https://bugs.freedesktop.org/show_bug.cgi?id=40767
--- Comment #6 from Chris Rankin rankincj@googlemail.com 2011-09-11 09:16:17 PDT --- (In reply to comment #3)
The backtrace doesn't show the exact line where it crashes. Can you make an apitrace record?
Dunno, what's an "apitrace record" :-)? It's probably easier to add fprintf() statements to _mesa_update_state_locked() and examine the carnage...