Bug 28674

In the last days both Blender 2.49a and Blender 2.5 (latest svn) crash with a segmentation fault. This have never happen before and Blender only crash with the Gallium driver. Also this crash don't happen with other programs. I'm running the latest mesa from git (22-6-2010) and my card is an Ati Radeon x1250 (rs690).

I'm not sure about this help, but here are the bug/backtrace running gdb:

Program received signal SIGSEGV, Segmentation fault.
0x00007fffe95f1864 in clip_tri (stage=0x229d8e0, header=0x7fffffffd250) at draw/draw_pipe_clip.c:434
434	                        header->v[1]->clipmask | 
(gdb) bt
#0  0x00007fffe95f1864 in clip_tri (stage=0x229d8e0, header=0x7fffffffd250) at draw/draw_pipe_clip.c:434
#1  0x00007fffe95ef70c in do_triangle (draw=<value optimized out>, flags=<value optimized out>, v0=0x3bbc096 "", v1=0x6 <Address 0x6 out of bounds>, v2=0x3bbc090 "\340\264)\002") at draw/draw_pipe.c:165
#2  0x00007fffe95eff76 in pipe_run (draw=0x229b4e0, vert_info=<value optimized out>, prim_info=<value optimized out>) at draw/draw_pt_decompose.h:114
#3  draw_pipeline_run (draw=0x229b4e0, vert_info=<value optimized out>, prim_info=<value optimized out>) at draw/draw_pipe.c:274
#4  0x00007fffe95f644f in pipeline (middle=0x22a91e0, fetch_info=<value optimized out>, prim_info=0x7fffffffd430) at draw/draw_pt_fetch_shade_pipeline.c:158
#5  fetch_pipeline_generic (middle=0x22a91e0, fetch_info=<value optimized out>, prim_info=0x7fffffffd430) at draw/draw_pt_fetch_shade_pipeline.c:277
#6  0x00007fffe95f65be in fetch_pipeline_run (middle=0x229d8e0, fetch_elts=<value optimized out>, fetch_count=<value optimized out>, draw_elts=0x6, draw_count=62636176) at draw/draw_pt_fetch_shade_pipeline.c:312
#7  0x00007fffe95f83fd in vcache_flush (frontend=0x229fb50, get_elt=0x18, elts=0x17, elt_bias=21, count=22) at draw/draw_pt_vcache.c:80
#8  vcache_run_extras (frontend=0x229fb50, get_elt=0x18, elts=0x17, elt_bias=21, count=22) at draw/draw_pt_vcache_tmp.h:190
#9  0x00007fffe95f5077 in draw_pt_arrays (draw=0x229b4e0, mode=<value optimized out>, start=<value optimized out>, count=24, startInstance=<value optimized out>, instanceCount=<value optimized out>) at draw/draw_pt.c:127
#10 draw_arrays_instanced (draw=0x229b4e0, mode=<value optimized out>, start=<value optimized out>, count=24, startInstance=<value optimized out>, instanceCount=<value optimized out>) at draw/draw_pt.c:355
#11 0x00007fffe94aa4dc in r300_swtcl_draw_arrays (pipe=0x229a910, mode=<value optimized out>, start=<value optimized out>, count=24) at r300_render.c:672
#12 0x00007fffe95998d7 in st_draw_vbo (ctx=<value optimized out>, arrays=<value optimized out>, prims=<value optimized out>, nr_prims=1, ib=<value optimized out>, index_bounds_valid=<value optimized out>, min_index=0, max_index=23) at state_tracker/st_draw.c:717
#13 0x00007fffe95c1d75 in vbo_exec_vtx_flush (exec=0x2386130, unmap=1 '\001') at vbo/vbo_exec_draw.c:384
#14 0x00007fffe95bbe1c in vbo_exec_FlushVertices_internal (ctx=<value optimized out>, unmap=80 'P') at vbo/vbo_exec_api.c:876
#15 0x00007fffe95bbf22 in vbo_exec_FlushVertices (ctx=0x229d8e0, flags=1) at vbo/vbo_exec_api.c:910
#16 0x00007fffe94fe872 in _mesa_set_enable (ctx=0x229d8e0, cap=2896, state=150 '\226') at main/enable.c:396
#17 0x00000000008cb643 in draw_mesh_fancy (scene=0x2338048, ar=0x2309fc8, v3d=0x230a4e8, rv3d=0x230a138, base=0x2338908, dt=3, flag=0) at source/blender/editors/space_view3d/drawobject.c:2598
#18 0x00000000008cc081 in draw_mesh_object (scene=0x2338048, ar=0x2309fc8, v3d=0x230a4e8, rv3d=0x230a138, base=0x2338908, dt=3, flag=0) at source/blender/editors/space_view3d/drawobject.c:2786
#19 0x00000000008d64da in draw_object (scene=0x2338048, ar=0x2309fc8, v3d=0x230a4e8, base=0x2338908, flag=0) at source/blender/editors/space_view3d/drawobject.c:5772
#20 0x00000000008e49ad in view3d_main_area_draw (C=0x1ed4f28, ar=0x2309fc8) at source/blender/editors/space_view3d/view3d_draw.c:2316
#21 0x0000000000abcb4a in ED_region_do_draw (C=0x1ed4f28, ar=0x2309fc8) at source/blender/editors/screen/area.c:346
#22 0x000000000085e462 in wm_method_draw_triple (C=0x1ed4f28, win=0x22e10f8) at source/blender/windowmanager/intern/wm_draw.c:578
#23 0x000000000085ea6d in wm_draw_update (C=0x1ed4f28) at source/blender/windowmanager/intern/wm_draw.c:729
#24 0x000000000085cec0 in WM_main (C=0x1ed4f28) at source/blender/windowmanager/intern/wm.c:342
#25 0x00000000008588d0 in main (argc=1, argv=0x7fffffffe308) at source/creator/creator.c:1141