search for: bjacob

...d Product: Mesa Version: unspecified Platform: Other OS/Version: All Status: NEW Severity: normal Priority: medium Component: Drivers/DRI/nouveau AssignedTo: nouveau at lists.freedesktop.org ReportedBy: bjacob at mozilla.com Please see this Mozilla bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=729817 it has some Nouveau_dri crashes with call stacks, like: https://crash-stats.mozilla.com/report/index/bp-ec695c14-0f53-49c6-a78c-ddaf22120221 The GL strings are: nouveau -- Gallium 0.4 on N...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #3 from Benoit Jacob <bjacob at mozilla.com> --- Created attachment 94465 --> https://bugs.freedesktop.org/attachment.cgi?id=94465&action=edit Stand-alone version of the glxtest program Here you go. build like this: c++ glxtest.cpp -o glxtest -ldl -lX11 run like this: ./glxtest Example output: VENDOR Tu...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #4 from Benoit Jacob <bjacob at mozilla.com> --- I have also asked the original reporter to share his glxinfo output and details about his setup. You might want to CC yourself on the mozilla bug. -- You are receiving this mail because: You are the assignee for the bug. -------------- next part -------------- An HTML attac...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #6 from Benoit Jacob <bjacob at mozilla.com> --- Good point, and good question, which I've forwarded on the mozilla bug. -- You are receiving this mail because: You are the assignee for the bug. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.freedesktop.org/archives/no...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #12 from Benoit Jacob <bjacob at mozilla.com> --- Yeah, sorry about that. The code is exactly the same as in Firefox, and it runs very close to startup, so I'm surprised that this doesn't reproduce. -- You are receiving this mail because: You are the assignee for the bug. -------------- next part -------------- An...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #13 from Benoit Jacob <bjacob at mozilla.com> --- The work-around that works for us, and that we're considering landing, is to avoid calling XCloseDisplay and, in this case, just calling XSync to handle any pending errors in glxtest. Digging in the Gecko codebase, I found at least another instance where we avoid calling...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #19 from Benoit Jacob <bjacob at mozilla.com> --- A duplicate Mozilla bug has a stack with symbols: https://bugzilla.mozilla.org/show_bug.cgi?id=975512#c1 #0 0x0000003f3a2da007 in sched_yield () from /lib64/libc.so.6 #1 0x00007f1e003bb1d1 in nouveau_fence_wait () from /usr/lib64/dri/nouveau_dri.so #2 0x00007f1e0039d6...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #21 from Benoit Jacob <bjacob at mozilla.com> --- - Are you guys using multi-threaded gl ? Not here. We could be if Frederic was 1) using non-default preferences such as layers.acceleration.force-enabled and 2) viewing specific Web pages (e.g. using WebGL). But here we are talking about a startup hang occurring before this...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #32 from Benoit Jacob <bjacob at mozilla.com> --- ...note that the log attached by Frederic in comment 30 also has a stack to where this pointer was free'd --- we have a use-after-free bug here! This was obtained by Frederic by running the glxtest program attached in comment 2 here, in valgrind: valgrind --track-orig...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #33 from Benoit Jacob <bjacob at mozilla.com> --- The stack to the free() points to line 203 here, while the stack to where the free'd data is subsequently used points to line 205 here: http://cgit.freedesktop.org/mesa/mesa/tree/src/gallium/drivers/nouveau/nouveau_fence.c?id=ce6dd69697ae62d9336bbd4f5808bc4d75cdcc04#n203...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #34 from Benoit Jacob <bjacob at mozilla.com> --- Also, here's the story of how that caused Firefox to keep spinning here. The mozilla change that made this bug noticeable (by having Firefox stuck for a minute there) was https://bugzilla.mozilla.org/show_bug.cgi?id=860254 . Before that, this use-after-free read was being...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #36 from Benoit Jacob <bjacob at mozilla.com> --- Can you reproduce yourself by running the attached glxtest program in valgrind? -- You are receiving this mail because: You are the assignee for the bug. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.freedesktop.org/archive...

https://bugs.freedesktop.org/show_bug.cgi?id=75279 --- Comment #38 from Benoit Jacob <bjacob at mozilla.com> --- I wasn't clear enough in comment 34, let me explain better :-) The Mozilla change that exposed this, https://bugzilla.mozilla.org/show_bug.cgi?id=860254, is exactly about having memory overwritten immediately on free(). So this is _exactly_ what is happening here :-) Th...

...n nouveau ? Gallium 0.4 on NVA5 Vendor ID nouveau Device ID Gallium 0.4 on NVA5 Driver Version 2.1 Mesa 8.0.2 WebGL Renderer nouveau ? Gallium 0.4 on NVA5 ? 2.1 Mesa 8.0.2 GPU Accelerated Windows 0 AzureBackend skia I was directed to report this crash to this bug tracker at http://blog.mozilla.org/bjacob/2012/04/21/webgl-1-0-1-conformance-testing-part-2/comment-page-1/#comment-3082 -- Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.