xserver 1.8.0 radeonhd crashing

[Michel Dänzer]

On Tue, 2010-04-06 at 10:30 +0200, Artur Skawina wrote: 
> Upgraded xorg to git head a few days ago, today tried to view a youtube page
> in ff3.6 and every attempt leads to an xserver segfault at 0x10.
> Server backtrace (below) didn't contain much info; gdb version looks like this:
> 
> #0  0xf770b430 in __kernel_vsyscall ()
> #1  0xf7456a55 in *__GI_raise (sig=6)
>     at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
> #2  0xf7457fe4 in *__GI_abort () at abort.c:88
> #3  0x080a6de4 in OsAbort () at ../../os/utils.c:1321
> #4  0x080be93e in ddxGiveUp () at ../../../../hw/xfree86/common/xf86Init.c:1238
> #5  0x080be9c1 in AbortDDX () at ../../../../hw/xfree86/common/xf86Init.c:1284
> #6  0x080b5d2d in AbortServer () at ../../os/log.c:418
> #7  0x080b6495 in FatalError (
>     f=0x81cf2f4 "Caught signal %d (%s). Server aborting\n")
>     at ../../os/log.c:546
> #8  0x080ac011 in OsSigHandler (signo=11, sip=0xffa63a8c, unused=0xffa63b0c)
>     at ../../os/osinit.c:156
> #9  <signal handler called>
> #10 0xf72cfefb in R300CheckComposite (op=3, pSrcPicture=0x88a63f0, 
>     pMaskPicture=0x88a6460, pDstPicture=0x86ec9c8)
>     at ../../src/radeon_exa_render.c:1228
> #11 0xf723227c in exaTryDriverComposite (op=0 '\000', pSrc=0x88a63f0, 
>     pMask=0x88a6460, pDst=0x86ec9c8, xSrc=275, ySrc=334, xMask=0, yMask=0, 
>     xDst=275, yDst=334, width=77, height=23) at ../../exa/exa_render.c:695
> #12 0xf7233590 in exaComposite (op=3 '\003', pSrc=0x88a63f0, pMask=0x88a6460, 
>     pDst=0x86ec9c8, xSrc=275, ySrc=334, xMask=0, yMask=0, xDst=275, yDst=334, 
>     width=77, height=23) at ../../exa/exa_render.c:1034

Most likely pSrcPicture->pDrawable is NULL (i.e. it's a source-only,
solid or gradient picture) in R300CheckComposite(), and that fails to
check the pointer before dereferencing it.


-- 
Earthling Michel Dänzer           |                http://www.vmware.com
Libre software enthusiast         |          Debian, X and DRI developer