[Bug 92751] Segmentation Fault in sna_put_zpixmap_blt (X server crash)

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=92751

--- Comment #23 from Chris Wilson <chris at chris-wilson.co.uk> ---
Still haven't found the possible list/element corruption, but could you try
this simplification:

diff --git a/src/sna/kgem.c b/src/sna/kgem.c
index b80fde7..0f1c1f4 100644
--- a/src/sna/kgem.c
+++ b/src/sna/kgem.c
@@ -3275,12 +3275,11 @@ bool __kgem_ring_is_idle(struct kgem *kgem, int ring)

 bool __kgem_retire_requests_upto(struct kgem *kgem, struct kgem_bo *bo)
 {
-       struct kgem_request *rq = bo->rq, *tmp;
-       struct list *requests = &kgem->requests[RQ_RING(rq) == KGEM_BLT];
+       struct kgem_request *rq = RQ(bo->rq), *tmp;
+       struct list *requests = &kgem->requests[rq->ring];

-       DBG(("%s(handle=%d)\n", __FUNCTION__, bo->handle));
+       DBG(("%s(handle=%d, ring=%d)\n", __FUNCTION__, bo->handle, rq->ring));

-       rq = RQ(rq);
        assert(rq != &kgem->static_request);
        if (rq == (struct kgem_request *)kgem) {
                __kgem_bo_clear_busy(bo);

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20151108/6399e7f8/attachment.html>