Bug#550977: memory corruption with the radeon dri driver
On Mon, Jan 11, 2010 at 10:27:29PM +0000, Julien Cristau wrote:
> Packages including his fixes for these bugs are available in
> experimental, could you please install libgl1-mesa-dri and
> libgl1-mesa-glx from there (version 7.7-1), and see if the corruption is
> still reproducible?
I should have gone to bed much earlier ;-) Anyway, I tried to run parts of
the phoronix test suite (namely the supertuxkart test). This results in
the following error message:
*********************************WARN_ONCE*********************************
File radeon_dma.c function radeonReleaseDmaRegions line 344
Leaking dma buffer object!
***************************************************************************
Segmentation fault
I guess that's reported by Mesa? Here is the back trace:
[New Thread 26841]
Core was generated by `./supertuxkart --profile=60 --kart tux --track beach --numkarts 8 -w'.
Program terminated with signal 11, Segmentation fault.
#0 radeon_bo_unref (bo=0x0) at radeon_bo.c:36
in radeon_bo.c
Thread 2 (Thread 26841):
#0 0xffffe424 in __kernel_vsyscall ()
#1 0xb7459a17 in poll () from /lib/i686/cmov/libc.so.6
#2 0xb714e64f in ?? () from /usr/lib/libasound.so.2
#3 0xb714e7a4 in snd_pcm_wait () from /usr/lib/libasound.so.2
#4 0x081ac5fc in ?? ()
#5 0x0864c580 in ?? ()
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
Thread 1 (Thread 26840):
#0 radeon_bo_unref (bo=0x0) at radeon_bo.c:36
#1 0xb5117d1e in radeonReleaseDmaRegions (rmesa=0x87efc38) at radeon_dma.c:352
#2 0xb5114a35 in rcommonFlushCmdBuf (rmesa=0x87efc38, caller=0xb52d0225 "radeonFlush") at radeon_common.c:1201
#3 0xb5114c5a in radeonFlush (ctx=0x88565c8) at radeon_common.c:1104
#4 0xb5113c07 in radeon_firevertices (driContextPriv=0x8812570) at radeon_cmdbuf.h:118
#5 radeonDestroyContext (driContextPriv=0x8812570) at radeon_common_context.c:308
#6 0xb50ebcc7 in r200DestroyContext (driContextPriv=0x8812570) at r200_context.c:509
#7 0xb50e5927 in driDestroyContext (pcp=0x8812570) at ../common/dri_util.c:546
#8 0xb77129bc in driDestroyContext (context=0x8811b48, psc=0x8811128, dpy=0x87c8710) at dri_glx.c:482
#9 0xb76ee1b6 in DestroyContext (dpy=0x87c8710, gc=0x87fb780) at glxcmds.c:556
#10 0xb7658af6 in ?? () from /usr/lib/libSDL-1.2.so.0
#11 0xb765d437 in ?? () from /usr/lib/libSDL-1.2.so.0
#12 0xb765d672 in ?? () from /usr/lib/libSDL-1.2.so.0
#13 0xb7648aa0 in SDL_VideoQuit () from /usr/lib/libSDL-1.2.so.0
#14 0xb761d4d5 in SDL_QuitSubSystem () from /usr/lib/libSDL-1.2.so.0
#15 0xb761d55e in SDL_Quit () from /usr/lib/libSDL-1.2.so.0
#16 0xb761dd6f in ?? () from /usr/lib/libSDL-1.2.so.0
#17 <signal handler called>
#18 0xb5117d0e in radeonReleaseDmaRegions (rmesa=0x87efc38) at radeon_dma.c:351
#19 0xb5114a35 in rcommonFlushCmdBuf (rmesa=0x87efc38, caller=0xb52c66e2 "r200EnsureEmitSize") at radeon_common.c:1201
#20 0xb5114ad7 in rcommonEnsureCmdBufSpace (rmesa=0x87efc38, dwords=51, caller=0xb52c66e2 "r200EnsureEmitSize")
at radeon_common.c:1229
#21 0xb50fef77 in r200EnsureEmitSize (ctx=0x88565c8, stage=0x8905c5c) at r200_tcl.c:424
#22 r200_run_tcl_render (ctx=0x88565c8, stage=0x8905c5c) at r200_tcl.c:544
#23 0xb51b6283 in _tnl_run_pipeline (ctx=0x88565c8) at tnl/t_pipeline.c:158
#24 0xb50f0c48 in r200WrapRunPipeline (ctx=0x88565c8) at r200_state.c:2454
#25 0xb51b6fc6 in _tnl_draw_prims (ctx=0x88565c8, arrays=0x88f4944, prim=0xaaf7238, nr_prims=1, ib=0x0, min_index=0,
max_index=3) at tnl/t_draw.c:468
#26 0xb51b73f9 in _tnl_vbo_draw_prims (ctx=0x88565c8, arrays=0x88f4944, prim=0xaaf7238, nr_prims=1, ib=0x0,
index_bounds_valid=1 '\001', min_index=0, max_index=3) at tnl/t_draw.c:380
#27 0xb51b5695 in vbo_save_playback_vertex_list (ctx=0x88565c8, data=0xab1795c) at vbo/vbo_save_draw.c:277
#28 0xb513dca4 in ext_opcode_execute (ctx=0x88565c8, list=<value optimized out>) at main/dlist.c:534
#29 execute_list (ctx=0x88565c8, list=<value optimized out>) at main/dlist.c:6540
#30 0xb5141822 in _mesa_CallList (list=142539860) at main/dlist.c:7723
#31 0xb51a56b0 in neutral_CallList (i=669) at main/vtxfmt_tmp.h:297
#32 0x081467a3 in ?? ()
#33 0x081278ac in ?? ()
#34 0x08122485 in ?? ()
#35 0x0813b261 in ?? ()
#36 0x08122485 in ?? ()
#37 0x0813b261 in ?? ()
#38 0x0813d82c in ?? ()
#39 0x0813b261 in ?? ()
#40 0x08122485 in ?? ()
#41 0x081246da in ?? ()
#42 0x0811fb20 in ?? ()
#43 0x080e21d5 in ?? ()
#44 0x080a78fe in ?? ()
#45 0x080ac5b2 in ?? ()
#46 0xb73aeb35 in __libc_start_main () from /lib/i686/cmov/libc.so.6
#47 0x08050e91 in ?? ()
Of course, this is most likely another problem/bug. :(
Greetings, Torsten
Reply to: