Some analysis of starting a Gnome session under valgrind

Daniel Veillard veillard at redhat.com
Tue Sep 21 18:05:08 UTC 2004


  I wanted to do this for a long time but only now I had the time and
a destop beefy enough to try this. Basically I replaced /usr/bin/gnome-session
by a shell script :
#!/bin/sh
/usr/bin/valgrind --trace-children=yes --log-file=/tmp/valgrind /usr/bin/gnome-session.orig $*

  Then logged on in gdm , and checked what happened from an ssh connection
top the box.
  The good news:
    - logging went through, but it took a few minutes
    - everything looked functional though extremely slow
    - there wasn't many logs reported by valgrind
  The bad news:
    - I had to stop the session shortly after the login fully complete
      the VM was full (1G of Ram + 500M of swap)
    - reports from the logs are a pain to try to analyze.
    - one python (rhn applet I suspect) generated a huge log, python-2.3
      doesn't seems valgrindable.

I them eliminated all the empty /tmp/valgrind.pid* files, I was left with
reports from oly 25 processes.
First a word of warning, I used the normal optimized code as shipped as
part of Fedora devel (fully up-to-date box for todays version), some
of the optimizations sometimes defeat valgrind so there may be false positive.

I have tried to sort all the reports to gather together what was frequently
reported because all apps went through the same code path, for example
there is an error reported when opening gdk display which is reported like
30 times by various apps. So what I saw most:

- gdk_display_open leading to write(buf) contains uninitialised or
  unaddressable byte in __write_nocancel though _X11TransWrite
  hard to tell without a debugging lib if the error is a false positive
  a lack of initialization gdk_display_open() or within X. Strange thing
  is that valgrind report the block as being alloc'ed with calloc()
  offending address is 128 bytes inside a block of size 16384

- giop_send_buffer_write in libORBit-2 leading to 
  Syscall param writev(vector[...]) contains uninitialised or unaddressable byte(s)
  that time the uninitialized data is 10 bytes inside a block of size 2048
  allocated within orbit itself.

- pango read_line raises a strange pthread mutex error:
  pthread_mutex_lock/trylock: mutex has invalid owner
  in pthread_mutex_lock called by pango_read_line from pango_find_map

  Apparently the GStreamer code detects it's running under valgrind and 
manage to shut it up :-)


  Except those 3 repeated all other the place and consisting of the bulk of
the reports, I have seen errors in:

    - /usr/bin/gnome-session: invalid file descriptors, 
       pango_attr_list_get_iterator uninitialized value.
    - /usr/bin/pam-panel-icon: 2 invalid file descriptor, seems the same
      as for gnome-session with value 828 too.
    - /usr/lib/libwnck: uninitialized values in _wnck_read_icons
    - /usr/libexec/gconfd-2: repeated g_strdup of initialized values
      from gconf_set_daemon_ior, gconf_get_lock, gconf_object_to_string,
      gconf_quote_string, and an fprintf
    - /usr/libexec/bonobo-activation-server: uninitialized values in
      CORBA_ORB_object_to_stringr,fprintf,giop_send_buffer_write
    - gam_server : I got one too :-)
    - metacity: uninitialized values in gdk_window_new, gdk_window_resize,
      gdk_region_rectangle, gdk_region_subtract, a couple of strange
      g_int_equal bugs, meta_display_begin_grab_op, meta_display_end_grab_op
    - gnome-terminal: terminal_profile_update and _vte_pty_open

  The best way to double check is to do  the same trick as I did for
gnome-session, move the original somewhere else, replace it by a script
calling valgrind but without recursion to child on a local copy of the
program in debugging mode.

  Enclosed are the data as sorted and recouped for more informations.

    happy valgrinding,

Daniel

-- 
Daniel Veillard      | Red Hat Desktop team http://redhat.com/
veillard at redhat.com  | libxml GNOME XML XSLT toolkit  http://xmlsoft.org/
http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/
-------------- next part --------------
XXXXXXXXXXXXXXXXXXXXXXXXXXXX
==10137== Syscall param write(buf) contains uninitialised or unaddressable byte(s)
==10137==    at 0x39FC5E: __write_nocancel (in /lib/tls/i486/libc-2.3.3.so)
==10137==    by 0x1BE6002F: (within /usr/X11R6/lib/libX11.so.6.2)
==10137==    by 0x1BE602F2: _X11TransWrite (in /usr/X11R6/lib/libX11.so.6.2)
==10137==    by 0x1BE443F2: (within /usr/X11R6/lib/libX11.so.6.2)
==10137==  Address 0x1C0BD870 is 128 bytes inside a block of size 16384 alloc'd
==10137==    at 0x1B90140D: calloc (vg_replace_malloc.c:176)
==10137==    by 0x1BE34825: XOpenDisplay (in /usr/X11R6/lib/libX11.so.6.2)
==10137==    by 0x1BD0C693: gdk_display_open (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==10137==    by 0x1BCED3DC: gdk_display_open_default_libgtk_only (in /usr/lib/libgdk-x11-2.0.so.0.400.9)

  also happen from data allocated in calloc/IceOpenConnection/SmcOpenConnection/gnome_client_connect, sometimes 
     Address 0x1C0B89F5 is 525 bytes inside a block of size 16384 alloc'd
  also calloc/IceOpenConnection/SmcOpenConnection/meta_session_init




XXXXXXXXXXXXXXXXXXXXX
==10137== Syscall param writev(vector[...]) contains uninitialised or unaddressable byte(s)
==10137==    at 0x3A65AB: writev (in /lib/tls/i486/libc-2.3.3.so)
==10137==    by 0xDA6196: (within /usr/lib/libORBit-2.so.0.0.0)
==10137==    by 0xDA650B: link_connection_writev (in /usr/lib/libORBit-2.so.0.0.0)
==10137==    by 0xD87FE0: giop_send_buffer_write (in /usr/lib/libORBit-2.so.0.0.0)
==10137==  Address 0x1C0F4A62 is 10 bytes inside a block of size 2048 alloc'd
==10137==    at 0x1B900A90: malloc (vg_replace_malloc.c:131)
==10137==    by 0x549922: g_malloc (in /usr/lib/libglib-2.0.so.0.400.6)
==10137==    by 0xD87E3E: (within /usr/lib/libORBit-2.so.0.0.0)
==10137==    by 0xD87F77: (within /usr/lib/libORBit-2.so.0.0.0)
==10137==




XXXXXXXXXXXXX
==10137== pthread_mutex_lock/trylock: mutex has invalid owner
==10137==    at 0x1B9D1AF7: pthread_mutex_lock (vg_libpthread.c:1324)
==10137==    by 0x1B9D6FD1: _IO_flockfile (vg_libpthread.c:3395)
==10137==    by 0x1BD90533: pango_read_line (in /usr/lib/libpango-1.0.so.0.600.0)
==10137==    by 0x1BD7F8FF: pango_find_map (in /usr/lib/libpango-1.0.so.0.600.0)


X
==10137== Conditional jump or move depends on uninitialised value(s)
==10137==    at 0x212285: _wnck_read_icons (in /usr/lib/libwnck-1.so.4.9.0)
==10137==    by 0x1FC2DD: (within /usr/lib/libwnck-1.so.4.9.0)
==10137==    by 0x1FC9E5: wnck_application_get_icon (in /usr/lib/libwnck-1.so.4.9.0)
==10137==    by 0x1FD5C5: _wnck_class_group_add_window (in /usr/lib/libwnck-1.so.4.9.0)


XX
**10221** GStreamer has detected that it is running inside valgrind.
**10221** It might now take different code paths to ease debugging. 
**10221** Of course, this may also lead to different bugs.  

  got it with process 8101 too


8077 seems to be /usr/bin/gnome-session

==8077== Warning: invalid file descriptor -1 in syscall close()
==8077== Warning: invalid file descriptor -1 in syscall close()

==8077== Conditional jump or move depends on uninitialised value(s)
==8077==    at 0xAD7093: __libc_res_nquery (in /lib/libresolv-2.3.3.so)
==8077==    by 0x1C380C1B: _nss_dns_getcanonname_r (dns-canon.c:61)
==8077==    by 0x398525: gaih_inet (in /lib/tls/i486/libc-2.3.3.so)
==8077==    by 0x398AFF: getaddrinfo (in /lib/tls/i486/libc-2.3.3.so)

XX
==8077== Conditional jump or move depends on uninitialised value(s)
==8077==    at 0x1BE563E5: pango_attr_iterator_next (in /usr/lib/libpango-1.0.so.0.600.0)
==8077==    by 0x1BE564FA: pango_attr_list_get_iterator (in /usr/lib/libpango-1.0.so.0.600.0)
==8077==    by 0x1BE5F3A8: (within /usr/lib/libpango-1.0.so.0.600.0)
==8077==    by 0x1BE602A6: (within /usr/lib/libpango-1.0.so.0.600.0)




8081 seems to be /usr/libexec/gconfd-2
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0xD8A818: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0x8050BC8: main (in /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0xD8A830: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0x8050BC8: main (in /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x558298: g_strdup (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x659D7AA: gconf_set_daemon_ior (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x8050BD2: main (in /usr/libexec/gconfd-2)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x558298: g_strdup (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x659D7AA: gconf_set_daemon_ior (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x8050BD2: main (in /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x65A20E1: gconf_get_lock_or_current_holder (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x65A2434: gconf_get_lock (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80511F1: main (in /usr/libexec/gconfd-2)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x65A20E1: gconf_get_lock_or_current_holder (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x65A2434: gconf_get_lock (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80511F1: main (in /usr/libexec/gconfd-2)
==8081== 
==8081== Syscall param write(buf) contains uninitialised or unaddressable byte(s)
==8081==    at 0x39FC5E: __write_nocancel (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x65A20FD: gconf_get_lock_or_current_holder (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x65A2434: gconf_get_lock (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80511F1: main (in /usr/libexec/gconfd-2)
==8081==  Address 0x1B98E4A6 is 6 bytes inside a block of size 637 alloc'd
==8081==    at 0x1B900A90: malloc (vg_replace_malloc.c:131)
==8081==    by 0x549922: g_malloc (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x5582A5: g_strdup (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x659D7AA: gconf_set_daemon_ior (in /usr/lib/libgconf-2.so.4.1.0)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0xD8A818: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0x65A2471: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512E2: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0xD8A830: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0x65A2471: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512E2: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x558298: g_strdup (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x65A247F: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512E2: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x558298: g_strdup (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x65A247F: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512E2: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8B1: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512F3: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081==    by 0x5394B0: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.400.6)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x659F8B1: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512F3: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081==    by 0x5394B0: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.400.6)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8EB: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512F3: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081==    by 0x5394B0: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.400.6)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8F3: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512F3: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081==    by 0x5394B0: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.400.6)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8DC: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x80512F3: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081==    by 0x5394B0: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.400.6)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x33326C: _IO_vfprintf_internal (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x337D8D: __GI_fprintf (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x805136D: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x33326C: _IO_vfprintf_internal (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x337D8D: __GI_fprintf (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x805136D: gconfd_logfile_change_listener (in /usr/libexec/gconfd-2)
==8081==    by 0x8051531: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Syscall param write(buf) contains uninitialised or unaddressable byte(s)
==8081==    at 0x39FC5E: __write_nocancel (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x34E36C: _IO_do_write@@GLIBC_2.1 (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x34EE81: _IO_file_sync@@GLIBC_2.1 (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x34623D: _IO_fflush_internal (in /lib/tls/i486/libc-2.3.3.so)
==8081==  Address 0x1B91304B is not stack'd, malloc'd or (recently) free'd
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0xD8A818: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0x65A2471: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805173D: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0xD8A830: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0x65A2471: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805173D: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x558298: g_strdup (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x65A247F: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805173D: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x558298: g_strdup (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0x65A247F: gconf_object_to_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805173D: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8B1: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805175A: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081==    by 0x65B98C7: _ORBIT_skel_small_ConfigServer_add_client (in /usr/lib/libgconf-2.so.4.1.0)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x659F8B1: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805175A: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081==    by 0x65B98C7: _ORBIT_skel_small_ConfigServer_add_client (in /usr/lib/libgconf-2.so.4.1.0)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8EB: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805175A: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081==    by 0x65B98C7: _ORBIT_skel_small_ConfigServer_add_client (in /usr/lib/libgconf-2.so.4.1.0)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8F3: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805175A: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081==    by 0x65B98C7: _ORBIT_skel_small_ConfigServer_add_client (in /usr/lib/libgconf-2.so.4.1.0)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x659F8DC: gconf_quote_string (in /usr/lib/libgconf-2.so.4.1.0)
==8081==    by 0x805175A: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081==    by 0x65B98C7: _ORBIT_skel_small_ConfigServer_add_client (in /usr/lib/libgconf-2.so.4.1.0)
==8081== 
==8081== Conditional jump or move depends on uninitialised value(s)
==8081==    at 0x33326C: _IO_vfprintf_internal (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x337D8D: __GI_fprintf (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x80517A1: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Use of uninitialised value of size 4
==8081==    at 0x33326C: _IO_vfprintf_internal (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x337D8D: __GI_fprintf (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0x80517A1: (within /usr/libexec/gconfd-2)
==8081==    by 0x8051A5B: (within /usr/libexec/gconfd-2)
==8081== 
==8081== Syscall param writev(vector[...]) contains uninitialised or unaddressable byte(s)
==8081==    at 0x3A65AB: writev (in /lib/tls/i486/libc-2.3.3.so)
==8081==    by 0xDA6196: (within /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0xDA650B: link_connection_writev (in /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0xD87FE0: giop_send_buffer_write (in /usr/lib/libORBit-2.so.0.0.0)
==8081==  Address 0x1B98BE21 is 329 bytes inside a block of size 2048 alloc'd
==8081==    at 0x1B900A90: malloc (vg_replace_malloc.c:131)
==8081==    by 0x549922: g_malloc (in /usr/lib/libglib-2.0.so.0.400.6)
==8081==    by 0xD87E3E: (within /usr/lib/libORBit-2.so.0.0.0)
==8081==    by 0xD87F77: (within /usr/lib/libORBit-2.so.0.0.0)



8096 seems to be /usr/libexec/bonobo-activation-server
==8096== Conditional jump or move depends on uninitialised value(s)
==8096==    at 0xD8A818: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8096==    by 0x8055049: main (in /usr/libexec/bonobo-activation-server)
==8096== 
==8096== Conditional jump or move depends on uninitialised value(s)
==8096==    at 0xD8A830: CORBA_ORB_object_to_string (in /usr/lib/libORBit-2.so.0.0.0)
==8096==    by 0x8055049: main (in /usr/libexec/bonobo-activation-server)
==8096== 
==8096== Conditional jump or move depends on uninitialised value(s)
==8096==    at 0x33326C: _IO_vfprintf_internal (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0x337D8D: __GI_fprintf (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0x8055086: main (in /usr/libexec/bonobo-activation-server)
==8096== 
==8096== Use of uninitialised value of size 4
==8096==    at 0x33326C: _IO_vfprintf_internal (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0x337D8D: __GI_fprintf (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0x8055086: main (in /usr/libexec/bonobo-activation-server)
==8096== 
==8096== Syscall param write(buf) contains uninitialised or unaddressable byte(s)
==8096==    at 0x39FC5E: __write_nocancel (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0x34E36C: _IO_do_write@@GLIBC_2.1 (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0x34DC5F: _IO_file_close_it@@GLIBC_2.1 (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0x345F5B: _IO_fclose@@GLIBC_2.1 (in /lib/tls/i486/libc-2.3.3.so)
==8096==  Address 0x1B904006 is not stack'd, malloc'd or (recently) free'd
==8096== 
==8096== Syscall param writev(vector[...]) contains uninitialised or unaddressable byte(s)
==8096==    at 0x3A65AB: writev (in /lib/tls/i486/libc-2.3.3.so)
==8096==    by 0xDA6196: (within /usr/lib/libORBit-2.so.0.0.0)
==8096==    by 0xDA650B: link_connection_writev (in /usr/lib/libORBit-2.so.0.0.0)
==8096==    by 0xD87FE0: giop_send_buffer_write (in /usr/lib/libORBit-2.so.0.0.0)
==8096==  Address 0x1B9637D5 is 341 bytes inside a block of size 2048 alloc'd
==8096==    at 0x1B900A90: malloc (vg_replace_malloc.c:131)
==8096==    by 0x549922: g_malloc (in /usr/lib/libglib-2.0.so.0.400.6)
==8096==    by 0xD87E3E: (within /usr/lib/libORBit-2.so.0.0.0)
==8096==    by 0xD87F77: (within /usr/lib/libORBit-2.so.0.0.0)

8120 seems to be gam_server
==8120== Conditional jump or move depends on uninitialised value(s)
==8120==    at 0x804B727: (within /usr/libexec/gam_server)
==8120==    by 0x804BB75: (within /usr/libexec/gam_server)
==8120==    by 0x804BE32: (within /usr/libexec/gam_server)
==8120==    by 0x5460A7: (within /usr/lib/libglib-2.0.so.0.400.6)

8192 seems to be metacity
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x80614A2: (within /usr/bin/metacity)
==8192==    by 0x8090C2C: (within /usr/bin/metacity)
==8192==    by 0x1BC3191D: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC323FA: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x8061478: (within /usr/bin/metacity)
==8192==    by 0x8090C2C: (within /usr/bin/metacity)
==8192==    by 0x1BC3191D: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC323FA: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC493E0: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x8090F5A: meta_ui_create_frame_window (in /usr/bin/metacity)
==8192==    by 0x8064C95: meta_window_ensure_frame (in /usr/bin/metacity)
==8192==    by 0x809A704: meta_window_new_with_attrs (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC493F5: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x8090F5A: meta_ui_create_frame_window (in /usr/bin/metacity)
==8192==    by 0x8064C95: meta_window_ensure_frame (in /usr/bin/metacity)
==8192==    by 0x809A704: meta_window_new_with_attrs (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC37DD0: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38121: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC49424: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x8090F5A: meta_ui_create_frame_window (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC37DF7: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38121: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC49424: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x8090F5A: meta_ui_create_frame_window (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1C678: gdk_rectangle_intersect (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC3807C: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38121: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC49424: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1C696: gdk_rectangle_intersect (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC3807C: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38121: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC49424: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1C6AF: gdk_rectangle_intersect (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC3807C: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38121: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC49424: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC38E01: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC452D5: gdk_window_resize (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x8090F72: meta_ui_create_frame_window (in /usr/bin/metacity)
==8192==    by 0x8064C95: meta_window_ensure_frame (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1C892: gdk_region_rectangle (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386A2: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC452D5: gdk_window_resize (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1C899: gdk_region_rectangle (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386A2: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC452D5: gdk_window_resize (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1E176: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC452D5: gdk_window_resize (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1E18E: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC452D5: gdk_window_resize (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1D1AE: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1D1BF: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1DF3C: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1D3CF: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1DFF6: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1D3CF: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1D1F0: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1D1FF: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1D263: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC38EE5: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== pthread_mutex_lock/trylock: mutex has invalid owner
==8192==    at 0x1BDAEAF7: pthread_mutex_lock (vg_libpthread.c:1324)
==8192==    by 0x1BDB3FD1: _IO_flockfile (vg_libpthread.c:3395)
==8192==    by 0x1BCAE533: pango_read_line (in /usr/lib/libpango-1.0.so.0.600.0)
==8192==    by 0x1BC9D8FF: pango_find_map (in /usr/lib/libpango-1.0.so.0.600.0)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC1CFD4: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1D2A8: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC1E1B7: gdk_region_subtract (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x1BC386E3: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192== 
==8192== Invalid read of size 4
==8192==    at 0x5670AC: g_int_equal (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x80658D7: (within /usr/bin/metacity)
==8192==    by 0x8067CAA: (within /usr/bin/metacity)
==8192==    by 0x1BA4EA66: (within /usr/lib/libgtk-x11-2.0.so.0.400.9)
==8192==  Address 0x52BFD8DC is just below %esp.  Possibly a bug in GCC/G++
==8192==   v 2.96 or 3.0.X.  To suppress, use: --workaround-gcc296-bugs=yes
==8192== 
==8192== Invalid read of size 4
==8192==    at 0x5670AC: g_int_equal (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x806599B: (within /usr/bin/metacity)
==8192==    by 0x8067CAA: (within /usr/bin/metacity)
==8192==    by 0x1BA4EA66: (within /usr/lib/libgtk-x11-2.0.so.0.400.9)
==8192==  Address 0x52BFD8DC is just below %esp.  Possibly a bug in GCC/G++
==8192==   v 2.96 or 3.0.X.  To suppress, use: --workaround-gcc296-bugs=yes
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC493E0: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x8090F5A: meta_ui_create_frame_window (in /usr/bin/metacity)
==8192==    by 0x8064C95: meta_window_ensure_frame (in /usr/bin/metacity)
==8192==    by 0x8097E70: (within /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x1BC493F5: gdk_window_new (in /usr/lib/libgdk-x11-2.0.so.0.400.9)
==8192==    by 0x8090F5A: meta_ui_create_frame_window (in /usr/bin/metacity)
==8192==    by 0x8064C95: meta_window_ensure_frame (in /usr/bin/metacity)
==8192==    by 0x8097E70: (within /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x5393F5: g_hash_table_lookup_extended (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x80658D7: (within /usr/bin/metacity)
==8192==    by 0x8065A05: (within /usr/bin/metacity)
==8192==    by 0x8065D4C: meta_frames_apply_shapes (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x53A0D9: g_hash_table_replace (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x806599B: (within /usr/bin/metacity)
==8192==    by 0x8065A05: (within /usr/bin/metacity)
==8192==    by 0x8065D4C: meta_frames_apply_shapes (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x805E307: meta_display_begin_grab_op (in /usr/bin/metacity)
==8192==    by 0x809B96D: meta_window_client_message (in /usr/bin/metacity)
==8192==    by 0x80607DD: (within /usr/bin/metacity)
==8192==    by 0x8090C2C: (within /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x545A11: g_source_remove (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x805E6FA: meta_display_begin_grab_op (in /usr/bin/metacity)
==8192==    by 0x809B96D: meta_window_client_message (in /usr/bin/metacity)
==8192==    by 0x80607DD: (within /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x5458E5: g_main_context_find_source_by_id (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x545A71: g_source_remove (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x805E6FA: meta_display_begin_grab_op (in /usr/bin/metacity)
==8192==    by 0x809B96D: meta_window_client_message (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x545912: g_main_context_find_source_by_id (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x545A71: g_source_remove (in /usr/lib/libglib-2.0.so.0.400.6)
==8192==    by 0x805E6FA: meta_display_begin_grab_op (in /usr/bin/metacity)
==8192==    by 0x809B96D: meta_window_client_message (in /usr/bin/metacity)
==8192== 
==8192== Conditional jump or move depends on uninitialised value(s)
==8192==    at 0x805E948: meta_display_end_grab_op (in /usr/bin/metacity)
==8192==    by 0x80601E7: (within /usr/bin/metacity)
==8192==    by 0x8090C2C: (within /usr/bin/metacity)
==8192==    by 0x1BC3191D: (within /usr/lib/libgdk-x11-2.0.so.0.400.9)


Unknown program...
==8231== Invalid read of size 4
==8231==    at 0xDA059F: (within /usr/lib/libORBit-2.so.0.0.0)
==8231==    by 0xDA0714: ORBit_handle_request (in /usr/lib/libORBit-2.so.0.0.0)
==8231==    by 0xD89FB7: giop_connection_handle_input (in /usr/lib/libORBit-2.so.0.0.0)
==8231==    by 0xDA6C38: (within /usr/lib/libORBit-2.so.0.0.0)
==8231==  Address 0x18 is not stack'd, malloc'd or (recently) free'd

gnome-terminal:
==8256== Conditional jump or move depends on uninitialised value(s)
==8256==    at 0x80682F3: (within /usr/bin/gnome-terminal)
==8256==    by 0x8069162: terminal_profile_update (in /usr/bin/gnome-terminal)
==8256==    by 0x805DD1A: (within /usr/bin/gnome-terminal)
==8256==    by 0x806157A: main (in /usr/bin/gnome-terminal)
==8256== 
==8256== Conditional jump or move depends on uninitialised value(s)
==8256==    at 0x80682FF: (within /usr/bin/gnome-terminal)
==8256==    by 0x8069162: terminal_profile_update (in /usr/bin/gnome-terminal)
==8256==    by 0x805DD1A: (within /usr/bin/gnome-terminal)
==8256==    by 0x806157A: main (in /usr/bin/gnome-terminal)

==10010== Syscall param write(buf) contains uninitialised or unaddressable byte(s)
==10010==    at 0x39FC81: (within /lib/tls/i486/libc-2.3.3.so)
==10010==    by 0x1BA14155: (within /usr/lib/libvte.so.4.4.0)
==10010==    by 0x1BA145F6: (within /usr/lib/libvte.so.4.4.0)
==10010==    by 0x1BA1521D: _vte_pty_open (in /usr/lib/libvte.so.4.4.0)
==10010==  Address 0x52BFCFAB is on thread 1's stack

/usr/bin/pam-panel-icon:
==8262== Warning: invalid file descriptor 828 in syscall pipe()
==8262== Warning: invalid file descriptor 828 in syscall close()



More information about the Fedora-desktop-list mailing list