[Mesa-dev] [Bug 64568] SIGSEGV src/mesa/main/bufferobj.c:291

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=64568

--- Comment #2 from José Fonseca <jfonseca at vmware.com> ---
> 614ee25077b7ffafeb87b22563d01856824fb4bc is the first bad commit
> commit 614ee25077b7ffafeb87b22563d01856824fb4bc
> Author: Marek Olšák <maraeo at gmail.com>
> Date:   Thu May 2 02:38:43 2013 +0200
> 
>     st/mesa: initialize all program constants and UBO limits
>     
>     Also simplify UBO support checking.
>     
>     NOTE: This is a candidate for the 9.1 branch.
>     
>     Reviewed-by: Brian Paul <brianp at vmware.com>

I confirm the same here.


The output of glxinfo changed radically with this patch:

--- /tmp/old.txx        2013-05-14 16:24:41.543837747 +0100
+++ /tmp/new.txx        2013-05-14 16:25:47.448257369 +0100
@@ -126,7 +126,7 @@
     GL_MAX_TEXTURE_LOD_BIAS_EXT = 16
     GL_MAX_DRAW_BUFFERS_ARB = 8
     GL_VERTEX_PROGRAM_ARB:
-        GL_MAX_PROGRAM_INSTRUCTIONS_ARB = 16384
+        GL_MAX_PROGRAM_INSTRUCTIONS_ARB = 1048576
         GL_MAX_PROGRAM_NATIVE_INSTRUCTIONS_ARB = 1048576
         GL_MAX_PROGRAM_TEMPORARIES_ARB = 256
         GL_MAX_PROGRAM_NATIVE_TEMPORARIES_ARB = 256
@@ -134,26 +134,26 @@
         GL_MAX_PROGRAM_NATIVE_PARAMETERS_ARB = 32384
         GL_MAX_PROGRAM_ATTRIBS_ARB = 16
         GL_MAX_PROGRAM_NATIVE_ATTRIBS_ARB = 32
-        GL_MAX_PROGRAM_ADDRESS_REGISTERS_ARB = 1
+        GL_MAX_PROGRAM_ADDRESS_REGISTERS_ARB = 16
         GL_MAX_PROGRAM_NATIVE_ADDRESS_REGISTERS_ARB = 16
         GL_MAX_PROGRAM_LOCAL_PARAMETERS_ARB = 4096
         GL_MAX_PROGRAM_ENV_PARAMETERS_ARB = 256
     GL_FRAGMENT_PROGRAM_ARB:
-        GL_MAX_PROGRAM_INSTRUCTIONS_ARB = 16384
+        GL_MAX_PROGRAM_INSTRUCTIONS_ARB = 1048576
         GL_MAX_PROGRAM_NATIVE_INSTRUCTIONS_ARB = 1048576
         GL_MAX_PROGRAM_TEMPORARIES_ARB = 256
         GL_MAX_PROGRAM_NATIVE_TEMPORARIES_ARB = 256
         GL_MAX_PROGRAM_PARAMETERS_ARB = 32384
         GL_MAX_PROGRAM_NATIVE_PARAMETERS_ARB = 32384
-        GL_MAX_PROGRAM_ATTRIBS_ARB = 12
+        GL_MAX_PROGRAM_ATTRIBS_ARB = 32
         GL_MAX_PROGRAM_NATIVE_ATTRIBS_ARB = 32
-        GL_MAX_PROGRAM_ADDRESS_REGISTERS_ARB = 0
+        GL_MAX_PROGRAM_ADDRESS_REGISTERS_ARB = 16
         GL_MAX_PROGRAM_NATIVE_ADDRESS_REGISTERS_ARB = 16
         GL_MAX_PROGRAM_LOCAL_PARAMETERS_ARB = 4096
         GL_MAX_PROGRAM_ENV_PARAMETERS_ARB = 256
-        GL_MAX_PROGRAM_ALU_INSTRUCTIONS_ARB = 16384
-        GL_MAX_PROGRAM_TEX_INSTRUCTIONS_ARB = 16384
-        GL_MAX_PROGRAM_TEX_INDIRECTIONS_ARB = 16384
+        GL_MAX_PROGRAM_ALU_INSTRUCTIONS_ARB = 1048576
+        GL_MAX_PROGRAM_TEX_INSTRUCTIONS_ARB = 1048576
+        GL_MAX_PROGRAM_TEX_INDIRECTIONS_ARB = 1048576
         GL_MAX_PROGRAM_NATIVE_ALU_INSTRUCTIONS_ARB = 1048576
         GL_MAX_PROGRAM_NATIVE_TEX_INSTRUCTIONS_ARB = 1048576
         GL_MAX_PROGRAM_NATIVE_TEX_INDIRECTIONS_ARB = 1048576

I suspect that this is causing a buffer overflow somewhere.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/mesa-dev/attachments/20130514/d84e4bc8/attachment.html>