Bug#813716: GDB backtrace attached

[Stanimir Stoyanov <stanimir@datacentrix.org>]

Its crashing like crazy... I'm attaching an gdb backtrace from the last 
crash
Continuing.

Program received signal SIGABRT, Aborted.
0x00007fe538488507 in __GI_raise (sig=sig@entry=6)
    at ../sysdeps/unix/sysv/linux/raise.c:55
55	../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
#0  0x00007fe538488507 in __GI_raise (sig=sig@entry=6)
    at ../sysdeps/unix/sysv/linux/raise.c:55
        resultvar = 0
        pid = 12388
        selftid = 12388
#1  0x00007fe5384898da in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x460, 
            sa_sigaction = 0x460}, sa_mask = {__val = {1120, 140622472100864, 
              94091300006080, 225, 140622468804194, 0, 384, 0, 3, 
              94091300238736, 1, 140731027897744, 254, 94091299820804, 
              140622486529419, 160}}, sa_flags = 3, 
          sa_restorer = 0x55935686f190}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007fe5384c6a63 in __libc_message (do_abort=do_abort@entry=1, 
    fmt=fmt@entry=0x7fe5385bf838 "*** Error in `%s': %s: 0x%s ***\n")
    at ../sysdeps/posix/libc_fatal.c:175
        ap = {{gp_offset = 40, fp_offset = 21907, 
            overflow_arg_area = 0x7ffe7eed3e90, 
            reg_save_area = 0x7ffe7eed3e20}}
        fd = 40
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#3  0x00007fe5384cbebe in malloc_printerr (action=1, str=0x7fe5385bf920 "free(): corrupted unsorted chunks", ptr=<optimized out>) at malloc.c:4965
        buf = "000055935685b7c0"
        cp = <optimized out>
#4  0x00007fe5384cc69b in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3834
        size = <optimized out>
        fb = <optimized out>
        nextchunk = <optimized out>
        nextsize = <optimized out>
        nextinuse = <optimized out>
        prevsize = <optimized out>
        bck = <optimized out>
        fwd = <optimized out>
        errstr = <optimized out>
        locked = <optimized out>
        __func__ = "_int_free"
#5  0x00007fe533f004a7 in sna_dri2_vblank_handler (event=<optimized out>) at ../../../src/sna/sna_dri2.c:2685
        info = 0x55935685b7c0
        sna = <optimized out>
        draw = <optimized out>
        __func__ = "sna_dri2_vblank_handler"
#6  0x00007fe533e6d4e5 in sna_mode_wakeup (sna=sna@entry=0x7fe53a629000) at ../../../src/sna/sna_display.c:8976
        e = 0x7ffe7eed3fd0
        buffer = "\001\000\000\000 \000\000\000\300\267\205V\223U\000\000n9\005\000*3\v\000=]{\000\000\000\000\000\360\020jV\223U\000\000\020\275\206V\223U\000\000\020\000\000\000\000\000\000\000\000<\177\070\345\177\000\000\060\000\000\000\000\000\000\000\000\220b:\345\177\000\000\060\220b:\345\177\000\000\000\000\000\000\000\000\000\000\030\000\000\000\000\000\000\000\356\370L8\345\177\000\000\002\000\000\000\223U\000\000\000\220b:\345\177\000\000\320@\355~\376\177\000\000:\266\341\063\345\177\000\000\000\220b:\345\177\000\000\067\350\341\063\345\177\000\000XK\004V\223U\000\000\000\220b:\345\177\000\000\320@\355~\376\177\000\000\b\346aV\223U\000\000\360\345aV\223U\000\000"...
        len = 32
        i = 0
        ret = 0
#7  0x00007fe533e711d0 in sna_wakeup_handler (arg=<optimized out>, result=1, read_mask=0x559354a479e0 <LastSelectMask>)
    at ../../../src/sna/sna_driver.c:733
No locals.
#8  0x000055935464561a in WakeupHandler (result=result@entry=1, pReadmask=pReadmask@entry=0x559354a479e0 <LastSelectMask>)
    at ../../dix/dixutils.c:426
        i = 0
        j = <optimized out>
#9  0x000055935479f26f in WaitForSomething (pClientsReady=pClientsReady@entry=0x55935650b340) at ../../os/WaitFor.c:230
        i = 1
        waittime = {tv_sec = 1, tv_usec = 94089848553482}
        wt = 0x559354a3e6e0 <delay_val>
        timeout = <optimized out>
        clientsReadable = {fds_bits = {0 <repeats 16 times>}}
        clientsWritable = {fds_bits = {0 <repeats 16 times>}}
        selecterr = 11
        nready = 0
        devicesReadable = {fds_bits = {94091296666464, 140622395600134, 94091296666464, 0, 93464231415248, 8084796, 34723938776907776, 
            94091300157376, 0, 6255796190612327424, 0, 94091291795904, 94091296666464, 94091296533552, 0, 1}}
        now = <optimized out>
        someReady = <optimized out>
#10 0x000055935464086e in Dispatch () at ../../dix/dispatch.c:359
        clientReady = 0x55935650b340
        result = <optimized out>
        client = <optimized out>
        nready = <optimized out>
        icheck = 0x559354a40250 <checkForInput>
        start_tick = <optimized out>
#11 0x0000559354644a53 in dix_main (argc=8, argv=0x7ffe7eed48c8, envp=<optimized out>) at ../../dix/main.c:300
        i = <optimized out>
        alwaysCheckForInput = {0, 1}
#12 0x00007fe538475870 in __libc_start_main (main=0x55935462edb0 <main>, argc=8, argv=0x7ffe7eed48c8, init=<optimized out>, fini=<optimized out>, 
    rtld_fini=<optimized out>, stack_end=0x7ffe7eed48b8) at libc-start.c:291
        result = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -5090270897277788005, 94091264323008, 140731027900608, 0, 0, -1332523728982007653, 
                -1317476690069315429}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x5593547b36f0 <__libc_csu_init>, 0x7ffe7eed48c8}, data = {
              prev = 0x0, cleanup = 0x0, canceltype = 1417361136}}}
        not_first_call = <optimized out>
#13 0x000055935462ede9 in _start ()
No symbol table info available.