https://bugs.freedesktop.org/show_bug.cgi?id=31568

Summary: [r300g] SIGSEGV src/mesa/vbo/vbo_exec_array.c:1154 Product: Mesa Version: git Platform: x86 (IA32) OS/Version: Linux (All) Status: NEW Severity: critical Priority: medium Component: Drivers/Gallium/r300 AssignedTo: dri-devel@lists.freedesktop.org ReportedBy: vlee@vmware.com

mesa: d18df9e336b5d2e68a4a6185f7b9d0d0c095c3c4 (master)

chipset: RV530 71C5 (ATI Radeon X1600) system architecture: i686 libdrm-dev: 2.4.21-1ubuntu2.1 kernel version: 2.6.35-22-generic Linux distribution: Ubuntu 10.10 i386 Machine model: iMac4,1

Run piglit bgra-sec-color-pointer test.

$ ./bin/bgra-sec-color-pointer-test ... Segmentation fault (core dumped)

(gdb) bt #0 0x0183d923 in vbo_exec_MultiDrawElements (mode=3, count=0x1401, type=4, indices=0x804f1d0, primcount=143224880) at src/mesa/vbo/vbo_exec_array.c:1154 #1 0x0804a622 in piglit_display () at piglit/tests/general/bgra-sec-color-pointer.c:82 #2 0x0804c847 in display () at piglit/tests/util/piglit-framework.c:52 #3 0x00755820 in fghRedrawWindow (window=0x88a2060, enumerator=0xbfd29688) at freeglut_main.c:210 #4 fghcbDisplayWindow (window=0x88a2060, enumerator=0xbfd29688) at freeglut_main.c:227 #5 0x00759660 in fgEnumWindows (enumCallback=0x755790 <fghcbDisplayWindow>, enumerator=0xbfd29688) at freeglut_structure.c:394 #6 0x00755cdb in fghDisplayAll () at freeglut_main.c:249 #7 glutMainLoopEvent () at freeglut_main.c:1450 #8 0x00756605 in glutMainLoop () at freeglut_main.c:1498 #9 0x0804c9f0 in main (argc=1, argv=0xbfd29914) at piglit/tests/util/piglit-framework.c:118 (gdb) frame 0 #0 0x0183d923 in vbo_exec_MultiDrawElements (mode=3, count=0x1401, type=4, indices=0x804f1d0, primcount=143224880) at src/mesa/vbo/vbo_exec_array.c:1154 1154 if (!_mesa_validate_DrawElements(ctx, mode, count[i], type, indices[i], (gdb) l 1149 GLint i; 1150 1151 ASSERT_OUTSIDE_BEGIN_END_AND_FLUSH(ctx); 1152 1153 for (i = 0; i < primcount; i++) { 1154 if (!_mesa_validate_DrawElements(ctx, mode, count[i], type, indices[i], 1155 0)) 1156 return; 1157 } 1158