assaultcube crashed with SIGSEGV in _int_free()

[ernsteiswuerfel]

assaultcube opens the loading window and crashes.

Mesa compiled from git (Mesa 11.3.0-devel (git-59156b2)), because Bug #1432949 is fixed there.

ProblemType: Crash
DistroRelease: Ubuntu 16.04
Package: assaultcube 1.2.0.2+dfsg1-0ubuntu2
ProcVersionSignature: Ubuntu 4.4.0-22.39-powerpc64-smp 4.4.8
Uname: Linux 4.4.0-22-powerpc64-smp ppc64
ApportVersion: 2.20.1-0ubuntu2
Architecture: powerpc
CurrentDesktop: MATE
Date: Sat May 14 14:34:10 2016
ExecutablePath: /usr/lib/games/assaultcube/assaultcube
InstallationDate: Installed on 2016-03-26 (48 days ago)
InstallationMedia: Ubuntu-MATE 16.04 LTS "Xenial Xerus" - Beta powerpc (20160326)
ProcCmdline: ./assaultcube --home=/home/username/.assaultcube/v1.2 --init
ProcEnviron:
 LANGUAGE=de_AT:de
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=de_AT.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: assaultcube
StacktraceTop:
 load_world(char*) ()
 ?? ()
 parsemessages(int, playerent*, databuf<unsigned char>&, bool) ()
 servertoclient(int, unsigned char*, int, bool) ()
 sendpacket(int, int, _ENetPacket*, int, bool) ()
Title: assaultcube crashed with SIGSEGV in load_world()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Apport retracing service (apport)]

StacktraceTop:
 _int_free (av=0x1fdc862c <main_arena>, p=<optimized out>, have_lock=0) at malloc.c:4015
 _mesa_function_pool () from /tmp/apport_sandbox_unXHo5/usr/lib/powerpc-linux-gnu/dri/r300_dri.so
 r600_set_atom_dirty (rctx=0x0, atom=0x570, dirty=true) at ../../../../../src/gallium/drivers/r600/r600_pipe.h:564
 r600_mark_atom_dirty (atom=0x570, rctx=0x0) at ../../../../../src/gallium/drivers/r600/r600_pipe.h:572
 r600_draw_vbo (ctx=0x0, dinfo=<optimized out>) at ../../../../../src/gallium/drivers/r600/r600_state_common.c:1778