Here's a backtrace from another crash, obtained as described on http://wiki.debian.org/XStrikeForce/XserverDebugging from a core file.
#0 0xffffe410 in __kernel_vsyscall () No symbol table info available. #1 0xb7b9d3d0 in raise () from /lib/i686/cmov/libc.so.6 No symbol table info available. #2 0xb7ba0a85 in abort () from /lib/i686/cmov/libc.so.6 No symbol table info available. #3 0x080ad3a5 in ddxGiveUp () at ../../../../hw/xfree86/common/xf86Init.c:1417 i = <value optimized out> #4 0x0813b5fd in AbortServer () at ../../os/log.c:397 No locals. #5 0x0813bbfe in FatalError (f=0x81c9150 "Caught signal %d. Server aborting\n") at ../../os/log.c:522 beenhere = 1 #6 0x080c1c73 in xf86SigHandler (signo=11) at ../../../../hw/xfree86/common/xf86Events.c:387 No locals. #7 <signal handler called> No symbol table info available. #8 0x080b77b5 in xf86SIGIO (sig=29) at ../../../../../hw/xfree86/os-support/linux/../shared/sigio.c:110 i = <value optimized out> ready = {fds_bits = {3072, -65536, 0, 0, 65535, 0, -65536, 16711935, 16711935, 8454143, 8388736, -65408, 0, 0, 16777215, 16711935, -65281, 16416, 1075839871, 0, 0, 0, 0, 0, 8064, 0, -2102793, 0, 65535, 0, -1209998559, 0}} to = {tv_sec = 0, tv_usec = 0} save_errno = 0 r = -1 #9 <signal handler called> No symbol table info available. #10 0xb7bea5fd in memmove () from /lib/i686/cmov/libc.so.6 No symbol table info available. #11 0x08133682 in FlushClient (who=0x8b18ec8, oc=0x8b18e58, __extraBuf=0x868fba8, extraCount=51876) at ../../os/io.c:959 before = <value optimized out> remain = <value optimized out> i = <value optimized out> len = <value optimized out> oco = 0x9b6c538 connection = <value optimized out> trans_conn = 0x8b18e08 iov = {{iov_base = 0x869b968, iov_len = 3300}, {iov_base = 0x868fba8, iov_len = 64452}, {iov_base = 0x2b0, iov_len = 136510440}} written = 48576 padsize = 0 notWritten = 3300 todo = 3300 padBuffer = "\0\0" #12 0x08133b58 in WriteToClient (who=0x8b18ec8, count=51876, __buf=0x868fba8) at ../../os/io.c:821 oc = 0x8b18e58 oco = <value optimized out> padBytes = 0 #13 0x0808a6ef in DoGetImage (client=0x8b18ec8) at ../../dix/dispatch.c:2063 pDraw = 0x9c31790 linesPerBuf = 41 linesDone = 41 plane = 0 pBuf = 0x868fba8 '\17' <repeats 200 times>... xgi = {type = 1 '\1', depth = 32 ' ', sequenceNumber = 29117, length = 29082, visual = 0, pad3 = 145854152, pad4 = 0, pad5 = 20, pad6 = 2, pad7 = 145854152} pVisibleRegion = 0x0 nlines = 33 rc = <value optimized out> length = 1572 #14 ProcGetImage (client=0x8b18ec8) at ../../dix/dispatch.c:2128 No locals. #15 0x0808c79f in Dispatch () at ../../dix/dispatch.c:437 result = <value optimized out> client = 0x8b18ec8 nready = 0 start_tick = 2160 #16 0x08071ada in main (argc=8, argv=0xbf96fec4, envp=Cannot access memory at address 0x22b ) at ../../dix/main.c:397 i = <value optimized out> alwaysCheckForInput = {0, 1} -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org