Bug#983487: Asymptote error message concerning malloc (Bug#983487)
Hello everyone,
I tried to reproduce this issue inside a minimal qemu VM,
with an available X server, and investigate with the help
of rr-debugger and valgrind.
First in camp::picture::shipout3, line 1404 the process asy
forks, and following failure happens in the child thereof.
In the backtrace [1] the malloc error is written.
This happens while being inside a signal handler of
a SIGSEGV, which attempts to to log something.
As far as I understand are such complex things inside
a signal handler likely to fail.
The SIGSEGV before seems to be caused because by a double free,
once in builtin_builder::release [2] and before that,
once in builtin_builder::~builtin_builder [3],
both below the __run_exit_handlers.
Maybe the order of the exit handlers is important here?
This also shows up with valgrind at the bottom of the run.
rr was working with current git head and the
environment LP_NO_RAST=1 set, otherwise I got a SIGFPE, which
might be an issue in rr.
It seems to depend on using the mesa software renderer.
Therefore it may be better reproducible on regular desktops
with e.g. LIBGL_ALWAYS_SOFTWARE=true and
GALLIUM_DRIVER=llvmpipe.
In my test VM with GALLIUM_DRIVER=softpipe it shows
"malloc_consolidate(): invalid chunk size", but have
not followed that further.
Kind regards,
Bernhard
[1]
(rr) bt
#0 malloc_printerr (str=str@entry=0x7f76cc2c6678 "malloc(): unsorted double linked list corrupted") at malloc.c:5347
#1 0x00007f76cc1bfd74 in _int_malloc (av=av@entry=0x7f76cc2f5b80 <main_arena>, bytes=bytes@entry=8192) at malloc.c:3744
#2 0x00007f76cc1c1299 in __GI___libc_malloc (bytes=bytes@entry=8192) at malloc.c:3066
#3 0x00007f76cc5220b5 in operator new (sz=8192) at ../../../../src/libstdc++-v3/libsupc++/new_op.cc:50
#4 0x00007f76cc5220f5 in operator new[] (sz=<optimized out>) at ../../../../src/libstdc++-v3/libsupc++/new_opv.cc:32
#5 0x00007f76cc57c0b4 in std::basic_filebuf<char, std::char_traits<char> >::_M_allocate_internal_buffer (this=0x7ffc31779080) at /build/gcc-10-Km9U7s/gcc-10-10.2.1/build/x86_64-linux-gnu/libstdc++-v3/include/bits/fstream.tcc:49
#6 std::basic_filebuf<char, std::char_traits<char> >::_M_allocate_internal_buffer (this=0x7ffc31779080) at /build/gcc-10-Km9U7s/gcc-10-10.2.1/build/x86_64-linux-gnu/libstdc++-v3/include/bits/fstream.tcc:49
#7 0x00007f76cc57ffe3 in std::basic_filebuf<char, std::char_traits<char> >::open (this=0x7ffc31779080, __s=0x7f76ca30f860 "/usr/share/asymptote/three.asy", __mode=std::_S_in) at /build/gcc-10-Km9U7s/gcc-10-10.2.1/build/x86_64-linux-gnu/libstdc++-v3/include/bits/fstream.tcc:188
#8 0x000055744bd819b9 in std::basic_ifstream<char, std::char_traits<char> >::open (__mode=<optimized out>, __s=<optimized out>, this=<optimized out>) at /usr/include/c++/10/bits/ios_base.h:130
#9 std::basic_ifstream<char, std::char_traits<char> >::basic_ifstream (__mode=<optimized out>, __s=<optimized out>, this=<optimized out>, __in_chrg=<optimized out>, __vtt_parm=<optimized out>) at /usr/include/c++/10/fstream:533
#10 operator<< (out=..., pos=...) at errormsg.cc:30
#11 0x000055744bd81fd6 in errorstream::message (this=0x55744bef6270 <em>, pos=..., s="runtime: ") at errormsg.cc:63
#12 0x000055744bd8220a in errorstream::runtime (this=0x55744bef6270 <em>, pos=...) at errormsg.cc:81
#13 0x000055744be12ce6 in sigsegv_handler (emergency=<optimized out>) at main.cc:78
#14 sigsegv_handler (emergency=1277376864) at main.cc:75
#15 0x00007f76cccc82d0 in sigsegv_handler (sig=<optimized out>, sip=<optimized out>, ucp=0x7ffc31779440) at handler-unix.c:267
#16 <signal handler called>
#17 0x00007f76c6b532cf in unsafe_free (info=0x55744c2662a0) at ../src/util/ralloc.c:307
#18 0x00007f76c6b538a2 in unsafe_free (info=<optimized out>) at ../src/util/ralloc.c:308
#19 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:278
#20 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:269
#21 0x00007f76c6a94b8c in (anonymous namespace)::builtin_builder::release (this=0x7f76c7aacfd0 <builtins>) at ../src/compiler/glsl/builtin_functions.cpp:1326
#22 _mesa_glsl_builtin_functions_decref () at ../src/compiler/glsl/builtin_functions.cpp:7759
#23 0x00007f76c6831245 in _mesa_free_context_data (ctx=ctx@entry=0x7f76be008010, destroy_debug_output=destroy_debug_output@entry=false) at ../src/mesa/main/context.c:1402
#24 0x00007f76c67c2a87 in st_destroy_context (st=0x55744c4aa880) at ../src/mesa/state_tracker/st_context.c:1146
#25 0x00007f76c67a495e in dri_destroy_context (cPriv=<optimized out>) at ../src/gallium/frontends/dri/dri_context.c:247
#26 0x00007f76c6ca3903 in driDestroyContext (pcp=0x55744c1ca700) at ../src/mesa/drivers/dri/common/dri_util.c:533
#27 0x00007f76ca5d1a7f in drisw_destroy_context (context=0x55744c1ca570) at ../src/glx/drisw_glx.c:379
#28 0x00007f76ca5d722e in glx_display_free (priv=priv@entry=0x55744c1c1a90) at ../src/glx/glxext.c:245
#29 0x00007f76ca5d72bf in __glXCloseDisplay (dpy=0x55744c1a7870, codes=<optimized out>) at ../src/glx/glxext.c:304
#30 0x00007f76cc00cbc2 in XCloseDisplay (dpy=0x55744c1a7870) at ../../src/ClDisplay.c:65
#31 0x00007f76ccceda7f in fgDeinitialize () at freeglut_init.c:524
#32 fgDeinitialize () at freeglut_init.c:411
#33 0x00007f76cc1754d7 in __run_exit_handlers (status=0, listp=0x7f76cc2f5718 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#34 0x00007f76cc17567a in __GI_exit (status=<optimized out>) at exit.c:139
#35 0x000055744be02ae2 in gl::quit () at glrender.cc:652
#36 0x000055744be07ebf in gl::glrender (prefix=<error: Cannot access memory at address 0xfc>, pic=0x7f76ca581f20, format=<error reading variable: Cannot access memory at address 0x4669>, width=6.5947378298252455e-96, height=5.4110892682213118e-312, angle=5.4110892682213118e-312, zoom=0, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlightsin=140721138367920, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=false, oldpid=0) at glrender.cc:1866
#37 0x000055744bb9a01a in camp::picture::shipout3 (this=0x0, prefix=<error: Cannot access memory at address 0x841f0f2e66c3>, format=<error reading variable: Cannot access memory at address 0x4669>, width=6.5947378298252455e-96, height=5.4110892682213118e-312, angle=5.4110892682213118e-312, zoom=0, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlights=3, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=true) at picture.cc:1417
#38 0x000055744bcf9921 in run::gen_runpicture43 (Stack=0x55744c1969b0) at runpicture.in:485
#39 0x000055744bd95fee in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c96cfd38, vars=0x4661, parent=0x55744c2662a0) at stack.cc:463
#40 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c8f1eff0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#41 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c90e3e68, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#42 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c8f4aaf0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#43 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c90f52f8, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#44 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9624c08, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#45 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c985b5d0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#46 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9ab6370, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#47 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9144118, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#48 0x000055744bdc219e in icore::postRun (s=..., this=<optimized out>) at process.cc:211
#49 ifile::postRun (this=0x7ffc317798b0, e=..., s=...) at process.cc:383
#50 0x000055744bdc69de in icore::doRun (this=0x55744c2662a0, purge=32, tm=(TRANS_NORMAL | unknown: 0x4660)) at process.cc:238
#51 0x0000000000000000 in ?? ()
(rr) when
Current event: 9570
[2]
(rr) bt
#0 0x00007f76c6b5383b in get_header (ptr=<optimized out>) at ../src/util/ralloc.c:96
#1 ralloc_free (ptr=<optimized out>) at ../src/util/ralloc.c:276
#2 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:269
#3 0x00007f76c6a94b8c in (anonymous namespace)::builtin_builder::release (this=0x7f76c7aacfd0 <builtins>) at ../src/compiler/glsl/builtin_functions.cpp:1326
#4 _mesa_glsl_builtin_functions_decref () at ../src/compiler/glsl/builtin_functions.cpp:7759
#5 0x00007f76c6831245 in _mesa_free_context_data (ctx=ctx@entry=0x7f76be008010, destroy_debug_output=destroy_debug_output@entry=false) at ../src/mesa/main/context.c:1402
#6 0x00007f76c67c2a87 in st_destroy_context (st=0x55744c4aa880) at ../src/mesa/state_tracker/st_context.c:1146
#7 0x00007f76c67a495e in dri_destroy_context (cPriv=<optimized out>) at ../src/gallium/frontends/dri/dri_context.c:247
#8 0x00007f76c6ca3903 in driDestroyContext (pcp=0x55744c1ca700) at ../src/mesa/drivers/dri/common/dri_util.c:533
#9 0x00007f76ca5d1a7f in drisw_destroy_context (context=0x55744c1ca570) at ../src/glx/drisw_glx.c:379
#10 0x00007f76ca5d722e in glx_display_free (priv=priv@entry=0x55744c1c1a90) at ../src/glx/glxext.c:245
#11 0x00007f76ca5d72bf in __glXCloseDisplay (dpy=0x55744c1a7870, codes=<optimized out>) at ../src/glx/glxext.c:304
#12 0x00007f76cc00cbc2 in XCloseDisplay (dpy=0x55744c1a7870) at ../../src/ClDisplay.c:65
#13 0x00007f76ccceda7f in fgDeinitialize () at freeglut_init.c:524
#14 fgDeinitialize () at freeglut_init.c:411
#15 0x00007f76cc1754d7 in __run_exit_handlers (status=0, listp=0x7f76cc2f5718 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#16 0x00007f76cc17567a in __GI_exit (status=<optimized out>) at exit.c:139
#17 0x000055744be02ae2 in gl::quit () at glrender.cc:652
...
(rr) when
Current event: 9541
[3]
(rr) reverse-cont
Continuing.
Breakpoint 5, 0x00007f76c6b5383b in get_header (ptr=<optimized out>) at ../src/util/ralloc.c:96
96 ralloc_header *info = (ralloc_header *) (((char *) ptr) -
1: x/i $pc
=> 0x7f76c6b5383b <ralloc_free+11>: lea -0x30(%rdi),%r12
2: ptr = <optimized out>
(rr) bt
#0 0x00007f76c6b5383b in get_header (ptr=<optimized out>) at ../src/util/ralloc.c:96
#1 ralloc_free (ptr=<optimized out>) at ../src/util/ralloc.c:276
#2 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:269
#3 0x00007f76c6a6830d in (anonymous namespace)::builtin_builder::~builtin_builder (this=<optimized out>, __in_chrg=<optimized out>) at ../src/compiler/glsl/builtin_functions.cpp:1280
#4 0x00007f76cc1754d7 in __run_exit_handlers (status=0, listp=0x7f76cc2f5718 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#5 0x00007f76cc17567a in __GI_exit (status=<optimized out>) at exit.c:139
#6 0x000055744be02ae2 in gl::quit () at glrender.cc:652
#7 0x000055744be07ebf in gl::glrender (prefix="polly-delicm\000polly-enable-delicm\000-passes=licm\000.licm\000enable-loop-versioning-licm\000disable-machine-licm\000disable-postra-machine-licm\000experimental-zbm\000llvm.ppc.vsx.xxgenpcvbm\000llvm.ppc.altivec.vmsumubm\000tbm\000"..., pic=0x0, format=Traceback (most recent call last): File "/lib/x86_64-linux-gnu/../../share/gcc/python/libstdcxx/v6/printers.py", line 903, in to_string return ptr.lazy_string (length = length)OverflowError: int too big to convert, width=0, height=2.8480999736851678e-306, angle=2.8480999736437188e-306, zoom=2.8480999736437207e-306, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlightsin=140721138367920, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=false, oldpid=0) at glrender.cc:1866
#8 0x000055744bb9a01a in camp::picture::shipout3 (this=0x0, prefix=<error reading variable: Cannot access memory at address 0x8>, format=Traceback (most recent call last): File "/lib/x86_64-linux-gnu/../../share/gcc/python/libstdcxx/v6/printers.py", line 903, in to_string return ptr.lazy_string (length = length)OverflowError: int too big to convert, width=0, height=2.8480999736851678e-306, angle=2.8480999736437188e-306, zoom=2.8480999736437207e-306, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlights=3, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=true) at picture.cc:1417
#9 0x000055744bcf9921 in run::gen_runpicture43 (Stack=0x55744c1969b0) at runpicture.in:485
...
(rr) when
Current event: 9519
# Bullseye/testing amd64 qemu VM 2021-03-12
apt update
apt dist-upgrade
apt install systemd-coredump lightdm xserver-xorg openbox mesa-utils psmisc mc sshfs valgrind rr gdb asymptote \
asymptote-dbgsym libglx-mesa0-dbgsym libgl1-mesa-dri-dbgsym libgl1-dbgsym libsigsegv2-dbgsym \
libstdc++6-dbgsym libx11-6-dbgsym freeglut3-dbgsym
apt build-dep asymptote
dpkg --purge rr
# trying a self built rr
mkdir -p /home/bernhard/data/entwicklung/2021/rr
sshfs -o allow_other,uid=1000,gid=1000 bernhard@192.168.178.25:/home/bernhard/data/entwicklung/2021/rr /home/bernhard/data/entwicklung/2021/rr
echo 1 > /proc/sys/kernel/perf_event_paranoid
mkdir /home/benutzer/source/asymptote/orig -p
cd /home/benutzer/source/asymptote/orig
apt source asymptote
cd
mkdir /home/benutzer/source/libgl1-mesa-dri/orig -p
cd /home/benutzer/source/libgl1-mesa-dri/orig
apt source libgl1-mesa-dri
cd
mkdir /home/benutzer/source/glibc/orig -p
cd /home/benutzer/source/glibc/orig
apt source glibc
cd
wget "https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=983487;filename=B_b.asy;msg=5"; -O B_b.asy
export DISPLAY=:0
/usr/bin/asy -config "" -render=4 -f png -o B_b.png B_b.asy
benutzer@debian:~$ /usr/bin/asy -config "" -render=4 -f png -o B_b.png B_b.asy
malloc(): unsorted double linked list corrupted
export PATH=/home/bernhard/data/entwicklung/2021/rr/2021-03-12/x86_64/obj/bin:$PATH
directory /home/benutzer/source/asymptote/orig/asymptote-2.69+ds
directory /home/benutzer/source/libgl1-mesa-dri/orig/mesa-20.3.4/src
directory /home/benutzer/source/glibc/orig/glibc-2.31/malloc
set width 0
set pagination off
display/i $pc
(rr) bt
#0 0x00007faa72842154 in lp_rast_shade_quads_mask_sample (task=task@entry=0x557813b71fd8, inputs=inputs@entry=0x5578145d7340, x=x@entry=36, y=100, mask=17476) at ../src/gallium/drivers/llvmpipe/lp_rast.c:481
#1 0x00007faa7284413d in do_block_4_3 (c=<optimized out>, y=<optimized out>, x=<optimized out>, plane=<optimized out>, tri=<optimized out>, task=<optimized out>) at ../src/gallium/drivers/llvmpipe/lp_rast_tri_tmp.h:88
#2 do_block_16_3 (c=0x7fff74b32850, y=96, x=32, plane=0x7fff74b32890, tri=<optimized out>, task=0x557813b71fd8) at ../src/gallium/drivers/llvmpipe/lp_rast_tri_tmp.h:173
#3 lp_rast_triangle_3 (task=<optimized out>, arg=...) at ../src/gallium/drivers/llvmpipe/lp_rast_tri_tmp.h:326
#4 0x00007faa72841a16 in do_rasterize_bin (bin=<optimized out>, bin=<optimized out>, x=<optimized out>, y=<optimized out>, task=<optimized out>) at ../src/gallium/drivers/llvmpipe/lp_rast.c:658
#5 rasterize_bin (y=<optimized out>, x=<optimized out>, bin=<optimized out>, task=0x557813b71fd8) at ../src/gallium/drivers/llvmpipe/lp_rast.c:677
#6 rasterize_scene (task=task@entry=0x557813b71fd8, scene=scene@entry=0x7faa6915e010) at ../src/gallium/drivers/llvmpipe/lp_rast.c:738
#7 0x00007faa7284221b in lp_rast_queue_scene (rast=0x557813b71fc0, scene=scene@entry=0x7faa6915e010) at ../src/gallium/drivers/llvmpipe/lp_rast.c:786
#8 0x00007faa7284e645 in lp_setup_rasterize_scene (setup=0x557813c1b760) at ../src/gallium/drivers/llvmpipe/lp_setup.c:181
#9 set_scene_state (setup=setup@entry=0x557813c1b760, new_state=new_state@entry=SETUP_FLUSHED, reason=<optimized out>) at ../src/gallium/drivers/llvmpipe/lp_setup.c:332
#10 0x00007faa7284eef3 in lp_setup_flush (setup=0x557813c1b760, fence=0x0, reason=<optimized out>) at ../src/gallium/drivers/llvmpipe/lp_setup.c:361
#11 0x00007faa72277c49 in st_flush (flags=0, fence=0x0, st=0x557813dea420) at ../src/mesa/state_tracker/st_cb_flush.c:60
#12 st_glFlush (ctx=<optimized out>) at ../src/mesa/state_tracker/st_cb_flush.c:101
#13 0x000055781207c9ed in trEndTile (tr=0x5578143f1cd0) at tr.cc:378
#14 0x000055781207624c in gl::Export () at glrender.cc:566
#15 0x0000557812078ea1 in gl::exportHandler () at glrender.cc:1410
#16 gl::glrender (prefix="\003\000\000\000\253\322H\277\000\236\026\277\253\322H\276\\\217\302>\\\217\302>ff\346>k>\027?C^\246>\006\016=\277\232\231\031?\232\231\031?\037\205+?B[x\276\000\000\000\000B[x?\000\000\000?\000\000\000?\205\353\021?", '\000' <repeats 14 times>, "\200?\000\000\000?\000\000\000?\000\000\000?\000\000\200?", '\000' <repeats 14 times>, "\200?\000\000\200?\000\000\000\000\n\327#=", '\000' <repeats 18 times>, "\200?", '\000' <repeats 14 times>, "\200?", '\000' <repeats 14 times>, "\200?\000\000\200?\000\000\000\000\n\327#="..., pic=0x24, format=<error reading variable: Cannot access memory at address 0x6c>, width=1.3824172084878715e+306, height=1.8991862333561075e-311, angle=1.1853935400756625e-296, zoom=8.1272438812892644e-312, m=..., M=..., shift=..., margin=..., t=0x557813ae4fc0, background=0x557813ad6860, nlightsin=140735151287616, lights=0x7faa7535f548, diffuse=0x7faa7535f3f0, specular=0x7faa7535f230, view=false, oldpid=0) at glrender.cc:1865
#17 0x0000557811e0b01a in camp::picture::shipout3 (this=0x0, prefix=<error reading variable: Cannot access memory at address 0x2c>, format=<error reading variable: Cannot access memory at address 0x6c>, width=1.3824172084878715e+306, height=1.8991862333561075e-311, angle=1.1853935400756625e-296, zoom=8.1272438812892644e-312, m=..., M=..., shift=..., margin=..., t=0x557813ae4fc0, background=0x557813ad6860, nlights=3, lights=0x7faa7535f548, diffuse=0x7faa7535f3f0, specular=0x7faa7535f230, view=true) at picture.cc:1417
#18 0x0000557811f6a921 in run::gen_runpicture43 (Stack=0x557813ad6860) at runpicture.in:485
#19 0x0000557812006fee in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa752d9d38, vars=0x64, parent=0x1) at stack.cc:463
#20 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa7470cff0, vars=0x64, parent=0x1) at stack.cc:521
#21 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa74cece68, vars=0x64, parent=0x1) at stack.cc:521
#22 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa747c6af0, vars=0x64, parent=0x1) at stack.cc:521
#23 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa74cff2f8, vars=0x64, parent=0x1) at stack.cc:521
#24 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa7522bc08, vars=0x64, parent=0x1) at stack.cc:521
#25 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa754635d0, vars=0x64, parent=0x1) at stack.cc:521
#26 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa756b6370, vars=0x64, parent=0x1) at stack.cc:521
#27 0x0000557812006f25 in vm::stack::runWithOrWithoutClosure (this=0x7fff74b33f50, l=0x7faa74d71118, vars=0x64, parent=0x1) at stack.cc:521
#28 0x000055781203319e in icore::postRun (s=..., this=<optimized out>) at process.cc:211
#29 ifile::postRun (this=0x7fff74b3c840, e=..., s=...) at process.cc:383
#30 0x00005578120379de in icore::doRun (this=0x557813c2448c, purge=36, tm=(unknown: 0x64)) at process.cc:238
#31 0x000055781203459e in icore::process (purge=<optimized out>, this=<optimized out>) at process.cc:259
#32 icore::process (purge=<optimized out>, this=<optimized out>) at process.cc:253
#33 ifile::process (this=0x7fff74b3c840, purge=36) at process.cc:399
#34 0x000055781202fb59 in processFile (filename=<error reading variable: Cannot create a lazy string with address 0x0, and a non-zero length.>, purge=36) at process.cc:900
#35 0x0000557812083fd1 in asymain (A=0x7fff74b3c9c0) at main.cc:165
#36 0x0000557811de7147 in main (argc=9, argv=0x7fff74b3c9c0) at main.cc:251
(rr) disassemble 0x00007faa77f02000,0x00007faa77f02e00
0x00007faa77f02de0: vaddps %ymm0,%ymm15,%ymm15
0x00007faa77f02de4: vdivps %ymm15,%ymm5,%ymm15
0x00007faa77f02de9: vmulps %ymm0,%ymm15,%ymm15
0x00007faa77f02ded: vmulps %ymm6,%ymm0,%ymm0
0x00007faa77f02df1: vdivps %ymm0,%ymm5,%ymm1
0x00007faa77f02df5: vmulps %ymm10,%ymm15,%ymm15
0x00007faa77f02dfa: vmulps %ymm4,%ymm15,%ymm4
0x00007faa77f02dfe: vmulps %ymm4,%ymm1,%ymm1
End of assembler dump.
(rr) cont
Continuing.
Thread 1 received signal SIGFPE, Arithmetic exception.
0x00007faa77f02df1 in ?? ()
1: x/i $pc
=> 0x7faa77f02df1: vdivps %ymm0,%ymm5,%ymm1
(rr) print/x $ymm0
$10 = {v16_bfloat16 = {0x0 <repeats 16 times>}, v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>}, v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {0x0, 0x0}}
(rr) print/x $ymm5
$11 = {v16_bfloat16 = {0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, v8_float = {0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x80, 0x3f}, v16_int16 = {0x0, 0x3f80, 0x0, 0x3f80, 0x0, 0x3f80, 0x0, 0x3f80, 0x0, 0x3f80, 0x0, 0x3f80, 0x0, 0x3f80, 0x0, 0x3f80}, v8_int32 = {0x3f800000, 0x3f800000, 0x3f800000, 0x3f800000, 0x3f800000, 0x3f800000, 0x3f800000, 0x3f800000}, v4_int64 = {0x3f8000003f800000, 0x3f8000003f800000, 0x3f8000003f800000, 0x3f8000003f800000}, v2_int128 = {0x3f8000003f8000003f8000003f800000, 0x3f8000003f8000003f8000003f800000}}
(rr) print/x $ymm1
$12 = {v16_bfloat16 = {0x0 <repeats 16 times>}, v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>}, v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {0x0, 0x0}}
# LP_NUM_THREADS ?
export LP_NO_RAST=1
benutzer@debian:~$ rr record /usr/bin/asy -config "" -render=4 -f png -o B_b.png B_b.asy
rr: Saving execution to trace directory `/home/benutzer/.local/share/rr/asy-1'.
malloc(): unsorted double linked list corrupted
benutzer@debian:~$ rr ps asy-1
PID PPID EXIT CMD
39855 -- 0 /usr/bin/asy -config -render=4 -f png -o B_b.png B_b.asy
39858 39855 -1 latex \scrollmode
39859 39855 0 latex -output-format=dvi \nonstopmode\input B_b_.tex
39860 39855 0 dvips -R -Pdownload35 -D600 -q -oB_b_.ps B_b_.dvi
39861 39855 0 gs -q -dBATCH -P -dSAFER -sDEVICE=ps2write -sOutputFile=/dev/null B_b_.ps
39862 39855 -6 (forked without exec)
39867 39862 0 gs -q -dNOPAUSE -dBATCH -P -sDEVICE=pngalpha -dEPSCrop -dSAFER -r288x288 -sOutputFile=B_b.png B_b_.eps
benutzer@debian:~/source/glibc/orig/glibc-2.31$ grep "unsorted double linked list corrupted" . -Rn
./malloc/malloc.c:3744: malloc_printerr ("malloc(): unsorted double linked list corrupted");
#rr replay -p 39855 asy-1
#rr replay -p 39858 asy-1
#rr replay -p 39859 asy-1
#rr replay -p 39860 asy-1
#rr replay -p 39861 asy-1
rr replay -f 39862 asy-1
#rr replay -p 39867 asy-1
b malloc_printerr
y
cont
benutzer@debian:~$ rr replay -f 39862 asy-1
(rr) b malloc_printerr
Breakpoint 1 at 0x7f76cc1bca40: file malloc.c, line 5347.
(rr) cont
Continuing.
Program received signal SIGSEGV, Segmentation fault.
0x00007f76c6b532cf in unsafe_free (info=0x55744c2662a0) at ../src/util/ralloc.c:307
307 info->child = temp->next;
(rr) set width 0
(rr) set pagination off
(rr) bt
#0 0x00007f76c6b532cf in unsafe_free (info=0x55744c2662a0) at ../src/util/ralloc.c:307
#1 0x00007f76c6b538a2 in unsafe_free (info=<optimized out>) at ../src/util/ralloc.c:308
#2 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:278
#3 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:269
#4 0x00007f76c6a94b8c in (anonymous namespace)::builtin_builder::release (this=0x7f76c7aacfd0 <builtins>) at ../src/compiler/glsl/builtin_functions.cpp:1326
#5 _mesa_glsl_builtin_functions_decref () at ../src/compiler/glsl/builtin_functions.cpp:7759
#6 0x00007f76c6831245 in _mesa_free_context_data (ctx=ctx@entry=0x7f76be008010, destroy_debug_output=destroy_debug_output@entry=false) at ../src/mesa/main/context.c:1402
#7 0x00007f76c67c2a87 in st_destroy_context (st=0x55744c4aa880) at ../src/mesa/state_tracker/st_context.c:1146
#8 0x00007f76c67a495e in dri_destroy_context (cPriv=<optimized out>) at ../src/gallium/frontends/dri/dri_context.c:247
#9 0x00007f76c6ca3903 in driDestroyContext (pcp=0x55744c1ca700) at ../src/mesa/drivers/dri/common/dri_util.c:533
#10 0x00007f76ca5d1a7f in ?? () from /lib/x86_64-linux-gnu/libGLX_mesa.so.0
#11 0x00007f76ca5d722e in ?? () from /lib/x86_64-linux-gnu/libGLX_mesa.so.0
#12 0x00007f76ca5d72bf in ?? () from /lib/x86_64-linux-gnu/libGLX_mesa.so.0
#13 0x00007f76cc00cbc2 in XCloseDisplay () from /lib/x86_64-linux-gnu/libX11.so.6
#14 0x00007f76ccceda7f in fgDeinitialize () from /lib/x86_64-linux-gnu/libglut.so.3
#15 0x00007f76cc1754d7 in __run_exit_handlers (status=0, listp=0x7f76cc2f5718 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#16 0x00007f76cc17567a in __GI_exit (status=<optimized out>) at exit.c:139
#17 0x000055744be02ae2 in gl::quit () at glrender.cc:652
#18 0x000055744be07ebf in gl::glrender (prefix=<error: Cannot access memory at address 0xfc>, pic=0x7f76ca581f20, format=<error reading variable: Cannot access memory at address 0x4669>, width=-nan(0xf00ff00000000), height=6.8991159474370496e-310, angle=-nan(0xfffffffffffff), zoom=-nan(0xfffffff000000), m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlightsin=140721138367920, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=false, oldpid=0) at glrender.cc:1866
#19 0x000055744bb9a01a in camp::picture::shipout3 (this=0x0, prefix=<error: Cannot access memory at address 0x841f0f2e66c3>, format=<error reading variable: Cannot access memory at address 0x4669>, width=-nan(0xf00ff00000000), height=6.8991159474370496e-310, angle=-nan(0xfffffffffffff), zoom=-nan(0xfffffff000000), m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlights=3, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=true) at picture.cc:1417
#20 0x000055744bcf9921 in run::gen_runpicture43 (Stack=0x55744c1969b0) at runpicture.in:485
#21 0x000055744bd95fee in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c96cfd38, vars=0x4661, parent=0x55744c2662a0) at stack.cc:463
#22 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c8f1eff0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#23 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c90e3e68, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#24 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c8f4aaf0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#25 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c90f52f8, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#26 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9624c08, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#27 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c985b5d0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#28 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9ab6370, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#29 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9144118, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#30 0x000055744bdc219e in icore::postRun (s=..., this=<optimized out>) at process.cc:211
#31 ifile::postRun (this=0x7ffc317798b0, e=..., s=...) at process.cc:383
#32 0x000055744bdc69de in icore::doRun (this=0x55744c2662a0, purge=32, tm=(TRANS_NORMAL | unknown: 0x4660)) at process.cc:238
#33 0x000055744bdc359e in icore::process (purge=<optimized out>, this=<optimized out>) at process.cc:259
#34 icore::process (purge=<optimized out>, this=<optimized out>) at process.cc:253
#35 ifile::process (this=0x7ffc317798b0, purge=32) at process.cc:399
#36 0x000055744bdbeb59 in processFile (filename=<error reading variable: Cannot access memory at address 0x9>, purge=32) at process.cc:900
#37 0x000055744be12fd1 in asymain (A=0x7ffc31779a30) at main.cc:165
#38 0x000055744bb76147 in main (argc=9, argv=0x7ffc31779a30) at main.cc:251
# (rr) stepi
# 0x00007f76cccc8260 in ?? () from /lib/x86_64-linux-gnu/libsigsegv.so.2
(rr) stepi
sigsegv_handler (sig=11, sip=0x7ffc31779570, ucp=0x7ffc31779440) at handler-unix.c:133
133 handler-unix.c: Datei oder Verzeichnis nicht gefunden.
1: x/i $pc
=> 0x7f76cccc8260 <sigsegv_handler>: push %r15
...
(rr) stepi
sigsegv_handler (emergency=0) at main.cc:76
76 {
1: x/i $pc
=> 0x55744be12c90 <_Z15sigsegv_handlerPvi>: push %rbp
(rr) next
77 if(!emergency) return 0; // Really a stack overflow
1: x/i $pc
=> 0x55744be12ca5 <_Z15sigsegv_handlerPvi+21>: test %esi,%esi
(rr) next
sigsegv_handler (sig=<optimized out>, sip=<optimized out>, ucp=0x7ffc31779440) at handler-unix.c:151
151 handler-unix.c: Datei oder Verzeichnis nicht gefunden.
1: x/i $pc
=> 0x7f76cccc82a0 <sigsegv_handler+64>: cmpq $0x0,0x3e48(%rip) # 0x7f76ccccc0f0 <stk_user_handler>
(rr) next
163 in handler-unix.c
1: x/i $pc
=> 0x7f76cccc82aa <sigsegv_handler+74>: mov 0x3e47(%rip),%r13 # 0x7f76ccccc0f8 <stack_top>
(rr) next
170 in handler-unix.c
1: x/i $pc
=> 0x7f76cccc835c <sigsegv_handler+252>: call 0x7f76cccc8050 <__errno_location@plt>
(rr) next
171 in handler-unix.c
1: x/i $pc
=> 0x7f76cccc836a <sigsegv_handler+266>: mov %rax,%rbx
(rr) next
172 in handler-unix.c
1: x/i $pc
=> 0x7f76cccc8372 <sigsegv_handler+274>: mov %r14d,(%rbx)
(rr) next
173 in handler-unix.c
1: x/i $pc
=> 0x7f76cccc8375 <sigsegv_handler+277>: test %eax,%eax
(rr) next
188 in handler-unix.c
1: x/i $pc
=> 0x7f76cccc837d <sigsegv_handler+285>: cmp %rbp,0x10(%rsp)
(rr) next
267 in handler-unix.c
1: x/i $pc
=> 0x7f76cccc82ba <sigsegv_handler+90>: mov 0x3e17(%rip),%rax # 0x7f76ccccc0d8 <user_handler>
(rr) next
Breakpoint 1, malloc_printerr (str=str@entry=0x7f76cc2c6678 "malloc(): unsorted double linked list corrupted") at malloc.c:5347
5347 malloc.c: Datei oder Verzeichnis nicht gefunden.
1: x/i $pc
=> 0x7f76cc1bca40 <malloc_printerr>: mov %rdi,%rdx
(rr) bt
#0 malloc_printerr (str=str@entry=0x7f76cc2c6678 "malloc(): unsorted double linked list corrupted") at malloc.c:5347
#1 0x00007f76cc1bfd74 in _int_malloc (av=av@entry=0x7f76cc2f5b80 <main_arena>, bytes=bytes@entry=8192) at malloc.c:3744
#2 0x00007f76cc1c1299 in __GI___libc_malloc (bytes=bytes@entry=8192) at malloc.c:3066
#3 0x00007f76cc5220b5 in operator new (sz=8192) at ../../../../src/libstdc++-v3/libsupc++/new_op.cc:50
#4 0x00007f76cc5220f5 in operator new[] (sz=<optimized out>) at ../../../../src/libstdc++-v3/libsupc++/new_opv.cc:32
#5 0x00007f76cc57c0b4 in std::basic_filebuf<char, std::char_traits<char> >::_M_allocate_internal_buffer (this=0x7ffc31779080) at /build/gcc-10-Km9U7s/gcc-10-10.2.1/build/x86_64-linux-gnu/libstdc++-v3/include/bits/fstream.tcc:49
#6 std::basic_filebuf<char, std::char_traits<char> >::_M_allocate_internal_buffer (this=0x7ffc31779080) at /build/gcc-10-Km9U7s/gcc-10-10.2.1/build/x86_64-linux-gnu/libstdc++-v3/include/bits/fstream.tcc:49
#7 0x00007f76cc57ffe3 in std::basic_filebuf<char, std::char_traits<char> >::open (this=0x7ffc31779080, __s=0x7f76ca30f860 "/usr/share/asymptote/three.asy", __mode=std::_S_in) at /build/gcc-10-Km9U7s/gcc-10-10.2.1/build/x86_64-linux-gnu/libstdc++-v3/include/bits/fstream.tcc:188
#8 0x000055744bd819b9 in std::basic_ifstream<char, std::char_traits<char> >::open (__mode=<optimized out>, __s=<optimized out>, this=<optimized out>) at /usr/include/c++/10/bits/ios_base.h:130
#9 std::basic_ifstream<char, std::char_traits<char> >::basic_ifstream (__mode=<optimized out>, __s=<optimized out>, this=<optimized out>, __in_chrg=<optimized out>, __vtt_parm=<optimized out>) at /usr/include/c++/10/fstream:533
#10 operator<< (out=..., pos=...) at errormsg.cc:30
#11 0x000055744bd81fd6 in errorstream::message (this=0x55744bef6270 <em>, pos=..., s="runtime: ") at errormsg.cc:63
#12 0x000055744bd8220a in errorstream::runtime (this=0x55744bef6270 <em>, pos=...) at errormsg.cc:81
#13 0x000055744be12ce6 in sigsegv_handler (emergency=<optimized out>) at main.cc:78
#14 sigsegv_handler (emergency=1277376864) at main.cc:75
#15 0x00007f76cccc82d0 in sigsegv_handler (sig=<optimized out>, sip=<optimized out>, ucp=0x7ffc31779440) at handler-unix.c:267
#16 <signal handler called>
#17 0x00007f76c6b532cf in unsafe_free (info=0x55744c2662a0) at ../src/util/ralloc.c:307
#18 0x00007f76c6b538a2 in unsafe_free (info=<optimized out>) at ../src/util/ralloc.c:308
#19 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:278
#20 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:269
#21 0x00007f76c6a94b8c in (anonymous namespace)::builtin_builder::release (this=0x7f76c7aacfd0 <builtins>) at ../src/compiler/glsl/builtin_functions.cpp:1326
#22 _mesa_glsl_builtin_functions_decref () at ../src/compiler/glsl/builtin_functions.cpp:7759
#23 0x00007f76c6831245 in _mesa_free_context_data (ctx=ctx@entry=0x7f76be008010, destroy_debug_output=destroy_debug_output@entry=false) at ../src/mesa/main/context.c:1402
#24 0x00007f76c67c2a87 in st_destroy_context (st=0x55744c4aa880) at ../src/mesa/state_tracker/st_context.c:1146
#25 0x00007f76c67a495e in dri_destroy_context (cPriv=<optimized out>) at ../src/gallium/frontends/dri/dri_context.c:247
#26 0x00007f76c6ca3903 in driDestroyContext (pcp=0x55744c1ca700) at ../src/mesa/drivers/dri/common/dri_util.c:533
#27 0x00007f76ca5d1a7f in drisw_destroy_context (context=0x55744c1ca570) at ../src/glx/drisw_glx.c:379
#28 0x00007f76ca5d722e in glx_display_free (priv=priv@entry=0x55744c1c1a90) at ../src/glx/glxext.c:245
#29 0x00007f76ca5d72bf in __glXCloseDisplay (dpy=0x55744c1a7870, codes=<optimized out>) at ../src/glx/glxext.c:304
#30 0x00007f76cc00cbc2 in XCloseDisplay (dpy=0x55744c1a7870) at ../../src/ClDisplay.c:65
#31 0x00007f76ccceda7f in fgDeinitialize () at freeglut_init.c:524
#32 fgDeinitialize () at freeglut_init.c:411
#33 0x00007f76cc1754d7 in __run_exit_handlers (status=0, listp=0x7f76cc2f5718 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#34 0x00007f76cc17567a in __GI_exit (status=<optimized out>) at exit.c:139
#35 0x000055744be02ae2 in gl::quit () at glrender.cc:652
#36 0x000055744be07ebf in gl::glrender (prefix=<error: Cannot access memory at address 0xfc>, pic=0x7f76ca581f20, format=<error reading variable: Cannot access memory at address 0x4669>, width=6.5947378298252455e-96, height=5.4110892682213118e-312, angle=5.4110892682213118e-312, zoom=0, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlightsin=140721138367920, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=false, oldpid=0) at glrender.cc:1866
#37 0x000055744bb9a01a in camp::picture::shipout3 (this=0x0, prefix=<error: Cannot access memory at address 0x841f0f2e66c3>, format=<error reading variable: Cannot access memory at address 0x4669>, width=6.5947378298252455e-96, height=5.4110892682213118e-312, angle=5.4110892682213118e-312, zoom=0, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlights=3, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=true) at picture.cc:1417
#38 0x000055744bcf9921 in run::gen_runpicture43 (Stack=0x55744c1969b0) at runpicture.in:485
#39 0x000055744bd95fee in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c96cfd38, vars=0x4661, parent=0x55744c2662a0) at stack.cc:463
#40 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c8f1eff0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#41 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c90e3e68, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#42 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c8f4aaf0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#43 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c90f52f8, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#44 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9624c08, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#45 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c985b5d0, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#46 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9ab6370, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#47 0x000055744bd95f25 in vm::stack::runWithOrWithoutClosure (this=0x7ffc31770fc0, l=0x7f76c9144118, vars=0x4661, parent=0x55744c2662a0) at stack.cc:521
#48 0x000055744bdc219e in icore::postRun (s=..., this=<optimized out>) at process.cc:211
#49 ifile::postRun (this=0x7ffc317798b0, e=..., s=...) at process.cc:383
#50 0x000055744bdc69de in icore::doRun (this=0x55744c2662a0, purge=32, tm=(TRANS_NORMAL | unknown: 0x4660)) at process.cc:238
#51 0x0000000000000000 in ?? ()
(rr) when
Current event: 9570
(rr) list main.cc:74,88
74
75 int sigsegv_handler (void *, int emergency)
76 {
77 if(!emergency) return 0; // Really a stack overflow
78 em.runtime(vm::getPos());
79 #ifdef HAVE_GL
80 if(gl::glthread)
81 cerr << "Stack overflow or segmentation fault: rerun with -nothreads"
82 << endl;
83 else
84 #endif
85 cerr << "Segmentation fault" << endl;
86 abort();
87 }
88 #endif
5 breakpoint keep y 0x00007f76c6b5383b ../src/util/ralloc.c:96
stop only if $rdi == 0x55744c2339a0 (host evals)
.
(rr) reverse-cont
Continuing.
Breakpoint 5, 0x00007f76c6b5383b in get_header (ptr=<optimized out>) at ../src/util/ralloc.c:96
96 ralloc_header *info = (ralloc_header *) (((char *) ptr) -
1: x/i $pc
=> 0x7f76c6b5383b <ralloc_free+11>: lea -0x30(%rdi),%r12
2: ptr = <optimized out>
(rr) bt
#0 0x00007f76c6b5383b in get_header (ptr=<optimized out>) at ../src/util/ralloc.c:96
#1 ralloc_free (ptr=<optimized out>) at ../src/util/ralloc.c:276
#2 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:269
#3 0x00007f76c6a94b8c in (anonymous namespace)::builtin_builder::release (this=0x7f76c7aacfd0 <builtins>) at ../src/compiler/glsl/builtin_functions.cpp:1326
#4 _mesa_glsl_builtin_functions_decref () at ../src/compiler/glsl/builtin_functions.cpp:7759
#5 0x00007f76c6831245 in _mesa_free_context_data (ctx=ctx@entry=0x7f76be008010, destroy_debug_output=destroy_debug_output@entry=false) at ../src/mesa/main/context.c:1402
#6 0x00007f76c67c2a87 in st_destroy_context (st=0x55744c4aa880) at ../src/mesa/state_tracker/st_context.c:1146
#7 0x00007f76c67a495e in dri_destroy_context (cPriv=<optimized out>) at ../src/gallium/frontends/dri/dri_context.c:247
#8 0x00007f76c6ca3903 in driDestroyContext (pcp=0x55744c1ca700) at ../src/mesa/drivers/dri/common/dri_util.c:533
#9 0x00007f76ca5d1a7f in drisw_destroy_context (context=0x55744c1ca570) at ../src/glx/drisw_glx.c:379
#10 0x00007f76ca5d722e in glx_display_free (priv=priv@entry=0x55744c1c1a90) at ../src/glx/glxext.c:245
#11 0x00007f76ca5d72bf in __glXCloseDisplay (dpy=0x55744c1a7870, codes=<optimized out>) at ../src/glx/glxext.c:304
#12 0x00007f76cc00cbc2 in XCloseDisplay (dpy=0x55744c1a7870) at ../../src/ClDisplay.c:65
#13 0x00007f76ccceda7f in fgDeinitialize () at freeglut_init.c:524
#14 fgDeinitialize () at freeglut_init.c:411
#15 0x00007f76cc1754d7 in __run_exit_handlers (status=0, listp=0x7f76cc2f5718 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#16 0x00007f76cc17567a in __GI_exit (status=<optimized out>) at exit.c:139
#17 0x000055744be02ae2 in gl::quit () at glrender.cc:652
...
(rr) when
Current event: 9541
(rr) reverse-cont
Continuing.
Breakpoint 5, 0x00007f76c6b5383b in get_header (ptr=<optimized out>) at ../src/util/ralloc.c:96
96 ralloc_header *info = (ralloc_header *) (((char *) ptr) -
1: x/i $pc
=> 0x7f76c6b5383b <ralloc_free+11>: lea -0x30(%rdi),%r12
2: ptr = <optimized out>
(rr) bt
#0 0x00007f76c6b5383b in get_header (ptr=<optimized out>) at ../src/util/ralloc.c:96
#1 ralloc_free (ptr=<optimized out>) at ../src/util/ralloc.c:276
#2 ralloc_free (ptr=0x55744c2339a0) at ../src/util/ralloc.c:269
#3 0x00007f76c6a6830d in (anonymous namespace)::builtin_builder::~builtin_builder (this=<optimized out>, __in_chrg=<optimized out>) at ../src/compiler/glsl/builtin_functions.cpp:1280
#4 0x00007f76cc1754d7 in __run_exit_handlers (status=0, listp=0x7f76cc2f5718 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#5 0x00007f76cc17567a in __GI_exit (status=<optimized out>) at exit.c:139
#6 0x000055744be02ae2 in gl::quit () at glrender.cc:652
#7 0x000055744be07ebf in gl::glrender (prefix="polly-delicm\000polly-enable-delicm\000-passes=licm\000.licm\000enable-loop-versioning-licm\000disable-machine-licm\000disable-postra-machine-licm\000experimental-zbm\000llvm.ppc.vsx.xxgenpcvbm\000llvm.ppc.altivec.vmsumubm\000tbm\000"..., pic=0x0, format=Traceback (most recent call last): File "/lib/x86_64-linux-gnu/../../share/gcc/python/libstdcxx/v6/printers.py", line 903, in to_string return ptr.lazy_string (length = length)OverflowError: int too big to convert, width=0, height=2.8480999736851678e-306, angle=2.8480999736437188e-306, zoom=2.8480999736437207e-306, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlightsin=140721138367920, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=false, oldpid=0) at glrender.cc:1866
#8 0x000055744bb9a01a in camp::picture::shipout3 (this=0x0, prefix=<error reading variable: Cannot access memory at address 0x8>, format=Traceback (most recent call last): File "/lib/x86_64-linux-gnu/../../share/gcc/python/libstdcxx/v6/printers.py", line 903, in to_string return ptr.lazy_string (length = length)OverflowError: int too big to convert, width=0, height=2.8480999736851678e-306, angle=2.8480999736437188e-306, zoom=2.8480999736437207e-306, m=..., M=..., shift=..., margin=..., t=0x55744c1a5110, background=0x55744c1969b0, nlights=3, lights=0x7f76c9758548, diffuse=0x7f76c97583f0, specular=0x7f76c9758230, view=true) at picture.cc:1417
#9 0x000055744bcf9921 in run::gen_runpicture43 (Stack=0x55744c1969b0) at runpicture.in:485
...
(rr) when
Current event: 9519
(rr) info share
From To Syms Read Shared Object Library
0x00007f76cce050d0 0x00007f76cce0a7f9 Yes /home/bernhard/data/entwicklung/2021/rr/2021-03-12/x86_64/obj/bin/../lib/rr/librrpreload.so
0x00007f76ccda3080 0x00007f76ccdd0d42 Yes (*) /lib/x86_64-linux-gnu/libGLEW.so.2.1
0x00007f76ccd1d3a0 0x00007f76ccd3741c Yes (*) /lib/x86_64-linux-gnu/libGLX.so.0
0x00007f76ccce4e10 0x00007f76cccf6b6e Yes /lib/x86_64-linux-gnu/libglut.so.3
0x00007f76cccc8190 0x00007f76cccc9437 Yes /lib/x86_64-linux-gnu/libsigsegv.so.2
0x00007f76cccad310 0x00007f76cccbdabb Yes (*) /lib/x86_64-linux-gnu/libz.so.1
0x00007f76ccc3f800 0x00007f76ccc57c6c Yes (*) /lib/x86_64-linux-gnu/libgc.so.1
0x00007f76ccbf09f0 0x00007f76ccc1a9f5 Yes (*) /lib/x86_64-linux-gnu/libreadline.so.8
0x00007f76ccbb8990 0x00007f76ccbc50b8 Yes (*) /lib/x86_64-linux-gnu/libtinfo.so.6
0x00007f76cc9c7f60 0x00007f76ccb6a282 Yes (*) /lib/x86_64-linux-gnu/libfftw3.so.3
0x00007f76cc73bed0 0x00007f76cc914342 Yes (*) /lib/x86_64-linux-gnu/libgsl.so.25
0x00007f76cc68e100 0x00007f76cc690ba9 Yes /lib/x86_64-linux-gnu/libGL.so.1
0x00007f76cc5160a0 0x00007f76cc5edb8e Yes /lib/x86_64-linux-gnu/libstdc++.so.6
0x00007f76cc347200 0x00007f76cc3e0c68 Yes /lib/x86_64-linux-gnu/libm.so.6
0x00007f76cc321310 0x00007f76cc331b5d Yes (*) /lib/x86_64-linux-gnu/libgcc_s.so.1
0x00007f76cc303580 0x00007f76cc3120a1 Yes /lib/x86_64-linux-gnu/libpthread.so.0
0x00007f76cc15c320 0x00007f76cc2a5689 Yes /lib/x86_64-linux-gnu/libc.so.6
0x00007f76cc132130 0x00007f76cc133045 Yes /lib/x86_64-linux-gnu/libdl.so.2
0x00007f76cc00a950 0x00007f76cc0933da Yes /lib/x86_64-linux-gnu/libX11.so.6
0x00007f76cbf74160 0x00007f76cbf76357 Yes (*) /lib/x86_64-linux-gnu/libGLdispatch.so.0
0x00007f76cbf24270 0x00007f76cbf2e9b7 Yes (*) /lib/x86_64-linux-gnu/libXi.so.6
0x00007f76cbd1cfa0 0x00007f76cbd1f878 Yes (*) /lib/x86_64-linux-gnu/libXxf86vm.so.1
0x00007f76cce19090 0x00007f76cce380f0 Yes /lib64/ld-linux-x86-64.so.2
0x00007f76cbcdd090 0x00007f76cbd14938 Yes (*) /lib/x86_64-linux-gnu/libgslcblas.so.0
0x00007f76cbcba720 0x00007f76cbccd205 Yes (*) /lib/x86_64-linux-gnu/libxcb.so.1
0x00007f76cbc9d3d0 0x00007f76cbca74ff Yes (*) /lib/x86_64-linux-gnu/libXext.so.6
0x00007f76cbc95200 0x00007f76cbc95eae Yes (*) /lib/x86_64-linux-gnu/libXau.so.6
0x00007f76cba8f340 0x00007f76cba90c48 Yes (*) /lib/x86_64-linux-gnu/libXdmcp.so.6
0x00007f76cba7b8c0 0x00007f76cba86d45 Yes (*) /lib/x86_64-linux-gnu/libbsd.so.0
0x00007f76cba6a430 0x00007f76cba70bf5 Yes (*) /lib/x86_64-linux-gnu/libmd.so.0
0x00007f76ca5bcf00 0x00007f76ca5facae Yes /lib/x86_64-linux-gnu/libGLX_mesa.so.0
0x00007f76ca575100 0x00007f76ca5827d0 Yes (*) /lib/x86_64-linux-gnu/libglapi.so.0
0x00007f76ca5595a0 0x00007f76ca562545 Yes (*) /lib/x86_64-linux-gnu/libdrm.so.2
0x00007f76ca5430b0 0x00007f76ca54b4e5 Yes (*) /lib/x86_64-linux-gnu/libxcb-glx.so.0
0x00007f76cce00040 0x00007f76cce0011b Yes (*) /lib/x86_64-linux-gnu/libX11-xcb.so.1
0x00007f76ca533090 0x00007f76ca5341d5 Yes (*) /lib/x86_64-linux-gnu/libxcb-dri2.so.0
0x00007f76ca52b1c0 0x00007f76ca52d526 Yes (*) /lib/x86_64-linux-gnu/libXfixes.so.3
0x00007f76ca525100 0x00007f76ca525a6b Yes (*) /lib/x86_64-linux-gnu/libXdamage.so.1
0x00007f76ca520090 0x00007f76ca520b73 Yes (*) /lib/x86_64-linux-gnu/libxcb-shm.so.0
0x00007f76ca4f4130 0x00007f76ca510123 Yes (*) /lib/x86_64-linux-gnu/libexpat.so.1
0x00007f76ca4ec0c0 0x00007f76ca4ecfb3 Yes (*) /lib/x86_64-linux-gnu/libxcb-dri3.so.0
0x00007f76ca4e6070 0x00007f76ca4e68d6 Yes (*) /lib/x86_64-linux-gnu/libxcb-present.so.0
0x00007f76ca4de120 0x00007f76ca4e01e2 Yes (*) /lib/x86_64-linux-gnu/libxcb-sync.so.1
0x00007f76c7cd6960 0x00007f76c7cd6c2c Yes (*) /lib/x86_64-linux-gnu/libxshmfence.so.1
0x00007f76ca4d4080 0x00007f76ca4d668a Yes (*) /lib/x86_64-linux-gnu/libxcb-xfixes.so.0
0x00007f76c6787160 0x00007f76c74c904e Yes /usr/lib/x86_64-linux-gnu/dri/swrast_dri.so
0x00007f76c1f6b430 0x00007f76c467884f Yes (*) /lib/x86_64-linux-gnu/libLLVM-11.so.1
0x00007f76ca4025a0 0x00007f76ca4bb116 Yes (*) /lib/x86_64-linux-gnu/libzstd.so.1
0x00007f76ca3e8320 0x00007f76ca3ee904 Yes (*) /lib/x86_64-linux-gnu/libsensors.so.5
0x00007f76ca3d91b0 0x00007f76ca3dfa85 Yes (*) /lib/x86_64-linux-gnu/libdrm_radeon.so.1
0x00007f76ca3bf360 0x00007f76ca3cfd55 Yes (*) /lib/x86_64-linux-gnu/libelf.so.1
0x00007f76ca3b3430 0x00007f76ca3b783d Yes (*) /lib/x86_64-linux-gnu/libdrm_amdgpu.so.1
0x00007f76ca3a7320 0x00007f76ca3aaffe Yes (*) /lib/x86_64-linux-gnu/libdrm_nouveau.so.2
0x00007f76ca35b3c0 0x00007f76ca38c799 Yes (*) /lib/x86_64-linux-gnu/libvulkan.so.1
0x00007f76ca33d2d0 0x00007f76ca342616 Yes (*) /lib/x86_64-linux-gnu/libffi.so.7
0x00007f76c1544b70 0x00007f76c155f2a0 Yes (*) /lib/x86_64-linux-gnu/libedit.so.2
0x00007f76ca3333b0 0x00007f76ca3364ec Yes /lib/x86_64-linux-gnu/librt.so.1
0x00007f76bffefbe0 0x00007f76c11c168c Yes (*) /lib/x86_64-linux-gnu/libz3.so.4
0x00007f76bff2a300 0x00007f76bff30338 Yes /lib/x86_64-linux-gnu/libnss_files.so.2
(*): Shared library is missing debugging information.
Reply to: