<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Guild Wars 2 crash on nouveau DX11 cards" href="https://bugs.freedesktop.org/show_bug.cgi?id=93004#c3">Comment # 3</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Guild Wars 2 crash on nouveau DX11 cards" href="https://bugs.freedesktop.org/show_bug.cgi?id=93004">bug 93004</a> from <a class="email" href="mailto:siro@das-labor.org" title="Patrick Rudolph <siro@das-labor.org>"> Patrick Rudolph</a> <pre>For the crash that occurs in nvc0_clear() I found it is likely a use after free. It accesses a pipe_resource that has been destroyed, but is still bound. The correct behaviour of nine would be to call set_vertex_buffers(..., NULL) first and then destroy the resource. What does OpenGL on vertexbuffer destruction ? Question is why does it work on other drivers, like R600 ? For the second crash in nvc0_draw_vbo() I'm still investigating.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> <li>You are the assignee for the bug.</li> </ul> </body> </html>