Bug#618622: xserver-xorg-core: crash when resizing screen while running a fullscreen application
2011/3/17 Michel Dänzer <daenzer@debian.org>:
> On Don, 2011-03-17 at 10:30 +0100, Michal Suchanek wrote:
>> 2011/3/17 Michel Dänzer <daenzer@debian.org>:
>> > On Don, 2011-03-17 at 09:31 +0100, Michal Suchanek wrote:
>> >> 2011/3/17 Michel Dänzer <daenzer@debian.org>:
>> >> > On Don, 2011-03-17 at 00:46 +0100, Michal Suchanek wrote:
>> >> >>
>> >> >> Running a fullscreen d3d application that changes screen mode (such as
>> >> >> Vazteroids, in Wine) causes one screen to go blank and the other to
>> >> >> switch to the resolution the application requested.
>> >> >>
>> >> >> When I run my script that sets the main screen to native resolution and
>> >> >> reenables the other screen and exit the d3d application X crashes.
>> >> >
>> >> > Please try to provide more information about the crash. Preferably a
>> >> > full gdb backtrace, but at least an X log file with a backtrace.
>> >>
>> >> It's a double free (abort) so there is no backtrace in the log. There
>> >> is a gdb backtrace attached to the original report.
>> >
>> > Oh, I didn't notice the attachment, and you didn't mention it.
>> >
>> > Probably the fastest way to track down the problem would be to run the X
>> > server in valgrind.
>>
>> A valgrind log showing some (probably unrelated) issues.
>>
>> As I need to run the X server as root to run in valgrind the
>> environment is different and there is probably some piece missing.
>>
>> I can't reproduce the crash as root with valgrind or without.
>
> The X server always runs as root. You can run the clients from the same
> user accounts as before.
There are some issues like the Xsession script not making sure that
there is at least one client running so that the X server does not
reset and X server crashing instead of resetting but now valgrind
aborts the X server as soon as I run the xrandr script, not after
quitting the application as glibc does.
Thanks
Michal
==28521== Memcheck, a memory error detector
==28521== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al.
==28521== Using Valgrind-3.6.0.SVN-Debian and LibVEX; rerun with -h for copyright info
==28521== Command: Xorg :1
==28521==
X.Org X Server 1.9.99.903 (1.10.0 RC 3)
Release Date: 2011-2-24
X Protocol Version 11, Revision 0
Build Operating System: Linux 2.6.32-5-amd64 x86_64 Debian
Current Operating System: Linux heretic 2.6.37-2-amd64 #1 SMP Sun Feb 27 10:12:22 UTC 2011 x86_64
Kernel command line: BOOT_IMAGE=/boot/vmlinuz-2.6.37-2-amd64 root=UUID=ae7d5095-c8b3-4205-af0e-032b0e124ec3 ro console=ttyS0,115200n8r console=tty0
Build Date: 25 February 2011 02:25:58PM
xorg-server 2:1.9.99.903-1 (Cyril Brulebois <kibi@debian.org>)
Current version of pixman: 0.21.6
Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: "/var/log/Xorg.1.log", Time: Thu Mar 17 10:59:26 2011
(==) Using config file: "/etc/X11/xorg.conf"
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
(EE) Failed to load module "vesa" (module does not exist, 0)
(EE) Failed to load module "fbdev" (module does not exist, 0)
(II) [KMS] Kernel modesetting enabled.
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893B7C4: drmModeGetCrtc (in /lib/libdrm.so.2.4.0)
==28521== by 0x9034BC4: drmmode_pre_init (drmmode_display.c:592)
==28521== by 0x90319BE: RADEONPreInit_KMS (radeon_kms.c:630)
==28521== by 0x46B949: InitOutput (xf86Init.c:519)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff0005c0 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893B63B: drmModeGetEncoder (in /lib/libdrm.so.2.4.0)
==28521== by 0x9034D79: drmmode_pre_init (drmmode_display.c:938)
==28521== by 0x90319BE: RADEONPreInit_KMS (radeon_kms.c:630)
==28521== by 0x46B949: InitOutput (xf86Init.c:519)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff000618 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893BA74: drmModeGetProperty (in /lib/libdrm.so.2.4.0)
==28521== by 0x9035058: drmmode_pre_init (drmmode_display.c:1013)
==28521== by 0x90319BE: RADEONPreInit_KMS (radeon_kms.c:630)
==28521== by 0x46B949: InitOutput (xf86Init.c:519)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff0005e8 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893BA74: drmModeGetProperty (in /lib/libdrm.so.2.4.0)
==28521== by 0x903435F: drmmode_output_get_modes (drmmode_display.c:645)
==28521== by 0x482AED: xf86ProbeOutputModes (xf86Crtc.c:1613)
==28521== by 0x483517: xf86InitialConfiguration (xf86Crtc.c:2376)
==28521== by 0x9034C5A: drmmode_pre_init (drmmode_display.c:1376)
==28521== by 0x90319BE: RADEONPreInit_KMS (radeon_kms.c:630)
==28521== by 0x46B949: InitOutput (xf86Init.c:519)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff000238 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893811B: drmCommandWriteRead (in /lib/libdrm.so.2.4.0)
==28521== by 0x9031A03: RADEONPreInit_KMS (radeon_kms.c:663)
==28521== by 0x46B949: InitOutput (xf86Init.c:519)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff000700 is on thread 1's stack
==28521==
==28521== Warning: noted but unhandled ioctl 0x641e with no size/direction hints
==28521== This could cause spurious value errors to appear.
==28521== See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893811B: drmCommandWriteRead (in /lib/libdrm.so.2.4.0)
==28521== by 0x9265DF3: ??? (in /lib/libdrm_radeon.so.1.0.0)
==28521== by 0x9030AE9: RADEONScreenInit_KMS (radeon_kms.c:1144)
==28521== by 0x42CF6A: AddScreen (dispatch.c:3890)
==28521== by 0x46B39C: InitOutput (xf86Init.c:738)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff00064c is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893811B: drmCommandWriteRead (in /lib/libdrm.so.2.4.0)
==28521== by 0x8F86586: RADEONEngineInit (radeon_accel.c:438)
==28521== by 0x8FE6FD1: RADEONDrawInitCP (radeon_exa_funcs.c:920)
==28521== by 0x8F86B9C: RADEONAccelInit (radeon_accel.c:1086)
==28521== by 0x9030C79: RADEONScreenInit_KMS (radeon_kms.c:948)
==28521== by 0x42CF6A: AddScreen (dispatch.c:3890)
==28521== by 0x46B39C: InitOutput (xf86Init.c:738)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff000604 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893BA74: drmModeGetProperty (in /lib/libdrm.so.2.4.0)
==28521== by 0x90345B6: drmmode_output_create_resources (drmmode_display.c:741)
==28521== by 0x489CF3: xf86RandR12Init (xf86RandR12.c:1552)
==28521== by 0x4850D1: xf86CrtcScreenInit (xf86Crtc.c:781)
==28521== by 0x9030E03: RADEONScreenInit_KMS (radeon_kms.c:1015)
==28521== by 0x42CF6A: AddScreen (dispatch.c:3890)
==28521== by 0x46B39C: InitOutput (xf86Init.c:738)
==28521== by 0x42559C: main (main.c:205)
==28521== Address 0x7ff000528 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x90352EC: drmmode_copy_fb (drmmode_display.c:175)
==28521== by 0x90354FD: drmmode_set_desired_modes (drmmode_display.c:1427)
==28521== by 0x90312F7: RADEONCreateScreenResources_KMS (radeon_kms.c:167)
==28521== by 0x4852A6: xf86CrtcCreateScreenResources (xf86Crtc.c:724)
==28521== by 0x4255FB: main (main.c:217)
==28521== Address 0x7ff000754 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893C27A: drmModeSetCrtc (in /lib/libdrm.so.2.4.0)
==28521== by 0x90335C8: drmmode_set_mode_major (drmmode_display.c:355)
==28521== by 0x90355E7: drmmode_set_desired_modes (drmmode_display.c:1471)
==28521== by 0x90312F7: RADEONCreateScreenResources_KMS (radeon_kms.c:167)
==28521== by 0x4852A6: xf86CrtcCreateScreenResources (xf86Crtc.c:724)
==28521== by 0x4255FB: main (main.c:217)
==28521== Address 0x7ff00059c is on thread 1's stack
==28521==
==28521== Syscall param socketcall.setsockopt(optval) points to uninitialised byte(s)
==28521== at 0x690507A: setsockopt (syscall-template.S:82)
==28521== by 0x4E3274C: udev_monitor_filter_update (in /lib/libudev.so.0.10.0)
==28521== by 0x4E32864: udev_monitor_enable_receiving (in /lib/libudev.so.0.10.0)
==28521== by 0x9032D5B: drmmode_uevent_init (drmmode_display.c:1595)
==28521== by 0x9031306: RADEONCreateScreenResources_KMS (radeon_kms.c:170)
==28521== by 0x4852A6: xf86CrtcCreateScreenResources (xf86Crtc.c:724)
==28521== by 0x4255FB: main (main.c:217)
==28521== Address 0x7ff000742 is on thread 1's stack
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x6DA3290: inflateReset2 (in /usr/lib/libz.so.1.2.3.4)
==28521== by 0x6DA337F: inflateInit2_ (in /usr/lib/libz.so.1.2.3.4)
==28521== by 0x5B5BB05: BufFilePushZIP (in /usr/lib/libXfont.so.1.4.1)
==28521== by 0x5B57655: FontFileOpen (in /usr/lib/libXfont.so.1.4.1)
==28521== by 0x5B68CE3: ??? (in /usr/lib/libXfont.so.1.4.1)
==28521== by 0x5B59B45: ??? (in /usr/lib/libXfont.so.1.4.1)
==28521== by 0x5B5ABFF: FontFileOpenFont (in /usr/lib/libXfont.so.1.4.1)
==28521== by 0x43A219: doOpenFont (dixfonts.c:285)
==28521== by 0x43A6BE: OpenFont (dixfonts.c:466)
==28521== by 0x43A782: SetDefaultFont (dixfonts.c:135)
==28521== by 0x425678: main (main.c:231)
==28521==
The XKEYBOARD keymap compiler (xkbcomp) reports:
> Warning: Multiple definitions of the FOUR_LEVEL_KEYPAD key type
> Earlier definition ignored
Errors from xkbcomp are not fatal to the X server
(EE) Microsoft Microsoft® Digital Media oard 3000: failed to initialize for relative axes.
==28521== Warning: noted but unhandled ioctl 0x541e with no size/direction hints
==28521== This could cause spurious value errors to appear.
==28521== See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==28521== Syscall param ioctl(generic) points to unaddressable byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0xB1B543B: ??? (in /usr/lib/xorg/modules/input/wacom_drv.so)
==28521== by 0xB1AD973: ??? (in /usr/lib/xorg/modules/input/wacom_drv.so)
==28521== by 0xB1ADCF7: ??? (in /usr/lib/xorg/modules/input/wacom_drv.so)
==28521== by 0x44ED2B: EnableDevice (devices.c:390)
==28521== by 0x46DC7D: xf86NewInputDevice (xf86Xinput.c:820)
==28521== by 0x511516: device_added (udev.c:194)
==28521== by 0x511BED: config_udev_init (udev.c:295)
==28521== by 0x46C288: config_init (config.c:39)
==28521== by 0x46AED4: InitInput (xf86Init.c:823)
==28521== by 0x425722: main (main.c:259)
==28521== Address 0x1 is not stack'd, malloc'd or (recently) free'd
==28521==
==28521== Warning: noted but unhandled ioctl 0x541e with no size/direction hints
==28521== This could cause spurious value errors to appear.
==28521== See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==28521== Syscall param writev(vector[...]) points to uninitialised byte(s)
==28521== at 0x68FCF0B: writev (writev.c:51)
==28521== by 0x49AB6B: _XSERVTransSocketWritev (Xtranssock.c:2174)
==28521== by 0x4611FC: FlushClient (io.c:937)
==28521== by 0x461DA8: FlushAllOutput (io.c:681)
==28521== by 0x43344F: Dispatch (dispatch.c:452)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xb08204c is 12 bytes inside a block of size 4,096 alloc'd
==28521== at 0x4C2380C: calloc (vg_replace_malloc.c:467)
==28521== by 0x461C10: WriteToClient (io.c:1078)
==28521== by 0x432E08: ProcEstablishConnection (dispatch.c:3656)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893C4F7: drmModeAddFB (in /lib/libdrm.so.2.4.0)
==28521== by 0x9033AD5: drmmode_xf86crtc_resize (drmmode_display.c:1237)
==28521== by 0x48A4BA: xf86RandR12ScreenSetSize (xf86RandR12.c:686)
==28521== by 0x4B5BA1: ProcRRSetScreenSize (rrscreen.c:301)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7ff000630 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893B6A3: drmModeGetFB (in /lib/libdrm.so.2.4.0)
==28521== by 0x90352C4: drmmode_copy_fb (drmmode_display.c:170)
==28521== by 0x90354FD: drmmode_set_desired_modes (drmmode_display.c:1427)
==28521== by 0x9030729: RADEONEnterVT_KMS (radeon_kms.c:1056)
==28521== by 0x516520: xf86XVEnterVT (xf86xv.c:1325)
==28521== by 0x489EAC: xf86RandR12EnterVT (xf86RandR12.c:1739)
==28521== by 0x82FDE2B: glxDRIEnterVT (glxdri2.c:616)
==28521== by 0x474371: xf86Wakeup (xf86Events.c:527)
==28521== by 0x43AAFA: WakeupHandler (dixutils.c:419)
==28521== by 0x464E9E: WaitForSomething (WaitFor.c:235)
==28521== Address 0x7ff000284 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x90352EC: drmmode_copy_fb (drmmode_display.c:175)
==28521== by 0x90354FD: drmmode_set_desired_modes (drmmode_display.c:1427)
==28521== by 0x9030729: RADEONEnterVT_KMS (radeon_kms.c:1056)
==28521== by 0x516520: xf86XVEnterVT (xf86xv.c:1325)
==28521== by 0x489EAC: xf86RandR12EnterVT (xf86RandR12.c:1739)
==28521== by 0x82FDE2B: glxDRIEnterVT (glxdri2.c:616)
==28521== by 0x474371: xf86Wakeup (xf86Events.c:527)
==28521== by 0x43AAFA: WakeupHandler (dixutils.c:419)
==28521== by 0x464E9E: WaitForSomething (WaitFor.c:235)
==28521== by 0x4331D1: Dispatch (dispatch.c:367)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7ff0002c4 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893C3E5: drmModeMoveCursor (in /lib/libdrm.so.2.4.0)
==28521== by 0x549D3B: xf86_set_cursor_position (xf86Cursors.c:388)
==28521== by 0x54C081: xf86SetCursor (xf86HWCurs.c:152)
==28521== by 0x54A4FF: xf86CursorSetCursor (xf86Cursor.c:350)
==28521== by 0x54A9D1: xf86CursorEnableDisableFBAccess (xf86Cursor.c:235)
==28521== by 0x4743AF: xf86Wakeup (xf86Events.c:532)
==28521== by 0x43AAFA: WakeupHandler (dixutils.c:419)
==28521== by 0x464E9E: WaitForSomething (WaitFor.c:235)
==28521== by 0x4331D1: Dispatch (dispatch.c:367)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7ff000270 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893C42A: drmModeSetCursor (in /lib/libdrm.so.2.4.0)
==28521== by 0x549D68: xf86_set_cursor_position (xf86Cursors.c:307)
==28521== by 0x54C081: xf86SetCursor (xf86HWCurs.c:152)
==28521== by 0x54A4FF: xf86CursorSetCursor (xf86Cursor.c:350)
==28521== by 0x54A9D1: xf86CursorEnableDisableFBAccess (xf86Cursor.c:235)
==28521== by 0x4743AF: xf86Wakeup (xf86Events.c:532)
==28521== by 0x43AAFA: WakeupHandler (dixutils.c:419)
==28521== by 0x464E9E: WaitForSomething (WaitFor.c:235)
==28521== by 0x4331D1: Dispatch (dispatch.c:367)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7ff000268 is on thread 1's stack
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x8F61CD2: RADEONInit3DEngine (radeon_commonfuncs.c:77)
==28521== by 0x8FFBE7F: R300PrepareCompositeCP (radeon_exa_render.c:1494)
==28521== by 0x969C864: exaTryDriverComposite (exa_render.c:759)
==28521== by 0x969CF59: exaComposite (exa_render.c:1033)
==28521== by 0x4CCF7F: damageComposite (damage.c:613)
==28521== by 0x4C5BD8: ProcRenderComposite (render.c:728)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x8F61CD2: RADEONInit3DEngine (radeon_commonfuncs.c:77)
==28521== by 0x8FFBE7F: R300PrepareCompositeCP (radeon_exa_render.c:1494)
==28521== by 0x969E1D8: exaTryDriverCompositeRects (exa_render.c:441)
==28521== by 0x969E5DE: exaCompositeRects (exa_render.c:592)
==28521== by 0x969A7D4: exaGlyphs (exa_glyphs.c:621)
==28521== by 0x4CD22F: damageGlyphs (damage.c:691)
==28521== by 0x4C6B77: ProcRenderCompositeGlyphs (render.c:1442)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x8F61CD2: RADEONInit3DEngine (radeon_commonfuncs.c:77)
==28521== by 0x8FFBE7F: R300PrepareCompositeCP (radeon_exa_render.c:1494)
==28521== by 0x8FFFD3D: RadeonCompositeTileCP (radeon_exa_render.c:2241)
==28521== by 0x900275B: RadeonCompositeCP (radeon_exa_render.c:2450)
==28521== by 0x969C973: exaTryDriverComposite (exa_render.c:777)
==28521== by 0x969CF59: exaComposite (exa_render.c:1033)
==28521== by 0x969D086: exaComposite (exa_render.c:879)
==28521== by 0x4CCF7F: damageComposite (damage.c:613)
==28521== by 0x969A87B: exaGlyphs (exa_glyphs.c:851)
==28521== by 0x4CD22F: damageGlyphs (damage.c:691)
==28521== by 0x4C6B77: ProcRenderCompositeGlyphs (render.c:1442)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482D8B: fbPixmapToRegion (fbpixmap.c:190)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482E69: fbPixmapToRegion (fbpixmap.c:197)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482ED0: fbPixmapToRegion (fbpixmap.c:235)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482ED4: fbPixmapToRegion (fbpixmap.c:246)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482F5A: fbPixmapToRegion (fbpixmap.c:259)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482DCB: fbPixmapToRegion (fbpixmap.c:204)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482DCF: fbPixmapToRegion (fbpixmap.c:215)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482DB2: fbPixmapToRegion (fbpixmap.c:206)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482D9B: fbPixmapToRegion (fbpixmap.c:192)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482DD4: fbPixmapToRegion (fbpixmap.c:218)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482E24: fbPixmapToRegion (fbpixmap.c:218)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9483097: fbPixmapToRegion (fbpixmap.c:218)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482F27: fbPixmapToRegion (fbpixmap.c:249)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA1D8: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA2D9: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA35B: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EE531: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EE675: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA1D8: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EBAD0: pixman_region_copy (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE6A4: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA2D9: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EBAD0: pixman_region_copy (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE6A4: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA35B: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EBAD0: pixman_region_copy (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE6A4: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA1D8: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAB0E: pixman_region_translate (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56543E: miComputeCompositeClip (regionstr.h:284)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA2D9: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAB0E: pixman_region_translate (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56543E: miComputeCompositeClip (regionstr.h:284)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA35B: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAB0E: pixman_region_translate (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56543E: miComputeCompositeClip (regionstr.h:284)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EAB6F: pixman_region_translate (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56543E: miComputeCompositeClip (regionstr.h:284)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA1D8: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56A473: miDoCopy (regionstr.h:199)
==28521== by 0x96976CE: exaCopyArea (exa_accel.c:608)
==28521== by 0x4CFFDB: damageCopyArea (damage.c:908)
==28521== by 0x430788: ProcCopyArea (dispatch.c:1644)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA2D9: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56A473: miDoCopy (regionstr.h:199)
==28521== by 0x96976CE: exaCopyArea (exa_accel.c:608)
==28521== by 0x4CFFDB: damageCopyArea (damage.c:908)
==28521== by 0x430788: ProcCopyArea (dispatch.c:1644)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA35B: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56A473: miDoCopy (regionstr.h:199)
==28521== by 0x96976CE: exaCopyArea (exa_accel.c:608)
==28521== by 0x4CFFDB: damageCopyArea (damage.c:908)
==28521== by 0x430788: ProcCopyArea (dispatch.c:1644)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA1D8: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAE78: pixman_region_fini (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x451CC8: RegionDestroy (region.c:254)
==28521== by 0x565249: miDestroyClip (migc.c:71)
==28521== by 0x56566A: miChangeClip (migc.c:80)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA2D9: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAE78: pixman_region_fini (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x451CC8: RegionDestroy (region.c:254)
==28521== by 0x565249: miDestroyClip (migc.c:71)
==28521== by 0x56566A: miChangeClip (migc.c:80)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA35B: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAE78: pixman_region_fini (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x451CC8: RegionDestroy (region.c:254)
==28521== by 0x565249: miDestroyClip (migc.c:71)
==28521== by 0x56566A: miChangeClip (migc.c:80)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482FB8: fbPixmapToRegion (fbpixmap.c:261)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893C42A: drmModeSetCursor (in /lib/libdrm.so.2.4.0)
==28521== by 0x548E41: xf86_hide_cursors (xf86Cursors.c:281)
==28521== by 0x54A62B: xf86CursorSetCursor (xf86Cursor.c:309)
==28521== by 0x54A98F: xf86CursorEnableDisableFBAccess (xf86Cursor.c:219)
==28521== by 0x48A711: xf86RandR12ScreenSetSize (xf86RandR12.c:683)
==28521== by 0x4B5BA1: ProcRRSetScreenSize (rrscreen.c:301)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7ff000618 is on thread 1's stack
==28521==
==28521== Invalid read of size 1
==28521== at 0x4C25A20: strncpy (mc_replace_strmem.c:339)
==28521== by 0x9033572: drmmode_set_mode_major (drmmode_display.c:135)
==28521== by 0x9033B85: drmmode_xf86crtc_resize (drmmode_display.c:1270)
==28521== by 0x48A4BA: xf86RandR12ScreenSetSize (xf86RandR12.c:686)
==28521== by 0x4B5BA1: ProcRRSetScreenSize (rrscreen.c:301)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7836fa0 is 560 bytes inside a block of size 1,008 free'd
==28521== at 0x4C240FD: free (vg_replace_malloc.c:366)
==28521== by 0x58ED3B3: ??? (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE5B3: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x55FD0C: miClearToBackground (regionstr.h:199)
==28521== by 0x42F4A0: ProcClearToBackground (dispatch.c:1610)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Invalid read of size 1
==28521== at 0x4C25A40: strncpy (mc_replace_strmem.c:339)
==28521== by 0x9033572: drmmode_set_mode_major (drmmode_display.c:135)
==28521== by 0x9033B85: drmmode_xf86crtc_resize (drmmode_display.c:1270)
==28521== by 0x48A4BA: xf86RandR12ScreenSetSize (xf86RandR12.c:686)
==28521== by 0x4B5BA1: ProcRRSetScreenSize (rrscreen.c:301)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7836fa1 is 561 bytes inside a block of size 1,008 free'd
==28521== at 0x4C240FD: free (vg_replace_malloc.c:366)
==28521== by 0x58ED3B3: ??? (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE5B3: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x55FD0C: miClearToBackground (regionstr.h:199)
==28521== by 0x42F4A0: ProcClearToBackground (dispatch.c:1610)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893C4F7: drmModeAddFB (in /lib/libdrm.so.2.4.0)
==28521== by 0x9033885: drmmode_crtc_shadow_allocate (drmmode_display.c:468)
==28521== by 0x48C075: xf86CrtcRotate (xf86Rotate.c:438)
==28521== by 0x9033371: drmmode_set_mode_major (drmmode_display.c:340)
==28521== by 0x485B01: xf86CrtcSetModeTransform (xf86Crtc.c:302)
==28521== by 0x48A235: xf86RandR12CrtcSet (xf86RandR12.c:1200)
==28521== by 0x4B388F: RRCrtcSet (rrcrtc.c:328)
==28521== by 0x4B3F6A: ProcRRSetCrtcConfig (rrcrtc.c:947)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7fefffe90 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x893C42A: drmModeSetCursor (in /lib/libdrm.so.2.4.0)
==28521== by 0x549BA6: xf86_set_cursor_position (xf86Cursors.c:281)
==28521== by 0x5498B3: xf86_reload_cursors (xf86Cursors.c:663)
==28521== by 0x903365D: drmmode_set_mode_major (drmmode_display.c:378)
==28521== by 0x485B01: xf86CrtcSetModeTransform (xf86Crtc.c:302)
==28521== by 0x48A235: xf86RandR12CrtcSet (xf86RandR12.c:1200)
==28521== by 0x4B388F: RRCrtcSet (rrcrtc.c:328)
==28521== by 0x4B3F6A: ProcRRSetCrtcConfig (rrcrtc.c:947)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7feffffa8 is on thread 1's stack
==28521==
==28521== Syscall param writev(vector[...]) points to uninitialised byte(s)
==28521== at 0x68FCF0B: writev (writev.c:51)
==28521== by 0x49AB6B: _XSERVTransSocketWritev (Xtranssock.c:2174)
==28521== by 0x4611FC: FlushClient (io.c:937)
==28521== by 0x462E86: CloseDownConnection (connection.c:1036)
==28521== by 0x432F75: CloseDownClient (dispatch.c:3432)
==28521== by 0x433595: Dispatch (dispatch.c:441)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xc0d2bbf is 15 bytes inside a block of size 4,096 alloc'd
==28521== at 0x4C2380C: calloc (vg_replace_malloc.c:467)
==28521== by 0x461C10: WriteToClient (io.c:1078)
==28521== by 0x4B4063: ProcRRSetCrtcConfig (rrcrtc.c:972)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9482EB2: fbPixmapToRegion (fbpixmap.c:237)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA27C: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA27C: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EBAD0: pixman_region_copy (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE6A4: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56542A: miComputeCompositeClip (regionstr.h:199)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA27C: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAB0E: pixman_region_translate (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56543E: miComputeCompositeClip (regionstr.h:284)
==28521== by 0x947F197: fbValidateGC (fbgc.c:206)
==28521== by 0x9691C39: exaValidateGC (exa.c:550)
==28521== by 0x4D1267: damageValidateGC (damage.c:485)
==28521== by 0x446E13: ValidateGC (gc.c:79)
==28521== by 0x4306E7: ProcCopyArea (dispatch.c:1628)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA27C: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EE468: pixman_region_intersect (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x56A473: miDoCopy (regionstr.h:199)
==28521== by 0x96976CE: exaCopyArea (exa_accel.c:608)
==28521== by 0x4CFFDB: damageCopyArea (damage.c:908)
==28521== by 0x430788: ProcCopyArea (dispatch.c:1644)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x58EA27C: pixman_region_selfcheck (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x58EAE78: pixman_region_fini (in /usr/lib/libpixman-1.so.0.21.6)
==28521== by 0x451CC8: RegionDestroy (region.c:254)
==28521== by 0x565249: miDestroyClip (migc.c:71)
==28521== by 0x56566A: miChangeClip (migc.c:80)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x9483120: fbPixmapToRegion (fbpixmap.c:249)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Conditional jump or move depends on uninitialised value(s)
==28521== at 0x948315D: fbPixmapToRegion (fbpixmap.c:279)
==28521== by 0x9691E30: exaBitmapToRegion (exa.c:681)
==28521== by 0x5656EB: miChangeClip (scrnintstr.h:551)
==28521== by 0x9690980: exaChangeClip (exa.c:601)
==28521== by 0x4D0F20: damageChangeClip (damage.c:524)
==28521== by 0x447C37: ChangeGC (gc.c:341)
==28521== by 0x448730: ChangeGCXIDs (gc.c:464)
==28521== by 0x430A71: ProcChangeGC (dispatch.c:1494)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Syscall param writev(vector[...]) points to uninitialised byte(s)
==28521== at 0x68FCF0B: writev (writev.c:51)
==28521== by 0x49AB6B: _XSERVTransSocketWritev (Xtranssock.c:2174)
==28521== by 0x4611FC: FlushClient (io.c:937)
==28521== by 0x461A25: WriteToClient (io.c:859)
==28521== by 0x82F05C2: __glXDisp_GetVisualConfigs (glxcmds.c:1019)
==28521== by 0x82F3A81: __glXDispatch (glxext.c:583)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xb6d3401 is 1 bytes inside a block of size 4,096 alloc'd
==28521== at 0x4C2380C: calloc (vg_replace_malloc.c:467)
==28521== by 0x461C10: WriteToClient (io.c:1078)
==28521== by 0x4B4063: ProcRRSetCrtcConfig (rrcrtc.c:972)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8937ED7: drmIoctl (in /lib/libdrm.so.2.4.0)
==28521== by 0x9265AA1: radeon_gem_get_kernel_name (in /lib/libdrm_radeon.so.1.0.0)
==28521== by 0x902F272: radeon_dri2_create_buffer (radeon_dri2.c:325)
==28521== by 0x8B417F2: allocate_or_reuse_buffer (dri2.c:343)
==28521== by 0x8B42A04: do_get_buffers (dri2.c:448)
==28521== by 0x8B42CDF: DRI2GetBuffersWithFormat (dri2.c:524)
==28521== by 0x8B443A5: ProcDRI2Dispatch (dri2ext.c:302)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7ff0005a4 is on thread 1's stack
==28521==
==28521== Syscall param ioctl(generic) points to uninitialised byte(s)
==28521== at 0x68FCE27: ioctl (syscall-template.S:82)
==28521== by 0x8938F72: drmWaitVBlank (in /lib/libdrm.so.2.4.0)
==28521== by 0x902EEDC: radeon_dri2_get_msc (radeon_dri2.c:789)
==28521== by 0x8B437DC: DRI2CreateDrawable (dri2.c:173)
==28521== by 0x8B44259: ProcDRI2Dispatch (dri2ext.c:183)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0x7ff000698 is on thread 1's stack
==28521==
==28521== Invalid write of size 1
==28521== at 0x4C26044: memcpy (mc_replace_strmem.c:497)
==28521== by 0x8FF277A: RADEONDownloadFromScreenCS (radeon_exa_funcs.c:667)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695D79: exaPrepareAccessReg_mixed (exa_migration_mixed.c:247)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0040 is 0 bytes after a block of size 5,242,880 alloc'd
==28521== at 0x4C244E8: malloc (vg_replace_malloc.c:236)
==28521== by 0x9695DAF: exaPrepareAccessReg_mixed (exa_migration_mixed.c:203)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Invalid write of size 1
==28521== at 0x4C2604C: memcpy (mc_replace_strmem.c:497)
==28521== by 0x8FF277A: RADEONDownloadFromScreenCS (radeon_exa_funcs.c:667)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695D79: exaPrepareAccessReg_mixed (exa_migration_mixed.c:247)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0041 is 1 bytes after a block of size 5,242,880 alloc'd
==28521== at 0x4C244E8: malloc (vg_replace_malloc.c:236)
==28521== by 0x9695DAF: exaPrepareAccessReg_mixed (exa_migration_mixed.c:203)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Invalid write of size 1
==28521== at 0x4C26055: memcpy (mc_replace_strmem.c:497)
==28521== by 0x8FF277A: RADEONDownloadFromScreenCS (radeon_exa_funcs.c:667)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695D79: exaPrepareAccessReg_mixed (exa_migration_mixed.c:247)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0042 is 2 bytes after a block of size 5,242,880 alloc'd
==28521== at 0x4C244E8: malloc (vg_replace_malloc.c:236)
==28521== by 0x9695DAF: exaPrepareAccessReg_mixed (exa_migration_mixed.c:203)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Invalid write of size 1
==28521== at 0x4C2605E: memcpy (mc_replace_strmem.c:497)
==28521== by 0x8FF277A: RADEONDownloadFromScreenCS (radeon_exa_funcs.c:667)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695D79: exaPrepareAccessReg_mixed (exa_migration_mixed.c:247)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0043 is 3 bytes after a block of size 5,242,880 alloc'd
==28521== at 0x4C244E8: malloc (vg_replace_malloc.c:236)
==28521== by 0x9695DAF: exaPrepareAccessReg_mixed (exa_migration_mixed.c:203)
==28521== by 0x969ED93: ExaCheckImageGlyphBlt (exa_unaccel.c:326)
==28521== by 0x56766D: miImageText8 (mipolytext.c:114)
==28521== by 0x4D07C6: damageImageText8 (damage.c:1547)
==28521== by 0x4399CC: doImageText (dixfonts.c:1559)
==28521== by 0x439A4F: ImageText (dixfonts.c:1604)
==28521== by 0x430342: ProcImageText8 (dispatch.c:2290)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
==28521==
==28521== Invalid read of size 1
==28521== at 0x4C25F98: memcpy (mc_replace_strmem.c:497)
==28521== by 0x90036E9: RADEONUploadToScreenCS (radeon_exa_funcs.c:543)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695A60: exaDoMigration_mixed (exa_migration_mixed.c:113)
==28521== by 0x969C7C6: exaTryDriverComposite (exa_render.c:734)
==28521== by 0x969CF59: exaComposite (exa_render.c:1033)
==28521== by 0x4CCF7F: damageComposite (damage.c:613)
==28521== by 0x48BC32: xf86RotateBlockHandler (xf86Rotate.c:135)
==28521== by 0x43A9BF: BlockHandler (dixutils.c:385)
==28521== by 0x464E0B: WaitForSomething (WaitFor.c:219)
==28521== by 0x4331D1: Dispatch (dispatch.c:367)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0c3f is not stack'd, malloc'd or (recently) free'd
==28521==
==28521== Invalid read of size 1
==28521== at 0x4C25FA1: memcpy (mc_replace_strmem.c:497)
==28521== by 0x90036E9: RADEONUploadToScreenCS (radeon_exa_funcs.c:543)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695A60: exaDoMigration_mixed (exa_migration_mixed.c:113)
==28521== by 0x969C7C6: exaTryDriverComposite (exa_render.c:734)
==28521== by 0x969CF59: exaComposite (exa_render.c:1033)
==28521== by 0x4CCF7F: damageComposite (damage.c:613)
==28521== by 0x48BC32: xf86RotateBlockHandler (xf86Rotate.c:135)
==28521== by 0x43A9BF: BlockHandler (dixutils.c:385)
==28521== by 0x464E0B: WaitForSomething (WaitFor.c:219)
==28521== by 0x4331D1: Dispatch (dispatch.c:367)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0c3e is not stack'd, malloc'd or (recently) free'd
==28521==
==28521== Invalid read of size 1
==28521== at 0x4C25FAC: memcpy (mc_replace_strmem.c:497)
==28521== by 0x90036E9: RADEONUploadToScreenCS (radeon_exa_funcs.c:543)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695A60: exaDoMigration_mixed (exa_migration_mixed.c:113)
==28521== by 0x969C7C6: exaTryDriverComposite (exa_render.c:734)
==28521== by 0x969CF59: exaComposite (exa_render.c:1033)
==28521== by 0x4CCF7F: damageComposite (damage.c:613)
==28521== by 0x48BC32: xf86RotateBlockHandler (xf86Rotate.c:135)
==28521== by 0x43A9BF: BlockHandler (dixutils.c:385)
==28521== by 0x464E0B: WaitForSomething (WaitFor.c:219)
==28521== by 0x4331D1: Dispatch (dispatch.c:367)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0c3d is not stack'd, malloc'd or (recently) free'd
==28521==
==28521== Invalid read of size 1
==28521== at 0x4C25FB7: memcpy (mc_replace_strmem.c:497)
==28521== by 0x90036E9: RADEONUploadToScreenCS (radeon_exa_funcs.c:543)
==28521== by 0x9693326: exaCopyDirty (exa_migration_classic.c:220)
==28521== by 0x9695A60: exaDoMigration_mixed (exa_migration_mixed.c:113)
==28521== by 0x969C7C6: exaTryDriverComposite (exa_render.c:734)
==28521== by 0x969CF59: exaComposite (exa_render.c:1033)
==28521== by 0x4CCF7F: damageComposite (damage.c:613)
==28521== by 0x48BC32: xf86RotateBlockHandler (xf86Rotate.c:135)
==28521== by 0x43A9BF: BlockHandler (dixutils.c:385)
==28521== by 0x464E0B: WaitForSomething (WaitFor.c:219)
==28521== by 0x4331D1: Dispatch (dispatch.c:367)
==28521== by 0x42575A: main (main.c:287)
==28521== Address 0xd4c0c3c is not stack'd, malloc'd or (recently) free'd
==28521==
valgrind: m_mallocfree.c:225 (mk_plain_bszB): Assertion 'bszB != 0' failed.
valgrind: This is probably caused by your program erroneously writing past the
end of a heap block and corrupting heap metadata. If you fix any
invalid writes reported by Memcheck, this assertion failure will
probably go away. Please try that before reporting this as a bug.
==28521== at 0x3802B0A7: report_and_quit (m_libcassert.c:191)
==28521== by 0x3802B2E0: vgPlain_assert_fail (m_libcassert.c:265)
==28521== by 0x38034CCD: unlinkBlock (m_mallocfree.c:225)
==28521== by 0x380366A4: vgPlain_arena_malloc (m_mallocfree.c:1381)
==28521== by 0x38002CBC: vgMemCheck_new_block (mc_malloc_wrappers.c:199)
==28521== by 0x380030EA: vgMemCheck_malloc (mc_malloc_wrappers.c:236)
==28521== by 0x380662C1: vgPlain_scheduler (scheduler.c:1394)
==28521== by 0x3808F194: run_a_thread_NORETURN (syswrap-linux.c:94)
sched status:
running_tid=1
Thread 1: status = VgTs_Runnable
==28521== at 0x4C244E8: malloc (vg_replace_malloc.c:236)
==28521== by 0x96984CB: exaHWCopyNtoN (exa_accel.c:397)
==28521== by 0x96991E4: exaCopyNtoN (exa_accel.c:584)
==28521== by 0x569FA4: miCopyRegion (micopy.c:137)
==28521== by 0x56A649: miDoCopy (micopy.c:334)
==28521== by 0x96976CE: exaCopyArea (exa_accel.c:608)
==28521== by 0x4CFFDB: damageCopyArea (damage.c:908)
==28521== by 0x430788: ProcCopyArea (dispatch.c:1644)
==28521== by 0x4334D0: Dispatch (dispatch.c:431)
==28521== by 0x42575A: main (main.c:287)
Note: see also the FAQ in the source distribution.
It contains workarounds to several common problems.
In particular, if Valgrind aborted or crashed after
identifying problems in your program, there's a good chance
that fixing those problems will prevent Valgrind aborting or
crashing, especially if it happened in m_mallocfree.c.
If that doesn't help, please report this bug to: www.valgrind.org
In the bug report, send all the above text, the valgrind
version, and what OS and version you are using. Thanks.
Reply to: