[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[bugzilla-daemon]

[-- Attachment #1.1: Type: text/plain, Size: 2542 bytes --]

https://bugs.freedesktop.org/show_bug.cgi?id=106289

            Bug ID: 106289
           Summary: mupen64plus segfaults deep inside r300_dri.so
           Product: DRI
           Version: XOrg git
          Hardware: x86 (IA32)
                OS: Linux (All)
            Status: NEW
          Severity: blocker
          Priority: medium
         Component: DRM/AMDgpu
          Assignee: dri-devel@lists.freedesktop.org
          Reporter: dcoffin@cybercom.net

Dell Vostro 1000 laptop with Mobile AMD Sempron, Mobility Radeon Xpress 200,
and 32-bit Linux (though CPU is capable of 64-bit). "apt install mupen64plus",
run it with any game ROM -- it opens an all-black window, pauses for a few
seconds, and segfaults in r300_dri.so. mupen64plus worked great in Kubuntu
17.04 but always crashes in 17.10 and 18.04.

Video: SSE processing enabled.
Video: Found ROM 'SUPER MARIO 64', CRC ff2b5a632623028b-45
Video: Initializing OpenGL Device Context.
warning: Error reading shared library list entry at 0x5f20
warning: Error reading shared library list entry at 0xffffbf40
Core: Setting 32-bit video mode: 640x480
Video Warning: Failed to set GL_SWAP_CONTROL to 0. (it's 24)
Video Warning: Failed to set GL_BUFFER_SIZE to 32. (it's 24)
Video Warning: Failed to set GL_DEPTH_SIZE to 16. (it's 24)
Video: Using OpenGL: X.Org R300 Project - ATI RS480 : 2.1 Mesa 18.0.0-rc5

Thread 1 "mupen64plus" received signal SIGSEGV, Segmentation fault.
0xb4a83200 in ?? ()
(gdb) where
#0  0xb4a83200 in ?? ()
#1  0xb33fff48 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#2  0xb34004df in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#3  0xb33132f9 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#4  0xb330c1c0 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#5  0xb330c6b7 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#6  0xb353e21b in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#7  0xb33511e4 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#8  0xb353fcd5 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#9  0xb33539ee in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#10 0xb35342b6 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#11 0xb3127955 in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#12 0xb2f7892f in ?? () from /usr/lib/i386-linux-gnu/dri/r300_dri.so
#13 0xb4caa82d in ?? () from
/usr/lib/i386-linux-gnu/mupen64plus/mupen64plus-video-rice.so

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #1.2: Type: text/html, Size: 3855 bytes --]

[-- Attachment #2: Type: text/plain, Size: 160 bytes --]

_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[bugzilla-daemon]

[-- Attachment #1.1: Type: text/plain, Size: 636 bytes --]

https://bugs.freedesktop.org/show_bug.cgi?id=106289

Michel Dänzer <michel@daenzer.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|DRM/AMDgpu                  |Drivers/Gallium/r300
            Version|XOrg git                    |unspecified
         QA Contact|                            |dri-devel@lists.freedesktop
                   |                            |.org
            Product|DRI                         |Mesa

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #1.2: Type: text/html, Size: 1642 bytes --]

[-- Attachment #2: Type: text/plain, Size: 160 bytes --]

_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[bugzilla-daemon]

[-- Attachment #1.1: Type: text/plain, Size: 4804 bytes --]

https://bugs.freedesktop.org/show_bug.cgi?id=106289

--- Comment #1 from Dave Coffin <dcoffin@cybercom.net> ---
This bug also crashes "mplayer" but not "mpv".  I compiled mesa 18.0.3 from
source and got a more informative stack trace, though many parameters are still
"optimized out":

r300: DRM version: 2.50.0, Name: ATI RS480, ID: 0x5975, GB: 2, Z: 1
r300: GART size: 509 MB, VRAM size: 128 MB
r300: AA compression RAM: YES, Z compression RAM: YES, HiZ RAM: NO
r300: DRM version: 2.50.0, Name: ATI RS480, ID: 0x5975, GB: 2, Z: 1
r300: GART size: 509 MB, VRAM size: 128 MB
r300: AA compression RAM: YES, Z compression RAM: YES, HiZ RAM: NO
Core: Setting 32-bit video mode: 640x480
r300: DRM version: 2.50.0, Name: ATI RS480, ID: 0x5975, GB: 2, Z: 1
r300: GART size: 509 MB, VRAM size: 128 MB
r300: AA compression RAM: YES, Z compression RAM: YES, HiZ RAM: NO
r300: DRM version: 2.50.0, Name: ATI RS480, ID: 0x5975, GB: 2, Z: 1
r300: GART size: 509 MB, VRAM size: 128 MB
r300: AA compression RAM: YES, Z compression RAM: YES, HiZ RAM: NO
Video Warning: Failed to set GL_SWAP_CONTROL to 0. (it's 24)
Video Warning: Failed to set GL_BUFFER_SIZE to 32. (it's 24)
Video Warning: Failed to set GL_DEPTH_SIZE to 16. (it's 24)
Video: Using OpenGL: X.Org R300 Project - ATI RS480 : 2.1 Mesa 18.0.3

Thread 1 "mupen64plus" received signal SIGSEGV, Segmentation fault.
0xb4c12200 in ?? ()
(gdb) where
#0  0xb4c12200 in ?? ()
#1  0xb35b5bfb in llvm_pipeline_generic (middle=0x6964c0,
middle@entry=0x64aa80, 
    fetch_info=fetch_info@entry=0xbffb688c,
in_prim_info=in_prim_info@entry=0xbffb689c)
    at draw/draw_pt_fetch_shade_pipeline_llvm.c:400
#2  0xb35b62af in llvm_middle_end_linear_run (middle=0x64aa80, start=0,
count=<optimized out>, 
    prim_flags=0) at draw/draw_pt_fetch_shade_pipeline_llvm.c:553
#3  0xb34b04db in vsplit_segment_simple_linear (vsplit=0x648420,
vsplit=0x648420, icount=4, istart=0, 
    flags=0) at draw/draw_pt_vsplit_tmp.h:226
#4  vsplit_run_linear (frontend=0x648420, start=0, count=4) at
draw/draw_split_tmp.h:60
#5  0xb34a8140 in draw_pt_arrays (draw=draw@entry=0x552810, prim=6, start=0,
count=4)
    at draw/draw_pt.c:149
#6  0xb34a8677 in draw_vbo (draw=<optimized out>, info=<optimized out>) at
draw/draw_pt.c:564
#7  0xb35e41bb in r300_swtcl_draw_vbo (pipe=0x5124f0, info=0xbffb6a70) at
r300_render.c:862
#8  0xb34f3fd6 in util_draw_arrays_instanced (mode=PIPE_PRIM_TRIANGLE_FAN,
start=0, count=4, 
    start_instance=0, instance_count=1, pipe=0x5124f0) at ./util/u_draw.h:106
#9  blitter_draw (ctx=<optimized out>, vertex_elements_cso=<optimized out>, 
    get_vs=0xb34f3790 <get_vs_passthrough_pos>, x1=0, y1=0, x2=640, y2=480,
depth=1, num_instances=1)
    at util/u_blitter.c:1257
#10 0xb34f4176 in util_blitter_draw_rectangle (blitter=<optimized out>, 
    vertex_elements_cso=<optimized out>, get_vs=<optimized out>, x1=<optimized
out>, 
    y1=<optimized out>, x2=<optimized out>, y2=480, depth=1, num_instances=1, 
    type=UTIL_BLITTER_ATTRIB_NONE, attrib=0xbffb6ba4) at util/u_blitter.c:1291
#11 0xb35e63f5 in r300_blitter_draw_rectangle (blitter=0x528760,
vertex_elements_cso=0x682830, 
    get_vs=0xb34f3790 <get_vs_passthrough_pos>, x1=0, y1=0, x2=640, y2=480,
depth=1, num_instances=1, 
    type=UTIL_BLITTER_ATTRIB_NONE, attrib=0xbffb6ba4) at r300_render.c:1139
#12 0xb34f6dc7 in util_blitter_clear_custom (blitter=0x528760, width=640,
height=480, num_layers=1, 
    clear_buffers=1, color=0x628634, depth=1, stencil=0, custom_dsa=0x0,
custom_blend=0x0)
    at util/u_blitter.c:1411
#13 0xb34f6f33 in util_blitter_clear (blitter=<optimized out>, width=<optimized
out>, 
    height=<optimized out>, num_layers=<optimized out>,
clear_buffers=<optimized out>, 
    color=<optimized out>, depth=<optimized out>, stencil=0) at
util/u_blitter.c:1428
#14 0xb35d828e in r300_clear (pipe=0x5124f0, buffers=1, color=0x628634,
depth=1, stencil=0)
    at r300_blit.c:368
#15 0xb329d564 in st_Clear (ctx=<optimized out>, mask=<optimized out>)
    at state_tracker/st_cb_clear.c:483
#16 0xb30d455c in clear (no_error=false, mask=<optimized out>, ctx=0x627140) at
main/clear.c:221
#17 _mesa_Clear (mask=<optimized out>) at main/clear.c:242
#18 0xb4ca782d in ?? () from
/usr/lib/i386-linux-gnu/mupen64plus/mupen64plus-video-rice.so
#19 0xb4c93574 in ?? () from
/usr/lib/i386-linux-gnu/mupen64plus/mupen64plus-video-rice.so
#20 0xb4c81475 in RomOpen () from
/usr/lib/i386-linux-gnu/mupen64plus/mupen64plus-video-rice.so
#21 0xb6406c0c in ?? () from /usr/lib/i386-linux-gnu/libmupen64plus.so.2
#22 0xb6407618 in CoreDoCommand () from
/usr/lib/i386-linux-gnu/libmupen64plus.so.2
#23 0x00402d50 in main ()

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #1.2: Type: text/html, Size: 5779 bytes --]

[-- Attachment #2: Type: text/plain, Size: 160 bytes --]

_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[bugzilla-daemon]

[-- Attachment #1.1: Type: text/plain, Size: 616 bytes --]

https://bugs.freedesktop.org/show_bug.cgi?id=106289

--- Comment #2 from Dave Coffin <dcoffin@cybercom.net> ---
I fixed this problem by downgrading libgl1-mesa-dri, libgl1-mesa-glx,
libglapi-mesa, and mesa-vdpau-drivers to version 11.2.0 from the Ubuntu 16.04
.deb files. I could have also used Mesa 17.0.3 from the Ubuntu 17.04 distro,
but Ubuntu deleted those .deb files and all mirrors of them.

Let me know if you want anything tested, preferably binaries because it takes
hours to build Mesa on this 2007-vintage computer.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #1.2: Type: text/html, Size: 1391 bytes --]

[-- Attachment #2: Type: text/plain, Size: 160 bytes --]

_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[bugzilla-daemon]

[-- Attachment #1.1: Type: text/plain, Size: 287 bytes --]

https://bugs.freedesktop.org/show_bug.cgi?id=106289

--- Comment #3 from Anthony Ciani <anthonyjciani@gmail.com> ---
Check out bug 106533.  It was also a SEGV in llvm_pipeline_generic.  There is a
patch.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #1.2: Type: text/html, Size: 1259 bytes --]

[-- Attachment #2: Type: text/plain, Size: 160 bytes --]

_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[bugzilla-daemon]

[-- Attachment #1.1: Type: text/plain, Size: 408 bytes --]

https://bugs.freedesktop.org/show_bug.cgi?id=106289

--- Comment #4 from Dave Coffin <dcoffin@cybercom.net> ---
Thanks, Roland's patch fixed the mupen64plus crash but not the mplayer crash,
which happens in libvdpau_r300.so.1  I don't know where the source code for
that file is; it's not in mesa-18.0.5 or in libvdpau-1.1.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #1.2: Type: text/html, Size: 1183 bytes --]

[-- Attachment #2: Type: text/plain, Size: 160 bytes --]

_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

[Bug 106289] mupen64plus segfaults deep inside r300_dri.so

[bugzilla-daemon]

[-- Attachment #1.1: Type: text/plain, Size: 841 bytes --]

https://bugs.freedesktop.org/show_bug.cgi?id=106289

GitLab Migration User <gitlab-migration@fdo.invalid> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |MOVED
             Status|NEW                         |RESOLVED

--- Comment #5 from GitLab Migration User <gitlab-migration@fdo.invalid> ---
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been
closed from further activity.

You can subscribe and participate further through the new bug through this link
to our GitLab instance: https://gitlab.freedesktop.org/mesa/mesa/issues/386.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #1.2: Type: text/html, Size: 2431 bytes --]

[-- Attachment #2: Type: text/plain, Size: 159 bytes --]

_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel