[Bug 70204] New: [hsw] X server crash while scrolling in firefox

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=70204

          Priority: medium
            Bug ID: 70204
                CC: intel-gfx-bugs at lists.freedesktop.org
          Assignee: intel-gfx-bugs at lists.freedesktop.org
           Summary: [hsw] X server crash while scrolling in firefox
        QA Contact: intel-gfx-bugs at lists.freedesktop.org
          Severity: major
    Classification: Unclassified
                OS: Linux (All)
          Reporter: joe.yasi at gmail.com
          Hardware: x86-64 (AMD64)
            Status: NEW
           Version: XOrg CVS
         Component: DRM/Intel
           Product: DRI

The X server crashes while scrolling some webpages in Firefox as of commit    
c98b770. I have bisected it down to that commit. 27ad2fc did not compile. I got
it to compile by grabbing the change to trapezoids_bounds from c98b770 (below).
I cannot reproduce the crash with 27ad2fc.

--- a/src/sna/sna_trapezoids.c
+++ b/src/sna/sna_trapezoids.c
@@ -70,7 +70,7 @@
     return l->p1.x + (xFixed) (ex / d);
 }

-void trapezoids_bounds(int n, const xTrapezoid *t, BoxPtr box)
+bool trapezoids_bounds(int n, const xTrapezoid *t, BoxPtr box)
 {
     xFixed x1, y1, x2, y2;

@@ -134,6 +134,8 @@
     box->x2 = pixman_fixed_to_int(x2);
     box->y1 = pixman_fixed_integer_floor(y1);
     box->y2 = pixman_fixed_integer_ceil(y2);
+
+    return box->x2 > box->x1 && box->y2 > box->y1;
 }

 static bool
--- a/src/sna/sna_trapezoids.h
+++ b/src/sna/sna_trapezoids.h
@@ -212,7 +212,7 @@
     return (v + ((1<<(16-FAST_SAMPLES_shift-1))-1)) >> (16 -
FAST_SAMPLES_shift);
 }

-void trapezoids_bounds(int n, const xTrapezoid *t, BoxPtr box);
+bool trapezoids_bounds(int n, const xTrapezoid *t, BoxPtr box);

 static inline bool
 is_mono(PicturePtr dst, PictFormatPtr mask)

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are on the CC list for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20131006/0e24f6ff/attachment-0001.html>