Bug 111793

Summary: double free or corruption (fasttop) in nouveau_bo_del
Product: xorg Reporter: Yury Semikhatsky <yurys>
Component: Driver/nouveauAssignee: Nouveau Project <nouveau>
Status: RESOLVED MOVED QA Contact: Xorg Project Team <xorg-team>
Severity: not set    
Priority: not set    
Version: unspecified   
Hardware: x86-64 (AMD64)   
OS: Linux (All)   
Whiteboard:
i915 platform: i915 features:
Attachments:
Description Flags
assertion in nouveau_pushbuf_data at ../nouveau/pushbuf.c:723
none
dmesg output
none
double free or corruption (fasttop) none

Description Yury Semikhatsky 2019-09-23 23:55:07 UTC
Created attachment 145484 [details]
assertion in nouveau_pushbuf_data at ../nouveau/pushbuf.c:723

This happens all the time when I'm trying to load cnn.com in WebKit minibrowser. More details about the scenario can be found at https://bugs.webkit.org/show_bug.cgi?id=200437

There is either segfault or assertion failure everytime I load the site. Attaching a couple of core dumps to the bug.
Comment 1 Yury Semikhatsky 2019-09-23 23:55:33 UTC
Created attachment 145485 [details]
dmesg output
Comment 2 Yury Semikhatsky 2019-09-23 23:58:25 UTC
Created attachment 145486 [details]
double free or corruption (fasttop)
Comment 3 Karol Herbst 2019-09-24 00:33:06 UTC
this is probably a multithreading bug inside mesa. We are aware of the situation, just fixing it might take a while as it requires bigger rework. We are on it though. Just limited in time sadly.
Comment 4 Yury Semikhatsky 2019-09-24 01:44:03 UTC
Thanks for your response. Let me know if you need help with testing the fix with the WebKit scenarios.
Comment 5 Martin Peres 2019-12-04 09:53:23 UTC
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/xorg/driver/xf86-video-nouveau/issues/504.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.