> >    196 Xsun24   mmap(0, 0, 0x3, 0x1, 0x6, 0, 0, 0) = 270401536
> 
> On a second look, I notice len is zero in that mmap call.  This means
> it probably *is* Xsun24's problem.  (Reading uvm/uvm_mmap.c makes me
> think that len==0 is not a special case.)

This does not look very good.  It's been a while since I worked on X
servers and frame buffers, but I believe that the X server needs to
know what size the framebuffer is.  I think this information is
gathered through the FBIOGATTR ioctl().  Part of the information
returned is encoded in fbtype structures, which have the framebuffer
size in them.  You should make sure you're returning correct
information for the FBIOGATTR calls.

=========================================================================
Eduardo Horvath				eeh@netbsd.org
	"I need to find a pithy new quote." -- me