[Xquartz-dev] X11-users Digest, Vol 6, Issue 2

[Kyle Lucke]

It's TightVNC 1.2.6.

Here's the relevant section of selection.c:

291: static Boolean
292: ConvertSelection(Widget w, Atom* selection, Atom* target, Atom*  
type,
293:               XtPointer* value, unsigned long* length, int *  
format)
294: {
295:
296:   if (*target == XA_STRING) {
297:     *type = XA_STRING;
298:     *length = strlen(serverCutText);
299:    *value = (XtPointer)XtMalloc(*length);
300:    memcpy((char*)*value, serverCutText, *length);
301:     *format = 8;
302:     return True;
303:   }

So it looks like it's dying doing a strlen of serverCutText?   Hm...



On Jan 6, 2009, at 12:56 PM, Jeremy Huddleston <jeremyhu at apple.com>  
wrote:
>
> Which version of vnc is this?  I can take a look at line 298 of
> selection.c to see what it's doing.  My guess, however, is that it's a
> bug in vnc that is triggered by the new clipboard support.  It looks
> like it's crashing while reading the X11 clipboard or primary  
> selection.
>
> On Jan 6, 2009, at 07:07, Kyle Lucke wrote:
>
>>
>> On Jan 6, 2009, at 9:00 AM, Jeremy Huddleston <jeremyhu at apple.com>
>> wrote:
>>
>>> On Jan 5, 2009, at 13:30, Kyle Lucke wrote:
>>>
>>>> I upgraded to 2.3.2.1 on my dual-display Macbook pro at 10.5.6
>>>> over the weekend.  I've returned to work after the break, and have
>>>> had 3 X11 vncviewer app crashes today with a "bus error."  This
>>>> had never happened with 2.3.1.
>>>>
>>>> Ideas for further debug?
>>>
>>> Could you please send me the stack trace of the crash
>>
>> Here it is:
>>
>> Process:         vncviewer [793]
>> Path:            /usr/bin/vncviewer
>> Identifier:      vncviewer
>> Version:         ??? (???)
>> Code Type:       X86 (Native)
>> Parent Process:  bash [210]
>>
>> Date/Time:       2009-01-05 10:43:19.749 -0600
>> OS Version:      Mac OS X 10.5.6 (9G55)
>> Report Version:  6
>>
>> Exception Type:  EXC_BAD_ACCESS (SIGBUS)
>> Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000000
>> Crashed Thread:  0
>>
>> Thread 0 Crashed:
>> 0   vncviewer                     	0x0000e9ce ConvertSelection + 47
>> (selection.c:298)
>> 1   libXt.6.dylib                 	0x00141100 GetConversion + 441
>> 2   libXt.6.dylib                 	0x001414c2 HandleSelectionEvents
>> + 534
>> 3   libXt.6.dylib                 	0x00131213
>> XtDispatchEventToWidget + 1430
>> 4   libXt.6.dylib                 	0x00131476 _XtDefaultDispatcher +
>> 421
>> 5   libXt.6.dylib                 	0x001303b0 XtDispatchEvent + 409
>> 6   libXt.6.dylib                 	0x0013b1fe XtAppProcessEvent + 904
>> 7   vncviewer                     	0x0000edbb ProcessXtEvents + 97
>> (sockets.c:72)
>> 8   vncviewer                     	0x0000ee9f ReadFromRFBServer +
>> 211 (sockets.c:102)
>> 9   vncviewer                     	0x0000c2ee HandleRFBServerMessage
>> + 36 (rfbproto.c:630)
>> 10  vncviewer                     	0x0001015e main + 687
>> (vncviewer.c:138)
>> 11  vncviewer                     	0x00001f6e _start + 216
>> 12  vncviewer                     	0x00001e95 start + 41
>>
>> Thread 0 crashed with X86 Thread State (32-bit):
>> eax: 0x00000000  ebx: 0x0000e9ad  ecx: 0xffffffff  edx: 0x00800001
>> edi: 0x00000000  esi: 0x00024604  ebp: 0xbffff1f8  esp: 0xbffff1c0
>>  ss: 0x0000001f  efl: 0x00010246  eip: 0x0000e9ce   cs: 0x00000017
>>  ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
>> cr2: 0x00000000
>>
>> Binary Images:
>>   0x1000 -    0x23fef +vncviewer ??? (???) /usr/bin/vncviewer
>>  0xb5000 -    0xf3fff +libXaw.7.dylib ??? (???)
>> <266e6b5cd2e0b278396e72394c2ddfe6> /usr/X11R6/lib/libXaw.7.dylib
>> 0x10d000 -   0x11bfe7 +libXmu.6.dylib ??? (???)
>> <792ed72b0f9b77da27dcb2b1603e15ba> /usr/X11R6/lib/libXmu.6.dylib
>> 0x123000 -   0x15bff8 +libXt.6.dylib ??? (???)
>> <ebe4afb62044a73d6478ce4e287fa033> /usr/X11R6/lib/libXt.6.dylib
>> 0x16e000 -   0x172ffc +libSM.6.dylib ??? (???)
>> <641c0d32730dd6038452d624a0541b77> /usr/X11R6/lib/libSM.6.dylib
>> 0x177000 -   0x185fff +libICE.6.dylib ??? (???)
>> <f920e44cca0647ce7e5fa8079a3336b2> /usr/X11R6/lib/libICE.6.dylib
>> 0x18d000 -   0x197fe3 +libXpm.4.dylib ??? (???)
>> <231cbc796197209086e8606850892311> /usr/X11R6/lib/libXpm.4.dylib
>> 0x19c000 -   0x1a4ffe +libXext.6.dylib ??? (???)
>> <92f1505af0a4fc57094668a5b1524acc> /usr/X11R6/lib/libXext.6.dylib
>> 0x1aa000 -   0x26ffff +libX11.6.dylib ??? (???)
>> <0968e054e405d6539ce3d7fb6857999e> /usr/X11R6/lib/libX11.6.dylib
>> 0x28f000 -   0x291fef +libXdmcp.6.dylib ??? (???)
>> <8c515dab0a08f9bfbdad8d197c507599> /usr/X11/lib/libXdmcp.6.dylib
>> 0x295000 -   0x295ffe +libXau.6.dylib ??? (???)
>> <ca0ad4845daf9d6c1d965645fa33b4b6> /usr/X11/lib/libXau.6.dylib
>> 0x8fe00000 - 0x8fe2db43  dyld 97.1 (???)
>> <100d362e03410f181a34e04e94189ae5> /usr/lib/dyld
>> 0x90a1c000 - 0x90a20fff  libmathCommon.A.dylib ??? (???) /usr/lib/
>> system/libmathCommon.A.dylib
>> 0x91ca8000 - 0x91e0fff3  libSystem.B.dylib ??? (???)
>> <d68880dfb1f8becdbdac6928db1510fb> /usr/lib/libSystem.B.dylib
>> 0x93223000 - 0x9322afe9  libgcc_s.1.dylib ??? (???)
>> <f53c808e87d1184c0f9df63aef53ce0b> /usr/lib/libgcc_s.1.dylib
>> 0x970f0000 - 0x970feffd  libz.1.dylib ??? (???)
>> <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib
>> 0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/
>> libSystem.B.dylib
>>
>> _______________________________________________
>> Xquartz-dev mailing list
>> Xquartz-dev at lists.macosforge.org
>> http://lists.macosforge.org/mailman/listinfo.cgi/xquartz-dev
>
>
>
> ------------------------------
>
> _______________________________________________
> X11-users mailing list
> X11-users at lists.apple.com
> http://lists.apple.com/mailman/listinfo/x11-users
>
> End of X11-users Digest, Vol 6, Issue 2
> ***************************************