Darwinia starts and the world selection works ok, but when entering a level it segfaults with the following backtrace:

#0  0xf7c58dc6 in memcpy () from /lib32/libc.so.6
#1  0xf218e008 in ?? ()
#2  0xf7486dfc in _mesa_memcpy (dest=0x0, src=0xf218e008, n=2048) at /usr/include/bits/string3.h:52
#3  0xf74c0efa in memcpy_texture (ctx=<value optimized out>, dimensions=<value optimized out>,
    dstFormat=0xf7677bc0, dstAddr=0x0, dstXoffset=0, dstYoffset=0, dstZoffset=0, dstRowStride=2048,
    dstImageOffsets=0xf38e6310, srcWidth=<value optimized out>, srcHeight=512, srcDepth=1, srcFormat=6408,
    srcType=5121, srcAddr=0xf218e008, srcPacking=0xa82ba1c) at main/texstore.c:989
#4  0xf74c7547 in _mesa_texstore_rgba8888 (ctx=0xa81ead8, dims=2, baseInternalFormat=6408,
    dstFormat=0xf7677bc0, dstAddr=0x0, dstXoffset=0, dstYoffset=0, dstZoffset=0, dstRowStride=2048,
    dstImageOffsets=0xf38e6310, srcWidth=512, srcHeight=512, srcDepth=1, srcFormat=6408, srcType=5121,
    srcAddr=0xf218e008, srcPacking=0xa82ba1c) at main/texstore.c:1394
#5  0xf743a9ab in radeon_teximage (ctx=0xa81ead8, dims=<value optimized out>, target=3553, level=0,
    internalFormat=6408, width=512, height=512, depth=1, imageSize=0, format=6408, type=5121,
    pixels=<value optimized out>, packing=0xa82ba1c, texObj=0xab0acd0, texImage=0xf34898c0, compressed=0)
    at radeon_texture.c:649
#6  0xf743ad47 in radeonTexImage2D (ctx=0xa81ead8, target=3553, level=0, internalFormat=6408, width=512,
    height=512, border=0, format=6408, type=5121, pixels=0xf218e008, packing=0xa82ba1c, texObj=0xab0acd0,
    texImage=0xf34898c0) at radeon_texture.c:693
#7  0xf75550fd in copy_tex_image (ctx=0xa81ead8, dims=<value optimized out>, target=3553, level=0,
    internalFormat=6408, x=0, y=0, width=512, height=512, border=0) at drivers/common/meta.c:2224
#8  0xf74b8779 in _mesa_CopyTexImage2D (target=3553, level=0, internalFormat=6408, x=0, y=0, width=512,
    height=512, border=0) at main/teximage.c:2812


It seems the problem is the call to _mesa_texstore_rgba8888 with dstAddr=0x0.

I had to apply the patch in here: http://pastebin.com/m5e85e97f to avoid the following assertion:

radeon_mipmap_tree.c:117: compute_tex_image_offset: Assertion `lvl->size > 0' failed

I don't know if the bug is caused by that.

This is with the latest mesa git (commit 6a09c9d2d891a7118bc7c07d03900d69154116ba, 2009-09-22 11:35:56 GMT).