<html>
    <head>
      <base href="https://bugs.freedesktop.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - segfault in glyphs_fallback"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=91688">91688</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>segfault in glyphs_fallback
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>xorg
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>git
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>NetBSD
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Driver/intel
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>chris@chris-wilson.co.uk
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>prlw1@cam.ac.uk
          </td>
        </tr>

        <tr>
          <th>QA Contact</th>
          <td>intel-gfx-bugs@lists.freedesktop.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>cpu0: "Intel(R) Atom(TM) CPU D525   @ 1.80GHz"
    Vendor Name: Intel (0x8086)
    Device Name: Pineview Integrated Graphics Device (0xa001)
xf86-videl-intel 2.99.917

This is the same box as the one in <a class="bz_bug_link 
          bz_status_REOPENED "
   title="REOPENED - Atom D525 pineview segfault in gen3_emit_composite_primitive_constant_identity_mask_no_offset"
   href="show_bug.cgi?id=91083">Bug 91083</a>, and is running with the
additional trap-prevention patch in <a class="bz_bug_link 
          bz_status_REOPENED "
   title="REOPENED - Atom D525 pineview segfault in gen3_emit_composite_primitive_constant_identity_mask_no_offset"
   href="show_bug.cgi?id=91083#c6">bug 91083 comment 6</a>.

One advantage of firefox 40 being less stable, is it seems easier to reproduce
crashes(!) Opening a new bug, as I see the crash with the other bug's patch,
which I think was meant to reduce traps. (I also removed the NetBSD work
around)

(This was just clicking on a tab in firefox - nothing to do with video
playback)

sna_glyphs.c:
1756                    if (sigtrap_get() == 0) {



#0  0x00007f7ff425f214 in __sigsetjmp14 () from /usr/lib/libc.so.12
(gdb) bt
#0  0x00007f7ff425f214 in __sigsetjmp14 () from /usr/lib/libc.so.12
#1  0x00007f7fefa7207b in glyphs_fallback (op=op@entry=12 '\f', 
    src=src@entry=0x7f7ff4db5d80, dst=dst@entry=0x7f7ff193c000, 
    mask_format=mask_format@entry=0x0, src_x=src_x@entry=59, 
    src_y=src_y@entry=55, nlist=<optimized out>, nlist@entry=1, 
    list=0x7f7fffffd730, list@entry=0x7f7fffffd720, glyphs=0x7f7fffffcfc0, 
    glyphs@entry=0x7f7fffffcf20)
    at /usr/xsrc/external/mit/xf86-video-intel/dist/src/sna/sna_glyphs.c:1756
#2  0x00007f7fefa72fc3 in sna_glyphs (op=<optimized out>, src=0x7f7ff4db5d80, 
    dst=0x7f7ff193c000, mask=0x0, src_x=<optimized out>, 
    src_y=<optimized out>, nlist=1, list=0x7f7fffffd720, glyphs=0x7f7fffffcf20)
    at /usr/xsrc/external/mit/xf86-video-intel/dist/src/sna/sna_glyphs.c:2049
#3  0x0000000000505dc4 in damageGlyphs (op=<optimized out>, 
    pSrc=0x7f7ff4db5d80, pDst=0x7f7ff193c000, maskFormat=0x0, 
    xSrc=<optimized out>, ySrc=<optimized out>, nlist=1, list=0x7f7fffffd720, 
    glyphs=0x7f7fffffcf20)
    at /usr/xsrc/external/mit/xorg-server/dist/miext/damage/damage.c:695
#4  0x00000000004f8ccd in CompositeGlyphs (op=<optimized out>, 
    pSrc=0x7f7ff4db5d80, pDst=0x7f7ff193c000, maskFormat=0x0, 
    xSrc=<optimized out>, ySrc=<optimized out>, nlist=nlist@entry=1, 
    lists=lists@entry=0x7f7fffffd720, glyphs=glyphs@entry=0x7f7fffffcf20)
    at /usr/xsrc/external/mit/xorg-server/dist/render/glyph.c:604
#5  0x00000000004ee3a3 in ProcRenderCompositeGlyphs (client=0x7f7ff4d0c560)
    at /usr/xsrc/external/mit/xorg-server/dist/render/render.c:1440
#6  0x00000000004eb545 in ProcRenderDispatch (client=<optimized out>)
    at /usr/xsrc/external/mit/xorg-server/dist/render/render.c:2057
#7  0x00000000004540d5 in Dispatch ()
    at /usr/xsrc/external/mit/xorg-server/dist/dix/dispatch.c:431
#8  0x000000000043010a in main (argc=6, argv=0x7f7fffffdc58, 
    envp=<optimized out>)
    at /usr/xsrc/external/mit/xorg-server/dist/dix/main.c:287</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the QA Contact for the bug.</li>
      </ul>
    </body>
</html>