<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - crash in intel_miptree_create_for_dri_image due to invalid bo" href="https://bugs.freedesktop.org/show_bug.cgi?id=104579#c1">Comment # 1</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - crash in intel_miptree_create_for_dri_image due to invalid bo" href="https://bugs.freedesktop.org/show_bug.cgi?id=104579">bug 104579</a> from <a class="email" href="mailto:freedesktop@pkh.me" title="ubitux <freedesktop@pkh.me>"> ubitux</a> <pre>Since the trace was randomly changing, I added some debug in intel_update_image_buffer(), and it looks like there is a memory corruption happening in __DRIimageRec struct (intel one): buffer=0x55fdda4e3f00 buffer->screen=0x55fdda4c2130 buffer->bo=0x1 buffer->pitch=0xda196040 buffer->internal_format=0x55fd buffer->dri_format=0x00000004 bo is definitely a broken pointer, 0xda196040 is way too huge to be a valid pitch (even interpreted as negative), 0x55fd doesn't look like a valid GL internal format (previous calls are 0x1907 / GL_RGB), dri_format also got changed from 0x1002. I didn't check any further in the struct to see where the corruption starts, maybe I should?</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> <li>You are the assignee for the bug.</li> </ul> </body> </html>