Bug#473551: libgl1-mesa-dri: Crashes the X server when starting Valve's Portal under Wine on i965

[Mike Hommey <mh@glandium.org>]

On Mon, Mar 31, 2008 at 11:49:06PM +0200, Mike Hommey wrote:
> On Mon, Mar 31, 2008 at 12:55:52PM +0200, Julien Cristau wrote:
> > On Mon, Mar 31, 2008 at 12:17:20 +0200, Mike Hommey wrote:
> > 
> > > Package: libgl1-mesa-dri
> > > Version: 7.0.3~rc2-1
> > > Severity: important
> > > 
> > > I don't really know if this belongs here, but the stacktrace in the
> > > crashed X server logs seem to indicate that somehow i965_dri.so might be
> > > responsible for this crash.
> > 
> > Does this happen with different versions of the dri driver (it'd be nice
> > to try the different 7.0.x versions at snapshot.debian.net)?
> 
> As said on IRC, it crashes with both 7.0.1~rc2-1 and 7.0.3~rc2-2.
> 
> Here is a stacktrace I was able to get after setting
>         Option "NoTrapSignals"  "true"
> 
> (gdb) bt full
> #0  0x00002ba01ab4b249 in brwProgramStringNotify (ctx=0x10f6590, target=<value optimized out>, prog=0x130bf80) at brw_program.c:129
> No locals.

brw_program.c:129 reads:
        p->param_state = p->program.Base.Parameters->StateFlags;

where p is 
        struct brw_vertex_program *p = (struct brw_vertex_program *)prog;

FWIW:
(gdb) 
$2 = {program = {Base = {Id = 1, String = 0x0, RefCount = 2, Target = 34336, Format = 34933, Resident = 1 '\001', Instructions = 0x0, InputsRead = 0, OutputsWritten = 0, 
      TexturesUsed = {0, 0, 0, 0, 0, 0, 0, 0}, Parameters = 0x0, LocalParams = {{0, 0, 0, 0} <repeats 128 times>}, Varying = 0x0, Attributes = 0x0, NumInstructions = 0, 
      NumTemporaries = 0, NumParameters = 0, NumAttributes = 0, NumAddressRegs = 0, NumAluInstructions = 0, NumTexInstructions = 0, NumTexIndirections = 0, 
      NumNativeInstructions = 0, NumNativeTemporaries = 0, NumNativeParameters = 0, NumNativeAttributes = 0, NumNativeAddressRegs = 0, NumNativeAluInstructions = 0, 
      NumNativeTexInstructions = 0, NumNativeTexIndirections = 0}, IsNVProgram = 0 '\0', IsPositionInvariant = 0 '\0', TnlData = 0x0}, id = 5, param_state = 0}

Which means it's a "standard" null pointer dereference (program.Base.Parameters is NULL).

Mike