Bug#758094: libgl1-mesa-glx:x32: SIGSEGV in OpenGL applications on x32

[Thorsten Glaser <tg@mirbsd.de>]

Package: libgl1-mesa-glx
Version: 10.2.5-1
Severity: normal

Hi!

After crossgrading from i386 to x32, OpenGL applications crash.

glxgears from mesa-utils:i386 (8.2.0-1) works, but
glxgears from mesa-utils:x32 (8.2.0-1) fails:

Program received signal SIGSEGV, Segmentation fault.
0xf76db60b in glLightfv () from /usr/lib/x86_64-linux-gnux32/libGL.so.1
(gdb) bt
#0  0xf76db60b in glLightfv () from /usr/lib/x86_64-linux-gnux32/libGL.so.1
#1  0x0040146f in ?? ()
#2  0xf6aceeea in __libc_start_main (main=<optimized out>, argc=1, argv=<optimized out>,
    init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0xffffd448)
    at libc-start.c:287
#3  0x00401cfc in ?? ()

I’ve first noticed that in “xlock -nolock -mode cage”,
which, with debugging information, has:

Program terminated with signal SIGSEGV, Segmentation fault.
#0  0xf6af524b in glGetBooleanv () from /usr/lib/x86_64-linux-gnux32/libGL.so.1
(gdb) bt
#0  0xf6af524b in glGetBooleanv () from /usr/lib/x86_64-linux-gnux32/libGL.so.1
#1  0x0040fcfe in init_GL (mi=mi@entry=0x228bde0) at visgl.c:287
#2  0x004dc6d4 in init_cage (mi=<optimized out>) at cage.c:400
#3  0x0040e462 in call_init_hook (ls=0x823340 <LockProcs+1152>, mi=<optimized out>) at mode.c:1290
#4  0x0040887c in justDisplay (display=0x226e870) at xlock.c:2821
#5  0x0040764f in main (argc=36104304, argv=0x0) at xlock.c:3998

Bugs occur in (first glxgears, then xlock):

(gdb) disas
Dump of assembler code for function glLightfv:
   0xf76db600 <+0>:     mov    rax,QWORD PTR [rip+0x21b9f1]        # 0xf78f6ff8
   0xf76db607 <+7>:     mov    r11,QWORD PTR fs:[rax]
=> 0xf76db60b <+11>:    jmp    QWORD PTR [r11+0x500]

(gdb) disas
Dump of assembler code for function glGetBooleanv:
   0xf6af5240 <+0>:     mov    rax,QWORD PTR [rip+0x21adb1]        # 0xf6d0fff8
   0xf6af5247 <+7>:     mov    r11,QWORD PTR fs:[rax]
=> 0xf6af524b <+11>:    jmp    QWORD PTR [r11+0x810]

So this appears to be an indirect function call both times.


-- System Information:
Debian Release: jessie/sid
  APT prefers unreleased
  APT policy: (500, 'unreleased'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh

Versions of packages libgl1-mesa-glx:x32 depends on:
ii  libc6              2.19-7
ii  libdrm2            2.4.56-1
ii  libglapi-mesa      10.2.5-1
ii  libudev1           208-7
ii  libx11-6           2:1.6.2-2
ii  libx11-xcb1        2:1.6.2-2
ii  libxcb-dri2-0      1.10-3
ii  libxcb-dri3-0      1.10-3
ii  libxcb-glx0        1.10-3
ii  libxcb-present0    1.10-3
ii  libxcb-sync1       1.10-3
ii  libxcb1            1.10-3
ii  libxdamage1        1:1.1.4-2
ii  libxext6           2:1.3.2-1
ii  libxfixes3         1:5.0.1-2
ii  libxshmfence1      1.1-3
ii  libxxf86vm1        1:1.1.3-1
ii  multiarch-support  2.19-7

Versions of packages libgl1-mesa-glx:x32 recommends:
ii  libgl1-mesa-dri  10.2.5-1

libgl1-mesa-glx:x32 suggests no packages.

-- no debconf information