From mboxrd@z Thu Jan 1 00:00:00 1970
From: bugzilla-daemon@freedesktop.org
Subject: [Bug 82828] Regression: Crash in 3Dmark2001
Date: Sat, 30 Aug 2014 07:19:25 +0000
Message-ID:
References:
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============2133775873=="
Return-path:
Received: from culpepper.freedesktop.org (unknown [131.252.210.165])
by gabe.freedesktop.org (Postfix) with ESMTP id 0376A6E780
for ; Sat, 30 Aug 2014 00:19:26 -0700 (PDT)
In-Reply-To:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: dri-devel-bounces@lists.freedesktop.org
Sender: "dri-devel"
To: dri-devel@lists.freedesktop.org
List-Id: dri-devel@lists.freedesktop.org
--===============2133775873==
Content-Type: multipart/alternative; boundary="1409383165.7D3d03.29127"; charset="us-ascii"
--1409383165.7D3d03.29127
Date: Sat, 30 Aug 2014 07:19:25 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
https://bugs.freedesktop.org/show_bug.cgi?id=3D82828
--- Comment #5 from Pavel Ondra=C4=8Dka ---
Created attachment 105451
--> https://bugs.freedesktop.org/attachment.cgi?id=3D105451&action=3Dedit
full backtrace from piglit crash
(In reply to comment #4)
> All the crashes are in the same place, right?
>=20
> Can you run it under gdb and print out n2 and the contents of
> g->nodes[n].adjacency_list (it's an array with g->nodes[n].adjacency_count
> elements) after the segfault? How about the former before the ra_simplify=
()
> call in the ra_allocate() call that's segfaulting? (If you don't know how=
to
> do this, see
> http://stackoverflow.com/questions/2956889/how-to-set-a-counter-for-a-gdb-
> breakpoint)
>=20
> I'm guessing that it's segfaulting because n2 is some bogus value. n2 com=
es
> from the adjacency_list, which is something generated before the allocator
> actually runs by code I didn't touch and then never modified afterward, a=
nd
> the code that's segfaulting wasn't modified by the commit in question, so
> the two most likely options I see are that either this is exposing a bug
> somewhere else (like in r300g) or the new ra_simplify() is somehow
> corrupting the adjacency_list. I don't know how r300g sets up the register
> conflicts and register classes, though, so I can't guess why it works fine
> on i965 but fails for r300g.
OK, so not sure if I know what I'm doing but selecting one random crashing
piglit test
/bin/shader_runner tests/shaders/glsl-fs-loop-continue.shader_test -auto
Program received signal SIGSEGV, Segmentation fault.
0xb76391a9 in ra_select (g=3D0x80c2058) at
../../src/mesa/program/register_allocate.c:525
525 BITSET_TEST(g->regs->regs[r].conflicts, g->nodes[n2].reg)) {
print n2
$2 =3D 0
print n
$7 =3D 1
print g->nodes[n].adjacency_count
$1 =3D 3
print g->nodes[n].adjacency_list
$3 =3D (unsigned int *) 0x80c1b58
print g->nodes[n].adjacency_list[0]
$4 =3D 1
print g->nodes[n].adjacency_list[1]
$5 =3D 0
print g->nodes[n].adjacency_list[2]
$6 =3D 2
full backtrace attached.
--=20
You are receiving this mail because:
You are the assignee for the bug.
--1409383165.7D3d03.29127
Date: Sat, 30 Aug 2014 07:19:25 +0000
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Comment=
# 5
on bug 82828<=
/a>
from Pavel Ondra=C4=8Dka
Created attachm=
ent 105451 [details]
full backtrace from piglit crash
(In reply to comment #4)
> All the crashes are in the same place, right?
>=20
> Can you run it under gdb and print out n2 and the contents of
> g->nodes[n].adjacency_list (it's an array with g->nodes[n].adjac=
ency_count
> elements) after the segfault? How about the former before the ra_simpl=
ify()
> call in the ra_allocate() call that's segfaulting? (If you don't know =
how to
> do this, see
> http://stackoverflow.com/questions/2956889/how-to-set-a-cou=
nter-for-a-gdb-
> breakpoint)
>=20
> I'm guessing that it's segfaulting because n2 is some bogus value. n2 =
comes
> from the adjacency_list, which is something generated before the alloc=
ator
> actually runs by code I didn't touch and then never modified afterward=
, and
> the code that's segfaulting wasn't modified by the commit in question,=
so
> the two most likely options I see are that either this is exposing a b=
ug
> somewhere else (like in r300g) or the new ra_simplify() is somehow
> corrupting the adjacency_list. I don't know how r300g sets up the regi=
ster
> conflicts and register classes, though, so I can't guess why it works =
fine
> on i965 but fails for r300g.
OK, so not sure if I know what I'm doing but selecting one random crashing
piglit test
/bin/shader_runner tests/shaders/glsl-fs-loop-continue.shader_test -auto
Program received signal SIGSEGV, Segmentation fault.
0xb76391a9 in ra_select (g=3D0x80c2058) at
../../src/mesa/program/register_allocate.c:525
525 BITSET_TEST(g->regs->regs[r].conflicts, g->nodes[n2=
].reg)) {
print n2
$2 =3D 0
print n
$7 =3D 1
print g->nodes[n].adjacency_count
$1 =3D 3
print g->nodes[n].adjacency_list
$3 =3D (unsigned int *) 0x80c1b58
print g->nodes[n].adjacency_list[0]
$4 =3D 1
print g->nodes[n].adjacency_list[1]
$5 =3D 0
print g->nodes[n].adjacency_list[2]
$6 =3D 2
full backtrace attached.
You are receiving this mail because:
=20=20=20=20=20=20
- You are the assignee for the bug.
--1409383165.7D3d03.29127--
--===============2133775873==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/dri-devel
--===============2133775873==--