[i815] Segmentation fault at address (nil)

Binary package hint: xorg

Testing Lucid 10.04 LiveCD i386 for 2010-03-04 there is a continuation of an Xorg crash at log-in. The alpha-3 CD image didn't give any useful cause but the 2010-03-04 image does.

GDM begins and starts the live user session which crashes almost immediately (sometimes the desktop background is shown briefly, but that is it). GDM then restarts and offers the log-in screen.

To enable useful debugging the image is booted via PXE/NFS to capture netconsole kernel logging. opensssh-server is installed and an SSH session used to collect the log files. Xorg.0.log.old shows:

-----
Backtrace:
0: /usr/bin/X (xorg_backtrace+0x3b) [0x80e880b]
1: /usr/bin/X (0x8048000+0x61aed) [0x80a9aed]
2: (vdso) (__kernel_rt_sigreturn+0x0) [0xb44410]
3: /usr/lib/libpixman-1.so.0 (0xd8d000+0x13a49) [0xda0a49]
4: /usr/lib/libpixman-1.so.0 (0xd8d000+0x39728) [0xdc6728]
5: /usr/lib/libpixman-1.so.0 (0xd8d000+0x414fa) [0xdce4fa]
6: /usr/lib/libpixman-1.so.0 (0xd8d000+0x4271a) [0xdcf71a]
7: /usr/lib/libpixman-1.so.0 (0xd8d000+0x393d3) [0xdc63d3]
8: /usr/lib/libpixman-1.so.0 (0xd8d000+0x145c3) [0xda15c3]
9: /usr/lib/libpixman-1.so.0 (0xd8d000+0x3b44e) [0xdc844e]
10: /usr/lib/libpixman-1.so.0 (0xd8d000+0x145c3) [0xda15c3]
11: /usr/lib/libpixman-1.so.0 (0xd8d000+0x46863) [0xdd3863]
12: /usr/lib/libpixman-1.so.0 (0xd8d000+0x145c3) [0xda15c3]
13: /usr/lib/libpixman-1.so.0 (pixman_image_composite+0x16f) [0xdc72cf]
14: /usr/lib/xorg/modules/libfb.so (fbComposite+0x1cc) [0x88b05c]
15: /usr/lib/xorg/modules/libxaa.so (XAAComposite+0x24c) [0xa13d4c]
16: /usr/lib/xorg/modules/libxaa.so (0x9e3000+0x4d3e0) [0xa303e0]
17: /usr/bin/X (0x8048000+0xd7e0b) [0x811fe0b]
18: /usr/bin/X (CompositePicture+0x298) [0x8113118]
19: /usr/bin/X (0x8048000+0xd11dd) [0x81191dd]
20: /usr/bin/X (0x8048000+0xcdeb3) [0x8115eb3]
21: /usr/bin/X (0x8048000+0x2a457) [0x8072457]
22: /usr/bin/X (0x8048000+0x1ed3a) [0x8066d3a]
23: /lib/tls/i686/cmov/libc.so.6 (__libc_start_main+0xe6) [0x2bdbd6]
24: /usr/bin/X (0x8048000+0x1e921) [0x8066921]
Segmentation fault at address (nil)

Caught signal 11 (Segmentation fault). Server aborting
-----

kern.log shows (not sure if this the cause of the segfault):

-----
kernel: [ 110.836039] [drm:i810_wait_ring] *ERROR* space: 65520 wanted 65528
kernel: [ 110.844101] [drm:i810_wait_ring] *ERROR* lockup
-----

This may be part of the issue in bug #342122 "[i815] [i815] [drm:drm_release] *ERROR* reclaim_buffers_locked() deadlock"

I'm attaching the tar.gz archive of /var/log/ and the .xsession-errors files.