xsrc/47048: Xorg segfaults on Ctrl-Alt-Fn (i945g)

[cheusov%tut.by@localhost]

>Number:         47048
>Category:       xsrc
>Synopsis:       Xorg segfaults on Ctrl-Alt-Fn (i945drm0)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    xsrc-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Oct 08 11:00:00 +0000 2012
>Originator:     Aleksey Cheusov
>Release:        NetBSD 6.0_POST_RC1
>Organization:
>Environment:
System: NetBSD cheusov.imb.invention.com 6.0_POST_RC1 NetBSD 6.0_POST_RC1 
(GENERIC) #0: Wed Sep 12 13:07:54 FET 2012 
cheusov%cheusov.imb.invention.com@localhost:/srv/obj/sys/arch/i386/compile/GENERIC
 i386
Architecture: i386
Machine: i386
>Description:
Xorg segfaults when I press Ctrl-Alt-Fn. backtrace is below.
In stack frame 14 mem->name is "classic textures".

===========================
dmesg fragment

agp0 at pchb0: detected 7932k stolen memory
agp0: aperture at 0xd0000000, size 0x10000000
vga1 at pci0 dev 2 function 0: vendor 0x8086 product 0x2772 (rev. 0x02)
wsdisplay0 at vga1 kbdmux 1: console (80x25, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
i915drm0 at vga1: Intel i945G
i915drm0: AGP at 0xd0000000 256MB
i915drm0: Initialized i915 1.6.0 20080730

===========================
#0  0xbb8d4c37 in _lwp_kill () from /usr/lib/libc.so.12
#1  0xbb8d4bef in raise (s=6) at /srv/src_netbsd6/lib/libc/gen/raise.c:48
#2  0xbb8d44d3 in abort () at /srv/src_netbsd6/lib/libc/stdlib/abort.c:74
#3  0x08195528 in OsAbort ()
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/os/utils.c:1244
#4  0x0818ef89 in FatalError (f=0x82099f4 "Caught signal %d (%s). Server 
aborting\n")
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/os/log.c:542
#5  0x08195deb in OsSigHandler (signo=11, sip=0xbfbfe5c8, unused=0xbfbfe648)
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/os/osinit.c:153
#6  <signal handler called>
#7  0xbb46a443 in I830EmitFlush (pScrn=0xbb506000)
    at /srv/xsrc_netbsd6/external/mit/xf86-video-intel/dist/src/i830_accel.c:239
#8  0xbb46a52a in I830Sync (pScrn=0xbb506000)
    at /srv/xsrc_netbsd6/external/mit/xf86-video-intel/dist/src/i830_accel.c:191
#9  0xbb461b6a in I830LeaveVT (scrnIndex=0, flags=0)
    at 
/srv/xsrc_netbsd6/external/mit/xf86-video-intel/dist/src/i830_driver.c:3436
#10 0x080abf43 in xf86XVLeaveVT (index=0, flags=0)
    at 
/srv/xsrc_netbsd6/external/mit/xorg-server/dist/hw/xfree86/common/xf86xv.c:1370
#11 0x080a5ba6 in AbortDDX ()
    at 
/srv/xsrc_netbsd6/external/mit/xorg-server/dist/hw/xfree86/common/xf86Init.c:950
#12 0x0818eea7 in AbortServer ()
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/os/log.c:414
#13 0x0818ef84 in FatalError (f=0xbb47ae3e "Couldn't bind memory for %s\n")
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/os/log.c:540
#14 0xbb459913 in i830_bind_all_memory (pScrn=0xbb506000)
    at 
/srv/xsrc_netbsd6/external/mit/xf86-video-intel/dist/src/i830_memory.c:1974
#15 0xbb462100 in I830EnterVT (scrnIndex=0, flags=0)
    at 
/srv/xsrc_netbsd6/external/mit/xf86-video-intel/dist/src/i830_driver.c:3551
#16 0x080dd64f in xf86RandR12EnterVT (screen_index=0, flags=0)
    at 
/srv/xsrc_netbsd6/external/mit/xorg-server/dist/hw/xfree86/modes/xf86RandR12.c:1739
#17 0x080ac2e4 in xf86XVEnterVT (index=0, flags=0)
    at 
/srv/xsrc_netbsd6/external/mit/xorg-server/dist/hw/xfree86/common/xf86xv.c:1325
#18 0x080b2f97 in xf86VTSwitch ()
    at 
/srv/xsrc_netbsd6/external/mit/xorg-server/dist/hw/xfree86/common/xf86Events.c:527
#19 xf86Wakeup (blockData=0x0, err=-1, pReadmask=0x822c9a0)
    at 
/srv/xsrc_netbsd6/external/mit/xorg-server/dist/hw/xfree86/common/xf86Events.c:284
#20 0x080a4f2a in WakeupHandler (result=-1, pReadmask=0x822c9a0)
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/dix/dixutils.c:419
---Type <return> to continue, or q <return> to quit---
#21 0x0819b06f in WaitForSomething (pClientsReady=0xbb50c200)
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/os/WaitFor.c:235
#22 0x080943f1 in Dispatch ()
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/dix/dispatch.c:367
#23 0x0806f30e in main (argc=6, argv=0xbfbfee3c, envp=0xbfbfee58)
    at /srv/xsrc_netbsd6/external/mit/xorg-server/dist/dix/main.c:287
===========================

>Fix:

Unknown