* [Bug 93447] [r600g] llvm crash because of use of uninitialized stack
@ 2015-12-19 16:33 bugzilla-daemon
2015-12-21 2:51 ` bugzilla-daemon
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: bugzilla-daemon @ 2015-12-19 16:33 UTC (permalink / raw)
To: dri-devel
[-- Attachment #1.1: Type: text/plain, Size: 1356 bytes --]
https://bugs.freedesktop.org/show_bug.cgi?id=93447
Bug ID: 93447
Summary: [r600g] llvm crash because of use of uninitialized
stack
Product: Mesa
Version: git
Hardware: x86-64 (AMD64)
OS: Linux (All)
Status: NEW
Severity: normal
Priority: medium
Component: Drivers/Gallium/r600
Assignee: dri-devel@lists.freedesktop.org
Reporter: notasas@gmail.com
QA Contact: dri-devel@lists.freedesktop.org
Created attachment 120595
--> https://bugs.freedesktop.org/attachment.cgi?id=120595&action=edit
hack patch
When replaying traces from Bug 92229 with R600_DEBUG=llvm specified a crash
will occur (on my system) in LLVMBuildInsertElement() because uninitialized
value in Index argument is passed. That value originates from
radeon_llvm_emit_prepare_cube_coords() function's coords[3] stack variable. At
that time,
opcode = TGSI_OPCODE_TEX
target = TGSI_TEXTURE_CUBE
so nothing ever sets coords[3], which is copied to the caller and eventually
finds it way to llvm.
Unfortunately I don't have any knowledge about that code, I hope somebody who
knows more can take a look. A hack patch is attached but it's most likely
wrong.
--
You are receiving this mail because:
You are the assignee for the bug.
[-- Attachment #1.2: Type: text/html, Size: 2905 bytes --]
[-- Attachment #2: Type: text/plain, Size: 159 bytes --]
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/dri-devel
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Bug 93447] [r600g] llvm crash because of use of uninitialized stack
2015-12-19 16:33 [Bug 93447] [r600g] llvm crash because of use of uninitialized stack bugzilla-daemon
@ 2015-12-21 2:51 ` bugzilla-daemon
2015-12-21 12:57 ` bugzilla-daemon
2015-12-21 13:02 ` bugzilla-daemon
2 siblings, 0 replies; 4+ messages in thread
From: bugzilla-daemon @ 2015-12-21 2:51 UTC (permalink / raw)
To: dri-devel
[-- Attachment #1.1: Type: text/plain, Size: 614 bytes --]
https://bugs.freedesktop.org/show_bug.cgi?id=93447
Michel Dänzer <michel@daenzer.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |WONTFIX
--- Comment #1 from Michel Dänzer <michel@daenzer.net> ---
R600_DEBUG=llvm is currently known broken in many ways and should only be
enabled by developers who want to fix it.
--
You are receiving this mail because:
You are the assignee for the bug.
[-- Attachment #1.2: Type: text/html, Size: 2147 bytes --]
[-- Attachment #2: Type: text/plain, Size: 159 bytes --]
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/dri-devel
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Bug 93447] [r600g] llvm crash because of use of uninitialized stack
2015-12-19 16:33 [Bug 93447] [r600g] llvm crash because of use of uninitialized stack bugzilla-daemon
2015-12-21 2:51 ` bugzilla-daemon
@ 2015-12-21 12:57 ` bugzilla-daemon
2015-12-21 13:02 ` bugzilla-daemon
2 siblings, 0 replies; 4+ messages in thread
From: bugzilla-daemon @ 2015-12-21 12:57 UTC (permalink / raw)
To: dri-devel
[-- Attachment #1.1: Type: text/plain, Size: 667 bytes --]
https://bugs.freedesktop.org/show_bug.cgi?id=93447
--- Comment #2 from Grazvydas Ignotas <notasas@gmail.com> ---
I believe this bug can also be triggered by radeonsi though, as it also calls
radeon_llvm_emit_prepare_cube_coords(). When target == TGSI_TEXTURE_CUBE and
opcode == TGSI_OPCODE_TXF, si_shader.c will take and use garbage value from
that function.
Unfortunately I don't have any radeonsi hardware to make a testcase to prove my
point. It might also be difficult anyway due to nature of uinitialized variable
bugs (it's likely to end up with a value that doesn't cause a crash).
--
You are receiving this mail because:
You are the assignee for the bug.
[-- Attachment #1.2: Type: text/html, Size: 1505 bytes --]
[-- Attachment #2: Type: text/plain, Size: 159 bytes --]
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/dri-devel
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Bug 93447] [r600g] llvm crash because of use of uninitialized stack
2015-12-19 16:33 [Bug 93447] [r600g] llvm crash because of use of uninitialized stack bugzilla-daemon
2015-12-21 2:51 ` bugzilla-daemon
2015-12-21 12:57 ` bugzilla-daemon
@ 2015-12-21 13:02 ` bugzilla-daemon
2 siblings, 0 replies; 4+ messages in thread
From: bugzilla-daemon @ 2015-12-21 13:02 UTC (permalink / raw)
To: dri-devel
[-- Attachment #1.1: Type: text/plain, Size: 531 bytes --]
https://bugs.freedesktop.org/show_bug.cgi?id=93447
--- Comment #3 from Ilia Mirkin <imirkin@alum.mit.edu> ---
(In reply to Grazvydas Ignotas from comment #2)
> I believe this bug can also be triggered by radeonsi though, as it also
> calls radeon_llvm_emit_prepare_cube_coords(). When target ==
> TGSI_TEXTURE_CUBE and opcode == TGSI_OPCODE_TXF, si_shader.c will take and
> use garbage value from that function.
You can't texelFetch() on a samplerCube.
--
You are receiving this mail because:
You are the assignee for the bug.
[-- Attachment #1.2: Type: text/html, Size: 1445 bytes --]
[-- Attachment #2: Type: text/plain, Size: 159 bytes --]
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/dri-devel
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2015-12-21 13:02 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-12-19 16:33 [Bug 93447] [r600g] llvm crash because of use of uninitialized stack bugzilla-daemon
2015-12-21 2:51 ` bugzilla-daemon
2015-12-21 12:57 ` bugzilla-daemon
2015-12-21 13:02 ` bugzilla-daemon
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.