[Bug 34336] New: r300g: segfault in r300_draw_arrays_immediate

[bugzilla-daemon@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=34336

           Summary: r300g: segfault in r300_draw_arrays_immediate
           Product: Mesa
           Version: git
          Platform: x86-64 (AMD64)
        OS/Version: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: Drivers/Gallium/r300
        AssignedTo: dri-devel@lists.freedesktop.org
        ReportedBy: wixorpeek@gmail.com
                CC: maraeo@gmail.com


A bug was introduced between 5a01361ceaf29 and dc578188fae099 causing
reproducible segmentation fault with latest svn Blender (the code excercices
fixed-function pipeline and draws a handful of primitives with begin-end).

Core was generated by `./blender'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007f5b484c2785 in memcpy () from /lib/libc.so.6
(gdb) bt
#0  0x00007f5b484c2785 in memcpy () from /lib/libc.so.6
#1  0x00007f5b40def53f in r300_draw_arrays_immediate (r300=<value optimized
out>, mode=<value optimized out>, start=<value optimized out>, 
    count=<value optimized out>) at r300_render.c:430
#2  0x00007f5b40df15c6 in r300_draw_vbo (pipe=0x256a5e0, info=0x7ffff8ef3d70)
at r300_render.c:803
#3  0x00007f5b40ead410 in st_draw_vbo (ctx=<value optimized out>, arrays=<value
optimized out>, prims=<value optimized out>, nr_prims=8, ib=0x0, 
    index_bounds_valid=<value optimized out>, min_index=0, max_index=14) at
state_tracker/st_draw.c:715
#4  0x00007f5b40eaa702 in vbo_exec_vtx_flush (exec=0x2620b00, unmap=1 '\001')
at vbo/vbo_exec_draw.c:383
#5  0x00007f5b40ea7afc in vbo_exec_FlushVertices_internal (ctx=<value optimized
out>, unmap=28 '\034') at vbo/vbo_exec_api.c:912
#6  0x00007f5b40ea7b4a in vbo_exec_FlushVertices (ctx=0x2577b28, flags=1) at
vbo/vbo_exec_api.c:946
#7  0x00007f5b40e5315e in _mesa_MultMatrixf (m=0x260cb94) at main/matrix.c:383
#8  0x00000000006a72f9 in ED_view3d_init_mats_rv3d (ob=<value optimized out>,
rv3d=0x25f4728) at source/blender/editors/space_view3d/space_view3d.c:174
#9  0x00000000006c1d4d in draw_object (scene=<value optimized out>, ar=<value
optimized out>, v3d=<value optimized out>, base=<value optimized out>, 
    flag=<value optimized out>) at
source/blender/editors/space_view3d/drawobject.c:5743
#10 0x000000000069f3f6 in view3d_main_area_draw (C=<value optimized out>,
ar=0x25f45b8) at source/blender/editors/space_view3d/view3d_draw.c:2428
#11 0x0000000000842865 in ED_region_do_draw (C=0x21c1b28, ar=0x25f45b8) at
source/blender/editors/screen/area.c:340
#12 0x000000000066e59e in wm_method_draw_overlap_all (C=0x21c1b28,
win=0x25dd0d8, exchange=0) at source/blender/windowmanager/intern/wm_draw.c:244
#13 0x000000000066ede5 in wm_draw_triple_fail (C=0x21c1b28) at
source/blender/windowmanager/intern/wm_draw.c:418
#14 wm_method_draw_triple (C=0x21c1b28) at
source/blender/windowmanager/intern/wm_draw.c:578
#15 wm_draw_update (C=0x21c1b28) at
source/blender/windowmanager/intern/wm_draw.c:769
#16 0x0000000000674008 in WM_main (C=0x21c1b28) at
source/blender/windowmanager/intern/wm.c:348
#17 0x00000000006611ea in main (argc=1, argv=0x7ffff8ef4628) at
source/creator/creator.c:1266

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.