<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW --- - Chrome causes crash of Xserver"
href="https://bugs.freedesktop.org/show_bug.cgi?id=56503#c6">Comment # 6</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW --- - Chrome causes crash of Xserver"
href="https://bugs.freedesktop.org/show_bug.cgi?id=56503">bug 56503</a>
from <span class="vcard"><a class="email" href="mailto:js314592@gmail.com" title="JS <js314592@gmail.com>"> <span class="fn">JS</span></a>
</span></b>
<pre>got some core dump
#0 x86_fallback_frame_state (fs=0xbfd057e0, context=<optimized out>) at
./md-unwind-support.h:131
#1 uw_frame_state_for (context=context@entry=0xbfd05760,
fs=fs@entry=0xbfd057e0) at ../../../libgcc/unwind-dw2.c:1187
#2 0xb71909ea in _Unwind_Backtrace (trace=0xb733fbe0 <backtrace_helper>,
trace_argument=0xbfd058dc) at ../../../libgcc/unwind.inc:290
#3 0xb733fce5 in __GI___backtrace (array=array@entry=0xbfd05950,
size=size@entry=64) at ../sysdeps/i386/backtrace.c:127
#4 0x081bc9c9 in xorg_backtrace () at backtrace.c:50
#5 0x081c0636 in OsSigHandler (sip=0xbfd05a9c, signo=11, unused=<optimized
out>) at osinit.c:128
#6 OsSigHandler (signo=11, sip=0xbfd05a9c, unused=0xbfd05b1c) at osinit.c:107
#7 <signal handler called>
#8 x86_fallback_frame_state (fs=0xbfd05f00, context=<optimized out>) at
./md-unwind-support.h:131
#9 uw_frame_state_for (context=context@entry=0xbfd05e80,
fs=fs@entry=0xbfd05f00) at ../../../libgcc/unwind-dw2.c:1187
#10 0xb71909ea in _Unwind_Backtrace (trace=0xb733fbe0 <backtrace_helper>,
trace_argument=0xbfd05ffc) at ../../../libgcc/unwind.inc:290
#11 0xb733fce5 in __GI___backtrace (array=array@entry=0xbfd06070,
size=size@entry=64) at ../sysdeps/i386/backtrace.c:127
#12 0x081bc9c9 in xorg_backtrace () at backtrace.c:50
#13 0x0819b29b in mieqEnqueue (pDev=pDev@entry=0x8652be0, e=e@entry=0xb7140948)
at mieq.c:281
#14 0x08090725 in queueEventList (device=0x8652be0, device@entry=0x2,
events=<optimized out>, nevents=2) at getevents.c:1002
#15 0x08092958 in QueuePointerEvents (device=0x2, device@entry=0x8652be0,
type=type@entry=6, buttons=buttons@entry=0, flags=10,
mask=mask@entry=0x86539e8) at getevents.c:1262
#16 0x080ca9bb in xf86PostMotionEventM (mask=0x86539e8, is_absolute=0,
device=0x8652be0) at xf86Xinput.c:1161
#17 xf86PostMotionEventM (device=0x8652be0, is_absolute=is_absolute@entry=0,
mask=0x86539e8) at xf86Xinput.c:1146
#18 0xb5d71e3d in EvdevPostRelativeMotionEvents (pInfo=pInfo@entry=0x862f470,
num_v=0, num_v@entry=1, first_v=0, first_v@entry=1, v=v@entry=0xbfd062f0) at
evdev.c:898
#19 0xb5d73546 in EvdevProcessSyncEvent (pInfo=0x862f470, ev=<optimized out>)
at evdev.c:1010
#20 EvdevProcessEvent (ev=0xbfd06390, pInfo=0x862f470) at evdev.c:1052
#21 EvdevReadInput (pInfo=0x862f470) at evdev.c:1131
#22 0x080b9eb1 in xf86SigioReadInput (fd=16, closure=0x862f470) at
xf86Events.c:312
#23 0x080dfe25 in xf86SIGIO (sig=29) at ../shared/sigio.c:108
#24 <signal handler called>
#25 __memcpy_ia32 () at ../sysdeps/i386/i686/memcpy.S:75
#26 0x006aa400 in ?? ()
#27 0xb6d4e0ad in memcpy (__len=7680, __src=0xb22fe400, __dest=0xb2b72408) at
/usr/include/bits/string3.h:52
#28 RADEONCopySwap (dst=dst@entry=0xb2b72408 "", src=0xb22fe400 <Address
0xb22fe400 out of bounds>, size=size@entry=7680, swap=swap@entry=0) at
radeon_accel.c:994
#29 0xb6dc0974 in RADEONDownloadFromScreenCS (pSrc=pSrc@entry=0x87ab4a8, x=0,
y=y@entry=0, w=7680, h=<optimized out>, dst=0xb2b72408 "", dst_pitch=7680) at
radeon_exa_funcs.c:665
#30 0xb6cf53a2 in exaCopyDirty (migrate=migrate@entry=0xbfd06c90,
pValidDst=0x87ab508, pValidSrc=0x87ab514, transfer=transfer@entry=0xb6dc0820
<RADEONDownloadFromScreenCS>, fallback_index=fallback_index@entry=1,
sync=sync@entry=0xb6cf3f90 <exaWaitSync>)
at exa_migration_classic.c:220
#31 0xb6cf5770 in exaCopyDirtyToSys (migrate=migrate@entry=0xbfd06c90) at
exa_migration_classic.c:285
#32 0xb6cf7ac7 in exaPrepareAccessReg_mixed (pPixmap=0x87ab4a8, index=0,
pReg=0xbfd06d64) at exa_migration_mixed.c:254
#33 0xb6d01eb6 in ExaPrepareCompositeReg (height=1154, width=12, yDst=0,
xDst=1908, yMask=0, xMask=1908, ySrc=24, xSrc=1908, pDst=0x880e2c8, pMask=0x0,
pSrc=0x87c7a68, op=1 '\001', pScreen=0x8484560) at exa_unaccel.c:577
#34 ExaCheckComposite (op=op@entry=1 '\001', pSrc=pSrc@entry=0x87c7a68,
pMask=pMask@entry=0x0, pDst=pDst@entry=0x880e2c8, xSrc=xSrc@entry=1908,
ySrc=ySrc@entry=24, xMask=xMask@entry=1908, yMask=yMask@entry=0, xDst=1908,
yDst=0, width=width@entry=12,
height=height@entry=1154) at exa_unaccel.c:600
#35 0xb6cfe6ae in exaComposite (op=1 '\001', pSrc=0x87c7a68, pMask=0x0,
pDst=0x880e2c8, xSrc=<optimized out>, ySrc=<optimized out>, xMask=1908,
yMask=0, xDst=<optimized out>, yDst=<optimized out>, width=12, height=1154) at
exa_render.c:1039
#36 0x08145772 in damageComposite (op=1 '\001', pSrc=0x87c7a68, pMask=0x0,
pDst=0x880e2c8, xSrc=1908, ySrc=24, xMask=1908, yMask=0, xDst=1908, yDst=0,
width=12, height=1154) at damage.c:562
#37 0x08139b99 in CompositePicture (op=<optimized out>, pSrc=0x87c7a68,
pMask=pMask@entry=0x0, pDst=0x880e2c8, xSrc=1908, ySrc=24, xMask=1908, yMask=0,
xDst=1908, yDst=0, width=12, height=1154) at picture.c:1578
#38 0x0813e34d in ProcRenderComposite (client=0x87abf00) at render.c:707
#39 0x0813a25e in ProcRenderDispatch (client=0x87abf00) at render.c:1988
#40 0x0807b5d5 in Dispatch () at dispatch.c:428
#41 0x08069165 in main (argc=8, argv=0xbfd07174, envp=0xbfd07198) at main.c:288</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>