Nouveau - Mar 2013 - [Bug 61947] New: nullpointer dereference causes xorg-server segfault when nouveau DRI driver is loaded

https://bugs.freedesktop.org/show_bug.cgi?id=61947

          Priority: medium
            Bug ID: 61947
          Assignee: nouveau at lists.freedesktop.org
           Summary: nullpointer dereference causes xorg-server segfault
                    when nouveau DRI driver is loaded
          Severity: critical
    Classification: Unclassified
                OS: Linux (All)
          Reporter: jan at jgc.homeip.net
          Hardware: All
            Status: NEW
           Version: 9.1
         Component: Drivers/DRI/nouveau
           Product: Mesa

Created attachment 76086
  --> https://bugs.freedesktop.org/attachment.cgi?id=76086&action=edit
Patch that fixes the segfault

Chromium can crash Xorg when the nouveau DRI driver is loaded. This is due to a
nullpointer dereference.

Archlinux bug (Xorg crash): https://bugs.archlinux.org/task/33994
Fedora bug (Application crash, same cause):
https://bugzilla.redhat.com/show_bug.cgi?id=862466

As suggested in the Fedora bug, comment 15, attached is a patch that fixes this
issue (confirmed on Archlinux). This is the same check the Intel DRI driver
does, so I think it's needed there.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.freedesktop.org/archives/nouveau/attachments/20130307/7ef2f105/attachment.html>

https://bugs.freedesktop.org/show_bug.cgi?id=61947

Marcin Slusarz <marcin.slusarz at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Marcin Slusarz <marcin.slusarz at gmail.com> ---
Thanks. I pushed it to master and marked as stable candidate.

http://cgit.freedesktop.org/mesa/mesa/commit/?id=17f1cb1d99e66227d1e05925ef937643f5c1089a

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.freedesktop.org/archives/nouveau/attachments/20130307/a04af417/attachment.html>