[Bug 27937] SEGV in r700_assembler.c next_ins() with RV670 kms

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=27937

--- Comment #7 from Nix <nix at esperi.org.uk> 2010-06-08 09:30:51 PDT ---
What appears to be the same crash happens with scorched3d on my r770 as well,
with both 2.6.32 and 2.6.34. The common factor appears to be Mesa 7.8.x, right
up to 7.8.2 (head of the 7.8 branch) (7.7 does not crash), so maybe this should
be moved to the Mesa bug db?

Backtrace (stack frame 18 and below significant):

#0  0x00007f122730eada in radeonFlush (ctx=0x4c67ae0) at radeon_common.c:1129
#1  0x00007f1227306763 in radeon_firevertices (ctx=0x4c67ae0, texObj=0x4cac490)
at radeon_cmdbuf.h:118
#2  r600DeleteTexture (ctx=0x4c67ae0, texObj=0x4cac490) at r600_tex.c:347
#3  0x00007f12273922ee in _mesa_free_texture_data (ctx=0x4c67ae0) at
main/texstate.c:809
#4  0x00007f122732cee8 in _mesa_free_context_data (ctx=0x4c67ae0) at
main/context.c:961
#5  0x00007f122732d01e in _mesa_destroy_context (ctx=0x4c67ae0) at
main/context.c:1020
#6  0x00007f122730d715 in radeonDestroyContext (driContextPriv=<value optimized
out>) at radeon_common_context.c:323
#7  0x00007f12272e4110 in driDestroyContext (pcp=0x4bfb450) at
../common/dri_util.c:551
#8  0x00007f122e773963 in dri2DestroyContext (context=0x4b95460, psc=0x0,
dpy=0x5) at dri2_glx.c:100
#9  0x00007f122e74cae8 in DestroyContext (dpy=0x4b904f0, gc=0x4c1f590) at
glxcmds.c:584
#10 0x00007f122de300f2 in X11_GL_Shutdown (this=0x4ba2460) at
./src/video/x11/SDL_x11gl.c:322
#11 0x00007f122de3443e in X11_DestroyWindow (this=0x4ba2460, screen=0x0) at
./src/video/x11/SDL_x11video.c:709
#12 0x00007f122de34657 in X11_VideoQuit (this=0x4ba2460) at
./src/video/x11/SDL_x11video.c:1488
#13 0x00007f122de238a2 in SDL_VideoQuit () at ./src/video/SDL_video.c:1352
#14 0x00007f122ddfc835 in SDL_QuitSubSystem (flags=80100320) at ./src/SDL.c:202
#15 0x00007f122ddfc8ce in SDL_Quit () at ./src/SDL.c:222
#16 0x00007f122ddfd10f in SDL_Parachute (sig=11) at ./src/SDL_fatal.c:41
#17 <signal handler called>
#18 0x00007f12272f1693 in next_ins (pAsm=0x6643190) at r700_assembler.c:2619
#19 0x00007f12272f48e9 in assemble_MUL (pAsm=0x6643190) at
r700_assembler.c:3906
#20 0x00007f12272f6add in AssembleInstr (uiFirstInst=<value optimized out>,
uiIL_Shift=257, uiNumberInsts=3, pILInst=0x6645080, pR700AsmCode=0x6643190) at
r700_assembler.c:5626
#21 0x00007f12272f8567 in r700TranslateFragmentShader (fp=0x663eee0,
mesa_fp=0x663eee0, ctx=0x4c67ae0) at r700_fragprog.c:412
#22 0x00007f12273030e7 in r700UpdateShaders (ctx=0x6643190) at r700_state.c:72
#23 0x00007f12273046b6 in r700TryDrawPrims (ctx=0x4c67ae0, arrays=<value
optimized out>, prim=<value optimized out>, nr_prims=<value optimized out>,
ib=0x0, index_bounds_valid=<value optimized out>, min_index=0,
    max_index=831) at r700_render.c:904
#24 r700DrawPrims (ctx=0x4c67ae0, arrays=<value optimized out>, prim=<value
optimized out>, nr_prims=<value optimized out>, ib=0x0,
index_bounds_valid=<value optimized out>, min_index=0, max_index=831)
    at r700_render.c:993
#25 0x00007f12273ab3de in vbo_exec_vtx_flush (exec=0x4cb54b0, unmap=<value
optimized out>) at vbo/vbo_exec_draw.c:384
#26 0x000000000067e8a6 in VisibilityPatchGrid::drawLand (this=0x3ca5500,
addIndex=<value optimized out>, simple=<value optimized out>) at
../land/VisibilityPatchGrid.cpp:338
#27 0x00000000006037c5 in Landscape::drawShadows (this=0x5023440) at
../landscape/Landscape.cpp:202
#28 0x00000000005306ff in AnimatedBackdropDialog::drawBackground (this=<value
optimized out>) at ../dialogs/AnimatedBackdropDialog.cpp:119
#29 0x0000000000530759 in AnimatedBackdropDialog::draw (this=0x6643190) at
../dialogs/AnimatedBackdropDialog.cpp:107
#30 0x00000000005f5886 in GLWWindowManager::draw (this=0x501ffa0, state=<value
optimized out>) at ../GLW/GLWWindowManager.cpp:302
#31 0x000000000046e840 in GameState::draw (this=0x4fdbec0) at
../../common/engine/GameState.cpp:427
#32 0x0000000000471f82 in MainLoop::draw (this=0x4ff7880) at
../../common/engine/MainLoop.cpp:118
#33 0x0000000000520dda in ClientMain::clientMain () at
../client/ClientMain.cpp:395
#34 0x000000000050ff2e in main (argc=3, argv=0x7fff18334658) at ./main.cpp:103

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.