<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW --- - Fix SIGSEGV in libdrm memory alloc for height == 0 and width == 0"
href="https://bugs.freedesktop.org/show_bug.cgi?id=75844">75844</a>
</td>
</tr>
<tr>
<th>Assignee</th>
<td>chris@chris-wilson.co.uk
</td>
</tr>
<tr>
<th>Summary</th>
<td>Fix SIGSEGV in libdrm memory alloc for height == 0 and width == 0
</td>
</tr>
<tr>
<th>QA Contact</th>
<td>intel-gfx-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Reporter</th>
<td>thomas.mey@web.de
</td>
</tr>
<tr>
<th>Hardware</th>
<td>x86-64 (AMD64)
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Version</th>
<td>git
</td>
</tr>
<tr>
<th>Component</th>
<td>Driver/intel
</td>
</tr>
<tr>
<th>Product</th>
<td>xorg
</td>
</tr></table>
<p>
<div>
<pre>Created <span class=""><a href="attachment.cgi?id=95229" name="attach_95229" title="ix SIGSEGV for heigth = 0 and width = 0 in libdrm memory alloc">attachment 95229</a> <a href="attachment.cgi?id=95229&action=edit" title="ix SIGSEGV for heigth = 0 and width = 0 in libdrm memory alloc">[details]</a></span> <a href='page.cgi?id=splinter.html&bug=75844&attachment=95229'>[review]</a>
ix SIGSEGV for heigth = 0 and width = 0 in libdrm memory alloc
intel driver creates a crash in libdrm while trying to allocate a framebuffer
with heigth == 0 and width == 0.
Circumvent this situation by returning NULL.
Backtrace is :
#0 0x00007f4e567a034b in drm_intel_gem_bo_free (bo=0x477c840) at
intel_bufmgr_gem.c:936
#1 0x00007f4e567a20a4 in drm_intel_gem_bo_alloc_internal (bufmgr=0x2921e20,
name=0x7f4e56ac3946 "front buffer", size=0, flags=<optimized out>,
tiling_mode=1, stride=0)
at intel_bufmgr_gem.c:734
#2 0x00007f4e56a9e262 in intel_allocate_framebuffer
(scrn=scrn@entry=0x2912eb0, width=width@entry=0, height=height@entry=0,
cpp=<optimized out>, out_pitch=out_pitch@entry=0x7ffff44ae9d0,
out_tiling=out_tiling@entry=0x7ffff44ae9cc) at intel_memory.c:240
#3 0x00007f4e56a99f55 in intel_xf86crtc_resize (scrn=0x2912eb0, width=0,
height=0) at intel_display.c:1551
#4 0x00000000004cccf9 in xf86RandR12ScreenSetSize (pScreen=0x293a900, width=0,
height=0, mmWidth=0, mmHeight=0) at xf86RandR12.c:699
#5 0x000000000050c3a4 in rrCheckPixmapBounding (h=0, w=0, y=0, x=0,
rr_crtc=0x2930430, pScreen=0x293a900) at rrcrtc.c:510
#6 RRCrtcSet (crtc=0x2930430, mode=0x0, x=0, y=0, rotation=rotation@entry=1,
numOutputs=numOutputs@entry=0, outputs=outputs@entry=0x0) at rrcrtc.c:554
#7 0x000000000050d566 in ProcRRSetCrtcConfig (client=0x48721b0) at
rrcrtc.c:1167
#8 0x000000000043a327 in Dispatch () at dispatch.c:432
#9 0x00000000004288da in main (argc=12, argv=0x7ffff44aeeb8, envp=<optimized
out>) at main.c:298
See also bug report <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1056299">https://bugzilla.redhat.com/show_bug.cgi?id=1056299</a></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
</ul>
</body>
</html>