<html>
    <head>
      <base href="https://bugs.freedesktop.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Segmentation Fault in sna_put_zpixmap_blt (X server crash)"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=92751">92751</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Segmentation Fault in sna_put_zpixmap_blt (X server crash)
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>xorg
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>git
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Linux (All)
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>critical
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Driver/intel
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>chris@chris-wilson.co.uk
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>joe@wildlava.com
          </td>
        </tr>

        <tr>
          <th>QA Contact</th>
          <td>intel-gfx-bugs@lists.freedesktop.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=119308" name="attach_119308" title="Xorg.0.log">attachment 119308</a> <a href="attachment.cgi?id=119308&action=edit" title="Xorg.0.log">[details]</a></span>
Xorg.0.log

I get a somewhat random X server crash (I say somewhat, since it tends to
happen when I am running qemu and actively using several urxvt terminals). The
more I am doing, the more likely, but that's probably case with many X bugs.

It is happening with the latest xf86-video-intel from git (commit d78200e),
which I built from source today, but it also was happening with the latest Arch
Linux package (git commit df72bc5).

Here's a traceback with debug symbols:

[   271.424] (EE) 0: /usr/lib/xorg-server/Xorg (OsLookupColor+0x139) [0x596d09]
[   271.425] (EE) 1: /usr/lib/libc.so.6 (__restore_rt+0x0) [0x7f8555a7a67f]
[   271.427] (EE) 2: /usr/lib/xorg/modules/drivers/intel_drv.so
(__kgem_retire_rq+0x58) [0x7f85506170e8]
[   271.428] (EE) 3: /usr/lib/xorg/modules/drivers/intel_drv.so
(__kgem_retire_requests_upto+0x47) [0x7f8550618417]
[   271.428] (EE) 4: /usr/lib/xorg/modules/drivers/intel_drv.so
(sna_put_zpixmap_blt.isra.96+0x401) [0x7f855064b441]
[   271.428] (EE) 5: /usr/lib/xorg/modules/drivers/intel_drv.so
(sna_put_image+0x215) [0x7f855064b665]
[   271.428] (EE) 6: /usr/lib/xorg-server/Xorg (DamageRegionAppend+0x3783)
[0x5216c3]
[   271.428] (EE) 7: /usr/lib/xorg-server/Xorg (SyncVerifyFence+0x2205)
[0x4d8ec5]
[   271.428] (EE) 8: /usr/lib/xorg-server/Xorg (SyncVerifyFence+0x3645)
[0x4dbb85]
[   271.429] (EE) 9: /usr/lib/xorg-server/Xorg (SendErrorToClient+0x2ff)
[0x438fbf]
[   271.429] (EE) 10: /usr/lib/xorg-server/Xorg (remove_fs_handlers+0x41b)
[0x43d09b]
[   271.429] (EE) 11: /usr/lib/libc.so.6 (__libc_start_main+0xf0)
[0x7f8555a67610]
[   271.429] (EE) 12: /usr/lib/xorg-server/Xorg (_start+0x29) [0x427489]
[   271.430] (EE) 13: ? (?+0x29) [0x29]

If I can turn on additional debugging to help, let me know, but this is not
always quickly reproducible. I tried using --enable-debug=full, but the file
got way too large.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the QA Contact for the bug.</li>
      </ul>
    </body>
</html>