<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW --- - Memory corruption (crash) in draw/draw_pt_fetch_shade_pipeline_llvm.c:435" href="https://bugs.freedesktop.org/show_bug.cgi?id=72926#c9">Comment # 9</a> on <a class="bz_bug_link bz_status_NEW " title="NEW --- - Memory corruption (crash) in draw/draw_pt_fetch_shade_pipeline_llvm.c:435" href="https://bugs.freedesktop.org/show_bug.cgi?id=72926">bug 72926</a> from <a class="email" href="mailto:lekensteyn@gmail.com" title="Peter Wu <lekensteyn@gmail.com>"> Peter Wu</a> <pre>Created <a href="attachment.cgi?id=92053" name="attach_92053" title="gdb debug session (with more details)">attachment 92053</a> <a href="attachment.cgi?id=92053&action=edit" title="gdb debug session (with more details)">[details]</a> gdb debug session (with more details) The address v0 is invalid according to AddressSanitizer. This looks fishy: #2 0x00007ffff0ae213f in lp_setup_draw_elements (vbr=0x60740000a100, indices=0x605200001b80, nr=6) at lp_setup_vbuf.c:188 188 setup->triangle( setup, (gdb) p i $30 = 5 (gdb) p stride $31 = 32 (gdb) p (ushort[64])indices[0] $32 = {0, 0, 0, 48910, 1, 2, 4, 3, 0, 5, 3, 4, 6, 5, 4, 7, 5, 6, 8, 9, 10, 11, 9, 8, 12, 11, 8, 13, 11, 12, 14, 13, 12, 15, 13, 14, 0 <repeats 28 times>} Playing a bit with break- and watchpoints did not really enlight me. See the GDB session, all I know now is that something wrong entered llvm_pipeline_generic().</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>