Bug#573994: Have similar crash with nvidia
full backtrace from gdb:
Continuing.
Program received signal SIGUSR1, User defined signal 1.
Program received signal SIGUSR1, User defined signal 1.
Program received signal SIGUSR1, User defined signal 1.
Program received signal SIGUSR1, User defined signal 1.
Program received signal SIGUSR1, User defined signal 1.
Program received signal SIGSEGV, Segmentation fault.
0xb7717eb0 in ?? () from /usr/lib/libpixman-1.so.0
#0 0xb7717eb0 in ?? () from /usr/lib/libpixman-1.so.0
No symbol table info available.
#1 0xb77180c0 in ?? () from /usr/lib/libpixman-1.so.0
No symbol table info available.
#2 0xb76df9e3 in ?? () from /usr/lib/libpixman-1.so.0
No symbol table info available.
#3 0xb77053a8 in pixman_blt () from /usr/lib/libpixman-1.so.0
No symbol table info available.
#4 0xb61af4dd in fbCopyNtoN (pSrcDrawable=0xaccbd008, pDstDrawable=0x9088e48,
pGC=0x9ebbaa8, pbox=0xff966b40, nbox=5, dx=0, dy=0, reverse=0, upsidedown=0,
bitplane=0, closure=0x0) at ../../fb/fbcopy.c:97
alu = 3 '\003'
pm = 4294967295
src = 0xaccbd038
srcStride = 1440
srcBpp = 32
srcXoff = 0
srcYoff = 0
dst = 0x0
dstStride = 1440
dstBpp = <value optimized out>
dstXoff = 0
dstYoff = 0
#5 0x081a6eab in miCopyRegion (pSrcDrawable=0xaccbd008,
pDstDrawable=0x9088e48, pGC=0x9ebbaa8, pDstRegion=0xbfdb5ed4, dx=0, dy=0,
copyProc=0xb61af290 <fbCopyNtoN>, bitPlane=0, closure=0x0) at
../../mi/micopy.c:138
reverse = 136200684
upsidedown = -1395929080
pbox = <value optimized out>
nbox = 5
pboxNew1 = 0x809c63b
pboxNew2 = <value optimized out>
pboxBase = <value optimized out>
pboxNext = <value optimized out>
pboxTmp = <value optimized out>
#6 0x081a73ed in miDoCopy (pSrcDrawable=0xaccbd008, pDstDrawable=0x9088e48,
pGC=0x9ebbaa8, xIn=1174, yIn=852, widthSrc=265, heightSrc=24, xOut=1174,
yOut=852, copyProc=0xb61af290 <fbCopyNtoN>, bitPlane=0, closure=0x0) at
../../mi/micopy.c:338
prgnSrcClip = 0x0
freeSrcClip = 0
prgnExposed = <value optimized out>
rgnDst = {extents = {x1 = 1174, y1 = 852, x2 = 1439, y2 = 876}, data =
0xc5229d8}
dx = 0
dy = 0
box_x1 = 1174
box_y1 = 154776384
box_x2 = <value optimized out>
box_y2 = <value optimized out>
fastSrc = 1
fastDst = 0
fastExpose = 1
#7 0xb61aea48 in fbCopyArea (pSrcDrawable=0x4af468, pDstDrawable=0xad16c4a4,
pGC=0x9ebbaa8, xIn=1174, yIn=852, widthSrc=265, heightSrc=24, xOut=1174,
yOut=852) at ../../fb/fbcopy.c:344
copy = <value optimized out>
#8 0x08117063 in damageCopyArea (pSrc=0xaccbd008, pDst=0x9088e48,
pGC=0x9ebbaa8, srcx=1174, srcy=852, width=265, height=24, dstx=1174, dsty=852)
at ../../../miext/damage/damage.c:949
ret = 0x808059f
pGCPriv = 0x9ebdb88
oldFuncs = 0x81eb7e0
#9 0xb7369da1 in ShadowCopyArea (pSrc=0xaccbd008, pDst=0x9088e48,
pGC=0x9ebbaa8, srcx=1174, srcy=852, width=265, height=24, dstx=1174, dsty=852)
at ../../../../hw/xfree86/shadowfb/shadow.c:720
ret = 0x4af468
box = {x1 = 24616, y1 = -16421, x2 = -12280, y2 = -21301}
pPriv = <value optimized out>
pGCPriv = 0x9eb9078
oldFuncs = 0xb736d2c0
#10 0x08072005 in ProcCopyArea (client=0x8c329c8) at ../../dix/dispatch.c:1725
pDst = 0x9088e48
pSrc = 0xaccbd008
pGC = 0x9ebbaa8
pRgn = <value optimized out>
rc = 4912232
#11 0x08074187 in Dispatch () at ../../dix/dispatch.c:439
result = <value optimized out>
client = 0x8c329c8
nready = 0
start_tick = 727200
#12 0x080669aa in main (argc=8, argv=0xbfdb6214, envp=0xbfdb6238) at
../../dix/main.c:283
i = <value optimized out>
alwaysCheckForInput = {0, 1}
A debugging session is active.
Inferior 1 [process 1450] will be detached.
Quit anyway? (y or n) LND: Sending signal 11 to Thread 0xb741a6c0 (LWP 1450)
Detaching from program: /usr/bin/Xorg, process 1450
Reply to: