[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 Emil Velikov changed: What|Removed |Added Status|NEW |RESOLVED

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 --- Comment #7 from charmai...@vmware.com --- Hi Gert, The original patch was indeed accessing the dangling pointers. I'll have a patch tomorrow to fix the problem. Thanks for looking into it. -- You are receiving this mail because: You are

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 --- Comment #6 from Gert Wollny --- The patch didn't help on my side. I've added some debug output to see what is going on. In summary, stfb->iface in st_manager.c is not properly updated and points to a destroyed

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 --- Comment #5 from charmai...@vmware.com --- Hi Brad, Can you try the attached patch to see if that fixes your crash? Thanks. -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 --- Comment #4 from charmai...@vmware.com --- Created attachment 132747 --> https://bugs.freedesktop.org/attachment.cgi?id=132747=edit Assign a unique ID to the framebuffer interface object created in xm_st.c -- You are receiving this mail

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 --- Comment #3 from Gert Wollny --- I can confirm that the trace results in a sigsegv, but with gltrace on r600g I get a different backtrace (9ee67467c9ea + a patchset related to register merging that shouldn't have to do

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 --- Comment #2 from Brad King --- I have a script that updates Mesa every night. After noticing the problem I bisected back to 147d7fb772. I just tried with current master (a522ce9977) and it still happens. For

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 Brian Paul changed: What|Removed |Added CC||charmai...@vmware.com

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 Brian Paul changed: What|Removed |Added CC||bri...@vmware.com --

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 --- Comment #1 from Brian Paul --- Hi Brad, I'm not able to repro the problem so far. Valgrind shows no errors with your trace. I've both tried Mesa @ 147d7fb772 and ToT as of this morning (a522ce997779). I tested with

[Mesa-dev] [Bug 101829] read-after-free in st_framebuffer_validate

https://bugs.freedesktop.org/show_bug.cgi?id=101829 Bug ID: 101829 Summary: read-after-free in st_framebuffer_validate Product: Mesa Version: git Hardware: Other OS: All Status: NEW Severity: normal