<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:jfonseca@vmware.com" title="José Fonseca <jfonseca@vmware.com>"> <span class="fn">José Fonseca</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW --- - SIGSEGV src/mesa/main/bufferobj.c:291"
href="https://bugs.freedesktop.org/show_bug.cgi?id=64568">bug 64568</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>brianp@vmware.com, jfonseca@vmware.com
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW --- - SIGSEGV src/mesa/main/bufferobj.c:291"
href="https://bugs.freedesktop.org/show_bug.cgi?id=64568#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW --- - SIGSEGV src/mesa/main/bufferobj.c:291"
href="https://bugs.freedesktop.org/show_bug.cgi?id=64568">bug 64568</a>
from <span class="vcard"><a class="email" href="mailto:jfonseca@vmware.com" title="José Fonseca <jfonseca@vmware.com>"> <span class="fn">José Fonseca</span></a>
</span></b>
<pre><span class="quote">> Run glxgears on softpipe or llvmpipe.</span >
One needs to exit cleanly, by pressing Escape key.
This is what valgrind says:
$ valgrind glxgears
==3762== Memcheck, a memory error detector
==3762== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==3762== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==3762== Command: glxgears
==3762==
==3762== Invalid read of size 8
==3762== at 0x51DB2B6: _mesa_reference_buffer_object (bufferobj.h:88)
==3762== by 0x51DC028: _mesa_free_buffer_objects (bufferobj.c:651)
==3762== by 0x50B0009: _mesa_free_context_data (context.c:1159)
==3762== by 0x51A373C: st_destroy_context (st_context.c:315)
==3762== by 0x50AC984: st_context_destroy (st_manager.c:596)
==3762== by 0x508BD45: XMesaDestroyContext (xm_api.c:937)
==3762== by 0x508F8B3: glXDestroyContext (glx_api.c:1363)
==3762== by 0x403754: ??? (in /usr/bin/glxgears)
==3762== by 0x6DF176C: (below main) (libc-start.c:226)
==3762== Address 0x8838850 is 0 bytes after a block of size 1,152 alloc'd
==3762== at 0x4C29E46: calloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==3762== by 0x51DBEA4: _mesa_init_buffer_objects (bufferobj.c:622)
==3762== by 0x50AF313: init_attrib_groups (context.c:744)
==3762== by 0x50AFBBE: _mesa_initialize_context (context.c:1013)
==3762== by 0x50AFE54: _mesa_create_context (context.c:1113)
==3762== by 0x51A340F: st_create_context (st_context.c:232)
==3762== by 0x50ACAF0: st_api_create_context (st_manager.c:640)
==3762== by 0x508BC7D: XMesaCreateContext (xm_api.c:909)
==3762== by 0x508F19F: create_context (glx_api.c:1066)
==3762== by 0x508F28C: glXCreateContext (glx_api.c:1097)
==3762== by 0x402E21: ??? (in /usr/bin/glxgears)
==3762== by 0x6DF176C: (below main) (libc-start.c:226)
==3762==
==3762== Invalid read of size 8
==3762== at 0x51DB78C: _mesa_reference_buffer_object_ (bufferobj.c:284)
==3762== by 0x51DB2D5: _mesa_reference_buffer_object (bufferobj.h:89)
==3762== by 0x51DC028: _mesa_free_buffer_objects (bufferobj.c:651)
==3762== by 0x50B0009: _mesa_free_context_data (context.c:1159)
==3762== by 0x51A373C: st_destroy_context (st_context.c:315)
==3762== by 0x50AC984: st_context_destroy (st_manager.c:596)
==3762== by 0x508BD45: XMesaDestroyContext (xm_api.c:937)
==3762== by 0x508F8B3: glXDestroyContext (glx_api.c:1363)
==3762== by 0x403754: ??? (in /usr/bin/glxgears)
==3762== by 0x6DF176C: (below main) (libc-start.c:226)
==3762== Address 0x8838870 is not stack'd, malloc'd or (recently) free'd
==3762==
==3762== Invalid read of size 8
==3762== at 0x51DB7A0: _mesa_reference_buffer_object_ (bufferobj.c:287)
==3762== by 0x51DB2D5: _mesa_reference_buffer_object (bufferobj.h:89)
==3762== by 0x51DC028: _mesa_free_buffer_objects (bufferobj.c:651)
==3762== by 0x50B0009: _mesa_free_context_data (context.c:1159)
==3762== by 0x51A373C: st_destroy_context (st_context.c:315)
==3762== by 0x50AC984: st_context_destroy (st_manager.c:596)
==3762== by 0x508BD45: XMesaDestroyContext (xm_api.c:937)
==3762== by 0x508F8B3: glXDestroyContext (glx_api.c:1363)
==3762== by 0x403754: ??? (in /usr/bin/glxgears)
==3762== by 0x6DF176C: (below main) (libc-start.c:226)
==3762== Address 0x8838870 is not stack'd, malloc'd or (recently) free'd
==3762==
==3762== Invalid read of size 4
==3762== at 0x75B2E84: pthread_mutex_lock (pthread_mutex_lock.c:50)
==3762== by 0x51DB7B2: _mesa_reference_buffer_object_ (bufferobj.c:289)
==3762== by 0x51DB2D5: _mesa_reference_buffer_object (bufferobj.h:89)
==3762== by 0x51DC028: _mesa_free_buffer_objects (bufferobj.c:651)
==3762== by 0x50B0009: _mesa_free_context_data (context.c:1159)
==3762== by 0x51A373C: st_destroy_context (st_context.c:315)
==3762== by 0x50AC984: st_context_destroy (st_manager.c:596)
==3762== by 0x508BD45: XMesaDestroyContext (xm_api.c:937)
==3762== by 0x508F8B3: glXDestroyContext (glx_api.c:1363)
==3762== by 0x403754: ??? (in /usr/bin/glxgears)
==3762== by 0x6DF176C: (below main) (libc-start.c:226)
==3762== Address 0x260 is not stack'd, malloc'd or (recently) free'd
==3762==
==3762==
==3762== Process terminating with default action of signal 11 (SIGSEGV)
==3762== Access not within mapped region at address 0x260
==3762== at 0x75B2E84: pthread_mutex_lock (pthread_mutex_lock.c:50)
==3762== by 0x51DB7B2: _mesa_reference_buffer_object_ (bufferobj.c:289)
==3762== by 0x51DB2D5: _mesa_reference_buffer_object (bufferobj.h:89)
==3762== by 0x51DC028: _mesa_free_buffer_objects (bufferobj.c:651)
==3762== by 0x50B0009: _mesa_free_context_data (context.c:1159)
==3762== by 0x51A373C: st_destroy_context (st_context.c:315)
==3762== by 0x50AC984: st_context_destroy (st_manager.c:596)
==3762== by 0x508BD45: XMesaDestroyContext (xm_api.c:937)
==3762== by 0x508F8B3: glXDestroyContext (glx_api.c:1363)
==3762== by 0x403754: ??? (in /usr/bin/glxgears)
==3762== by 0x6DF176C: (below main) (libc-start.c:226)
==3762== If you believe this happened as a result of a stack
==3762== overflow in your program's main thread (unlikely but
==3762== possible), you can try to increase the size of the
==3762== main thread stack using the --main-stacksize= flag.
==3762== The main thread stack size used in this run was 8388608.
==3762==
==3762== HEAP SUMMARY:
==3762== in use at exit: 9,178,298 bytes in 7,756 blocks
==3762== total heap usage: 78,735 allocs, 70,979 frees, 29,436,940 bytes
allocated
==3762==
==3762== LEAK SUMMARY:
==3762== definitely lost: 6,400 bytes in 1 blocks
==3762== indirectly lost: 0 bytes in 0 blocks
==3762== possibly lost: 877,234 bytes in 1,626 blocks
==3762== still reachable: 8,294,664 bytes in 6,129 blocks
==3762== suppressed: 0 bytes in 0 blocks
==3762== Rerun with --leak-check=full to see details of leaked memory
==3762==
==3762== For counts of detected and suppressed errors, rerun with: -v
==3762== ERROR SUMMARY: 5 errors from 4 contexts (suppressed: 2 from 2)
Segmentation fault</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>