From mboxrd@z Thu Jan 1 00:00:00 1970
From: bugzilla-daemon@freedesktop.org
Subject: [Bug 81907] New: Unreal Engine "Effects Cave" Demo crashes in
__memcpy_sse2_unaligned
Date: Wed, 30 Jul 2014 08:43:54 +0000
Message-ID:
Priority
medium
Bug ID
81907
Assignee
dri-devel@lists.freedesktop.org
Summary
Unreal Engine "Effects Cave" Demo crashes in __memcpy_sse2_unaligned
Severity
normal
Classification
Unclassified
OS
All
Reporter
haagch@frickel.club
Hardware
Other
Status
NEW
Version
git
Component
Drivers/Gallium/radeonsi
Product
Mesa
Created attachment 103673 [details]
full backtrace
llvm-svn 214022
mesa git master from today without f4b0ab7afd83c811329211eae8167c9bf238870c
linux 3.16-rc7
00:02.0 VGA compatible controller: Intel Corporation 3rd Gen Core processor
Graphics Controller (rev 09)
01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI]
Wimbledon XT [Radeon HD 7970M] (rev ff)
intel with render nodes, tearfree and DRI3 and I run it with DRI_PRIME=1.
Because of bug 81834 I reverted f4b0ab7afd83c811329211eae8167c9bf238870c.
Now I get this crash in the "Effects Cave" demo of the unreal engine. More
rarely (?) I get bug 80880 instead/first. In other demos (perhaps less complex)
like TappyChicken I always get bug 80880 and never (?) this crash here:
0x00007ffff6a15859 in __memcpy_sse2_unaligned () from /usr/lib/libc.so.6
It seems to run for a few seconds, the music is playing, but the window
contents are black (it seems nothing at all is rendered, sometimes there are
white stripes that do not vanish until it crashes). Then it crashes with the
attached backtrace.
The "binary" struct seem to be always one of the same few. Others are:
binary = {code = 0x7fffb9ced270
"~\n\376\276\t\003\374\276\002\003\002\310\002\002\006\310\001\001", code_size
= 76, config = 0x7fffb9cf1a90 "(\260", config_size = 24, rodata = 0x0,
rodata_size = 0, disassembled = 0}
and
binary = {code = 0x7fffb9f85a10 "~\n\376\276\t", <incomplete sequence
\374\276>, code_size = 4160, config = 0x7fffb9e33840 "(\260", config_size = 24,
rodata = 0x0, rodata_size = 0, disassembled = 0}