<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - segfault in glyphs_fallback"
href="https://bugs.freedesktop.org/show_bug.cgi?id=91688">91688</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>segfault in glyphs_fallback
</td>
</tr>
<tr>
<th>Product</th>
<td>xorg
</td>
</tr>
<tr>
<th>Version</th>
<td>git
</td>
</tr>
<tr>
<th>Hardware</th>
<td>x86-64 (AMD64)
</td>
</tr>
<tr>
<th>OS</th>
<td>NetBSD
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>Driver/intel
</td>
</tr>
<tr>
<th>Assignee</th>
<td>chris@chris-wilson.co.uk
</td>
</tr>
<tr>
<th>Reporter</th>
<td>prlw1@cam.ac.uk
</td>
</tr>
<tr>
<th>QA Contact</th>
<td>intel-gfx-bugs@lists.freedesktop.org
</td>
</tr></table>
<p>
<div>
<pre>cpu0: "Intel(R) Atom(TM) CPU D525 @ 1.80GHz"
Vendor Name: Intel (0x8086)
Device Name: Pineview Integrated Graphics Device (0xa001)
xf86-videl-intel 2.99.917
This is the same box as the one in <a class="bz_bug_link
bz_status_REOPENED "
title="REOPENED - Atom D525 pineview segfault in gen3_emit_composite_primitive_constant_identity_mask_no_offset"
href="show_bug.cgi?id=91083">Bug 91083</a>, and is running with the
additional trap-prevention patch in <a class="bz_bug_link
bz_status_REOPENED "
title="REOPENED - Atom D525 pineview segfault in gen3_emit_composite_primitive_constant_identity_mask_no_offset"
href="show_bug.cgi?id=91083#c6">bug 91083 comment 6</a>.
One advantage of firefox 40 being less stable, is it seems easier to reproduce
crashes(!) Opening a new bug, as I see the crash with the other bug's patch,
which I think was meant to reduce traps. (I also removed the NetBSD work
around)
(This was just clicking on a tab in firefox - nothing to do with video
playback)
sna_glyphs.c:
1756 if (sigtrap_get() == 0) {
#0 0x00007f7ff425f214 in __sigsetjmp14 () from /usr/lib/libc.so.12
(gdb) bt
#0 0x00007f7ff425f214 in __sigsetjmp14 () from /usr/lib/libc.so.12
#1 0x00007f7fefa7207b in glyphs_fallback (op=op@entry=12 '\f',
src=src@entry=0x7f7ff4db5d80, dst=dst@entry=0x7f7ff193c000,
mask_format=mask_format@entry=0x0, src_x=src_x@entry=59,
src_y=src_y@entry=55, nlist=<optimized out>, nlist@entry=1,
list=0x7f7fffffd730, list@entry=0x7f7fffffd720, glyphs=0x7f7fffffcfc0,
glyphs@entry=0x7f7fffffcf20)
at /usr/xsrc/external/mit/xf86-video-intel/dist/src/sna/sna_glyphs.c:1756
#2 0x00007f7fefa72fc3 in sna_glyphs (op=<optimized out>, src=0x7f7ff4db5d80,
dst=0x7f7ff193c000, mask=0x0, src_x=<optimized out>,
src_y=<optimized out>, nlist=1, list=0x7f7fffffd720, glyphs=0x7f7fffffcf20)
at /usr/xsrc/external/mit/xf86-video-intel/dist/src/sna/sna_glyphs.c:2049
#3 0x0000000000505dc4 in damageGlyphs (op=<optimized out>,
pSrc=0x7f7ff4db5d80, pDst=0x7f7ff193c000, maskFormat=0x0,
xSrc=<optimized out>, ySrc=<optimized out>, nlist=1, list=0x7f7fffffd720,
glyphs=0x7f7fffffcf20)
at /usr/xsrc/external/mit/xorg-server/dist/miext/damage/damage.c:695
#4 0x00000000004f8ccd in CompositeGlyphs (op=<optimized out>,
pSrc=0x7f7ff4db5d80, pDst=0x7f7ff193c000, maskFormat=0x0,
xSrc=<optimized out>, ySrc=<optimized out>, nlist=nlist@entry=1,
lists=lists@entry=0x7f7fffffd720, glyphs=glyphs@entry=0x7f7fffffcf20)
at /usr/xsrc/external/mit/xorg-server/dist/render/glyph.c:604
#5 0x00000000004ee3a3 in ProcRenderCompositeGlyphs (client=0x7f7ff4d0c560)
at /usr/xsrc/external/mit/xorg-server/dist/render/render.c:1440
#6 0x00000000004eb545 in ProcRenderDispatch (client=<optimized out>)
at /usr/xsrc/external/mit/xorg-server/dist/render/render.c:2057
#7 0x00000000004540d5 in Dispatch ()
at /usr/xsrc/external/mit/xorg-server/dist/dix/dispatch.c:431
#8 0x000000000043010a in main (argc=6, argv=0x7f7fffffdc58,
envp=<optimized out>)
at /usr/xsrc/external/mit/xorg-server/dist/dix/main.c:287</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
</ul>
</body>
</html>