[Bug 73351] xf86-video-intel-2.99.907 segfaults while the machine is unattended

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=73351

--- Comment #13 from Marti <marti at juffo.org> ---
Finally managed to catch this in a functioning gdb. Note that for me, this bug
very rarely occurs "while the machine is unattended", but usually crashes in
the middle of normal usage -- like now.

This time it's my laptop with Intel i5-560M (I believe HD Graphics 3000)

I only ever had 2 Firefox windows, a few terminals and Skype open in this
session, as I had just started up Xorg recently.

I saved a core file and backed up the binaries just in case you need more data.

"bt full" and all this is also available in the attached file.

(gdb) up
#1  0x00007f833010953b in _sna_pixmap_move_to_cpu (pixmap=0x1a03de0, flags=3)
at sna_accel.c:2118
2118                            memset(pixmap->devPrivate.ptr,
priv->clear_color,
(gdb) up
#2  0x00007f833010a80b in sna_drawable_move_region_to_cpu (drawable=0x19f39b0,
region=0x7fffa41c2fa0, flags=3) at sna_accel.c:2487
2487                    return _sna_pixmap_move_to_cpu(pixmap, flags |
MOVE_READ);
(gdb) p *priv
$1 = {pixmap = 0x1a03de0, gpu_bo = 0x1e1bb70, cpu_bo = 0x0, gpu_damage =
0x1f43e21, cpu_damage = 0x0, cow = 0x0, ptr = 0x0, move_to_gpu = 0x0,
move_to_gpu_data = 0x0, flush_list = {next = 0x1a03ea8, prev = 0x1a03ea8}, 
  cow_list = {next = 0x0, prev = 0x0}, stride = 192, clear_color = 0,
source_count = 4, pinned = 2 '\002', create = 11 '\v', mapped = 0 '\000', flush
= 1 '\001', shm = 0 '\000', clear = 1 '\001', header = 1 '\001', 
  cpu = 0 '\000'}
(gdb) p *priv->cpu_bo
Cannot access memory at address 0x0
(gdb) p *priv->gpu_bo
$2 = {rq = 0x2391820, exec = 0x0, proxy = 0x0, list = {next = 0x1e1bb88, prev =
0x1e1bb88}, request = {next = 0x2391838, prev = 0x1524a48}, vma = {next =
0x1e1bba8, prev = 0x1e1bba8}, map__cpu = 0x7f832b2dd000, 
  map__gtt = 0x7f832bdce000, binding = {next = 0x20a1a50, format = 324, offset
= 0}, presumed_offset = 215392256, unique_id = 62201, refcnt = 2, handle = 221,
target_handle = 4294967295, delta = 0, size = {pages = {
      count = 6, bucket = 2}, bytes = 268435462}, pitch = 512, tiling = 1,
reusable = 0, gpu_dirty = 0, gtt_dirty = 0, domain = 3, needs_flush = 1, snoop
= 0, io = 0, flush = 1, scanout = 0, purged = 0}
(gdb) p *sna_pixmap(pixmap)
$1 = {pixmap = 0x1a03de0, gpu_bo = 0x1e1bb70, cpu_bo = 0x0, gpu_damage =
0x1f43e21, cpu_damage = 0x0, cow = 0x0, ptr = 0x0, move_to_gpu = 0x0,
move_to_gpu_data = 0x0, 
  flush_list = {next = 0x1a03ea8, prev = 0x1a03ea8}, cow_list = {next = 0x0,
prev = 0x0}, stride = 192, clear_color = 0, source_count = 4, pinned = 2
'\002', create = 11 '\v', 
  mapped = 0 '\000', flush = 1 '\001', shm = 0 '\000', clear = 1 '\001', header
= 1 '\001', cpu = 0 '\000'}
(gdb) p *sna_pixmap(pixmap)->cpu_bo
Cannot access memory at address 0x0
(gdb) p *sna_pixmap(pixmap)->gpu_bo
$2 = {rq = 0x2391820, exec = 0x0, proxy = 0x0, list = {next = 0x1e1bb88, prev =
0x1e1bb88}, request = {next = 0x2391838, prev = 0x1524a48}, vma = {next =
0x1e1bba8, 
    prev = 0x1e1bba8}, map__cpu = 0x7f832b2dd000, map__gtt = 0x7f832bdce000,
binding = {next = 0x20a1a50, format = 324, offset = 0}, presumed_offset =
215392256, 
  unique_id = 62201, refcnt = 2, handle = 221, target_handle = 4294967295,
delta = 0, size = {pages = {count = 6, bucket = 2}, bytes = 268435462}, pitch =
512, tiling = 1, 
  reusable = 0, gpu_dirty = 0, gtt_dirty = 0, domain = 3, needs_flush = 1,
snoop = 0, io = 0, flush = 1, scanout = 0, purged = 0}

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20140114/01c6e568/attachment-0001.html>