OpenSolaris

Printable Version Enter a New Search
Bug ID 6633698
Synopsis sdtfontadm, sdtfontadd, sdtfontls crash
State 10-Fix Delivered:Verified (Fix available in build)
Category:Subcategory xserver:font
Keywords crash | s10u5beta | sdtfontadd | sdtfontadm | sdtfontls
Responsible Engineer Srirama Sharma
Reported Against s10 , s10u2_04 , s10u3_05 , s10u4_05 , s10u5_06
Duplicate Of
Introduced In
Commit to Fix s10u6_01
Fixed In s10u6_01
Release Fixed solaris_10u6(s10u6_01) , solaris_nevada(snv_90) (Bug ID:2162018)
Related Bugs 6262983 , 6404648 , 6668464
Submit Date 26-November-2007
Last Update Date 24-June-2008
Description
sdtfontadm, sdtfontadd, sdtfontls crash on Solaris 10 08/07 Sparc and X86 (and some on U3 sparc):

sdtfontadm: sol 10 U3 sparc, sol 10 U4 sparc, sol 10 U4 x86
sdtfontadd: sol 10 U3 sparc, sol 10 U4 sparc, sol 10 U4 x86
sdtfontls: sol 10 U4 sparc


SPARC:

root:v4v-t1000a:/# more /etc/release
                       Solaris 10 8/07 s10s_u4wos_12b SPARC
           Copyright 2007 Sun Microsystems, Inc.  All Rights Reserved.
                        Use is subject to license terms.
                            Assembled 16 August 2007
root:v4v-t1000a:/# cd ^C
root:v4v-t1000a:/#  /usr/dt/bin/sdtfontls /usr/openwin/lib/X11/fonts/TrueType
Segmentation Fault(coredump)
root:v4v-t1000a:/# ls /opt
SUNWits   SUNWjass  SUNWldm   SUNWmlib  SUNWrtvc
root:v4v-t1000a:/# pstack core
core 'core' of 2212:    /usr/dt/bin/sdtfontls /usr/openwin/lib/X11/fonts/TrueType
 ff214bf0 XrmPermStringToQuark (5eba8, ff3588e0, 4, 5ec00, 5, 4) + 14
 ff266274 XGetOMValues (5eba8, fb4, ede28, 297dc, ff354000, 0) + b4
 000251e8 __1cJFA_TT_FSMOmake_font_list6MrnHFA_LIST4nGFAFont___pnGFA_DIR_i_v_ (458e4, 45880, 52e38, 0, 458e4, ffbffb00) + 6c
 000297dc __1cLFA_FSM_LISTOmake_font_list6MrnHFA_LIST4nGFAFont___pnGFA_DIR_i_v_ (458a4, 45880, 52e38, 0, 5, 2517c) + 28
 00023f20 main     (2, 52e38, 50410, ffbffd96, 0, 45880) + 1e8
 0001b014 _start   (0, 0, 0, 0, 0, 0) + 108


v4v-t1000a# /net/129.157.128.13/es-tools/pkg.dev12/opt/SUNWspro/bin/dbx /usr/dt/bin/sdtfontls core
For information about new features see `help changes'
To remove this message, put `dbxenv suppress_startup_message 7.6' in your .dbxrcReading sdtfontls
core file header read successfully
Reading ld.so.1
Reading libX11.so.4
Reading libgen.so.1
Reading libsocket.so.1
Reading libnsl.so.1
Reading libc.so.1
Reading libiostream.so.1
Reading libc_psr.so.1
Reading libCrun.so.1
program terminated by signal SEGV (no mapping at the fault address)
0xff214bf0: XrmPermStringToQuark+0x0014:        ldsb     [%o5], %g1
(dbx) where
=>[1] XrmPermStringToQuark(0xc00, 0x45f0f4, 0x0, 0x26, 0xe8, 0xc00), at 0xff214bf0
  [2] _XlcGetValues(0x5eba8, 0xff3588e0, 0x4, 0x5ec00, 0x5, 0x4), at 0xff266588
  [3] XGetOMValues(0x5eba8, 0xfb4, 0xede28, 0x297dc, 0xff354000, 0x0), at 0xff266274
  [4] FA_TT_FSM::make_font_list(0x458e4, 0x45880, 0x52e38, 0x0, 0x458e4, 0xffbffb00), at 0x251e8
  [5] FA_FSM_LIST::make_font_list(0x458a4, 0x45880, 0x52e38, 0x0, 0x5, 0x2517c), at 0x297dc
  [6] main(0x2, 0x52e38, 0x50410, 0xffbffd96, 0x0, 0x45880), at 0x23f20



v4v-t1000a# /usr/dt/bin/sdtfontadm
Warning: Cannot convert string "-dt-interface user-medium-r-normal-m*-*-*-*-*-*-*-*-*" to type FontStruct
Warning: Missing charsets in String to FontSet conversion
Warning: Cannot convert string "-dt-interface system-medium-r-normal-m*-*-*-*-*-*-*-*-*" to type FontSet
Warning: Missing charsets in String to FontSet conversion
Warning: Cannot convert string "-dt-interface user-medium-r-normal-m*-*-*-*-*-*-*-*-*" to type FontSet
Segmentation Fault (core dumped)

v4v-t1000a# /net/129.157.128.13/es-tools/pkg.dev12/opt/SUNWspro/bin/dbx /usr/dt/bin/sdtfontadm core
For information about new features see `help changes'
To remove this message, put `dbxenv suppress_startup_message 7.6' in your .dbxrcReading sdtfontadm
core file header read successfully
Reading ld.so.1
Reading libDtSvc.so.1
Reading libDtWidget.so.2
Reading libXm.so.4
Reading libXt.so.4
Reading libX11.so.4
Reading libdps.so.5
Reading libdpstk.so.5
Reading libowconfig.so.0
Reading libvolmgt.so.1
Reading libdl.so.1
Reading libthread.so.1
Reading libgen.so.1
Reading libc.so.1
Reading libsocket.so.1
Reading libnsl.so.1
Reading libtt.so.2
Reading libsecdb.so.1
Reading libCrun.so.1
Reading libXext.so.0
Reading libadm.so.1
Reading libcmd.so.1
Reading libiostream.so.1
Reading libc_psr.so.1
Reading nss_files.so.1
Reading nss_dns.so.1
Reading libresolv.so.2
Reading liblayout.so.1
t@1 (l@1) program terminated by signal SEGV (no mapping at the fault address)
0xfee14bf0: XrmPermStringToQuark+0x0014:        ldsb     [%o5], %g1
(dbx) where
current thread: t@1
=>[1] XrmPermStringToQuark(0xc00, 0x129f94c, 0x0, 0x491, 0x28, 0xc00), at 0xfee14bf0
  [2] _XlcGetValues(0xe9f238, 0xfef588e0, 0x4, 0xe98520, 0x5, 0x4), at 0xfee66588
  [3] XGetOMValues(0xe9f238, 0xfb4, 0xede28, 0x298d8, 0xfef54000, 0x0), at 0xfee66274
  [4] FA_TT_FSM::make_font_list(0x8b090, 0xffbffa68, 0xe98de8, 0x0, 0x8b090, 0xffbff938), at 0x3d4c8
  [5] FA_FSM_LIST::make_font_list(0x8afc0, 0xffbffa68, 0xe98de8, 0x0, 0xe98fa8, 0x3d45c), at 0x298d8
  [6] FADirDriver::get_hrn_list(0xe9d0d0, 0x8b318, 0xe9c830, 0x6fe0b, 0xffbffa38, 0xe93630), at 0x39280
  [7] font_lookup_work_proc(0xe9d0d0, 0x8b000, 0x39028, 0x8a608, 0x8b000, 0x8b000), at 0x569a0
  [8] CallWorkProc(0xa63b0, 0xe9d028, 0x32c38, 0xfefabc0c, 0xfefe4000, 0xa63b0), at 0xfefb13fc
  [9] XtAppNextEvent(0xa63b0, 0xffbffc08, 0x1, 0x0, 0xa19c0, 0x2), at 0xfefabe14
  [10] XtAppMainLoop(0xa63b0, 0x0, 0xffbffc08, 0x8b0f8, 0x97400, 0x8b000), at 0xfefabc0c
  [11] main(0x96c00, 0x97400, 0x0, 0x11ac50, 0x9c000, 0x1), at 0x4ddd0
(dbx) quit
dbx: internal warning: td_ta_clear_event() failed -- debugger service failed
dbx: internal warning: td_ta_sync_tracking_enable(0) failed -- debugger service failed
v4v-t1000a#


X86:

avalon# /usr/dt/bin/sdtfontadm
Segmentation Fault (core dumped)

/opt/SUNWspro/bin/dbx /usr/dt/bin/sdtfontadm core
For information about new features see `help changes'
To remove this message, put `dbxenv suppress_startup_message 7.6' in your .dbxrcReading sdtfontadm
core file header read successfully
Reading ld.so.1
Reading libDtSvc.so.1
Reading libDtWidget.so.2
Reading libXm.so.4
Reading libXt.so.4
Reading libX11.so.4
Reading libdps.so.5
Reading libdpstk.so.5
Reading libowconfig.so.0
Reading libvolmgt.so.1
Reading libdl.so.1
Reading libthread.so.1
Reading libgen.so.1
Reading libc.so.1
Reading libsocket.so.1
Reading libnsl.so.1
Reading libtt.so.2
Reading libsecdb.so.1
Reading libCrun.so.1
Reading libXext.so.0
Reading libadm.so.1
Reading libcmd.so.1
Reading libiostream.so.1
Reading en_US.ISO8859-1.so.3
Reading xlibi18n.so.2
Reading xomEuro.so.2
Reading liblayout.so.1
Reading xiiimp.so.2
Reading libSM.so.6
Reading libICE.so.6
Reading libiiimcf.so.3.0.0
Reading libiiimp.so.1.0.0
t@2 (l@2) terminated by signal SEGV (no mapping at the fault address)
0x08073def: set_font_file_list+0x0037:  popl     %ebp
dbx: core file read error: address 0xfe006469 not in data space
dbx: attempt to read frame failed -- cannot derive frame pointer
dbx: warning: No frame with source found
(dbx) where
current thread: t@2
dbx: core file read error: address 0xfe006469 not in data space
dbx: attempt to read frame failed -- cannot derive frame pointer
=>[1] FAFont::set_font_file_list(), at 0x8073def
  [2] 0x0(), at 0x0
(dbx) quit
dbx: internal warning: td_ta_clear_event() failed -- debugger service failed
dbx: internal warning: td_ta_sync_tracking_enable(0) failed -- debugger service failed
avalon# /opt/SUNWspro/bin/dbx /usr/dt/bin/sdtfontadm
For information about new features see `help changes'
To remove this message, put `dbxenv suppress_startup_message 7.6' in your .dbxrcReading sdtfontadm
Reading ld.so.1
Reading libDtSvc.so.1
Reading libDtWidget.so.2
Reading libXm.so.4
Reading libXt.so.4
Reading libX11.so.4
Reading libdps.so.5
Reading libdpstk.so.5
Reading libowconfig.so.0
Reading libvolmgt.so.1
Reading libdl.so.1
Reading libthread.so.1
Reading libgen.so.1
Reading libc.so.1
Reading libsocket.so.1
Reading libnsl.so.1
Reading libtt.so.2
Reading libsecdb.so.1
Reading libCrun.so.1
Reading libXext.so.0
Reading libadm.so.1
Reading libcmd.so.1
Reading libiostream.so.1
(dbx) run
Running: sdtfontadm
(process id 14961)
Reading en_US.ISO8859-1.so.3
Reading xlibi18n.so.2
Reading xomEuro.so.2
Reading liblayout.so.1
Reading xiiimp.so.2
Reading libSM.so.6
Reading libICE.so.6
Reading libiiimcf.so.3.0.0
Reading libiiimp.so.1.0.0
t@2 (l@2) signal SEGV (no mapping at the fault address) in FAFont::set_font_file_list at 0x8073def
0x08073def: set_font_file_list+0x0037:  popl     %ebp
dbx: read of 4 bytes at address fe006469 failed
dbx: attempt to read frame failed -- cannot derive frame pointer
dbx: warning: No frame with source found
(dbx) where
current thread: t@2
dbx: read of 4 bytes at address fe006469 failed
dbx: attempt to read frame failed -- cannot derive frame pointer
=>[1] FAFont::set_font_file_list(), at 0x8073def
  [2] 0x0(), at 0x0
(dbx) quit

avalon# /usr/dt/bin/sdtfontadd /tmp/fonts /.fonts
Segmentation Fault (core dumped)
avalon# /opt/SUNWspro/bin/dbx /usr/dt/bin/sdtfontadd /tmp/fonts /.fonts
dbx: warning: extraneous argument "/.fonts"
dbx: /tmp/fonts has unsupported architecture or file format
For information about new features see `help changes'
To remove this message, put `dbxenv suppress_startup_message 7.6' in your .dbxrcReading sdtfontadd
Reading ld.so.1
Reading libowconfig.so.0
Reading libX11.so.4
Reading libgen.so.1
Reading libsocket.so.1
Reading libnsl.so.1
Reading libc.so.1
Reading libiostream.so.1
(dbx) run /tmp/fonts /.fonts
Running: sdtfontadd /tmp/fonts /.fonts
(process id 14976)
Reading libdl.so.1
Reading xlibi18n.so.2
Reading xomEuro.so.2
signal SEGV (access to address exceeded protections) in (unknown) at 0x8006469
0x08006469:     addb     %al,(%eax)
dbx: read of 4 bytes at address 632e6678 failed
dbx: attempt to read frame failed -- cannot get return address
dbx: warning: No frame with source found
(dbx) where
dbx: read of 4 bytes at address 632e6678 failed
dbx: attempt to read frame failed -- cannot get return address
  [1] 0x8006469(0x8a06528, 0x80a5afc, 0x804725c, 0x80698ae, 0x8a43ed0, 0x8a266a8), at 0x8006469
  [2] 0x0(), at 0x0
(dbx) quit


Customer needs a fix for that.
Fonts are attached.
Work Around
N/A
Comments
N/A