Bug#645007: xserver-xorg-video-radeon: Radeon assert crashes with non-GL apps

[Daniel Hagerty]

 > Thanks. Unfortunately, even trying to replicate that, I haven't been
 > able to reproduce it. As you seem able to reproduce it easily (after how
 > much time on average?), it would be great if you could attach gdb to the
 > X server process, then reproduce the crash and get a backtrace (see
 > http://wiki.debian.org/XStrikeForce/XserverDebugging#Which_debugging_packages_do_I_need.3F and the following paragraph).

    I'll get a crash in less than five minutes with one of the two
reproducers.  Running each xscreensaver ten minutes at a time was how
I isolated the two problem ones.

    The backtrace below was produced by celtic -root, with perahps
three minutes of runtime.  This was with the stock squeeze X server,
not backports.

    Is it possible we're chasing slightly dodgy hardware?


#0  0x00007fd8a3304165 in raise () from /lib/libc.so.6
No symbol table info available.
#1  0x00007fd8a3306f70 in abort () from /lib/libc.so.6
No symbol table info available.
#2  0x00007fd8a32fd2b1 in __assert_fail () from /lib/libc.so.6
No symbol table info available.
#3  0x00007fd8a0e2d8de in ?? () from /usr/lib/libdrm_radeon.so.1
No symbol table info available.
#4  0x00007fd8a10f61d9 in set_vtx_resource (pScrn=<value optimized out>,
    ib=0x0, res=0x7fffda88c5b0, domain=2) at ../../src/r6xx_accel.c:536
        _ret = <value optimized out>
        info = 0x20e4fa0
        sq_vtx_constant_word2 = 2048
        __func__ = "set_vtx_resource"
#5  0x00007fd8a10fefdc in r600_finish_op (pScrn=0x20e1470,
    vtx_size=<value optimized out>) at ../../src/r6xx_accel.c:1235
        info = 0x20e4fa0
        accel_state = 0x20eccf0
        draw_conf = {prim_type = 0, vgt_draw_initiator = 0, index_type = 0,
          num_instances = 0, num_indices = 0}
        vtx_res = {id = 160, vb_addr = 0, vtx_num_entries = 4092,
          vtx_size_dw = 2, clamp_x = 0, format = 0, num_format_all = 0,
          format_comp_all = 0, srf_mode_all = 0, endian = 0, mem_req_size = 1,
          bo = 0x25b3510}
#6  0x00007fd8a10ff14d in r600_vb_no_space (pScrn=0x729, vert_size=1833)
    at ../../src/r6xx_accel.c:1272
        info = 0x20e4fa0
        accel_state = 0x20eccf0
#7  0x00007fd8a10f148a in radeon_vbo_space (pPix=<value optimized out>,
    x1=515, y1=499, x2=516, y2=500) at ../../src/radeon_vbo.h:32
        vb = <value optimized out>
#8  R600Solid (pPix=<value optimized out>, x1=515, y1=499, x2=516, y2=500)
    at ../../src/r600_exa.c:466
        pScrn = 0x20e1470
        info = <value optimized out>
        accel_state = 0x20eccf0
#9  0x00007fd8a03f06a5 in exaFillRegionSolid (pDrawable=0x212f7b0,
    pRegion=0x2587470, pixel=<value optimized out>,
    planemask=<value optimized out>, alu=<value optimized out>,
    clientClipType=<value optimized out>) at ../../exa/exa_accel.c:1031
        nbox = 90798
        pBox = 0x7fd89ea6fb48
        pExaScr = 0x2100880
        pPixmap = 0x2129890
        xoff = 0
        yoff = 0
        ret = <value optimized out>
#10 0x00007fd8a03f123a in exaPolyFillRect (pDrawable=0x212f7b0, pGC=0x25b57a0,
    nrect=1021, prect=0x25c9d40) at ../../exa/exa_accel.c:812
        pClip = 0x212f800
        pPixmap = 0x2129890
        pbox = <value optimized out>
        extentX1 = 106
        extentX2 = -628569960
        extentY1 = 0
        extentY2 = 34773488
        fullX1 = <value optimized out>
        fullX2 = <value optimized out>
        fullY1 = <value optimized out>
        fullY2 = <value optimized out>
        partX1 = <value optimized out>
        partX2 = <value optimized out>
        partY1 = <value optimized out>
        partY2 = <value optimized out>
        xoff = <value optimized out>
        yoff = <value optimized out>
        xorg = 0
        yorg = 8208
        pReg = 0x2587470
#11 0x00007fd8a03ee63e in exaPolySegment (pDrawable=0x212f7b0, pGC=0x25b57a0,
    nseg=1021, pSeg=<value optimized out>) at ../../exa/exa_accel.c:758
        prect = 0x25c9d40
        i = <value optimized out>
#12 0x00000000004dd9bb in damagePolySegment (pDrawable=0x212f7b0,
    pGC=0x25b57a0, nSeg=1021, pSeg=0x2656dfc)
    at ../../../miext/damage/damage.c:1191
        pGCPriv = 0x2546770
        oldFuncs = 0x7c7100
#13 0x00000000004464f4 in ProcPolySegment (client=0x25a7770)
    at ../../dix/dispatch.c:1849
        nsegs = 6
        pGC = 0x25b57a0
        pDraw = 0x212f7b0
#14 0x0000000000448c84 in Dispatch () at ../../dix/dispatch.c:439
        result = <value optimized out>
        client = 0x25a7770
        nready = 0
        start_tick = 6860
#15 0x0000000000425c35 in main (argc=9, argv=0x7daf48,
    envp=<value optimized out>) at ../../dix/main.c:283
        i = 1
        alwaysCheckForInput = {0, 1}