Re: xsrc/58133: X server crashes; radeon 5450; modesetting

[Rhialto <rhialto%falu.nl@localhost>]

I caught a different crash in gdb.

In one xterm I had a lot of text output: ls -lR, repeated.  In another
workspace (so the xterm window wasn't even mapped, that is how ctwm does
workspaces): I was just starting geeqie to view some images, and a small
subrectangle of the first one had already appeared.

radl.1:~$ sudo gdb -p 429
...
Thread 4 "" received signal SIGSEGV, Segmentation fault.
[Switching to LWP 429 of process 429]
0x000073c6f0b83b4f in memcpy () from /usr/lib/libc.so.12
(gdb) bt
#0  0x000073c6f0b83b4f in memcpy () from /usr/lib/libc.so.12
#1  0x000073c6e4979b7b in store_shader ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/gallium/drivers/r600/r600_shader.c:152
#2  0x000073c6e4984742 in store_shader ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/gallium/drivers/r600/r600_shader.c:209
#3  r600_pipe_shader_create ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/gallium/drivers/r600/r600_shader.c:241
#4  0x000073c6e495f70c in r600_shader_select ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/gallium/drivers/r600/r600_state_common.c:876
#5  0x000073c6e49608ae in r600_update_derived_state ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/gallium/drivers/r600/r600_state_common.c:1766
#6  r600_draw_vbo ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/gallium/drivers/r600/r600_state_common.c:2087
#7  0x000073c6e458567e in st_draw_vbo ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/mesa/state_tracker/st_draw.c:268
#8  0x000073c6e4729d32 in _mesa_draw_arrays ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/mesa/main/draw.c:374
#9  _mesa_draw_arrays ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/mesa/main/draw.c:351
#10 0x000073c6e4729ddb in _mesa_DrawArrays ()
    at /usr/xsrc/external/mit/MesaLib.old/dist/src/mesa/main/draw.c:531
#11 0x000073c6e9c1e5ac in glamor_composite_with_shader (ca_state=CA_NONE,
    rects=0x7f7fffa6f3d0, nrect=1, dest_pixmap_priv=0x73c6f01b15d0,
    mask_pixmap_priv=0x0, source_pixmap_priv=0x73c6f01b1710,
    dest_pixmap=<optimized out>, mask_pixmap=0x0,
    source_pixmap=0x73c6f01b16c0, dest=0x73c6f0131380, mask=0x73c6f0131480,
    source=0x73c6f0131400, op=<optimized out>)
    at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_render.c:1295
--Type <RET> for more, q to quit, c to continue without paging--
#12 glamor_composite_clipped_region (op=<optimized out>, op@entry=3 '\003', source=source@entry=0x73c6f0131400, mask=mask@entry=0x73c6f0131480,
    dest=dest@entry=0x73c6f0131380, source_pixmap=source_pixmap@entry=0x73c6f01b16c0, mask_pixmap=mask_pixmap@entry=0x0, dest_pixmap=dest_pixmap@entry=0x73c6f01b1580,
    region=region@entry=0x7f7fffa6f560, x_source=<optimized out>, x_source@entry=0, y_source=<optimized out>, y_source@entry=0, x_mask=<optimized out>, x_mask@entry=0,
    y_mask=<optimized out>, y_mask@entry=0, x_dest=x_dest@entry=0, y_dest=y_dest@entry=94) at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_render.c:1578
#13 0x000073c6e9c1f96e in glamor_composite (op=<optimized out>, source=0x73c6f0131400, mask=0x73c6f0131480, dest=0x73c6f0131380, x_source=<optimized out>,
    y_source=<optimized out>, x_mask=0, y_mask=0, x_dest=0, y_dest=94, width=6, height=195) at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_render.c:1717
#14 0x00000001d175f0dc in damageComposite (op=<optimized out>, pSrc=<optimized out>, pMask=<optimized out>, pDst=0x73c6f0131380, xSrc=<optimized out>,
    ySrc=<optimized out>, xMask=0, yMask=0, xDst=0, yDst=94, width=6, height=195) at /usr/xsrc/external/mit/xorg-server/dist/miext/damage/damage.c:513
#15 0x00000001d174501b in ProcRenderComposite ()
#16 0x00000001d1685c2e in Dispatch ()
#17 0x00000001d1655e1f in dix_main ()
#18 0x00000001d16559cd in ___start (cleanup=<optimized out>, ps_strings=0x7f7fffa70fe0) at /usr/src/lib/csu/common/crt0-common.c:350
#19 0x00007f7f0020baf8 in ?? () from /usr/libexec/ld.elf_so
#20 0x0000000000000005 in ?? ()
#21 0x00007f7fffa6fdc8 in ?? ()
#22 0x00007f7fffa6fdd9 in ?? ()
#23 0x00007f7fffa6fddc in ?? ()
#24 0x00007f7fffa6fde1 in ?? ()
#25 0x00007f7fffa6fde7 in ?? ()
#26 0x0000000000000000 in ?? ()
(gdb)

(gdb) list
147                     if (R600_BIG_ENDIAN) {
148                             for (i = 0; i < shader->shader.bc.ndw; ++i) {
149                                     ptr[i] = util_cpu_to_le32(shader->shader.bc.bytecode[i]);
150                             }
151                     } else {
152 -->>>                       memcpy(ptr, shader->shader.bc.bytecode, shader->shader.bc.ndw * sizeof(*ptr));
153                     }
154                     rctx->b.ws->buffer_unmap(shader->bo->buf);
155             }
156
(gdb) info frame
Stack level 1, frame at 0x7f7fffa6edb0:
 rip = 0x73c6e4979b7b in store_shader (/usr/xsrc/external/mit/MesaLib.old/dist/src/gallium/drivers/r600/r600_shader.c:152); saved rip = 0x73c6e4984742
 called by frame at 0x7f7fffa6ee50, caller of frame at 0x7f7fffa6ed60
 source language c.
 Arglist at 0x7f7fffa6eda0, args: 
 Locals at 0x7f7fffa6eda0, Previous frame's sp is 0x7f7fffa6edb0
 Saved registers:
  rbx at 0x7f7fffa6ed90, rbp at 0x7f7fffa6eda0, r12 at 0x7f7fffa6ed98, rip at 0x7f7fffa6eda8
(gdb) info locals
No locals.

I'm not sure why gdb doesn't have debugging info here. It loaded a lot
of debug info files but none with "mesa" in their name. I have the core
file available for later inspection.