Bug 29624 - crash in _mesa_DeleteTextures, in _mesa_HashLookup_unlocked
Summary: crash in _mesa_DeleteTextures, in _mesa_HashLookup_unlocked
Status: RESOLVED INVALID
Alias: None
Product: Mesa
Classification: Unclassified
Component: Mesa core (show other bugs)
Version: 7.6
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: mesa-dev
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-08-17 15:50 UTC by Benoit Jacob
Modified: 2010-09-10 06:49 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments

Description Benoit Jacob 2010-08-17 15:50:02 UTC
Hi,

Please have a look at the crash that I reported there:
https://bugzilla.mozilla.org/show_bug.cgi?id=588187

It has a back-trace pointing to _mesa_DeleteTextures, and inside of it, in _mesa_HashLookup_unlocked.

It is looking like a linked list is expected to be null-terminated, and it crashes when some bogus node pointer is 0x100000001.

I tried calling glIsTexture before, just to check, and as a result, got exactly the same crash in glIsTexture.

Thanks!
Comment 1 Brian Paul 2010-09-10 06:49:29 UTC
From the other bug report, it looks like this was a bug in the app code.  I'm closing this bug.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.