Bug 11823

Reported by Jiří Paleček a couple days ago on the Debian BTS. Xserver 1.3 (debian 2:1.3.0.0-dfsg-11) crashes when running glxinfo and using the fbdev driver. I'll attach his log and config below. Here's the backtrace he got with gdb:

#0  0xb7dfb69c in memcpy () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#1  0xb2b1d42c in _mesa_initialize_context (ctx=0x8ac179c, visual=0x18,
    share_list=0x0, driverFunctions=0xbfce05a4, driverContext=0x8ac1720)
    at context.c:1302
No locals.
#2  0xb2c7b5b7 in XMesaCreateContext (v=0x18, share_list=0x0) at xm_api.c:1525
        c = (XMesaContext) 0x8ac1720
        functions = {GetString = 0xb2c7c590 <get_string>,
  UpdateState = 0xb2c7ce70 <xmesa_update_state>, GetBufferSize = 0,
  ResizeBuffers = 0xb2b41870 <_mesa_resize_framebuffer>, Error = 0,
  Finish = 0xb2c7c580 <finish_or_flush>, Flush = 0xb2c7c580 <finish_or_flush>,
  Clear = 0xb2c7d280 <clear_buffers>, Accum = 0xb2bc9ca0 <_swrast_Accum>,
  DrawPixels = 0xb2bd8820 <_swrast_DrawPixels>,
  ReadPixels = 0xb2be7d40 <_swrast_ReadPixels>,
  CopyPixels = 0xb2bd3270 <_swrast_CopyPixels>,
  Bitmap = 0xb2bccf30 <_swrast_Bitmap>,
  ChooseTextureFormat = 0xb2b91220 <_mesa_choose_tex_format>,
  TexImage1D = 0xb2ba3be0 <_mesa_store_teximage1d>,
  TexImage2D = 0xb2ba3950 <_mesa_store_teximage2d>,
  TexImage3D = 0xb2ba3700 <_mesa_store_teximage3d>,
  TexSubImage1D = 0xb2ba3590 <_mesa_store_texsubimage1d>,
  TexSubImage2D = 0xb2ba33f0 <_mesa_store_texsubimage2d>,
  TexSubImage3D = 0xb2ba3250 <_mesa_store_texsubimage3d>,
  GetTexImage = 0xb2ba2900 <_mesa_get_teximage>,
  CopyTexImage1D = 0xb2bfebb0 <_swrast_copy_teximage1d>,
  CopyTexImage2D = 0xb2bfe970 <_swrast_copy_teximage2d>,
  CopyTexSubImage1D = 0xb2bfe720 <_swrast_copy_texsubimage1d>,
  CopyTexSubImage2D = 0xb2bfe4f0 <_swrast_copy_texsubimage2d>,
  CopyTexSubImage3D = 0xb2bfe250 <_swrast_copy_texsubimage3d>,
  TestProxyTexImage = 0xb2c7c6c0 <test_proxy_teximage>,
  CompressedTexImage1D = 0xb2ba25a0 <_mesa_store_compressed_teximage1d>,
  CompressedTexImage2D = 0xb2ba3050 <_mesa_store_compressed_teximage2d>,
  CompressedTexImage3D = 0xb2ba25b0 <_mesa_store_compressed_teximage3d>,
  CompressedTexSubImage1D = 0xb2ba25c0 <_mesa_store_compressed_texsubimage1d>,
  CompressedTexSubImage2D = 0xb2ba2f00 <_mesa_store_compressed_texsubimage2d>,
  CompressedTexSubImage3D = 0xb2ba25d0 <_mesa_store_compressed_texsubimage3d>,
  GetCompressedTexImage = 0xb2ba2680 <_mesa_get_compressed_teximage>,
  CompressedTextureSize = 0xb2b879b0 <_mesa_compressed_texture_size>,
  BindTexture = 0, NewTextureObject = 0xb2b99bf0 <_mesa_new_texture_object>,
  DeleteTexture = 0xb2b99a60 <_mesa_delete_texture_object>,
  NewTextureImage = 0xb2b95cd0 <_mesa_new_texture_image>,
  FreeTexImageData = 0xb2b95d30 <_mesa_free_texture_image_data>,
  TextureMemCpy = 0xb2b6f990 <_mesa_memcpy>, IsTextureResident = 0,
  PrioritizeTexture = 0, ActiveTexture = 0, UpdateTexturePalette = 0,
  CopyColorTable = 0xb2bdbb10 <_swrast_CopyColorTable>,
  CopyColorSubTable = 0xb2bdb9f0 <_swrast_CopyColorSubTable>,
  CopyConvolutionFilter1D = 0xb2bdb900 <_swrast_CopyConvolutionFilter1D>,
  CopyConvolutionFilter2D = 0xb2bdb680 <_swrast_CopyConvolutionFilter2D>,
  BindProgram = 0, NewProgram = 0xb2c5e6a0 <_mesa_new_program>,
  DeleteProgram = 0xb2c5fd10 <_mesa_delete_program>,
  ProgramStringNotify = 0xb2c27990 <_tnl_program_string>,
  GetFragmentProgramRegister = 0xb2bdff00 <_swrast_get_program_register>,
  IsProgramNative = 0, AlphaFunc = 0, BlendColor = 0,
  BlendEquationSeparate = 0, BlendFuncSeparate = 0,
  ClearColor = 0xb2c7c7d0 <clear_color>, ClearDepth = 0,
  ClearIndex = 0xb2c7cdc0 <clear_index>, ClearStencil = 0, ClipPlane = 0,
  ColorMask = 0xb2c7d0a0 <color_mask>, ColorMaterial = 0, CullFace = 0,
  FrontFace = 0, DepthFunc = 0, DepthMask = 0, DepthRange = 0, DrawBuffer = 0,
  DrawBuffers = 0, Enable = 0xb2c7c8e0 <enable>, Fogfv = 0, Hint = 0,
  IndexMask = 0xb2c7d1d0 <index_mask>, Lightfv = 0, LightModelfv = 0,
  LineStipple = 0, LineWidth = 0, LogicOpcode = 0, PointParameterfv = 0,
  PointSize = 0, PolygonMode = 0, PolygonOffset = 0, PolygonStipple = 0,
  ReadBuffer = 0, RenderMode = 0, Scissor = 0, ShadeModel = 0,
  StencilFuncSeparate = 0, StencilMaskSeparate = 0, StencilOpSeparate = 0,
  TexGen = 0, TexEnv = 0, TexParameter = 0, TextureMatrix = 0,
  Viewport = 0xb2c7ce20 <xmesa_viewport>, VertexPointer = 0,
  NormalPointer = 0, ColorPointer = 0, FogCoordPointer = 0, IndexPointer = 0,
  SecondaryColorPointer = 0, TexCoordPointer = 0, EdgeFlagPointer = 0,
  VertexAttribPointer = 0, LockArraysEXT = 0, UnlockArraysEXT = 0,
  GetBooleanv = 0, GetDoublev = 0, GetFloatv = 0, GetIntegerv = 0,
  GetPointerv = 0, BindBuffer = 0,
  NewBufferObject = 0xb2b17220 <_mesa_new_buffer_object>,
  DeleteBuffer = 0xb2b171e0 <_mesa_delete_buffer_object>,
  BufferData = 0xb2b16fa0 <_mesa_buffer_data>,
  BufferSubData = 0xb2b16f60 <_mesa_buffer_subdata>,
  GetBufferSubData = 0xb2b16f00 <_mesa_buffer_get_subdata>,
  MapBuffer = 0xb2b168f0 <_mesa_buffer_map>,
  UnmapBuffer = 0xb2b16910 <_mesa_buffer_unmap>,
  NewFramebuffer = 0xb2b41a70 <_mesa_new_framebuffer>,
  NewRenderbuffer = 0xb2b84460 <_mesa_new_soft_renderbuffer>,
  BindFramebuffer = 0,
  FramebufferRenderbuffer = 0xb2b3d930 <_mesa_framebuffer_renderbuffer>,
  RenderTexture = 0xb2b9a7a0 <_mesa_render_texture>,
  FinishRenderTexture = 0xb2b9a790 <_mesa_finish_render_texture>,
  BlitFramebuffer = 0xb2bcf6b0 <_swrast_BlitFramebuffer>,
  NewQueryObject = 0xb2b787f0 <_mesa_new_query_object>, BeginQuery = 0,
  EndQuery = 0, NewArrayObject = 0xb2b12040 <_mesa_new_array_object>,
  DeleteArrayObject = 0xb2b12010 <_mesa_delete_array_object>,
  BindArrayObject = 0, NeedValidate = 0, ValidateTnlModule = 0,
  CurrentExecPrimitive = 0, CurrentSavePrimitive = 0, NeedFlush = 0,
  SaveNeedFlush = 0, FlushVertices = 0, SaveFlushVertices = 0,
  NotifySaveBegin = 0, LightingSpaceChange = 0, NewList = 0, EndList = 0,
  BeginCallList = 0, EndCallList = 0}
        firstTime = 0 '\0'
#3  0xb2c78e7c in __glXMesaScreenCreateContext (screen=0x821b720,
    modes=0x8212c98, baseShareContext=0x0)
    at ../../../../GL/mesa/X/xf86glx.c:269
        xm_vis = (XMesaVisual) 0x8ac1720
        xm_share = (XMesaContext) 0xb2d18420
#4  0xb7c3e9ce in DoCreateContext (cl=0x8a4fe60, gcId=6291459, shareList=0,
    visual=37, screen=0, isDirect=0 '\0') at ../../../GL/glx/glxcmds.c:219
        client = (ClientPtr) 0x8a4eb68
        pVisual = (VisualPtr) 0x822685c
        pScreen = (ScreenPtr) 0x8212500
        glxc = <value optimized out>
        shareglxc = <value optimized out>
        modes = (__GLcontextModes *) 0x8212c98
        pGlxScreen = (__GLXscreen *) 0x821b720
        i = <value optimized out>
#5  0xb7c3ebc4 in __glXDisp_CreateContext (cl=0x8a4fe60,
    pc=0x8a4fa18 "\217\003\006") at ../../../GL/glx/glxcmds.c:262
No locals.
#6  0xb7c40a8c in __glXDispatch (client=0x8a4eb68)
    at ../../../GL/glx/glxext.c:551
        stuff = (xGLXSingleReq *) 0x8a4fa18
        opcode = 3 '\003'
        proc = (
    __GLXdispatchSingleProcPtr) 0xb7c3eb80 <__glXDisp_CreateContext>
        cl = (__GLXclientState *) 0x8a4fe60
        retval = 1
#7  0x08154a3e in XaceCatchExtProc (client=0x8a4eb68) at ../../Xext/xace.c:299
        major = 143
        ext = <value optimized out>
#8  0x0808ed3f in Dispatch () at ../../dix/dispatch.c:457
        result = <value optimized out>
        client = (ClientPtr) 0x8a4eb68
        nready = 0
        start_tick = 3820
#9  0x08076e85 in main (argc=6, argv=0xbfce0e24, envp=Cannot access memory at address 0x3c
) at ../../dix/main.c:477
        pScreen = <value optimized out>
        i = <value optimized out>
        error = -1210490788
        xauthfile = <value optimized out>
        alwaysCheckForInput = {0, 1}