https://bugs.freedesktop.org/show_bug.cgi?id=28630
--- Comment #3 from Chris Rankin rankincj@googlemail.com 2010-06-28 13:49:19 PDT --- In src/gallium/drivers/r300/r300_context.c
static void r300_flush_cb(void *data) { struct r300_context* const cs_context_copy = data;
cs_context_copy->context.flush(&cs_context_copy->context, 0, NULL); }
The crash happens when the context.flush function pointer does not contain a valid value.