[Bug 91546] New: vaTerminate crashes the app

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=91546

            Bug ID: 91546
           Summary: vaTerminate crashes the app
           Product: DRI
           Version: XOrg git
          Hardware: All
                OS: Linux (All)
            Status: NEW
          Severity: major
          Priority: medium
         Component: DRM/Intel
          Assignee: intel-gfx-bugs at lists.freedesktop.org
          Reporter: ratin3 at gmail.com
        QA Contact: intel-gfx-bugs at lists.freedesktop.org
                CC: intel-gfx-bugs at lists.freedesktop.org

Created attachment 117499
  --> https://bugs.freedesktop.org/attachment.cgi?id=117499&action=edit
vaTerminate causes segfault in _int_free

(gdb) p pVaContext2->context_id
$18 = 0
(gdb) n
3346        if (pVaContext && pVaContext->config_id
)vaDestroyConfig(pVAAPICNTX->vaDisplay, pVaContext->config_id);
(gdb) p pVaContext
$19 = (struct vaapi_context *) 0x7fffe84cb710
(gdb) p *pVaContext
$20 = {display = 0x7fffe84f3ea0, config_id = 16777216, context_id = 0,
pic_param_buf_id = 0, iq_matrix_buf_id = 0, bitplane_buf_id = 0, slice_buf_ids
= 0x0, n_slice_buf_ids = 0, 
  slice_buf_ids_alloc = 0, slice_params = 0x0, slice_param_size = 2088,
slice_params_alloc = 0, slice_count = 0, slice_data = 0x0, slice_data_size = 0}
(gdb) p pVaContext->config_id
$21 = 16777216
(gdb) 
$22 = 16777216
(gdb) n
3347        if (pVaContext2 && pVaContext2->config_id
)vaDestroyConfig(pVAAPICNTX->vaDisplay, pVaContext2->config_id);
(gdb) 
3350        if (pVAAPICNTX->vaDisplay)
(gdb) p pVAAPICNTX->vaDisplay
$23 = (VADisplay) 0x7fffe84f3ea0
(gdb) 
$24 = (VADisplay) 0x7fffe84f3ea0
(gdb) n
3352            vaTerminate(pVAAPICNTX->vaDisplay);
(gdb) 

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4bb5c6d in _int_free (av=0x7fffe8000020, p=<optimized out>,
have_lock=0) at malloc.c:3987
3987    malloc.c: No such file or directory.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are on the CC list for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20150804/e247b36c/attachment.html>