.
Thread 1 (Thread 0xb6ef7880 (LWP 648)):
#0  0xb74b4c7c in __kernel_vsyscall ()
No symbol table info available.
#1  0xb70d6577 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
        resultvar = <optimized out>
        resultvar = <optimized out>
        pid = -1222303744
        selftid = 648
#2  0xb70d7cf3 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0xb774e418 <XaceHooks+24>, sa_sigaction = 0xb774e418 <XaceHooks+24>}, sa_mask = {__val = {3087706600, 3075584046, 3077891096, 0, 3215308700, 3075584046, 3077891096, 0, 3075583993, 3077849088, 3215308716, 3215309724, 3090682168, 3076310695, 3077891096, 3215308700, 3087706576, 3087706576, 3090543440, 1, 3215309724, 3090421176, 3090593800, 3215309724, 1, 410497024, 3087916000, 3215309756, 3075608601, 0, 3, 4096}}, sa_flags = -1223101992, sa_restorer = 0x1000}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#3  0xb7115953 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0xb720d79c "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
        ap = <optimized out>
        fd = 2
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#4  0xb711ba7a in malloc_printerr (action=<optimized out>, str=0xb720db20 "malloc(): smallbin double linked list corrupted", ptr=0xb83bc370) at malloc.c:4996
        buf = "b83bc370"
        cp = <optimized out>
#5  0xb711dc8f in _int_malloc (av=av@entry=0xb7252420 <main_arena>, bytes=bytes@entry=68) at malloc.c:3359
        p = 0x0
        fb = <optimized out>
        pp = <optimized out>
        nb = 72
        idx = <optimized out>
        bin = <optimized out>
        victim = <optimized out>
        size = <optimized out>
        victim_index = <optimized out>
        remainder = <optimized out>
        remainder_size = <optimized out>
        block = <optimized out>
        bit = <optimized out>
        map = <optimized out>
        fwd = <optimized out>
        bck = <optimized out>
        errstr = <optimized out>
        __func__ = "_int_malloc"
#6  0xb711f7a6 in __libc_calloc (n=1, elem_size=68) at malloc.c:3219
        av = 0xb7252420 <main_arena>
        oldtop = 0xb8470168
        p = <optimized out>
        bytes = 68
        sz = 68
        csz = <optimized out>
        oldtopsize = 269976
        mem = <optimized out>
        clearsize = <optimized out>
        nclears = <optimized out>
        d = <optimized out>
        hook = <optimized out>
        __func__ = "__libc_calloc"
#7  0xb6aef03d in sna_dri2_add_event (sna=sna@entry=0xb6930000, draw=draw@entry=0xb8365cd8, client=0xb83be558) at ../../../src/sna/sna_dri2.c:1431
        info = <optimized out>
        chain = <optimized out>
#8  0xb6af2672 in sna_dri2_schedule_flip (data=0xb8365cd8, func=0xb764e600 <DRI2SwapEvent>, remainder=0, divisor=0, target_msc=0xbfa5bbc8, back=0xb83971c8, front=0xb8395ed8, crtc=0xb80a4c00, draw=0xb8365cd8, client=0xb83be558) at ../../../src/sna/sna_dri2.c:2543
        type = <optimized out>
        info = 0x0
        current_msc = 17688679
#9  sna_dri2_schedule_swap (client=0xb83be558, draw=0xb8365cd8, front=0xb8395ed8, back=0xb83971c8, target_msc=0xbfa5bbc8, divisor=0, remainder=0, func=0xb764e600 <DRI2SwapEvent>, data=0xb8365cd8) at ../../../src/sna/sna_dri2.c:2884
        vbl = {request = {type = (_DRM_VBLANK_RELATIVE | unknown: 17688678), sequence = 3063087104, signal = 3063087104}, reply = {type = (_DRM_VBLANK_RELATIVE | unknown: 17688678), sequence = 3063087104, tval_sec = -1231880192, tval_usec = -1079657512}}
        crtc = 0xb80a4c00
        info = 0x0
        current_msc = 17688679
#10 0xb764d856 in DRI2SwapBuffers (client=0xb83be558, pDraw=0xb8365cd8, target_msc=0, divisor=0, remainder=0, swap_target=0xbfa5bc70, func=0xb764e600 <DRI2SwapEvent>, data=0xb8365cd8) at ../../../../hw/xfree86/dri2/dri2.c:1160
        pScreen = 0xb80a2330
        pPriv = <optimized out>
        pDestBuffer = 0xb8395ed8
        pSrcBuffer = 0xb83971c8
        ret = <optimized out>
        i = <optimized out>
        ust = 32723602049
        current_msc = 17688679
        __func__ = "DRI2SwapBuffers"
#11 0xb764ef3a in ProcDRI2SwapBuffers (client=0xb83be558) at ../../../../hw/xfree86/dri2/dri2ext.c:413
        rep = {type = 1 '\001', pad1 = 0 '\000', sequenceNumber = 175, length = 0, swap_hi = 0, swap_lo = 0, pad2 = 0, pad3 = 0, pad4 = 0, pad5 = 0}
        swap_target = 12
        status = <optimized out>
        stuff = 0xb839fc88
        pDrawable = 0xb8365cd8
#12 ProcDRI2Dispatch (client=0xb83be558) at ../../../../hw/xfree86/dri2/dri2ext.c:610
        stuff = 0xb839fc88
#13 0xb7515aa6 in Dispatch () at ../../dix/dispatch.c:432
No locals.
#14 0xb7519cea in dix_main (argc=11, argv=0xbfa5be24, envp=0xb774ab20 <noPanoramiXExtension>) at ../../dix/main.c:296
        alwaysCheckForInput = {0, 1}
#15 0xb7503bca in main (argc=11, argv=0xbfa5be24, envp=0xbfa5be54) at ../../dix/stubmain.c:34
No locals.