[Bug 76299] New: Segfault in intelTexImage
bugzilla-daemon at freedesktop.org
bugzilla-daemon at freedesktop.org
Mon Mar 17 18:59:57 PDT 2014
https://bugs.freedesktop.org/show_bug.cgi?id=76299
Priority: medium
Bug ID: 76299
Assignee: idr at freedesktop.org
Summary: Segfault in intelTexImage
QA Contact: intel-3d-bugs at lists.freedesktop.org
Severity: major
Classification: Unclassified
OS: Linux (All)
Reporter: luke-jr+freedesktopbugs at utopios.org
Hardware: x86 (IA32)
Status: NEW
Version: 10.1
Component: Drivers/DRI/i965
Product: Mesa
Both Quake4 and Armagetron Advanced segfault in the same part of Mesa:
#0 0xf6f22a1f in rgba8_copy (dst=0xf597f000, src=0x8969bc8, bytes=16) at
intel_tex_subimage.c:205
#1 0xf6f22d4a in ytile_copy (x0=0, x1=0, x2=128, x3=128, y0=0, y1=32,
dst=0xf597f000 "", src=0x8969bc8 "",
src_pitch=1024, swizzle_bit=64, mem_copy=0xf6f229f6 <rgba8_copy>) at
intel_tex_subimage.c:323
#2 0xf6f23114 in ytile_copy_faster (x0=0, x1=0, x2=128, x3=128, y0=0, y1=32,
dst=0xf597f000 "", src=0x8969bc8 "",
src_pitch=1024, swizzle_bit=64, mem_copy=0xf6f229f6 <rgba8_copy>) at
intel_tex_subimage.c:398
#3 0xf6f23440 in linear_to_tiled (xt1=0, xt2=1024, yt1=0, yt2=256,
dst=0xf597f000 "", src=0x8969bc8 "",
dst_pitch=1024, src_pitch=1024, has_swizzling=true, tiling=2,
mem_copy=0xf6f229f6 <rgba8_copy>)
at intel_tex_subimage.c:493
#4 0xf6f239e1 in intel_texsubimage_tiled_memcpy (ctx=0xf734301c, dims=2,
texImage=0x89641d0, xoffset=0, yoffset=0,
zoffset=0, width=256, height=256, depth=1, format=6408, type=5121,
pixels=0x8969bc8, packing=0xf735b8c8,
for_glTexImage=true) at intel_tex_subimage.c:643
#5 0xf6f21f3f in intelTexImage (ctx=0xf734301c, dims=2, texImage=0x89641d0,
format=6408, type=5121,
pixels=0x8969bc8, unpack=0xf735b8c8) at intel_tex_image.c:177
#6 0xf6d20d51 in teximage (ctx=0xf734301c, compressed=0 '\000', dims=2,
target=3553, level=0,
internalFormat=32856, width=256, height=256, depth=1, border=0,
format=6408, type=5121, imageSize=0,
pixels=0x8969bc8) at main/teximage.c:3243
#7 0xf6d20ed7 in _mesa_TexImage2D (target=3553, level=0, internalFormat=32856,
width=256, height=256, border=0,
format=6408, type=5121, pixels=0x8969bc8) at main/teximage.c:3282
#8 0x43c6c0dc in gluBuild2DMipmapLevelsCore (target=3553,
internalFormat=32856, width=256, height=256,
widthPowerOf2=256, heightPowerOf2=256, format=6408, type=5121, userLevel=0,
baseLevel=0, maxLevel=8,
data=0x8969bc8) at
/var/tmp/portage/media-libs/glu-9.0.0/work/glu-9.0.0/src/libutil/mipmap.c:3873
#9 0x43c6e6cd in gluBuild2DMipmaps (target=3553, internalFormat=32856,
width=256, height=256, format=6408,
type=5121, data=0x8969bc8) at
/var/tmp/portage/media-libs/glu-9.0.0/work/glu-9.0.0/src/libutil/mipmap.c:4606
#10 0x08153a44 in rISurfaceTexture::Upload (this=0x820baa0, surface=...)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rTexture.cpp:514
#11 0x08153d81 in rFileTexture::OnSelect (this=0x820baa0)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rTexture.cpp:708
#12 0x08153b11 in rISurfaceTexture::OnSelect (this=0x820baa0, enforce=true)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rTexture.cpp:558
#13 0x0814a047 in rFont::OnSelect (this=0x820baa0, enforce=true)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rFont.cpp:133
#14 0x0804ed28 in rITexture::Select (this=0x820baa0, enforce=true)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rTexture.h:309
#15 0x0814a2f1 in rFont::Render (this=0x820baa0, c=80 'P', left=-0.225000009,
top=0.654999971, right=-0.175000012,
bot=0.544999957)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rFont.cpp:175
#16 0x0814aa4e in rTextField::FlushLine (this=0xffffbcd8, len=9, newline=true)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rFont.cpp:343
#17 0x0814aad4 in rTextField::FlushLine (this=0xffffbcd8, newline=true)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rFont.cpp:370
#18 0x0814a5a3 in rTextField::~rTextField (this=0xffffbcd8,
__in_chrg=<optimized out>)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rFont.cpp:250
#19 0x0814afd5 in DisplayText (x=0, y=0.599999964, w=0.0500000007,
h=0.109999999, text=0x834e4c0 "Play Game",
center=0, cursor=0, cursorPos=0, colorMode=rTextField::COLOR_USE)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/render/rFont.cpp:564
#20 0x08144f4c in uMenuItem::DisplayText (this=0x86e8e50, x=0, y=0.599999964,
text=0x834e4c0 "Play Game",
selected=true, alpha=1, center=0, c=0, cp=0,
colorMode=rTextField::COLOR_USE)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/ui/uMenu.cpp:551
#21 0x08144fa8 in uMenuItem::DisplayTextSpecial (this=0x86e8e50, x=0,
y=0.599999964, text=0x834e4c0 "Play Game",
selected=true, alpha=1, center=0)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/ui/uMenu.cpp:568
#22 0x08146366 in uMenuItemSubmenu::Render (this=0x86e8e50, x=0, y=0.599999964,
alpha=1, selected=true)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/ui/uMenu.cpp:981
#23 0x081442b6 in uMenu::OnEnter (this=0xffffc048)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/ui/uMenu.cpp:287
#24 0x0807fc26 in uMenu::Enter (this=0xffffc048)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/ui/uMenu.h:106
#25 0x0807844a in MainMenu (ingame=false)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/tron/gGame.cpp:2686
#26 0x08050bd2 in main (argc=1, argv=0xffffc604)
at
/var/tmp/portage/games-action/armagetronad-0.2.8.3.2/work/armagetronad-0.2.8.3.2/src/tron/gArmagetron.cpp:685
--
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-3d-bugs/attachments/20140318/1b74f06a/attachment.html>
More information about the intel-3d-bugs
mailing list