Still crash in xserv 4.3.0-42

[Øyvind Harboe <oyvind dot harboe at zylin dot com>]

I earlier claimed that the crash I have been struggling with is gone
under 4.3.0-42, unfortunally not so.

With a lot of help from this mailing list I've finally compiled a debug
version of XWin and I've caught the GPF in the debugger.

Without Insight's graphical GUI, I'm a bit handicapped, but below is a dump
anyway.

Øyvind


startxwin.bat - Starting on Windows NT/2000/XP/2003
GNU gdb 2003-09-20-cvs (cygwin-special)
Copyright 2003 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i686-pc-cygwin"...
(gdb) run
Starting program: /usr/X11R6/bin/XWin.exe -multiwindow -clipboard -multiplemonit
ors
---Type <return> to continue, or q <return> to quit---

Program received signal SIGSEGV, Segmentation fault.
[Switching to thread 1940.0x83c]
0x00492470 in fb24_32GetSpans (pDrawable=0x103fd098, wMax=48, ppt=0x1efed28,
    pwidth=0x1efed34, nspans=1, pchardstStart=0x1041e480 "\030ü\fa\001")
    at fb24_32.c:284
284         fbGetDrawable (pDrawable, srcBits, srcStride, srcBpp, srcXoff, srcYo
ff);
(gdb) thread apply all bt

Thread 13 (thread 1940.0x980):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c534 in ntdll!ZwWaitForSingleObject () from ntdll.dll
#2  0x77e7a62d in WaitForSingleObjectEx ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#3  0x0000049c in ?? ()

Thread 12 (thread 1940.0x540):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c534 in ntdll!ZwWaitForSingleObject () from ntdll.dll
#2  0x77e7a62d in WaitForSingleObjectEx ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#3  0x00000528 in ?? ()

Thread 11 (thread 1940.0x308):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c534 in ntdll!ZwWaitForSingleObject () from ntdll.dll
#2  0x71a51ea3 in DSA_DestroyCallback ()
   from /cygdrive/c/WINDOWS/System32/MSWSOCK.DLL
#3  0x0405fdfc in ?? ()
#4  0x0405fe90 in ?? ()
#5  0x1040695c in ?? ()
#6  0x0405fe80 in ?? ()
---Type <return> to continue, or q <return> to quit---
#7  0xd59fab24 in ?? ()
#8  0x77f5b864 in ntdll!ZwDeviceIoControlFile () from ntdll.dll
#9  0xffb3b4c0 in ?? ()
#10 0xffffffff in ?? ()
#11 0x00252890 in ?? ()

Thread 10 (thread 1940.0x8a4):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c524 in ntdll!ZwWaitForMultipleObjects () from ntdll.dll
#2  0x77e75ee0 in WaitForMultipleObjectsEx ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#3  0x00000003 in ?? ()
#4  0x03e5e978 in ?? ()
#5  0x00000001 in ?? ()

Thread 9 (thread 1940.0x9bc):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c534 in ntdll!ZwWaitForSingleObject () from ntdll.dll
#2  0x71a51f97 in DSA_DestroyCallback ()
   from /cygdrive/c/WINDOWS/System32/MSWSOCK.DLL
#3  0x03c5fdfc in ?? ()
#4  0x03c5fe90 in ?? ()
#5  0x1040392c in ?? ()
#6  0x03c5fe80 in ?? ()
---Type <return> to continue, or q <return> to quit---
#7  0x5124a02a in ?? ()
#8  0x01c3e4e8 in ?? ()
#9  0xffffffff in ?? ()
#10 0x7fffffff in ?? ()
#11 0x0024f9f8 in ?? ()

Thread 8 (thread 1940.0xdc4):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c534 in ntdll!ZwWaitForSingleObject () from ntdll.dll
#2  0x77e7a62d in WaitForSingleObjectEx ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#3  0x000005b4 in ?? ()

Thread 6 (thread 1940.0xbf4):
#0  0x7ffe0304 in ?? ()
#1  0x77d43a09 in SetBitmapDimensionEx ()
   from /cygdrive/c/WINDOWS/system32/user32.dll
#2  0x77d443b5 in USER32!GetMessageA ()
   from /cygdrive/c/WINDOWS/system32/user32.dll
#3  0x61091f03 in wait4 () from /usr/bin/cygwin1.dll
#4  0x61002dae in forkpty () from /usr/bin/cygwin1.dll
#5  0x77e7d33b in RegisterWaitForInputIdle ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#6  0x610cfb50 in cygwin1!__ctype_ptr ()
---Type <return> to continue, or q <return> to quit---
#7  0x01a24200 in ?? ()
#8  0x610cfb50 in cygwin1!__ctype_ptr ()
#9  0x7ffd9000 in ?? ()
#10 0x0365ffc0 in ?? ()
#11 0x00000007 in ?? ()
#12 0xffffffff in ?? ()
#13 0x77e94809 in SetThreadExecutionState ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL

Thread 5 (thread 1940.0xb34):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c524 in ntdll!ZwWaitForMultipleObjects () from ntdll.dll
#2  0x77e75ee0 in WaitForMultipleObjectsEx ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#3  0x00000001 in ?? ()
#4  0x0345fe88 in ?? ()
#5  0x00000001 in ?? ()

Thread 4 (thread 1940.0x834):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c524 in ntdll!ZwWaitForMultipleObjects () from ntdll.dll
#2  0x77e75ee0 in WaitForMultipleObjectsEx ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#3  0x00000002 in ?? ()
---Type <return> to continue, or q <return> to quit---
#4  0x0325e058 in ?? ()
#5  0x00000001 in ?? ()

Thread 3 (thread 1940.0x83c):
#0  0x00492470 in fb24_32GetSpans (pDrawable=0x103fd098, wMax=48,
    ppt=0x1efed28, pwidth=0x1efed34, nspans=1,
    pchardstStart=0x1041e480 "\030ü\fa\001") at fb24_32.c:284
#1  0x00494d93 in fbGetSpans (pDrawable=0x103fd098, wMax=48, ppt=0x1efed28,
    pwidth=0x1efed34, nspans=1, pchardstStart=0x1041e480 "\030ü\fa\001")
    at fbgetsp.c:52
#2  0x004b5855 in miBSGetSpans (pDrawable=0x103fd098, wMax=48, ppt=0x1efed28,
    pwidth=<incomplete type>, nspans=1, pdstStart=0x1041e480 "\030ü\fa\001")
    at mibstore.c:715
#3  0x004d5e94 in miSpriteGetSpans (pDrawable=0x103fd098, wMax=48,
    ppt=0x1efed28, pwidth=<incomplete type>, nspans=1,
    pdstStart=0x1041e480 "\030ü\fa\001") at misprite.c:541
#4  0x004b22d2 in miGetImage (pDraw=0x103fd098, sx=0, sy=0, w=48, h=48,
    format=2, planeMask=4294967295, pDst=0x1041e480 "\030ü\fa\001")
    at mibitblt.c:697
#5  0x004621a3 in winScaleXBitmapToWindows (iconSize=32, effBPP=32,
    pixmap=0x103fd098, image=0x10414a70 "\204\205\022a\204\205\022a\\\004")
    at winmultiwindowicons.c:90
#6  0x00462c8f in winXIconToHICON (pWin=0x10191678)
    at winmultiwindowicons.c:305
---Type <return> to continue, or q <return> to quit---
#7  0x00462de5 in winUpdateIcon (id=8389519) at winmultiwindowicons.c:360
#8  0x00458305 in UpdateName (pWMInfo=0x100ff8e0, iWindow=8389519)
    at winmultiwindowwm.c:503
#9  0x0045860e in winMultiWindowWMProc (pArg=0x100f8e38)
    at winmultiwindowwm.c:651
#10 0x61089687 in cygwin1!__getreent () from /usr/bin/cygwin1.dll
#11 0x77e7d33b in RegisterWaitForInputIdle ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#12 0x100ff9c8 in ?? ()
#13 0x0022f9e0 in ?? ()
#14 0x00000001 in ?? ()
#15 0x100ff9c8 in ?? ()
#16 0x0000001f in ?? ()
#17 0x7ffdc000 in ?? ()
#18 0x01efffc0 in ?? ()
#19 0x00000007 in ?? ()
#20 0xffffffff in ?? ()
#21 0x77e94809 in SetThreadExecutionState ()
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL

Thread 2 (thread 1940.0xd18):
#0  0x7ffe0304 in ?? ()
#1  0x77f5c524 in ntdll!ZwWaitForMultipleObjects () from ntdll.dll
#2  0x77e75ee0 in WaitForMultipleObjectsEx ()
---Type <return> to continue, or q <return> to quit---
   from /cygdrive/c/WINDOWS/system32/KERNEL32.DLL
#3  0x00000003 in ?? ()
#4  0x0195fe58 in ?? ()
#5  0x00000001 in ?? ()

Thread 1 (thread 1940.0xea8):
#0  0x61094158 in strtosigno () from /usr/bin/cygwin1.dll
#1  0x6103ee88 in cygwin1!calloc () from /usr/bin/cygwin1.dll
#2  0x61001a39 in forkpty () from /usr/bin/cygwin1.dll
#3  0x6106ce9c in select () from /usr/bin/cygwin1.dll
#4  0x0022f5b0 in ?? ()
0x00492470      284         fbGetDrawable (pDrawable, srcBits, srcStride, srcBpp
, srcXoff, srcYoff);
(gdb)
(gdb)
(gdb) help
List of classes of commands:

aliases -- Aliases of other commands
breakpoints -- Making program stop at certain points
data -- Examining data
files -- Specifying and examining files
internals -- Maintenance commands
obscure -- Obscure features
running -- Running the program
stack -- Examining the stack
status -- Status inquiries
support -- Support facilities
tracepoints -- Tracing of program execution without stopping the program
user-defined -- User-defined commands

Type "help" followed by a class name for a list of commands in that class.
Type "help" followed by command name for full documentation.
Command name abbreviations are allowed if unambiguous.
(gdb) help source
Read commands from a file named FILE.
Note that the file ".gdbinit" is read automatically in this way
when gdb is started.
(gdb) list
279         FbStride        srcStride;
280         int             srcBpp;
281         int             srcXoff, srcYoff;
282         CARD8           *dst;
283
284         fbGetDrawable (pDrawable, srcBits, srcStride, srcBpp, srcXoff, srcYo
ff);
285         src = (CARD8 *) srcBits;
286         srcStride *= sizeof (FbBits);
287
288         while (nspans--)
(gdb)