Comment # 2 on bug 82046 from
I bisected it. This commit turned up:

734e4946f50c1b83dafdb18ced652abc88e6a246 is the first bad commit
commit 734e4946f50c1b83dafdb18ced652abc88e6a246
Author: Marek Olšák <marek.olsak@amd.com>
Date:   Fri Jul 11 00:05:44 2014 +0200

    mesa: fix crash in st/mesa after deleting a VAO

    This happens when glGetMultisamplefv (or any other non-draw function) is
    called, which doesn't invoke the VBO module to update _DrawArrays and
    the pointer is invalid at that point.

    However st/mesa still dereferences it to setup vertex buffers ==> crash.

    Reviewed-by: Brian Paul <brianp@vmware.com>

:040000 040000 b52b7dc931a318657a82f535b497aea102bdbc99
340446a111ba97d9d11602c0150251135178b64e M    src


You are receiving this mail because: