i loaded up Xsun under libumem with debugging enabled.
i noticed that whenever i tried to pkill the Xsun process it
would core dump. seems like it's trying to free an invalid
pointer during shutdown. a core file is attached.
--
> ::status
debugging PID 9928 (32-bit)
file: /usr/openwin/bin/Xsun.bin
threading model: native threads
status: stopped on SIGABRT (Abort)
event: stop on SIGABRT
> $C0
ffbffaa0 libc.so.1`_lwp_kill+8()
ffbffb00 libumem.so.1`umem_do_abort+0x1c()
ffbffb60 libumem.so.1`umem_err_recoverable+0x74()
ffbffbc0 libumem.so.1`process_free+0x104()
ffbffc20 FreeColormap+0x210()
ffbffc80 FreeClientResources+0xb4()
ffbffce0 FreeAllResources+0x4c()
ffbffd40 main+0x90c()
ffbffdb0 _start+0x108()
> umem_error_buffer/s
libumem.so.1`umem_error_buffer:
libumem.so.1`umem_error_buffer: free(561d68): double-free or invalid buffer
stack trace:
libumem.so.1'?? (0xff36b2ec)
Xsun.bin'FreeColormap+0x210
Xsun.bin'FreeClientResources+0xb4
Xsun.bin'FreeAllResources+0x4c
Xsun.bin'main+0x90c
Xsun.bin'_start+0x108
--