https://bugs.freedesktop.org/show_bug.cgi?id=70916
Priority: medium Bug ID: 70916 Assignee: dri-devel@lists.freedesktop.org Summary: [PIGLIT,radeonsi] crash in "spec/glsl-1.30/execution/texelFetch fs sampler2D 71x1-71x281" (buffer overflow) Severity: normal Classification: Unclassified OS: Linux (All) Reporter: kai@dev.carbon-project.org Hardware: x86-64 (AMD64) Status: NEW Version: git Component: Drivers/Gallium/radeonsi Product: Mesa
Created attachment 88179 --> https://bugs.freedesktop.org/attachment.cgi?id=88179&action=edit Full GDB backtrace of crash/buffer overflow
While running Piglit on radeonsi (full graphics stack detailed below) I encountered an crash in "spec/glsl-1.30/execution/texelFetch fs sampler2D 71x1-71x281". See the attached GDB backtrace and register dump for more details.
Stack: GPU: "PITCAIRN" (ChipID = 0x6819) Linux: 3.11.6 libdrm: 2.4.47 LLVM: SVN:trunk/r193475 libclc: Git:master/4c18120c1a Mesa: Git:master/64c081e8b7 GLAMOR: Git:master/ba209eeef2 DDX: Git:master/f1dc677e79
Let me know if you need further information.
Note: this might be a duplicate of bug 70913, both seem to call llvm.SI.imageload.v4i3
https://bugs.freedesktop.org/show_bug.cgi?id=70916
--- Comment #1 from Kai kai@dev.carbon-project.org --- If this is a duplicate of bug 70913, then I've more occurrences of it, e.g. in "spec/ARB_texture_multisample/texelFetch/6-fs-sampler2DMS". I'm holding off on filing further bugs until someone with more in-depth knowledge of the driver can comment on that.
https://bugs.freedesktop.org/show_bug.cgi?id=70916
--- Comment #2 from Michel Dänzer michel@daenzer.net --- Looks like it might be as simple as the buffer passed to sprintf needing to be larger? Can you try that?
https://bugs.freedesktop.org/show_bug.cgi?id=70916
Kai kai@dev.carbon-project.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE
--- Comment #3 from Kai kai@dev.carbon-project.org --- Your idea was correct! And bug 70913 is fixed as well with the mini patch I used. Therefore I'm closing this as a duplicate.
I'll send a patch to the ML.
*** This bug has been marked as a duplicate of bug 70913 ***
dri-devel@lists.freedesktop.org