From mboxrd@z Thu Jan 1 00:00:00 1970 From: bugzilla-daemon@freedesktop.org Subject: [Bug 82279] [bisected] double free or corruption on context destruction with postprocessing enabled Date: Thu, 07 Aug 2014 06:44:58 +0000 Message-ID: References: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1516187909==" Return-path: Received: from culpepper.freedesktop.org (unknown [131.252.210.165]) by gabe.freedesktop.org (Postfix) with ESMTP id 2BC716E719 for ; Wed, 6 Aug 2014 23:44:58 -0700 (PDT) In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: dri-devel@lists.freedesktop.org List-Id: dri-devel@lists.freedesktop.org --===============1516187909== Content-Type: multipart/alternative; boundary="1407393898.BdbAcC0.21584"; charset="us-ascii" --1407393898.BdbAcC0.21584 Date: Thu, 7 Aug 2014 06:44:58 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable https://bugs.freedesktop.org/show_bug.cgi?id=3D82279 --- Comment #4 from Christian K=C3=B6nig --- (In reply to comment #3) > AFAICT this only happens if postprocessing is enabled via one of the pp_* > driconf options or environment variables. >=20 > (In reply to comment #0) > > Bisecting revealed the culprit commit to be > > "58d2afa2232060b88f9c444ce7a0d6e63c841bb2: radeonsi: fix leaking the bo= und > > state on destruction v2". >=20 > Christian, any ideas? That looks like a bug in the post processing cleanup to me. The context the shaders belong to is destroyed before pp_free is called to destroy the shad= ers created from that context. Since the bisected patch explicitly destroys all bound shaders of a context= if the context is destroyed we get a double free of the shader. --=20 You are receiving this mail because: You are the assignee for the bug. --1407393898.BdbAcC0.21584 Date: Thu, 7 Aug 2014 06:44:58 +0000 MIME-Version: 1.0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Comment= # 4 on bug 82279<= /a> from Christian K=C3=B6nig
(In reply to comment #3=
)
> AFAICT this only happens if postprocessing is en=
abled via one of the pp_*
> driconf options or environment variables.
>=20
> (In reply to comment #0)
> >     Bisecting revealed the culprit commit to be
> > "58d2afa2232060b88f9c444ce7a0d6e63c841bb2: radeonsi: fix lea=
king the bound
> > state on destruction v2".
>=20
> Christian, any ideas?

That looks like a bug in the post processing cleanup to me. The context the
shaders belong to is destroyed before pp_free is called to destroy the shad=
ers
created from that context.

Since the bisected patch explicitly destroys all bound shaders of a context=
 if
the context is destroyed we get a double free of the shader.


You are receiving this mail because: =20=20=20=20=20=20
  • You are the assignee for the bug.
--1407393898.BdbAcC0.21584-- --===============1516187909== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ dri-devel mailing list dri-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/dri-devel --===============1516187909==--