Created attachment 15997 [details]
test case

Running attached test case, it aborts with seg fault when call glCopyTexture2D. Following is the bt info:

#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb7d7a875 in raise () from /lib/tls/i686/cmov/libc.so.6
#2  0xb7d7c201 in abort () from /lib/tls/i686/cmov/libc.so.6
#3  0xb7d73b6e in __assert_fail () from /lib/tls/i686/cmov/libc.so.6
#4  0xb784821b in intelTexImage (ctx=0x805b990, dims=2, target=3553, level=0, 
    internalFormat=6407, width=8, height=4, depth=1, border=0, format=6408, 
    type=5121, pixels=0x8321c48, unpack=0x8067644, texObj=0x8051340, 
    texImage=0x80cf450, imageSize=0, compressed=0) at intel_tex_image.c:352
#5  0xb784850a in intelTexImage2D (ctx=0x805b990, target=3553, level=0, 
    internalFormat=6407, width=8, height=4, border=0, format=6408, type=5121, 
    pixels=0x8321c48, unpack=0x8067644, texObj=0x8051340, texImage=0x80cf450)
    at intel_tex_image.c:565
#6  0xb7960607 in _swrast_copy_teximage2d (ctx=0x805b990, target=3553, 
    level=0, internalFormat=6407, x=20, y=20, width=8, height=4, border=0)
    at swrast/s_texstore.c:376
#7  0xb78490f6 in intelCopyTexImage2D (ctx=0x805b990, target=3553, level=0, 
    internalFormat=6407, x=20, y=20, width=8, height=4, border=0)
    at intel_tex_copy.c:244
#8  0xb78e05a7 in _mesa_CopyTexImage2D (target=3553, level=0, 
    internalFormat=6407, x=20, y=20, width=8, height=4, border=0)
    at main/teximage.c:3000
#9  0x08048c08 in test () at copytex.c:54