https://bugs.freedesktop.org/show_bug.cgi?id=92983
Bug ID: 92983
Summary: [vmwgfx] SIGABRT vmw_screen_ioctl.c:461
Product: Mesa
Version: unspecified
Hardware: x86-64 (AMD64)
OS: Linux (All)
Status: NEW
Keywords: have-backtrace
Severity: normal
Priority: medium
Component: Mesa core
Assignee: mesa-dev@lists.freedesktop.org
Reporter: v...@freedesktop.org
QA Contact: mesa-dev@lists.freedesktop.org
CC: bri...@vmware.com
[vmwgfx] SIGABRT vmw_screen_ioctl.c:461
mesa: 5b596f38785a11ad429e30b2237de2c8c59a451f (master 11.1.0-devel)
vmwgfx crashed while running WebGL Conformance Tests on Firefox.
Program received signal SIGSEGV, Segmentation fault.
0x560a46dce464 in mozalloc_abort(char const*) ()
(gdb) bt full
#0 0x560a46dce464 in mozalloc_abort(char const*) ()
#1 0x560a46dce447 in mozalloc_abort(char const*) ()
#2 0x7f0cf3b73b14 in vmw_ioctl_command (vws=0x7f0cf7fe3990, cid=, throttle_us=throttle_us@entry=0, commands=commands@entry=0x7f0cc68e30f0,
size=, pfence=pfence@entry=0x7ffe30bc9c08) at
vmw_screen_ioctl.c:461
arg =
{commands = 139692847542512, command_size = 5040, throttle_us = 0,
fence_rep = 140729716087664, version = 2, flags = 0, context_handle =
536825321, pad64 = 0}
rep = {handle = 0, mask = 0, seqno = 0, passed_seqno = 0, pad64 = 0,
error = -14}
ret =
__func__ = "vmw_ioctl_command"
#3 0x7f0cf3b71409 in vmw_swc_flush (swc=0x7f0cc68e3000,
pfence=0x7ffe30bc9c48) at vmw_context.c:213
fence = 0x0
i =
ret =
__PRETTY_FUNCTION__ = "vmw_swc_flush"
#4 0x7f0cf3b7994b in svga_context_flush (svga=svga@entry=0x7f0cb4673000,
pfence=pfence@entry=0x0) at svga_context.c:313
svgascreen = 0x7f0d03d02000
fence = 0x0
#5 0x7f0cf3b8034c in svga_flush (pipe=0x7f0cb4673000, fence=0x0,
flags=) at svga_pipe_flush.c:46
__func__ = "svga_flush"
#6 0x7f0cf369cad4 in st_glFlush (ctx=) at
state_tracker/st_cb_flush.c:121
#7 0x7f0d21c3c0c2 in
mozilla::gl::GLContext::FlushIfHeavyGLCallsSinceLastFlush() () at
/usr/lib64/firefox/libxul.so
#8 0x7f0d2291a09f in nsRefreshDriver::Tick(long, mozilla::TimeStamp) () at
/usr/lib64/firefox/libxul.so
#9 0x7f0d2291a3ac in mozilla::RefreshDriverTimer::Tick(long,
mozilla::TimeStamp) () at /usr/lib64/firefox/libxul.so
#10 0x7f0d2291a4d8 in
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::TimeStamp)
() at /usr/lib64/firefox/libxul.so
#11 0x7f0d22916c2e in nsRunnableMethodImpl::Run() () at /usr/lib64/firefox/libxul.so
#12 0x7f0d216e4db6 in nsThread::ProcessNextEvent(bool, bool*) () at
/usr/lib64/firefox/libxul.so
#13 0x7f0d216ffb4f in NS_ProcessNextEvent(nsIThread*, bool) () at
/usr/lib64/firefox/libxul.so
#14 0x7f0d218cbaf2 in
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) () at
/usr/lib64/firefox/libxul.so
#15 0x7f0d218bbc0e in MessageLoop::Run() () at /usr/lib64/firefox/libxul.so
#16 0x7f0d227db3cb in nsBaseAppShell::Run() () at
/usr/lib64/firefox/libxul.so
#17 0x7f0d22d79b31 in nsAppStartup::Run() () at
/usr/lib64/firefox/libxul.so
#18 0x7f0d22db2ea2 in XREMain::XRE_mainRun() () at
/usr/lib64/firefox/libxul.so
#19 0x7f0d22db314d in XREMain::XRE_main(int, char**, nsXREAppData const*)
() at /usr/lib64/firefox/libxul.so
#20 0x7f0d22db3398 in XRE_main () at /usr/lib64/firefox/libxul.so
#21 0x560a46dce371 in do_main(int, char**, nsIFile*) [clone .constprop.0]
()
#22 0x560a46dcda72 in main ()
(gdb) frame 2
#2 0x7f0cf3b73b14 in vmw_ioctl_command (vws=0x7f0cf7fe3990, cid=, throttle_us=throttle_us@entry=0,
commands=commands@entry=0x7f0cc68e30f0, size=,
pfence=pfence@entry=0x7ffe30bc9c08)
at vmw_screen_ioctl.c:461
461 abort();
(gdb) l
456 do {
457 ret = drmCommandWrite(vws->ioctl.drm_fd, DRM_VMW_EXECBUF, ,
argsize);
458 } while(ret == -ERESTART);
459 if (ret) {
460 vmw_error("%s error %s.\n", __FUNCTION__, strerror(-ret));
461 abort();
462 }
463
464 if (rep.error) {
465
(gdb) print *vws
$3 = {base = {destroy = 0x7f0cf3b749a0 ,
get_hw_version = 0x7f0cf3b74730 , get_cap =
0x7f0cf3b749b0 ,
context_create = 0x7f0cf3b72040 ,
surface_create =
0x7f0cf3b74a30 , surface_from_handle =
0x7f0cf3b729d0 ,
surface_get_handle = 0x7f0cf3b72920 ,
surface_is_flushed =
0x7f0cf3b74720 , surface_reference =
0x7f0cf3b749f0 ,
surface_can_create = 0x7f0cf3b74f80 ,
buffer_create =
0x7f0cf3b74750 , buffer_map = 0x7f0cf3b70fa0
, buffer_unmap =
0x7f0cf3b71030 , buffer_destroy =
0x7f0cf3b70eb0 ,
fence_reference = 0x7f0cf3b74990 ,
fence_signalled =
0x7f0cf3b74980 , fence_finish =
0x7f0cf3b74970 ,
have_gb_objects = true, have_gb_dma = true, shader_create = 0x7f0cf3b74840
,
