Bug 70916 - [PIGLIT,radeonsi] crash in "spec/glsl-1.30/execution/texelFetch fs sampler2D 71x1-71x281" (buffer overflow)
Summary: [PIGLIT,radeonsi] crash in "spec/glsl-1.30/execution/texelFetch fs sampler2D ...
Status: RESOLVED DUPLICATE of bug 70913
Alias: None
Product: Mesa
Classification: Unclassified
Component: Drivers/Gallium/radeonsi (show other bugs)
Version: git
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: Default DRI bug account
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-10-27 14:58 UTC by Kai
Modified: 2013-10-27 18:26 UTC (History)
0 users

See Also:
i915 platform:
i915 features:

Attachments
Full GDB backtrace of crash/buffer overflow (61.27 KB, text/plain)
2013-10-27 14:58 UTC, Kai 		Details
View All

Description Kai 2013-10-27 14:58:21 UTC 
Created attachment 88179 [details]
Full GDB backtrace of crash/buffer overflow

While running Piglit on radeonsi (full graphics stack detailed below) I encountered an crash in "spec/glsl-1.30/execution/texelFetch fs sampler2D 71x1-71x281". See the attached GDB backtrace and register dump for more details.

Stack:
GPU: "PITCAIRN" (ChipID = 0x6819)
Linux: 3.11.6
libdrm: 2.4.47
LLVM: SVN:trunk/r193475
libclc: Git:master/4c18120c1a
Mesa: Git:master/64c081e8b7
GLAMOR: Git:master/ba209eeef2
DDX: Git:master/f1dc677e79

Let me know if you need further information.

Note: this might be a duplicate of bug 70913, both seem to call llvm.SI.imageload.v4i3
Comment 1 Kai 2013-10-27 15:26:21 UTC 
If this is a duplicate of bug 70913, then I've more occurrences of it, e.g. in "spec/ARB_texture_multisample/texelFetch/6-fs-sampler2DMS". I'm holding off on filing further bugs until someone with more in-depth knowledge of the driver can comment on that.
Comment 2 Michel Dänzer 2013-10-27 16:41:49 UTC 
Looks like it might be as simple as the buffer passed to sprintf needing to be larger? Can you try that?
Comment 3 Kai 2013-10-27 18:26:08 UTC 
Your idea was correct! And bug 70913 is fixed as well with the mini patch I used. Therefore I'm closing this as a duplicate.

I'll send a patch to the ML.

*** This bug has been marked as a duplicate of bug 70913 ***

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.