Bug 58716

Summary: Crash in _mesa_unpack_rgba_row() during glDrawArrays() call
Product: Mesa Reporter: Sergey Anikin <s_anikin>
Component: Mesa coreAssignee: mesa-dev
Status: RESOLVED INVALID QA Contact:
Severity: critical    
Priority: medium    
Version: 9.0   
Hardware: x86 (IA32)   
OS: Windows (All)   
See Also: https://bugs.freedesktop.org/show_bug.cgi?id=58718
Whiteboard:
i915 platform: i915 features:
Attachments: Sample application to reproduce the crash, p.1
Incorrect attachment - please delete
Sample application to reproduce the crash, p.2
Sample application to reproduce the crash, p.3

Description Sergey Anikin 2012-12-24 12:48:34 UTC
Mesa 9.0 software rasterizer (mesa/drivers/windows/gdi) compiled with MS VC++ 2010 for Win32 platform crashes under Windows 7 64-bit on glDrawArrays() call with the following console message:

Mesa 9.0 implementation error: unsupported unpack for format MESA_FORMAT_NONE
Please report at bugs.freedesktop.org

The stack dump as reported by MS VC++ 2010 debugger:

 	00000000	
	_mesa_unpack_rgba_row(gl_format format=MESA_FORMAT_NONE, unsigned int n=127, const void * src=0xabababab, float [4]* dst=0x03ab0020) Line 1624	C
 	get_row(gl_context * ctx=0x03c00fd8, gl_renderbuffer * rb=0x01015d80, unsigned int count=0, int x=0, int y=0, void * values=0x03ab0020, unsigned int type=5126) Line 1557	C
 	_swrast_get_dest_rgba(gl_context * ctx=0x00000000, gl_renderbuffer * rb=0x00000000, sw_span * span=0x0028bb40) Line 1586	C
 	_swrast_write_rgba_span(gl_context * ctx=0x03c00fd8, sw_span * span=0x00000000) Line 1362	C
 	general_triangle(gl_context * ctx=0x03c00fd8, const SWvertex * v0=0x04000040, const SWvertex * v1=0x04000248, const SWvertex * v2=0x04000860) Line 819	C
 	_swrast_validate_triangle(gl_context * ctx=0x03c00fd8, const SWvertex * v0=0x04000040, const SWvertex * v1=0x04000248, const SWvertex * v2=0x04000860) Line 365	C
 	triangle_rgba(gl_context * ctx=0x03c00fd8, unsigned int e0=0, unsigned int e1=1, unsigned int e2=4) Line 176	C
 	_tnl_render_poly_elts(gl_context * ctx=0x03c00fd8, unsigned int start=0, unsigned int count=4, unsigned int flags=48) Line 352	C
 	_tnl_RenderClippedPolygon(gl_context * ctx=0x03c00fd8, const unsigned int * elts=0x0028c924, unsigned int n=4) Line 245	C
 	clip_quad_4(gl_context * ctx=0x03c00fd8, unsigned int v0=0, unsigned int v1=1, unsigned int v2=2, unsigned int v3=3, unsigned char mask='') Line 310	C
 	clip_render_quads_verts(gl_context * ctx=0x03c00f00, unsigned int start=0, unsigned int count=4, unsigned int flags=55) Line 383	C
 	run_render(gl_context * ctx=0x03c00fd8, tnl_pipeline_stage * stage=0x03c7a9f0) Line 321	C
 	_tnl_run_pipeline(gl_context * ctx=0x03c0027f) Line 163	C
 	_tnl_draw_prims(gl_context * ctx=0x03c00fd8, const gl_client_array * * arrays=0x03c688d8, const _mesa_prim * prim=0x0028cb70, unsigned int nr_prims=1, const _mesa_index_buffer * ib=0x00000000, unsigned int min_index=0, unsigned int max_index=3) Line 526	C
 	_tnl_vbo_draw_prims(gl_context * ctx=0x03c688d8, const _mesa_prim * prim=0x0028cb70, unsigned int nr_prims=1, const _mesa_index_buffer * ib=0x00000000, unsigned char index_bounds_valid='', unsigned int min_index=0, unsigned int max_index=3, gl_transform_feedback_object * tfb_vertcount=0x00000000) Line 424	C
 	vbo_draw_arrays(gl_context * ctx=0x03c00fd8, unsigned int mode=7, int start=0, int count=4, unsigned int numInstances=1, unsigned int baseInstance=0) Line 647	C
 	vbo_exec_DrawArrays(unsigned int mode=7, int start=0, int count=4) Line 675	C
 	GLWidget::paintGL() Line 208	C++
 
Sample MS VC++ 2010 project (based on Qt 4.4.3 open-source edition) that can be used to reproduce the problem is attached. 
Qt 4.4.3 open-source edition can be found here: ftp://ftp.qt.nokia.com/qt/source/.
Comment 1 Sergey Anikin 2012-12-24 12:55:19 UTC
Created attachment 72071 [details]
Sample application to reproduce the crash, p.1
Comment 2 Sergey Anikin 2012-12-24 12:55:50 UTC
Created attachment 72072 [details]
Incorrect attachment - please delete
Comment 3 Sergey Anikin 2012-12-24 12:58:25 UTC
Created attachment 72073 [details]
Sample application to reproduce the crash, p.2
Comment 4 Sergey Anikin 2012-12-24 12:58:44 UTC
Created attachment 72074 [details]
Sample application to reproduce the crash, p.3
Comment 5 Timothy Arceri 2016-03-22 04:50:05 UTC
The Windows GDI has been removed from Mesa. Closing.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.