mesa: f8e6d19f3f40931be741b44d3edf210c38e13f0f (master)

piglit draw-elements-base-vertex now crashes with swrast. It previously ran to completion and passed.

$ ./bin/draw-elements-base-vertex -auto
Segmentation fault (core dumped)


(gdb) bt
#0  0x0061289d in _tnl_render_quads_elts (ctx=0x8a57bf8, start=0, count=8, flags=55) at tnl/t_vb_rendertmp.h:383
#1  0x00613233 in run_render (ctx=0x8a57bf8, stage=0x8aaf9d8) at tnl/t_vb_render.c:321
#2  0x00604245 in _tnl_run_pipeline (ctx=0x8a57bf8) at tnl/t_pipeline.c:163
#3  0x006056e8 in _tnl_draw_prims (ctx=0x8a57bf8, arrays=0x8a9dc7c, prim=0xbf9b6bf4, nr_prims=1, ib=0xbf9b6c08, min_index=0, max_index=7)
    at tnl/t_draw.c:535
#4  0x006053fc in _tnl_vbo_draw_prims (ctx=0x8a57bf8, arrays=0x8a9dc7c, prim=0xbf9b6bf4, nr_prims=1, ib=0xbf9b6c08, index_bounds_valid=0 '\000', 
    min_index=0, max_index=7) at tnl/t_draw.c:435
#5  0x005f505e in vbo_validated_drawrangeelements (ctx=0x8a57bf8, mode=7, index_bounds_valid=0 '\000', start=4294967295, end=4294967295, count=8, 
    type=5125, indices=0x140, basevertex=0, numInstances=1) at vbo/vbo_exec_array.c:860
#6  0x005f5606 in vbo_exec_DrawElementsBaseVertex (mode=7, count=8, type=5125, indices=0x140, basevertex=0) at vbo/vbo_exec_array.c:1040
#7  0x0806ae94 in piglit_display () at piglit/tests/general/draw-elements-base-vertex.c:109
#8  0x0806b9f7 in display () at piglit/tests/util/piglit-framework.c:48
#9  0x002d2820 in fghRedrawWindow (window=0x8a54ff8, enumerator=0xbf9b6dd8) at freeglut_main.c:210
#10 fghcbDisplayWindow (window=0x8a54ff8, enumerator=0xbf9b6dd8) at freeglut_main.c:227
#11 0x002d6660 in fgEnumWindows (enumCallback=0x2d2790 <fghcbDisplayWindow>, enumerator=0xbf9b6dd8) at freeglut_structure.c:394
#12 0x002d2cdb in fghDisplayAll () at freeglut_main.c:249
#13 glutMainLoopEvent () at freeglut_main.c:1450
#14 0x002d3605 in glutMainLoop () at freeglut_main.c:1498
#15 0x0806bcc8 in main (argc=1, argv=0xbf9b7064) at piglit/tests/util/piglit-framework.c:144
(gdb) frame 0 
#0  0x0061289d in _tnl_render_quads_elts (ctx=0x8a57bf8, start=0, count=8, flags=55) at tnl/t_vb_rendertmp.h:383
383	            RENDER_QUAD( ELT(j-3), ELT(j-2), ELT(j-1), ELT(j) );
(gdb) info locals
j = 3
tnl = 0x8aaf7c8
VB = 0x8aafc04
elt = 0x140
LineFunc = 0x683773 <swsetup_line>
TriangleFunc = 0x67e24a <triangle_rgba>
QuadFunc = 0x67e3b5 <quadfunc_rgba>
stipple = 0 '\000'