<html>
<head>
<base href="https://bugs.freedesktop.org/">
</head>
<body><span class="vcard"><a class="email" href="mailto:agomez@igalia.com" title="Andrés Gómez García <agomez@igalia.com>"> <span class="fn">Andrés Gómez García</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - When starting a match Rocket League crashes on "Go""
href="https://bugs.freedesktop.org/show_bug.cgi?id=106928">bug 106928</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>agomez@igalia.com, sroland@vmware.com
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - When starting a match Rocket League crashes on "Go""
href="https://bugs.freedesktop.org/show_bug.cgi?id=106928#c21">Comment # 21</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - When starting a match Rocket League crashes on "Go""
href="https://bugs.freedesktop.org/show_bug.cgi?id=106928">bug 106928</a>
from <span class="vcard"><a class="email" href="mailto:agomez@igalia.com" title="Andrés Gómez García <agomez@igalia.com>"> <span class="fn">Andrés Gómez García</span></a>
</span></b>
<pre>Roland, is this fixed by?
commit 817efd89685efc6b5866e09cbdad01c4ff21c737
Author: Roland Scheidegger <<a href="mailto:sroland@vmware.com">sroland@vmware.com</a>>
Date: Wed Jul 4 04:44:17 2018 +0200
r600/sb: fix crash in fold_alu_op3
fold_assoc() called from fold_alu_op3() can lower the number of src to 2,
which then leads to an invalid access to n.src[2]->gvalue().
This didn't seem to have caused much harm in the past, but on Fedora 28
it will crash (presumably because -D_GLIBCXX_ASSERTIONS is used, although
with libstdc++ 4.8.5 this didn't do anything, -D_GLIBCXX_DEBUG was
needed to show the issue).
An alternative fix would be to instead call fold_alu_op2() from within
fold_assoc() when the number of src is reduced and return always TRUE
from fold_assoc() in this case, with the only actual difference being
the return value from fold_alu_op3() then. I'm not sure what the return
value actually should be in this case (or whether it even can make a
difference).
<a class="bz_bug_link
bz_status_NEW "
title="NEW - When starting a match Rocket League crashes on "Go""
href="show_bug.cgi?id=106928">https://bugs.freedesktop.org/show_bug.cgi?id=106928</a>
Cc: <a href="mailto:mesa-stable@lists.freedesktop.org">mesa-stable@lists.freedesktop.org</a>
Reviewed-by: Dave Airlie <<a href="mailto:airlied@redhat.com">airlied@redhat.com</a>></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>