<html>
<head>
<base href="https://bugs.freedesktop.org/">
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - GLSL compilation can be very slow"
href="https://bugs.freedesktop.org/show_bug.cgi?id=93681#c17">Comment # 17</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - GLSL compilation can be very slow"
href="https://bugs.freedesktop.org/show_bug.cgi?id=93681">bug 93681</a>
from <span class="vcard"><a class="email" href="mailto:eero.t.tamminen@intel.com" title="Eero Tamminen <eero.t.tamminen@intel.com>"> <span class="fn">Eero Tamminen</span></a>
</span></b>
<pre>It's clear off-by-one access past the end of array:
==14419== Invalid read of size 4
==14419== at 0x6454A39: fs_reg_alloc::set_spill_costs()
(brw_fs_reg_allocate.cpp:925)
==14419== by 0x6454B26: fs_reg_alloc::choose_spill_reg()
(brw_fs_reg_allocate.cpp:948)
==14419== by 0x64556FD: fs_reg_alloc::assign_regs(bool, bool)
(brw_fs_reg_allocate.cpp:1163)
==14419== Address 0x83bdcb4 is 0 bytes after a block of size 10,244 alloc'd
==14419== at 0x483880B: malloc (vg_replace_malloc.c:309)
==14419== by 0x5CAF04C: ralloc_size (ralloc.c:119)
==14419== by 0x5CAF3C1: ralloc_array_size (ralloc.c:221)
==14419== by 0x64317A9: fs_visitor::calculate_live_intervals()
(brw_fs_live_variables.cpp:335)</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
</ul>
</body>
</html>