Comment # 19 on bug 84140 from Ilia Mirkin

(In reply to comment #17)
> Created attachment 106695 [details]
> MPlayer-vdpau-RV730-AGP-Mesa-crash.log

#1  0xb2adc40a in r600_emit_command_buffer (cs=0xa00f, cs=0xa00f,
cb=0xb9dc6490, cb=0xb9dc6490)
    at r600_pipe.h:471
#2  r600_emit_cso_state (rctx=0xb9dc30f8, atom=0xb9dc35f0) at
r600_state_common.c:66


This seems a little suspect -- cs == 0xa00f... that's an awfully small pointer
value. Which is just rctx->b.rings.gfx.cs [sorry, don't know more, just
pointing out an observation]