Bug 20475

I'm running from the latest version in git (last change @ Wed Mar 4 16:48:51 2009 -0700).  I built mesa with 'make linux-cell' (running on a PS3).  When I define GALLIUM_NOCELL=1, every program I run segfaults in sp_vbuf_allocate_vertices.  This is not the case without the environment variable defined: the programs run fine (of course with graphical issues, but I understand its still a work in progress).  I know it had previously worked, but before recently, the last time I had updated had been a couple months ago so I don't know when it broke.
Here is the trace when running bounce (from progs/demos):

Program received signal SIGSEGV, Segmentation fault.
0x0f9de544 in sp_vbuf_allocate_vertices () from /home/mike/mesa/lib/gallium/libGL.so.1
(gdb) bt
#0  0x0f9de544 in sp_vbuf_allocate_vertices () from /home/mike/mesa/lib/gallium/libGL.so.1
#1  0x0fb9acc8 in draw_pt_emit_linear () from /home/mike/mesa/lib/gallium/libGL.so.1
#2  0x0fb94a7c in fetch_pipeline_linear_run () from /home/mike/mesa/lib/gallium/libGL.so.1
#3  0x0fb95830 in varray_run () from /home/mike/mesa/lib/gallium/libGL.so.1
#4  0x0fb93498 in draw_arrays () from /home/mike/mesa/lib/gallium/libGL.so.1
#5  0x0f9dd5dc in softpipe_draw_range_elements () from /home/mike/mesa/lib/gallium/libGL.so.1
#6  0x0f9dd7c8 in softpipe_draw_elements () from /home/mike/mesa/lib/gallium/libGL.so.1
#7  0x0f9dd7fc in softpipe_draw_arrays () from /home/mike/mesa/lib/gallium/libGL.so.1
#8  0x0fab3cbc in st_draw_vbo () from /home/mike/mesa/lib/gallium/libGL.so.1
#9  0x0fb3cdb8 in vbo_exec_vtx_flush () from /home/mike/mesa/lib/gallium/libGL.so.1
#10 0x0fb341a0 in vbo_exec_FlushVertices_internal () from /home/mike/mesa/lib/gallium/libGL.so.1
#11 0x0fb34244 in vbo_exec_FlushVertices () from /home/mike/mesa/lib/gallium/libGL.so.1
#12 0x0fa7e4f8 in _mesa_Translatef () from /home/mike/mesa/lib/gallium/libGL.so.1
#13 0x0fa11f30 in glTranslatef () from /home/mike/mesa/lib/gallium/libGL.so.1
#14 0x10002a40 in draw ()
#15 0x0ff6e908 in ?? () from /usr/lib/libglut.so.3
#16 0x0ff72c7c in fgEnumWindows () from /usr/lib/libglut.so.3
#17 0x0ff6ef28 in glutMainLoopEvent () from /usr/lib/libglut.so.3
#18 0x0ff6f8d0 in glutMainLoop () from /usr/lib/libglut.so.3
#19 0x10002210 in main ()
(gdb) 

Let me know if there's any other info I can provide to help debug.