<html>
    <head>
      <base href="https://bugs.freedesktop.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Crash software mesa with gl_select render mode"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=109086">109086</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Crash software mesa with gl_select render mode
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>Mesa
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>18.3
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>Other
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Windows (All)
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>critical
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Drivers/Gallium/softpipe
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>mesa-dev@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>fagot2709@gmail.com
          </td>
        </tr>

        <tr>
          <th>QA Contact</th>
          <td>mesa-dev@lists.freedesktop.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=142847" name="attach_142847" title="example application with crash source code">attachment 142847</a> <a href="attachment.cgi?id=142847&action=edit" title="example application with crash source code">[details]</a></span>
example application with crash source code

Drawing elements with glRenderMode(GL_SELECT) crashes Windows applications.

Steps to reproduce:
1) build example application from souce code in attachment:
cl -Zi -IF:\mesa-18.3.0\include -IF:\freeglut\include mesacrash.c -link /DEBUG
/LIBPATH:F:\freeglut\lib\x64
/LIBPATH:F:\build\mesa-18.3.0\build\windows-x86_64-debug\gallium\targets\libgl-gdi
2) run mesacrash.exe application.

Application crash with follow error message
  Problem event name:   APPCRASH
  Application name:     mesacrash.exe
  Application version:  0.0.0.0
  Application timestamp:        5c18c2cb
  Name of module with error:    OPENGL32.dll
  Version of module with error: 0.0.0.0
  Timestamp of module with error:       5c10fa47
  Exception code:       c0000005
  Exception offset:     000000000058f49a
  OS version:   6.1.7601.2.1.0.256.48
  Language code:        1049
  Additional information 1:     0e8c
  Additional information 2:     0e8cbb272bc4decc2d93e964b4efe7e3
  Additional information 3:     ca58
  Additional information 4:     ca586625bbe3e94cfe8752da92509f27

Expected results:
Application should draw dummy without crash.

Stacktrace:
opengl32.dll!util_format_r32g32b32_float_fetch_rgba_float(float * dst, const
unsigned char * src, unsigned int i, unsigned int j) Line 10081    C
opengl32.dll!generic_run_one(translate_generic * tg, unsigned int elt, unsigned
int start_instance, unsigned int instance_id, void * vert) Line 631     C
opengl32.dll!generic_run(translate * translate, unsigned int start, unsigned
int count, unsigned int start_instance, unsigned int instance_id, void *
output_buffer) Line 724   C
opengl32.dll!draw_pt_fetch_run_linear(pt_fetch * fetch, unsigned int start,
unsigned int count, char * verts) Line 200  C
opengl32.dll!fetch(pt_fetch * fetch, const draw_fetch_info * fetch_info, char *
output) Line 165        C
opengl32.dll!fetch_pipeline_generic(draw_pt_middle_end * middle, const
draw_fetch_info * fetch_info, const draw_prim_info * in_prim_info) Line 272    
 C
opengl32.dll!fetch_pipeline_linear_run(draw_pt_middle_end * middle, unsigned
int start, unsigned int count, unsigned int prim_flags) Line 437   C
opengl32.dll!vsplit_segment_simple_linear(vsplit_frontend * vsplit, unsigned
int flags, unsigned int istart, unsigned int icount) Line 227      C
opengl32.dll!vsplit_run_linear(draw_pt_front_end * frontend, unsigned int
start, unsigned int count) Line 103   C
opengl32.dll!draw_pt_arrays(draw_context * draw, unsigned int prim, unsigned
int start, unsigned int count) Line 151    C
opengl32.dll!draw_vbo(draw_context * draw, const pipe_draw_info * info) Line
566        C
opengl32.dll!draw_arrays(draw_context * draw, unsigned int mode, unsigned int
start, unsigned int count) Line 105       C
opengl32.dll!st_feedback_draw_vbo(gl_context * ctx, const _mesa_prim * prims,
unsigned int nr_prims, const _mesa_index_buffer * ib, unsigned char
index_bounds_valid, unsigned int min_index, unsigned int max_index,
gl_transform_feedback_object * tfb_vertcount, unsigned int stream,
gl_buffer_object * indirect) Line 261  C
opengl32.dll!_mesa_validated_drawrangeelements(gl_context * ctx, unsigned int
mode, unsigned char index_bounds_valid, unsigned int start, unsigned int end,
int count, unsigned int type, const void * indices, int basevertex, unsigned
int numInstances, unsigned int baseInstance) Line 853  C
opengl32.dll!_mesa_exec_DrawElements(unsigned int mode, int count, unsigned int
type, const void * indices) Line 1006   C
mesacrash.exe!draw() Line 13637 C
mesacrash.exe!displayCB() Line 13680    C
freeglut.dll!000007feeec2e3d8() Unknown
freeglut.dll!000007feeec2e580() Unknown
freeglut.dll!000007feeec2ee51() Unknown
mesacrash.exe!main(int argc, char * * argv) Line 13712  C
[External Code] 

System specification:
* Operation system is Windows 7 x64 (installed on Virtual Box machine)
* Mesa version is 18.3.0 builded from sources with Visual Studio 2015 (build
command: scons build=debug machine=x86_64)
* freeglut prebuild binaries
* 2D and 3D acceleration is enabled in Virtual Vox machine, VBGuest drivers are
installed.

Additional Builds and Platforms:
Crash is reproduced with x86 and x64 mesa builds. Also reproduced with Windows
10 x64.</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the QA Contact for the bug.</li>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>