Description of problem:
Boot guest with spice and vnc simultaneous,then connect guest via vnc.
after that,in put username and password enter guest.1 min later,qemu-kvm will be aborted with core dumped.

Version-Release number of selected component (if applicable):
#qemu-kvm-0.12.1.2-2.195.el6.x86_64

How reproducible:
2/4

Steps to Reproduce:
1.boot guest with spice and vnc simultaneous
#/usr/libexec/qemu-kvm -M rhel6.2.0 -enable-kvm -m 4096 -smp 2,sockets=1,cores=2,threads=1 -name rhel6.2sp164 -device virtio-serial-pci,id=virtio-serial0,max_ports=16,bus=pci.0,addr=0x4 -drive file=/root/rhel6.2sp1-64.qcow2,if=none,id=drive-virtio-disk0,format=qcow2,serial=zhang,cache=none,werror=stop,rerror=stop,aio=native -device virtio-blk-pci,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=2 -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0,bootindex=1 -netdev tap,id=hostnet0,vhost=on -device virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:42:0b:00,bus=pci.0,addr=0x3 -chardev socket,id=charchannel0,path=/var/test,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.vdsm -chardev spicevmc,id=charchannel1,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=com.redhat.spice.0

/ -vnc :10 -monitor stdio -boot menu=on -qmp tcp:0:5555,server,nowait

/ -spice port=5930,disable-ticketing  
-vga qxl -global qxl-vga.vram_size=33554432  -device qxl,id=video1,vram_size=33554432,bus=pci.0,addr=0x7 -device qxl,id=video2,vram_size=33554432,bus=pci.0,addr=0x8 -device qxl,id=video3,vram_size=33554432,bus=pci.0,addr=0x9 -device sga
2.Connect the guest via vnc
vncviewer 10.66.8.151:10
3.Enter guest using username(root) and password
  
Actual results:
1 min later
qemu-kvm will be aborted with core dumped
(gdb) bt
#0  0x00000039cad366ed in __memcpy_ssse3 () from /lib64/libc.so.6
#1  0x000000000047940e in qxl_flip (qxl=0x22c2840) at /usr/include/bits/string3.h:52
#2  qxl_render_update (qxl=0x22c2840) at /usr/src/debug/qemu-kvm-0.12.1.2/hw/qxl-render.c:135
#3  0x00000000004dcb34 in vnc_refresh (opaque=<value optimized out>) at vnc.c:2359
#4  0x000000000040c490 in qemu_run_timers (timeout=1000) at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:1186
#5  main_loop_wait (timeout=1000) at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:3919
#6  0x000000000042a63a in kvm_main_loop () at /usr/src/debug/qemu-kvm-0.12.1.2/qemu-kvm.c:2194
#7  0x000000000040dc9f in main_loop (argc=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>)
    at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:4095
#8  main (argc=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>) at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:6323

Expected results:
Works well

Additional info:
If I connect to guest via spice not vnc.work well