<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Segmentation Fault in sna_put_zpixmap_blt (X server crash)" href="https://bugs.freedesktop.org/show_bug.cgi?id=92751#c6">Comment # 6</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Segmentation Fault in sna_put_zpixmap_blt (X server crash)" href="https://bugs.freedesktop.org/show_bug.cgi?id=92751">bug 92751</a> from <a class="email" href="mailto:chris@chris-wilson.co.uk" title="Chris Wilson <chris@chris-wilson.co.uk>"> Chris Wilson</a> <pre>That looks to be a different bug, whilst it may cause sufficient corruption to result in the earlier assertion failure, it would have died with the second assertion beforehand. commit af680486608686ade375f5737bff556343366230 Author: Chris Wilson <<a href="mailto:chris@chris-wilson.co.uk">chris@chris-wilson.co.uk</a>> Date: Thu Nov 5 16:54:36 2015 +0000 sna/dri2: Update TearFree recursion prevention Some time past, we switched to a seperate boolean to mark when the shadow is no longer accessible due to recursion - but I missed an important check inside the vblank handler. Reported-by: Joe Peterson <<a href="mailto:joe@wildlava.com">joe@wildlava.com</a>> Bugzilla: <a class="bz_bug_link bz_status_NEW " title="NEW - Segmentation Fault in sna_put_zpixmap_blt (X server crash)" href="show_bug.cgi?id=92751#c5">https://bugs.freedesktop.org/show_bug.cgi?id=92751#c5</a> Signed-off-by: Chris Wilson <<a href="mailto:chris@chris-wilson.co.uk">chris@chris-wilson.co.uk</a>> The first assertion is consistent with the segfault. But what is surprising is that we didn't hit an earlier assertion, so the list is being corrupted during later processing (i.e. something akin to a use-after-free). As for gdb not helping, the process exited before gdb prompted. Seems like FatalError() no longer causes a gdb trap, so add a breakpoint on FatalError instead.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> </ul> </body> </html>