https://bugs.freedesktop.org/show_bug.cgi?id=38658
Summary: [i915g] SIGSEGV src/gallium/auxiliary/draw/draw_pipe_wide_point.c:237 Product: Mesa Version: git Platform: x86 (IA32) OS/Version: Linux (All) Status: NEW Severity: critical Priority: medium Component: Drivers/Gallium/i915g AssignedTo: dri-devel@lists.freedesktop.org ReportedBy: vlee@vmware.com
mesa: 6b28b44d458177209705637f759d03a27fa100f1 (master)
chipset: 945GM (Intel GMA 950) system architecture: i686 xserver-xorg-video-intel: 2:2.14.0-4ubuntu7.1 libdrm-intel1: 2.4.23-1ubuntu6 kernel version: 2.6.38-8-generic Linux distribution: Ubuntu 11.04 i386
Run piglit point-sprite test.
$ ./bin/point-sprite -auto Maximum point size is 255.000000, using 64.000000 Segmentation fault (core dumped)
(gdb) bt #0 0x010e9c20 in widepoint_first_point (stage=0x9ccbdf0, header=0xbfa25bcc) at src/gallium/auxiliary/draw/draw_pipe_wide_point.c:237 #1 0x010e5114 in clip_point (stage=0x9ccd998, header=0xbfa25bcc) at src/gallium/auxiliary/draw/draw_pipe_clip.c:480 #2 0x010e80b8 in validate_point (stage=0x9cd1678, header=0xbfa25bcc) at src/gallium/auxiliary/draw/draw_pipe_validate.c:306 #3 0x010ddf68 in do_point (draw=0x9c7cc10, v0=0x9e10088 "") at src/gallium/auxiliary/draw/draw_pipe.c:123 #4 0x010df249 in pipe_run_linear (draw=0x9c7cc10, prim=0, prim_flags=0, vertices=0x9e10088, stride=52, count=1) at src/gallium/auxiliary/draw/draw_decompose_tmp.h:67 #5 0x010e00bc in draw_pipeline_run_linear (draw=0x9c7cc10, vert_info=0xbfa25d38, prim_info=0xbfa25d9c) at src/gallium/auxiliary/draw/draw_pipe.c:330 #6 0x01147bf7 in pipeline (llvm=0x9cd42c8, vert_info=0xbfa25d38, prim_info=0xbfa25d9c) at src/gallium/auxiliary/draw/draw_pt_fetch_shade_pipeline_llvm.c:198 #7 0x01147f34 in llvm_pipeline_generic (middle=0x9cd42c8, fetch_info=0x0, prim_info=0xbfa25d9c) at src/gallium/auxiliary/draw/draw_pt_fetch_shade_pipeline_llvm.c:299 #8 0x0114804b in llvm_middle_end_linear_run (middle=0x9cd42c8, start=0, count=1, prim_flags=0) at src/gallium/auxiliary/draw/draw_pt_fetch_shade_pipeline_llvm.c:364 #9 0x010f134a in vsplit_segment_simple_linear (vsplit=0x9cd16a8, flags=0, istart=0, icount=1) at src/gallium/auxiliary/draw/draw_pt_vsplit_tmp.h:237 #10 0x010f1694 in vsplit_run_linear (frontend=0x9cd16a8, start=0, count=1) at src/gallium/auxiliary/draw/draw_split_tmp.h:61 #11 0x010ea1bb in draw_pt_arrays (draw=0x9c7cc10, prim=0, start=0, count=1) at src/gallium/auxiliary/draw/draw_pt.c:113 #12 0x010eacf2 in draw_vbo (draw=0x9c7cc10, info=0xbfa25f84) at src/gallium/auxiliary/draw/draw_pt.c:491 #13 0x010b87db in i915_draw_vbo (pipe=0x9c7c3f0, info=0xbfa25f84) at src/gallium/drivers/i915/i915_context.c:88 #14 0x018f7bb0 in st_draw_vbo (ctx=0x9d0a568, arrays=0x9d4b284, prims=0x9d49bd8, nr_prims=1, ib=0x0, index_bounds_valid=1 '\001', min_index=0, max_index=0) at src/mesa/state_tracker/st_draw.c:763 #15 0x019849dd in vbo_exec_vtx_flush (exec=0x9d49a60, keepUnmapped=1 '\001') at src/mesa/vbo/vbo_exec_draw.c:390 #16 0x0197fbd0 in vbo_exec_FlushVertices_internal (exec=0x9d49a60, unmap=1 '\001') at src/mesa/vbo/vbo_exec_api.c:545 #17 0x01980984 in vbo_exec_FlushVertices (ctx=0x9d0a568, flags=1) at src/mesa/vbo/vbo_exec_api.c:996 #18 0x01899baf in _mesa_ReadnPixelsARB (x=17, y=49, width=1, height=1, format=6407, type=5126, bufSize=2147483647, pixels=0xbfa2616c) at src/mesa/main/readpix.c:175 #19 0x01899f97 in _mesa_ReadPixels (x=17, y=49, width=1, height=1, format=6407, type=5126, pixels=0xbfa2616c) at src/mesa/main/readpix.c:256 #20 0x0808f299 in piglit_probe_pixel_rgb () #21 0x0806a533 in piglit_display () #22 0x0806b08b in display () #23 0x00e9dc1e in fghRedrawWindow (window=0x9c749f8, enumerator=0xbfa262c8) at freeglut_main.c:210 #24 fghcbDisplayWindow (window=0x9c749f8, enumerator=0xbfa262c8) at freeglut_main.c:227 #25 0x00ea1590 in fgEnumWindows (enumCallback=0xe9db20 <fghcbDisplayWindow>, enumerator=0xbfa262c8) at freeglut_structure.c:394 #26 0x00e9e02e in fghDisplayAll () at freeglut_main.c:249 #27 glutMainLoopEvent () at freeglut_main.c:1450 #28 0x00e9e935 in glutMainLoop () at freeglut_main.c:1498 #29 0x0806b22f in main () (gdb) frame 0 #0 0x010e9c20 in widepoint_first_point (stage=0x9ccbdf0, header=0xbfa25bcc) at src/gallium/auxiliary/draw/draw_pipe_wide_point.c:237 237 for (i = 0; i < fs->info.num_inputs; i++) { (gdb) print fs $2 = (const struct draw_fragment_shader *) 0x0