[Bug 107879] crash happens when link program

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=107879

            Bug ID: 107879
           Summary: crash happens when link program
           Product: Mesa
           Version: git
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: Drivers/DRI/i965
          Assignee: intel-3d-bugs at lists.freedesktop.org
          Reporter: xinghua.cao at intel.com
        QA Contact: intel-3d-bugs at lists.freedesktop.org

Created attachment 141498
  --> https://bugs.freedesktop.org/attachment.cgi?id=141498&action=edit
verpixshader.c

This issue happens on chrome when run this case,
https://www.khronos.org/registry/webgl/sdk/tests/conformance2/glsl3/short-circuiting-in-loop-condition.html?webglVersion=2&quiet=0
But I also reproduced it when writing a simple case.
Steps:
1. Download the attached file, and use "gcc -o verpixshader verpixshader.c
-lX11 -lepoxy" to build target file.
2. run "./verpixshader", crash happens.

Note: It seems a regression of latest mesa code. And the crash stack is as
below,
Thread 1 "verpixshader" received signal SIGSEGV, Segmentation fault.
validate_intrinsic_instr (state=<optimized out>, instr=0x555555ed4210) at
nir/nir_validate.c:525
525           validate_assert(state, dst->type == src->type);
(gdb) bt
#0  validate_intrinsic_instr (state=<optimized out>, instr=0x555555ed4210) at
nir/nir_validate.c:525
#1  validate_instr (state=<optimized out>, instr=0x555555ed4210) at
nir/nir_validate.c:631
#2  validate_block (state=<optimized out>, block=0x555555ef5680) at
nir/nir_validate.c:713
#3  validate_cf_node (node=0x555555ef5680, state=<optimized out>) at
nir/nir_validate.c:877
#4  0x00007ffff37f428b in validate_function_impl (state=<optimized out>,
impl=<optimized out>) at nir/nir_validate.c:1095
#5  validate_function (state=0x7fffffffd940, func=0x55555590d690) at
nir/nir_validate.c:1113
#6  nir_validate_shader (shader=shader at entry=0x555555ec4610) at
nir/nir_validate.c:1224
#7  0x00007ffff3a32bdd in brw_nir_optimize (nir=nir at entry=0x555555ec4610,
compiler=compiler at entry=0x55555579bf50, is_scalar=is_scalar at entry=true,
allow_copies=allow_copies at entry=true)
    at compiler/brw_nir.c:584
#8  0x00007ffff3a34d45 in brw_preprocess_nir (compiler=0x55555579bf50,
nir=nir at entry=0x555555ec4610) at compiler/brw_nir.c:685
#9  0x00007ffff38651c7 in brw_create_nir (brw=brw at entry=0x5555558c8e60,
shader_prog=shader_prog at entry=0x555555903e60, prog=prog at entry=0x555555908330,
stage=stage at entry=MESA_SHADER_FRAGMENT, 
    is_scalar=<optimized out>) at brw_program.c:106
#10 0x00007ffff38595b1 in brw_link_shader (ctx=0x5555558c8e60,
shProg=0x555555903e60) at brw_link.cpp:267
#11 0x00007ffff36524e7 in _mesa_glsl_link_shader (ctx=ctx at entry=0x5555558c8e60,
prog=prog at entry=0x555555903e60) at program/ir_to_mesa.cpp:3180
#12 0x00007ffff355075c in link_program (no_error=<optimized out>,
shProg=<optimized out>, ctx=<optimized out>) at main/shaderapi.c:1211
#13 link_program_error (ctx=0x5555558c8e60, shProg=0x555555903e60) at
main/shaderapi.c:1296
#14 0x00007ffff3550a97 in _mesa_LinkProgram (programObj=<optimized out>) at
main/shaderapi.c:1789
#15 0x00005555555550ee in main ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/intel-3d-bugs/attachments/20180910/cc4775f4/attachment.html>