miFillRectPolyHelper blows up

[Benjamin Herrenschmidt]

Hi Egbert !

Just noticed that with a fresh build of the server: it blows up when
selecting text in evolution, with the following backtrace (I get
something similar when using XAA instead of EXA, and I did rebuild the
ati driver).

Backtrace:
0: /usr/local/xorg/bin/X(xf86SigHandler+0xa4) [0x10082344]
1: [0x100374]
2: [(nil)]
3: /usr/local/xorg/bin/X(DoChangeGC+0x64) [0x10056d44]
4: /usr/local/xorg/bin/X(miFillPolyHelper+0x37c) [0x100f1d8c]
5: /usr/local/xorg/bin/X(miWideDash+0x8d4) [0x100f6118]
6: /usr/local/xorg/lib/xorg/modules/libfb.so(fbPolyLine+0x94) [0xf771d88]
7: /usr/local/xorg/lib/xorg/modules/libexa.so(ExaCheckPolylines+0xa4) [0xf705f24]
8: /usr/local/xorg/bin/X(miPolyRectangle+0x12c) [0x100e852c]
9: /usr/local/xorg/bin/X [0x10137474]
10: /usr/local/xorg/bin/X(ProcPolyRectangle+0x220) [0x1003e9c0]
11: /usr/local/xorg/bin/X(Dispatch+0x21c) [0x10043c40]
12: /usr/local/xorg/bin/X(main+0x47c) [0x10025170]
13: /lib/libc.so.6 [0xfc558ec]
14: /lib/libc.so.6 [0xfc55a34]

Fatal server error:
Caught signal 11.  Server aborting

I have to go now so no time to track it.. In the XAA case, it happens with shadowfb in the backtrace
but appart from that, it's a similar issues.

Ben.