[  2928.438] (EE) 
[  2928.438] (EE) Backtrace:
[  2928.439] (EE) 0: /usr/bin/X (OsLookupColor+0x129) [0x46e539]
[  2928.439] (EE) 1: /lib64/libpthread.so.0 (__restore_rt+0x0) [0x396c60ef9f]
[  2928.439] (EE) 2: /usr/bin/X (miTrapezoidBounds+0x7d) [0x51262d]
[  2928.439] (EE) 3: /lib64/libglamor.so.0 (glamor_composite_rects_nf+0x4540) [0x7f894a185710]
[  2928.439] (EE) 4: /usr/bin/X (AddTraps+0x46f3) [0x51ecb3]
[  2928.439] (EE) 5: /usr/bin/X (SendErrorToClient+0x3f7) [0x436e47]
[  2928.439] (EE) 6: /usr/bin/X (_init+0x3ab2) [0x429ae2]
[  2928.439] (EE) 7: /lib64/libc.so.6 (__libc_start_main+0xf5) [0x396be21b75]
[  2928.440] (EE) 8: /usr/bin/X (_start+0x29) [0x426741]
[  2928.440] (EE) 9: ? (?+0x29) [0x29]
[  2928.440] (EE) 
[  2928.440] (EE) Segmentation fault at address 0x40b500c
[  2928.440] 
Fatal server error:
[  2928.440] Caught signal 11 (Segmentation fault). Server aborting
[  2928.440] 
[  2928.440] (EE) 
Please consult the Fedora Project support 
	 at http://wiki.x.org
 for help. 
[  2928.440] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information.
[  2928.440] (EE) 
[  2928.440] (II) AIGLX: Suspending AIGLX clients for VT switch
[  2928.442] Server terminated with error (1). Closing log file.

(gdb) list *OsLookupColor+0x129
0x46e439 is in OsSigHandler (osinit.c:132).
127	
128	    /* log, cleanup, and abort */
129	    xorg_backtrace();
130	
131	#ifdef SA_SIGINFO
132	    if (sip->si_code == SI_USER) {
133	        ErrorFSigSafe("Received signal %u sent by process %u, uid %u\n", signo,
134	                     sip->si_pid, sip->si_uid);
135	    }
136	    else {
(gdb) 
137	        switch (signo) {
138	        case SIGSEGV:
139	        case SIGBUS:
140	        case SIGILL:
141	        case SIGFPE:
142	            ErrorFSigSafe("%s at address %p\n", strsignal(signo), sip->si_addr);
143	        }
144	    }
145	#endif
146	
(gdb) list *miTrapezoidBounds+0x7d
0x51262d is in miTrapezoidBounds (mitrap.c:59).
54	    box->x1 = MAXSHORT;
55	    box->x2 = MINSHORT;
56	    for (; ntrap; ntrap--, traps++) {
57	        INT16 x1, y1, x2, y2;
58	
59	        if (!xTrapezoidValid(traps))
60	            continue;
61	        y1 = xFixedToInt(traps->top);
62	        if (y1 < box->y1)
63	            box->y1 = y1;
(gdb) list *AddTraps+0x46f3
0x51a703 is in ProcRenderTrapezoids (render.c:759).
754	    ntraps = (client->req_len << 2) - sizeof(xRenderTrapezoidsReq);
755	    if (ntraps % sizeof(xTrapezoid))
756	        return BadLength;
757	    ntraps /= sizeof(xTrapezoid);
758	    if (ntraps)
759	        CompositeTrapezoids(stuff->op, pSrc, pDst, pFormat,
760	                            stuff->xSrc, stuff->ySrc,
761	                            ntraps, (xTrapezoid *) &stuff[1]);
762	    return Success;
763	}
(gdb) list *SendErrorToClient+0x3f7
0x436df7 is in Dispatch (dispatch.c:432).
427	                if (result > (maxBigRequestSize << 2))
428	                    result = BadLength;
429	                else {
430	                    result = XaceHookDispatch(client, client->majorOp);
431	                    if (result == Success)
432	                        result =
433	                            (*client->requestVector[client->majorOp]) (client);
434	                    XaceHookAuditEnd(client, result);
435	                }
436	#ifdef XSERVER_DTRACE
(gdb) list *_init+0x3ab2
0x4263fa is in main (main.c:307).
302	        pthread_mutex_lock(&serverRunningMutex);
303	        serverRunning = FALSE;
304	        pthread_mutex_unlock(&serverRunningMutex);
305	#endif
306	
307	        UndisplayDevices();
308	        DisableAllDevices();
309	
310	        /* Now free up whatever must be freed */
311	        if (screenIsSaved == SCREEN_SAVER_ON)
(gdb) list *_start+0x29
(gdb)

(gdb) list *glamor_composite_rects_nf+0x4540
0x18bc0 is in _glamor_trapezoids (glamor_trapezoid.c:270).
265		if (DEBUG_CLIP_VTX)
266			ErrorF("The bounds for this traps is: bounds.x1 = %d, bounds.x2 = %d, "
267			       "bounds.y1 = %d, bounds.y2 = %d\n", trap_bound.x1, trap_bound.x2,
268			       trap_bound.y1, trap_bound.y2);
269	
270		if (trap_bound.x1 > pbox->x2 || trap_bound.x2 < pbox->x1)
271			return FALSE;
272		if (trap_bound.y1 > pbox->y2 || trap_bound.y2 < pbox->y1)
273			return FALSE;
274