT) in Xorg (running under GNOME) while I
working on a different (non-graphical) virtual console. If the
backtrace and logs below are not useful, please close this bug.
$ gdb -batch -n -ex 'set height 0' -ex bt -ex 'thread apply all bt full' --core /var/crash/1000/32138-1000-1000-6-1470847592-chianamo--usr-lib-xorg-Xorg.core /usr/lib/xorg/Xorg
[New LWP 32138]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/lib/xorg/Xorg vt7 -displayfd 3 -auth /run/user/1000/gdm/Xauthority -backgr'.
Program terminated with signal SIGABRT, Aborted.
#0 0x00007f08c8f8e1c8 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
54 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
#0 0x00007f08c8f8e1c8 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
#1 0x00007f08c8f8f64a in __GI_abort () at abort.c:89
#2 0x00007f08c8fc9f4a in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7f08c90c10de "*** %s ***: %s terminated\n") at ../sysdeps/posix/libc_fatal.c:175
#3 0x00007f08c9052627 in __GI___fortify_fail (msg=msg@entry=0x7f08c90c1075 "buffer overflow detected") at fortify_fail.c:30
#4 0x00007f08c90507f0 in __GI___chk_fail () at chk_fail.c:28
#5 0x00007f08c9052597 in __fdelt_chk (d=d@entry=-1) at fdelt_chk.c:25
#6 0x0000555a7b0ae2bc in AddEnabledDevice (fd=-1) at ../../os/connection.c:1075
#7 0x0000555a7af8e7e9 in xf86AddEnabledDevice (pInfo=pInfo@entry=0x555a7cb685a0) at ../../../../hw/xfree86/common/xf86Events.c:316
#8 0x00007f08bf16fe36 in wcmDevProc (pWcm=0x555a7cb576c0, what=1) at ../../src/xf86Wacom.c:852
#9 0x0000555a7af46214 in EnableDevice (dev=dev@entry=0x555a7cb576c0, sendevent=sendevent@entry=1 '\001') at ../../dix/devices.c:400
#10 0x0000555a7af46bd3 in DeviceSetProperty (dev=0x555a7cb576c0, property=<optimized out>, prop=0x7ffe9556a450, checkonly=<optimized out>) at ../../dix/devices.c:163
#11 0x0000555a7b046a6f in XIChangeDeviceProperty (dev=0x555a7cb576c0, property=property@entry=137, type=<optimized out>, format=<optimized out>, mode=<optimized out>, len=<optimized out>, value=0x555a7c94f034, sendevent=1) at ../../Xi/xiproperty.c:770
#12 0x0000555a7b0478ab in ProcXIChangeProperty (client=0x555a7cc1b760, data=0x555a7c94f034, len=<optimized out>, mode=<optimized out>, format=<optimized out>, type=<optimized out>, property=137, dev=<optimized out>) at ../../Xi/xiproperty.c:353
#13 0x0000555a7b0478ab in ProcXIChangeProperty (client=0x555a7cc1b760) at ../../Xi/xiproperty.c:1147
#14 0x0000555a7af4dcaf in Dispatch () at ../../dix/dispatch.c:430
#15 0x0000555a7af51cb3 in dix_main (argc=12, argv=0x7ffe9556a6a8, envp=<optimized out>) at ../../dix/main.c:300
#16 0x00007f08c8f7b730 in __libc_start_main (main=0x555a7af3bf60 <main>, argc=12, argv=0x7ffe9556a6a8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe9556a698) at ../csu/libc-start.c:291
#17 0x0000555a7af3bf99 in _start ()
Thread 1 (Thread 0x7f08cb1efa40 (LWP 32138)):
#0 0x00007f08c8f8e1c8 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
resultvar = 0
pid = 32138
selftid = 32138
#1 0x00007f08c8f8f64a in __GI_abort () at abort.c:89
save_stage = 2
act = {__sigaction_handler = {sa_handler = 0x2020202020202020, sa_sigaction = 0x2020202020202020}, sa_mask = {__val = {2336643767717749807, 2891438931023913583, 2982620403818325348, 3630573342595364618, 7365405400577882209, 3474915456519977008, 2338262622574489648, 3472328296227680304, 3900175758553788448, 2314885634301571896, 2314885530818453536, 2314885530818453536, 7234590133808209952, 7954876936909715514, 7308327776159819107, 3487535478228673908}}, sa_flags = 845308728, sa_restorer = 0x40}
sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007f08c8fc9f4a in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7f08c90c10de "*** %s ***: %s terminated\n") at ../sysdeps/posix/libc_fatal.c:175
Python Exception <class 'gdb.error'> Attempt to dereference a generic pointer.:
#3 0x00007f08c9052627 in __GI___fortify_fail (msg=msg@entry=0x7f08c90c1075 "buffer overflow detected") at fortify_fail.c:30
#4 0x00007f08c90507f0 in __GI___chk_fail () at chk_fail.c:28
#5 0x00007f08c9052597 in __fdelt_chk (d=d@entry=-1) at fdelt_chk.c:25
#6 0x0000555a7b0ae2bc in AddEnabledDevice (fd=-1) at ../../os/connection.c:1075
__d = -1
#7 0x0000555a7af8e7e9 in xf86AddEnabledDevice (pInfo=pInfo@entry=0x555a7cb685a0) at ../../../../hw/xfree86/common/xf86Events.c:316
#8 0x00007f08bf16fe36 in wcmDevProc (pWcm=0x555a7cb576c0, what=1) at ../../src/xf86Wacom.c:852
pInfo = 0x555a7cb685a0
priv = 0x555a7cc2cda0
rc = 1
__func__ = "wcmDevProc"
#9 0x0000555a7af46214 in EnableDevice (dev=dev@entry=0x555a7cb576c0, sendevent=sendevent@entry=1 '\001') at ../../dix/devices.c:400
prev = <optimized out>
ret = <optimized out>
other = <optimized out>
enabled = 57 '9'
flags = {0 <repeats 40 times>}
__func__ = "EnableDevice"
#10 0x0000555a7af46bd3 in DeviceSetProperty (dev=0x555a7cb576c0, property=<optimized out>, prop=0x7ffe9556a450, checkonly=<optimized out>) at ../../dix/devices.c:163
#11 0x0000555a7b046a6f in XIChangeDeviceProperty (dev=0x555a7cb576c0, property=property@entry=137, type=<optimized out>, format=<optimized out>, mode=<optimized out>, len=<optimized out>, value=0x555a7c94f034, sendevent=1) at ../../Xi/xiproperty.c:770
handler = 0x555a7cb57c90
checkonly = 0 '\000'
new_data = <optimized out>
old_data = <optimized out>
prop = 0x555a7cb57c00
size_in_bytes = <optimized out>
total_len = <optimized out>
prop_value = <optimized out>
new_value = {type = 19, format = 8, size = 1, data = 0x555a7dbd7ff0}
add = <optimized out>
rc = <optimized out>
#12 0x0000555a7b0478ab in ProcXIChangeProperty (client=0x555a7cc1b760, data=0x555a7c94f034, len=<optimized out>, mode=<optimized out>, format=<optimized out>, type=<optimized out>, property=137, dev=<optimized out>) at ../../Xi/xiproperty.c:353
rc = 0
rc = <optimized out>
dev = 0x555a7cb576c0
stuff = <optimized out>
#13 0x0000555a7b0478ab in ProcXIChangeProperty (client=0x555a7cc1b760) at ../../Xi/xiproperty.c:1147
rc = <optimized out>
dev = 0x555a7cb576c0
stuff = <optimized out>
#14 0x0000555a7af4dcaf in Dispatch () at ../../dix/dispatch.c:430
clientReady = 0x555a7cb55b20
result = <optimized out>
client = 0x555a7cc1b760
nready = 0
icheck = 0x555a7b34e290 <checkForInput>
start_tick = 4040325
#15 0x0000555a7af51cb3 in dix_main (argc=12, argv=0x7ffe9556a6a8, envp=<optimized out>) at ../../dix/main.c:300
i = <optimized out>
alwaysCheckForInput = {0, 1}
#16 0x00007f08c8f7b730 in __libc_start_main (main=0x555a7af3bf60 <main>, argc=12, argv=0x7ffe9556a6a8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe9556a698) at ../csu/libc-start.c:291
result = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -1289645146138429176, 93847098212208, 140731403904672, 0, 0, -4948437671512065784, -4990228742184060664}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0xc, 0x555a7af3bf60 <main>}, data = {prev = 0x0, cleanup = 0x0, canceltype = 12}}}
not_first_call = <optimized out>
#17 0x0000555a7af3bf99 in _start ()