t_vtx_api.c: _tnl_copy_from_current(): "for (i = _TNL_ATTRIB_POS+1 ; i <= _TNL_ATTRIB_MAX ; i++)" should be: "for (i = _TNL_ATTRIB_POS+1 ; i < _TNL_ATTRIB_MAX ; i++)" Otherwise, the out of bound accesses to various arrays in struct tnl_vtx will do bad things...
This was already fixed in the trunk. I've put the fix into the 6.4 branch too.
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.