Bug#688082: New testcase and further analysis

[Sven Joachim <svenjoac@gmx.de>]

On 2012-11-20 14:22 +0100, Deekoo wrote:

> I've poked around some more and attached a testcase to reproduce this crash
> without needing Iceweasel.  It looks to me like the codepath leading up to the
> crash only occurs on NV04 chips, and the actual segfault happens in
> drm_nouveau/pushbuf.c:pushbuf_krel - the function uses the return value
> of cli_kref_get without checking for null returns, and cli_kref_get returns
> NULL if it can't find the kref it's looking for.

Thanks for digging into the problem.  Can you please open a bug on
https://bugs.freedesktop.org/ with this analysis and your testcase?
Use product "xorg", component "Driver/nouveau".

Cheers,
       Sven