[Mesa-dev] [Bug 58716] New: Crash in _mesa_unpack_rgba_row() during glDrawArrays() call

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=58716

          Priority: medium
            Bug ID: 58716
          Assignee: mesa-dev at lists.freedesktop.org
           Summary: Crash in _mesa_unpack_rgba_row() during glDrawArrays()
                    call
          Severity: critical
    Classification: Unclassified
                OS: Windows (All)
          Reporter: s_anikin at mail.ru
          Hardware: x86 (IA32)
            Status: NEW
           Version: 9.0
         Component: Mesa core
           Product: Mesa

Mesa 9.0 software rasterizer (mesa/drivers/windows/gdi) compiled with MS VC++
2010 for Win32 platform crashes under Windows 7 64-bit on glDrawArrays() call
with the following console message:

Mesa 9.0 implementation error: unsupported unpack for format MESA_FORMAT_NONE
Please report at bugs.freedesktop.org

The stack dump as reported by MS VC++ 2010 debugger:

     00000000    
    _mesa_unpack_rgba_row(gl_format format=MESA_FORMAT_NONE, unsigned int
n=127, const void * src=0xabababab, float [4]* dst=0x03ab0020) Line 1624    C
     get_row(gl_context * ctx=0x03c00fd8, gl_renderbuffer * rb=0x01015d80,
unsigned int count=0, int x=0, int y=0, void * values=0x03ab0020, unsigned int
type=5126) Line 1557    C
     _swrast_get_dest_rgba(gl_context * ctx=0x00000000, gl_renderbuffer *
rb=0x00000000, sw_span * span=0x0028bb40) Line 1586    C
     _swrast_write_rgba_span(gl_context * ctx=0x03c00fd8, sw_span *
span=0x00000000) Line 1362    C
     general_triangle(gl_context * ctx=0x03c00fd8, const SWvertex *
v0=0x04000040, const SWvertex * v1=0x04000248, const SWvertex * v2=0x04000860)
Line 819    C
     _swrast_validate_triangle(gl_context * ctx=0x03c00fd8, const SWvertex *
v0=0x04000040, const SWvertex * v1=0x04000248, const SWvertex * v2=0x04000860)
Line 365    C
     triangle_rgba(gl_context * ctx=0x03c00fd8, unsigned int e0=0, unsigned int
e1=1, unsigned int e2=4) Line 176    C
     _tnl_render_poly_elts(gl_context * ctx=0x03c00fd8, unsigned int start=0,
unsigned int count=4, unsigned int flags=48) Line 352    C
     _tnl_RenderClippedPolygon(gl_context * ctx=0x03c00fd8, const unsigned int
* elts=0x0028c924, unsigned int n=4) Line 245    C
     clip_quad_4(gl_context * ctx=0x03c00fd8, unsigned int v0=0, unsigned int
v1=1, unsigned int v2=2, unsigned int v3=3, unsigned char mask='') Line 310   
C
     clip_render_quads_verts(gl_context * ctx=0x03c00f00, unsigned int start=0,
unsigned int count=4, unsigned int flags=55) Line 383    C
     run_render(gl_context * ctx=0x03c00fd8, tnl_pipeline_stage *
stage=0x03c7a9f0) Line 321    C
     _tnl_run_pipeline(gl_context * ctx=0x03c0027f) Line 163    C
     _tnl_draw_prims(gl_context * ctx=0x03c00fd8, const gl_client_array * *
arrays=0x03c688d8, const _mesa_prim * prim=0x0028cb70, unsigned int nr_prims=1,
const _mesa_index_buffer * ib=0x00000000, unsigned int min_index=0, unsigned
int max_index=3) Line 526    C
     _tnl_vbo_draw_prims(gl_context * ctx=0x03c688d8, const _mesa_prim *
prim=0x0028cb70, unsigned int nr_prims=1, const _mesa_index_buffer *
ib=0x00000000, unsigned char index_bounds_valid='
', unsigned int min_index=0,
unsigned int max_index=3, gl_transform_feedback_object *
tfb_vertcount=0x00000000) Line 424    C
     vbo_draw_arrays(gl_context * ctx=0x03c00fd8, unsigned int mode=7, int
start=0, int count=4, unsigned int numInstances=1, unsigned int baseInstance=0)
Line 647    C
     vbo_exec_DrawArrays(unsigned int mode=7, int start=0, int count=4) Line
675    C
     GLWidget::paintGL() Line 208    C++

Sample MS VC++ 2010 project (based on Qt 4.4.3 open-source edition) that can be
used to reproduce the problem is attached. 
Qt 4.4.3 open-source edition can be found here:
ftp://ftp.qt.nokia.com/qt/source/.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/mesa-dev/attachments/20121224/afc96de9/attachment.html>