<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - [Debug mesa only]. crash happens when blit framebuffer" href="https://bugs.freedesktop.org/show_bug.cgi?id=107892#c15">Comment # 15</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - [Debug mesa only]. crash happens when blit framebuffer" href="https://bugs.freedesktop.org/show_bug.cgi?id=107892">bug 107892</a> from <a class="email" href="mailto:vadym.shovkoplias@globallogic.com" title="vadym <vadym.shovkoplias@globallogic.com>"> vadym</a> <pre>The bug is in brw_meta_mirror_clip_and_scissor() function. For the above case it calculates coordinates for destination buffer as: dstX0: 0.000000, dstY0: 159.999988, dstX1: 0.000012, dstY1: 160.000000 Then in try_blorp_blit() functions these coordinates rounded to nearest integer: params->x0 = params->wm_inputs.discard_rect.x0 = round(coords->x.dst0); params->y0 = params->wm_inputs.discard_rect.y0 = round(coords->y.dst0); params->x1 = params->wm_inputs.discard_rect.x1 = round(coords->x.dst1); params->y1 = params->wm_inputs.discard_rect.y1 = round(coords->y.dst1); The result of rounding is: params->x0 = 0.0 params->y0 = 160.0 params->x1 = 0.0 params->y1 = 160.0 Then these coordinates goes to gen9_blorp_exec(): blorp_emit(batch, GENX(3DSTATE_DRAWING_RECTANGLE), rect) { rect.ClippedDrawingRectangleXMax = MAX2(params->x1, params->x0) - 1; rect.ClippedDrawingRectangleYMax = MAX2(params->y1, params->y0) - 1; } Here MAX2(params->x1, params->x0) equals 0. And 0 - 1 equals UINT_MAX for unsigned integers.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> <li>You are the assignee for the bug.</li> </ul> </body> </html>