From mboxrd@z Thu Jan 1 00:00:00 1970 From: bugzilla-daemon@freedesktop.org Subject: [Bug 86720] [radeon] Europa Universalis 4 freezing during game start (10.3.3+, still broken on 11.0.2) Date: Wed, 20 Jul 2016 20:24:03 +0000 Message-ID: References: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0074096764==" Return-path: Received: from culpepper.freedesktop.org (culpepper.freedesktop.org [IPv6:2610:10:20:722:a800:ff:fe98:4b55]) by gabe.freedesktop.org (Postfix) with ESMTP id 29EC86E0EF for ; Wed, 20 Jul 2016 20:24:04 +0000 (UTC) In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: dri-devel@lists.freedesktop.org List-Id: dri-devel@lists.freedesktop.org --===============0074096764== Content-Type: multipart/alternative; boundary="14690462441.3D556e6.23360"; charset="UTF-8" --14690462441.3D556e6.23360 Date: Wed, 20 Jul 2016 20:24:04 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://bugs.freedesktop.org/ Auto-Submitted: auto-generated https://bugs.freedesktop.org/show_bug.cgi?id=3D86720 iive@yahoo.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Assignee|dri-devel@lists.freedesktop |iive@yahoo.com |.org | Resolution|FIXED |--- CC| |iive@yahoo.com --- Comment #34 from iive@yahoo.com --- Created attachment 125183 --> https://bugs.freedesktop.org/attachment.cgi?id=3D125183&action=3Dedit EU4 shader #175 in TGSI , unoptmized disassembly, sbdump of all stages and optimized disassembly While the committed workaround does work for this case, the bug in R600 Sha= der Backend is not fixed and it is triggered by other more complicated shaders.= For example: https://bugs.freedesktop.org/show_bug.cgi?id=3D94900 I had locally reverted the unroll workaround in order to obtain the form th= at triggers this bug. If you need to test the bug with this shader, then in `r600_pipe.c:559` you have to set `PIPE_SHADER_CAP_MAX_UNROLL_ITERATIONS_HI= NT` to 32, instead of 255. The buggy shader is the vertex shader of call 1024042 in the trace. When using `R600_DEBUG=3Dps,vs`, the shader is under #175 . Like in the other bugreport, this shader causes assertion failure in the sb_checker (if mesa is compiled with debugging) and the bug is also workarounded by `R600_DEBUG=3Dsbsafemath`. This works because it disables the call to `fold_assoc()` in `expr_handler::fold_alu_op2()` somewhere around `sb_expr.cpp:740` In order to locate the bug, I've enabled the sbdump for all SB stages. I'm also uploading a second log, with the "fold_assoc()" disabled, so a side-by-side comparison of both logs could indicate how the function affects the result through the different stages. (I recommend `diffuse` program.) This shader is easier to analyze, because it contains just one loop with 4 iterations and no other conditional branches and jumps. The loop counter register is used as index for memory access. The memory address calculations might be involved in triggering the bug as `fold_assoc()` works on them. The `sb_checker` complains about instructions that list the counter registe= r, so it is possible that the instruction that increments it is somehow "optimized" out. --=20 You are receiving this mail because: You are the assignee for the bug.= --14690462441.3D556e6.23360 Date: Wed, 20 Jul 2016 20:24:04 +0000 MIME-Version: 1.0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://bugs.freedesktop.org/ Auto-Submitted: auto-generated iive@yahoo.com changed bug 86720<= /a>
What Removed Added
Status RESOLVED REOPENED
Assignee dri-devel@lists.freedesktop.org iive@yahoo.com
Resolution FIXED ---
CC   iive@yahoo.com

Commen= t # 34 on bug 86720<= /a> from iive@yahoo.com
Created attachment 125183<=
/a> [details]
EU4 shader #175 in TGSI , unoptmized disassembly, sbdump of all stages and
optimized disassembly

While the committed workaround does work for this case, the bug in R600 Sha=
der
Backend is not fixed and it is triggered by other more complicated shaders.=
 For
example:
https://bugs.freedesktop.org/show_bug.c=
gi?id=3D94900

I had locally reverted the unroll workaround in order to obtain the form th=
at
triggers this bug. If you need to test the bug with this shader, then in
`r600_pipe.c:559` you have to set `PIPE_SHADER_CAP_MAX_UNROLL_ITERATIONS_HI=
NT`
to 32, instead of 255.

The buggy shader is the vertex shader of call 1024042 in the trace.
When using `R600_DEBUG=3Dps,vs`, the shader is under #175 .


Like in the other bugreport, this shader causes assertion failure in the
sb_checker (if mesa is compiled with debugging) and the bug is also
workarounded by `R600_DEBUG=3Dsbsafemath`.

This works because it disables the call to `fold_assoc()` in
`expr_handler::fold_alu_op2()` somewhere around `sb_expr.cpp:740`

In order to locate the bug, I've enabled the sbdump for all SB stages.

I'm also uploading a second log, with the "fold_assoc()" disabled=
, so a
side-by-side comparison of both logs could indicate how the function affects
the result through the different stages. (I recommend `diffuse` program.)

This shader is easier to analyze, because it contains just one loop with 4
iterations and no other conditional branches and jumps. The loop counter
register is used as index for memory access. The memory address calculations
might be involved in triggering the bug as `fold_assoc()` works on them.
The `sb_checker` complains about instructions that list the counter registe=
r,
so it is possible that the instruction that increments it is somehow
"optimized" out.


You are receiving this mail because:
  • You are the assignee for the bug.
= --14690462441.3D556e6.23360-- --===============0074096764== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KZHJpLWRldmVs IG1haWxpbmcgbGlzdApkcmktZGV2ZWxAbGlzdHMuZnJlZWRlc2t0b3Aub3JnCmh0dHBzOi8vbGlz dHMuZnJlZWRlc2t0b3Aub3JnL21haWxtYW4vbGlzdGluZm8vZHJpLWRldmVsCg== --===============0074096764==--