I managed to get a somewhat meaningful backtrace of the crash. Here you are:
#0 0xb7ef9410 in __kernel_vsyscall ()
#1 0xb7d1a791 in raise () from /lib/i686/cmov/libc.so.6
#2 0xb7d1c008 in abort () from /lib/i686/cmov/libc.so.6
#3 0x080a0be6 in ddxGiveUp () at ../../../../hw/xfree86/common/xf86Init.c:1234
#4 0x081bdaa3 in AbortServer () at ../../os/log.c:407
#5 0x081bdfb7 in FatalError (
f=0x81c8d7c "Caught signal %d. Server aborting\n") at ../../os/log.c:553
#6 0x080c20e7 in xf86SigHandler (signo=11)
at ../../../../hw/xfree86/common/xf86Events.c:1460
#7 <signal handler called>
#8 0x08172b92 in cwGetBackingPicture (pPicture=0x879cb18, x_off=0xbfc359c0,
y_off=0xbfc359bc) at ../../../miext/cw/cw_render.c:129
#9 0x08172e4c in cwGlyphs (op=3 '\003', pSrcPicture=0x8bb84d8,
pDstPicture=0x879cb18, maskFormat=0x8219728, xSrc=0, ySrc=0, nlists=1,
lists=0xbfc35f08, glyphs=0xbfc35b08) at ../../../miext/cw/cw_render.c:297
#10 0x0816f325 in damageGlyphs (op=3 '\003', pSrc=0x8bb84d8, pDst=0x879cb18,
maskFormat=0x8219728, xSrc=0, ySrc=0, nlist=1, list=0xbfc35f08,
glyphs=0xbfc35b08) at ../../../miext/damage/damage.c:654
#11 0x0815588a in CompositeGlyphs (op=3 '\003', pSrc=0x8bb84d8,
pDst=0x879cb18, maskFormat=0x8219728, xSrc=0, ySrc=0, nlist=1,
lists=0xbfc35f08, glyphs=0xbfc35b08) at ../../render/picture.c:1824
#12 0x0815d468 in ProcRenderCompositeGlyphs (client=0x8515a08)
at ../../render/render.c:1401
#13 0x08158915 in ProcRenderDispatch (client=0x0) at ../../render/render.c:1999
#14 0x0814bd0e in XaceCatchExtProc (client=0x8515a08) at ../../Xext/xace.c:299
#15 0x080883cb in Dispatch () at ../../dix/dispatch.c:457
#16 0x080701f9 in main (argc=8, argv=0xbfc36784, envp=
Cannot access memory at address 0x8
) at ../../dix/main.c:477
I managed to get a somewhat meaningful backtrace of the crash. Here you are: cmov/libc. so.6 cmov/libc. so.6 ./../hw/ xfree86/ common/ xf86Init. c:1234 ./../hw/ xfree86/ common/ xf86Events. c:1460 0x879cb18, x_off=0xbfc359c0, 0xbfc359bc) at ../../. ./miext/ cw/cw_render. c:129 0x8bb84d8, =0x879cb18, maskFormat= 0x8219728, xSrc=0, ySrc=0, nlists=1, 0xbfc35f08, glyphs=0xbfc35b08) at ../../. ./miext/ cw/cw_render. c:297 0x8219728, xSrc=0, ySrc=0, nlist=1, list=0xbfc35f08, 0xbfc35b08) at ../../. ./miext/ damage/ damage. c:654 0x8219728, xSrc=0, ySrc=0, nlist=1, 0xbfc35f08, glyphs=0xbfc35b08) at ../../render/ picture. c:1824 siteGlyphs (client=0x8515a08) render. c:1401 render. c:1999 xace.c: 299 dispatch. c:457 main.c: 477
#0 0xb7ef9410 in __kernel_vsyscall ()
#1 0xb7d1a791 in raise () from /lib/i686/
#2 0xb7d1c008 in abort () from /lib/i686/
#3 0x080a0be6 in ddxGiveUp () at ../../.
#4 0x081bdaa3 in AbortServer () at ../../os/log.c:407
#5 0x081bdfb7 in FatalError (
f=0x81c8d7c "Caught signal %d. Server aborting\n") at ../../os/log.c:553
#6 0x080c20e7 in xf86SigHandler (signo=11)
at ../../.
#7 <signal handler called>
#8 0x08172b92 in cwGetBackingPicture (pPicture=
y_off=
#9 0x08172e4c in cwGlyphs (op=3 '\003', pSrcPicture=
pDstPicture
lists=
#10 0x0816f325 in damageGlyphs (op=3 '\003', pSrc=0x8bb84d8, pDst=0x879cb18,
maskFormat=
glyphs=
#11 0x0815588a in CompositeGlyphs (op=3 '\003', pSrc=0x8bb84d8,
pDst=0x879cb18, maskFormat=
lists=
#12 0x0815d468 in ProcRenderCompo
at ../../render/
#13 0x08158915 in ProcRenderDispatch (client=0x0) at ../../render/
#14 0x0814bd0e in XaceCatchExtProc (client=0x8515a08) at ../../Xext/
#15 0x080883cb in Dispatch () at ../../dix/
#16 0x080701f9 in main (argc=8, argv=0xbfc36784, envp=
Cannot access memory at address 0x8
) at ../../dix/