[Bug 38658] New: [i915g] SIGSEGV src/gallium/auxiliary/draw/draw_pipe_wide_point.c:237

[bugzilla-daemon@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=38658

           Summary: [i915g] SIGSEGV
                    src/gallium/auxiliary/draw/draw_pipe_wide_point.c:237
           Product: Mesa
           Version: git
          Platform: x86 (IA32)
        OS/Version: Linux (All)
            Status: NEW
          Severity: critical
          Priority: medium
         Component: Drivers/Gallium/i915g
        AssignedTo: dri-devel@lists.freedesktop.org
        ReportedBy: vlee@vmware.com


mesa: 6b28b44d458177209705637f759d03a27fa100f1 (master)

chipset: 945GM (Intel GMA 950)
system architecture: i686
xserver-xorg-video-intel: 2:2.14.0-4ubuntu7.1
libdrm-intel1: 2.4.23-1ubuntu6
kernel version: 2.6.38-8-generic
Linux distribution: Ubuntu 11.04 i386

Run piglit point-sprite test.

$ ./bin/point-sprite -auto
Maximum point size is 255.000000, using 64.000000
Segmentation fault (core dumped)


(gdb) bt
#0  0x010e9c20 in widepoint_first_point (stage=0x9ccbdf0, header=0xbfa25bcc) at
src/gallium/auxiliary/draw/draw_pipe_wide_point.c:237
#1  0x010e5114 in clip_point (stage=0x9ccd998, header=0xbfa25bcc) at
src/gallium/auxiliary/draw/draw_pipe_clip.c:480
#2  0x010e80b8 in validate_point (stage=0x9cd1678, header=0xbfa25bcc) at
src/gallium/auxiliary/draw/draw_pipe_validate.c:306
#3  0x010ddf68 in do_point (draw=0x9c7cc10, v0=0x9e10088 "") at
src/gallium/auxiliary/draw/draw_pipe.c:123
#4  0x010df249 in pipe_run_linear (draw=0x9c7cc10, prim=0, prim_flags=0,
vertices=0x9e10088, stride=52, count=1)
    at src/gallium/auxiliary/draw/draw_decompose_tmp.h:67
#5  0x010e00bc in draw_pipeline_run_linear (draw=0x9c7cc10,
vert_info=0xbfa25d38, prim_info=0xbfa25d9c) at
src/gallium/auxiliary/draw/draw_pipe.c:330
#6  0x01147bf7 in pipeline (llvm=0x9cd42c8, vert_info=0xbfa25d38,
prim_info=0xbfa25d9c)
    at src/gallium/auxiliary/draw/draw_pt_fetch_shade_pipeline_llvm.c:198
#7  0x01147f34 in llvm_pipeline_generic (middle=0x9cd42c8, fetch_info=0x0,
prim_info=0xbfa25d9c)
    at src/gallium/auxiliary/draw/draw_pt_fetch_shade_pipeline_llvm.c:299
#8  0x0114804b in llvm_middle_end_linear_run (middle=0x9cd42c8, start=0,
count=1, prim_flags=0)
    at src/gallium/auxiliary/draw/draw_pt_fetch_shade_pipeline_llvm.c:364
#9  0x010f134a in vsplit_segment_simple_linear (vsplit=0x9cd16a8, flags=0,
istart=0, icount=1) at src/gallium/auxiliary/draw/draw_pt_vsplit_tmp.h:237
#10 0x010f1694 in vsplit_run_linear (frontend=0x9cd16a8, start=0, count=1) at
src/gallium/auxiliary/draw/draw_split_tmp.h:61
#11 0x010ea1bb in draw_pt_arrays (draw=0x9c7cc10, prim=0, start=0, count=1) at
src/gallium/auxiliary/draw/draw_pt.c:113
#12 0x010eacf2 in draw_vbo (draw=0x9c7cc10, info=0xbfa25f84) at
src/gallium/auxiliary/draw/draw_pt.c:491
#13 0x010b87db in i915_draw_vbo (pipe=0x9c7c3f0, info=0xbfa25f84) at
src/gallium/drivers/i915/i915_context.c:88
#14 0x018f7bb0 in st_draw_vbo (ctx=0x9d0a568, arrays=0x9d4b284,
prims=0x9d49bd8, nr_prims=1, ib=0x0, index_bounds_valid=1 '\001', min_index=0,
max_index=0)
    at src/mesa/state_tracker/st_draw.c:763
#15 0x019849dd in vbo_exec_vtx_flush (exec=0x9d49a60, keepUnmapped=1 '\001') at
src/mesa/vbo/vbo_exec_draw.c:390
#16 0x0197fbd0 in vbo_exec_FlushVertices_internal (exec=0x9d49a60, unmap=1
'\001') at src/mesa/vbo/vbo_exec_api.c:545
#17 0x01980984 in vbo_exec_FlushVertices (ctx=0x9d0a568, flags=1) at
src/mesa/vbo/vbo_exec_api.c:996
#18 0x01899baf in _mesa_ReadnPixelsARB (x=17, y=49, width=1, height=1,
format=6407, type=5126, bufSize=2147483647, pixels=0xbfa2616c)
    at src/mesa/main/readpix.c:175
#19 0x01899f97 in _mesa_ReadPixels (x=17, y=49, width=1, height=1, format=6407,
type=5126, pixels=0xbfa2616c) at src/mesa/main/readpix.c:256
#20 0x0808f299 in piglit_probe_pixel_rgb ()
#21 0x0806a533 in piglit_display ()
#22 0x0806b08b in display ()
#23 0x00e9dc1e in fghRedrawWindow (window=0x9c749f8, enumerator=0xbfa262c8) at
freeglut_main.c:210
#24 fghcbDisplayWindow (window=0x9c749f8, enumerator=0xbfa262c8) at
freeglut_main.c:227
#25 0x00ea1590 in fgEnumWindows (enumCallback=0xe9db20 <fghcbDisplayWindow>,
enumerator=0xbfa262c8) at freeglut_structure.c:394
#26 0x00e9e02e in fghDisplayAll () at freeglut_main.c:249
#27 glutMainLoopEvent () at freeglut_main.c:1450
#28 0x00e9e935 in glutMainLoop () at freeglut_main.c:1498
#29 0x0806b22f in main ()
(gdb) frame 0
#0  0x010e9c20 in widepoint_first_point (stage=0x9ccbdf0, header=0xbfa25bcc) at
src/gallium/auxiliary/draw/draw_pipe_wide_point.c:237
237          for (i = 0; i < fs->info.num_inputs; i++) {
(gdb) print fs
$2 = (const struct draw_fragment_shader *) 0x0

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.