[Mesa-dev] [Bug 29624] New: crash in _mesa_DeleteTextures, in _mesa_HashLookup_unlocked

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=29624

           Summary: crash in _mesa_DeleteTextures, in
                    _mesa_HashLookup_unlocked
           Product: Mesa
           Version: 7.6
          Platform: x86-64 (AMD64)
        OS/Version: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: Mesa core
        AssignedTo: mesa-dev at lists.freedesktop.org
        ReportedBy: bjacob at mozilla.com


Hi,

Please have a look at the crash that I reported there:
https://bugzilla.mozilla.org/show_bug.cgi?id=588187

It has a back-trace pointing to _mesa_DeleteTextures, and inside of it, in
_mesa_HashLookup_unlocked.

It is looking like a linked list is expected to be null-terminated, and it
crashes when some bogus node pointer is 0x100000001.

I tried calling glIsTexture before, just to check, and as a result, got exactly
the same crash in glIsTexture.

Thanks!

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.