Segment violation in Painter::_DrawBitmapBilinearCopy32

[humdinger]

This is hrev47029.

I've had this app_server crash (full debug report attached):

		Frame		IP			Function Name
		-----------------------------------------------
		0x72a0b868	0x241fb1f	/boot/system/servers/app_server + 0x16fb1f
Unable to retrieve disassembly for IP 0x241fb1f: No such file or directory
			Frame memory:
				[0x72a0b838]  ................   00 ff 00 ff 00 ff 00 ff 00 00 00 00 00 00 00 00
				[0x72a0b848]  x..r.D..........   78 b8 a0 72 10 44 d7 00 00 ff 00 ff 00 ff 00 ff
				[0x72a0b858]  ......N..F....D.   00 00 00 00 00 00 4e fb 00 46 b2 04 f8 dd 44 02
		0x72a0c1a0	0x23b8391	Painter::_DrawBitmapBilinearCopy32(Painter) + 0x1071
		0x72a0c280	0x23b6af1	Painter::_DrawBitmap(Painter) + 0x99d
		0x72a0c330	0x23b564e	Painter::DrawBitmap(Painter, ServerBitmap*, BRect, BRect, uint32) + 0x1e6
		0x72a0c3c0	0x23a4eb8	DrawingEngine::DrawBitmap(ServerBitmap*, BRect&) + 0x180
		0x72a0da60	0x23587b2	ServerWindow::_DispatchViewDrawingMessage(int32, BPrivate::LinkReceiver&) + 0x73a
		0x72a0dc40	0x2357d7d	ServerWindow::_DispatchViewMessage(int32, BPrivate::LinkReceiver&) + 0x2531
		0x72a0dd70	0x235578c	ServerWindow::_DispatchMessage(int32, BPrivate::LinkReceiver&) + 0x1270
		0x72a0ddf0	0x235c752	ServerWindow::_MessageLooper() + 0x27a
		0x72a0de20	0x2337c96	MessageLooper::_message_thread(void*) + 0x26
		0x72a0de48	0xf69581	thread_entry + 0x21
		00000000	0x62058250	commpage_thread_exit + 0

This happened while watching a clip with UberTuber/MediaPlayer with Web+ idling in the background. The system is using the nvidia driver, if that matters.

[humdinger]

debug report of segment violating app_server

[anevilyak]

If I'm understanding that report correctly, it was specifically the thread handling media player's offscreen bitmap that crashed.

[humdinger]

As probably unimportant detail, the sound kept playing.

[humdinger]

Just had the exact same crash with hrev48403 with my new notebook using the intel extreme driver, if that matters.