Comment 14 for bug 337608

Created an attachment (id=24018)
Xorg.0.log

Forwarding this report from Ubuntu:
https://bugs.edge.launchpad.net/ubuntu/+source/xserver-xorg-video-intel/+bug/337608

[Problem]
Sun's Java test web page causes X to crash in fbBlt apparently due to invalid memcpy().

[Original Report]
Ubuntu Jaunty Alpha 5 on Asus EEEPC 1000, Display controller: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller (rev 03).

I installed Sun Java (6) update 12 though the "install missing plugin" on firefox. I restarted firefox, and I tried to test the plugin by going to http://java.com/en/download/help/testvm.xml website on firefox. The page loaded ok, the applet seems to run fine, but when I move the scroll bar on firefox (scroll bar on the LHS of firefox), this killed X. I looked in /var/log/ log files but did not see any relevant information there. I can update the bug with more info if someone shows me where to get it from.

Apport did not report that the Xserver was terminated abruptly.

[lspci]
00:00.0 Host bridge [0600]: Intel Corporation Mobile 945GME Express Memory Controller Hub [8086:27ac] (rev 03)
 Subsystem: ASUSTeK Computer Inc. Device [1043:830f]
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile 945GME Express Integrated Graphics Controller [8086:27ae] (rev 03)
 Subsystem: ASUSTeK Computer Inc. Device [1043:830f]

[backtrace]
#0 memcpy () at ../sysdeps/i386/i686/memcpy.S:75
No locals.
#1 0xa2ab12e0 in ?? ()
No symbol table info available.
#2 0xb7870583 in fbBltStip (src=0xa2a9c038, srcStride=1024, srcX=5440,
    dst=0x9404258, dstStride=85, dstX=0, width=2720, height=46, alu=3,
    pm=4294967295, bpp=32) at ../../fb/fbblt.c:944
No locals.
#3 0xb7875868 in fbGetImage (pDrawable=0x9102088, x=170, y=554, w=85, h=46,
    format=2, planeMask=4294967295, d=0x9404258 "") at ../../fb/fbimage.c:332
 pm = 4294967295
 src = (FbBits *) 0xa28a3038
 srcStride = 1024
 srcBpp = 155213372
 srcXoff = 0
 srcYoff = -49
 dstStride = -1565846816
#4 0xb78557f2 in exaGetImage (pDrawable=0x9102088, x=<value optimized out>,
    y=<value optimized out>, w=<value optimized out>, h=<value optimized out>,
    format=2, planeMask=4294967295, d=0x9404258 "")
    at ../../exa/exa_accel.c:1228
 pixmaps = {{as_dst = 0, as_src = 1, pPix = 0xa28a3008,
    pReg = 0xbf9e5318}}
---Type <return> to continue, or q <return> to quit---
 Reg = {extents = {x1 = 422, y1 = 505, x2 = 507, y2 = 551}, data = 0x0}
 pPix = (PixmapPtr) 0x0
 xoff = <value optimized out>
 yoff = <value optimized out>
 ok = <value optimized out>