Bug 15361

Hi,

the r128 driver (as in xf86-video-r128) does not reserve texture memory (see attached xorg.org). This causes all DRI/OpenGL applications to crash in driSetTextureSwapCounterLocation:

$ gdb glxinfo
GNU gdb 6.7.1-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "powerpc-linux-gnu"...
(no debugging symbols found)
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) run
Starting program: /usr/bin/glxinfo
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
name of display: :0.0
[New Thread 0x480d4a00 (LWP 10576)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x480d4a00 (LWP 10576)]
0x0e768b58 in driSetTextureSwapCounterLocation () from /usr/lib/dri/r128_dri.so
(gdb) bt
#0  0x0e768b58 in driSetTextureSwapCounterLocation () from /usr/lib/dri/r128_dri.so
#1  0x0e76ab80 in driCreateNewContext () from /usr/lib/dri/r128_dri.so
#2  0x0ff38d98 in CreateContext () from /usr/lib/libGL.so.1
#3  0x10003158 in ?? ()
#4  0x0f13eb10 in ?? () from /lib/libc.so.6
#5  0x0f13ecd0 in __libc_start_main () from /lib/libc.so.6
#6  0x00000000 in ?? ()

Xorg.log:
(II) R128(0): Using 8 MB AGP aperture
(II) R128(0): Using 1 MB for the ring buffer
(II) R128(0): Using 2 MB for vertex/indirect buffers
(II) R128(0): Using 1 MB for AGP textures
(II) R128(0): Memory manager initialized to (0,0) (1280,3276)
(II) R128(0): Reserved area from (0,1024) to (1280,1026)
(II) R128(0): Largest offscreen area available: 1280 x 2250
(II) R128(0): Reserved back buffer from (0,1026) to (1280,2050)
(II) R128(0): Reserved depth buffer from (0,2050) to (1280,3075)
(II) R128(0): Reserved depth span from (0,3074) offset 0xf02800
(II) R128(0): Reserved 0 kb for textures at offset 0xfff000
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Possible related to:
(II) resource ranges after xf86ClaimFixedResources() call:
        [0] -1  0       0x00100000 - 0x3fffffff (0x3ff00000) MX[B]E(B)
        [1] -1  0       0x000f0000 - 0x000fffff (0x10000) MX[B]
        [2] -1  0       0x000c0000 - 0x000effff (0x30000) MX[B]
        [3] -1  0       0x00000000 - 0x0009ffff (0xa0000) MX[B]
        [4] -1  0       0x80881000 - 0x80881fff (0x1000) MX[B]
        [5] -1  0       0x80800000 - 0x8087ffff (0x80000) MX[B]
        [6] -1  0       0x80880000 - 0x808800ff (0x100) MX[B]
        [7] -1  0       0x80882000 - 0x80882fff (0x1000) MX[B]
        [8] -1  0       0x80883000 - 0x80883fff (0x1000) MX[B]
        [9] -1  0       0x80884000 - 0x80884fff (0x1000) MX[B]
        [10] -1 0       0x80100000 - 0x8011ffff (0x20000) MX[B](B)
        [11] -1 0       0x80900000 - 0x80903fff (0x4000) MX[B](B)
        [12] -1 0       0x88000000 - 0x8bffffff (0x4000000) MX[B](B)
        [13] -1 0       0x808a0000 - 0x808affff (0x10000) MX[B]
        [14] -1 0       0x808b0000 - 0x808bffff (0x10000) MX[B]
        [15] -1 0       0x80885000 - 0x80885fff (0x1000) MX[B]
        [16] -1 0       0x0000ffff - 0x0000ffff (0x1) IX[B]
        [17] -1 0       0x00000000 - 0x000000ff (0x100) IX[B]
        [18] -1 0       0xfe001050 - 0xfe00105f (0x10) IX[B]
        [19] -1 0       0xfe001060 - 0xfe001063 (0x4) IX[B]
        [20] -1 0       0xfe001070 - 0xfe001077 (0x8) IX[B]
        [21] -1 0       0xfe001080 - 0xfe001083 (0x4) IX[B]
        [22] -1 0       0xfe001090 - 0xfe001097 (0x8) IX[B]
        [23] -1 0       0xfe002000 - 0xfe0020ff (0x100) IX[B](B)
(WW) ****INVALID IO ALLOCATION**** b: 0xfe002000 e: 0xfe0020ff correcting^G
(EE) end of block range 0xfdffffff < begin 0xfe000000
(II) window:
        [0] -1  0       0x00000000 - 0x0000ffff (0x10000) IX[B]
(II) resSize:
(II) window fixed:
        [0] -1  0       0x00000000 - 0x0000ffff (0x10000) IX[B]