| Summary: | crash at the second render when applying gamma correction | ||
|---|---|---|---|
| Product: | Mesa | Reporter: | Yves Claude <yves> |
| Component: | Drivers/DRI/nouveau | Assignee: | Nouveau Project <nouveau> |
| Status: | RESOLVED INVALID | QA Contact: | |
| Severity: | critical | ||
| Priority: | medium | ||
| Version: | 8.0 | ||
| Hardware: | x86-64 (AMD64) | ||
| OS: | Linux (All) | ||
| Whiteboard: | |||
| i915 platform: | i915 features: | ||
| Attachments: |
example of the crash
data image for cpp file |
||
Created attachment 69257 [details]
data image for cpp file
Couldn't reproduce this with mesa 9.1 or 9.2 on nv96. Please re-test, and if you're still having issues, please provide more information about your setup. (I did see a glibc malloc warning, but I didn't try to figure out if it was in your code or not.) No response to re-test request in a month. Closing as invalid. |
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.
Created attachment 69256 [details] example of the crash Here a very simple program which illustrate a bug in driver 2.1 Mesa 8.0.4 when applying a gamma value with opengl. (The program is OK with driver NVIDIA). In attachment, the file utc24.tga used by the program glut_gamma_bug.cpp. Compile the program with the command: g++ -L/usr/lib64 -lGL -lGLU -lglut -lX11 -lXi -lxcb-glx -lxcb-xlib -ldl glut_gamma_bug.cpp Start it with: ./a.out It will open a small window with an image composed of vertical strips. Press the enter key (it apply a gamma correction of 3 to the image): a) it will print a message: KEY_ENTER b) it will print another message: current error GL: no error c) the same image will be brightness d) at the second message: current error GL: no error, it will crash Crash in: ==17340== Invalid read of size 4 ==17340== at 0xE5D4ABE: set_sampler_views.isra.2 (u_atomic.h:62) ==17340== by 0xE5B72E8: draw_textured_quad.isra.8 (st_cb_drawpixels.c:777) ==17340== by 0xE5B9596: st_DrawPixels (st_cb_drawpixels.c:1156) ==17340== by 0xE56BE98: _mesa_DrawPixels (drawpix.c:131) =17340== Address 0x101a95b0 is 0 bytes inside a block of size 96 free'd ==17340== at 0x4C2A5C6: free (vg_replace_malloc.c:446) ==17340== by 0xE5B95FB: st_DrawPixels (u_inlines.h:134) ==17340== by 0xE56BE98: _mesa_DrawPixels (drawpix.c:131) Thanks.