http://bugs.freedesktop.org/show_bug.cgi?id=20539


Michel Dänzer <mic...@daenzer.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|xorg-driver-...@lists.x.org |dri-
                   |                            |de...@lists.sourceforge.net
          Component|Driver/Radeon               |Drivers/DRI/r300
            Product|xorg                        |Mesa
          QAContact|xorg-t...@lists.x.org       |
            Version|7.4                         |unspecified




--- Comment #16 from Michel Dänzer <mic...@daenzer.net>  2009-03-19 01:40:11 
PST ---
The valgrind error below looks like the most likely culprit at this point.
Apparently the Mesa r300 driver is accessing texture object memory after it's
been freed. I'm not sure if it's the responsibility of the driver or the Mesa
core to prevent this, assuming the driver for now.

==27872== Invalid read of size 4
==27872==    at 0x7A7F4BB: r300UpdateTexture (r300_texstate.c:576)
==27872==    by 0x7A7F5A8: r300UpdateTextureState (r300_texstate.c:648)
==27872==    by 0x7A782B9: r300UpdateShaderStates (r300_state.c:2685)
==27872==    by 0x7A7B6D2: r300RunRender (r300_render.c:314)
==27872==    by 0x7B135F3: _tnl_run_pipeline (t_pipeline.c:158)
==27872==    by 0x7B13B64: _tnl_draw_prims (t_draw.c:402)
==27872==    by 0x7B0C823: vbo_exec_vtx_flush (vbo_exec_draw.c:251)
==27872==    by 0x7B07F27: vbo_exec_FlushVertices (vbo_exec_api.c:751)
==27872==    by 0x7B98460: _mesa_PopAttrib (attrib.c:862)
==27872==    by 0x5922AD0: __glXDisp_PopAttrib (indirect_dispatch.c:1445)
==27872==    by 0x594C77E: __glXDisp_Render (glxcmds.c:1783)
==27872==    by 0x5951079: __glXDispatch (glxext.c:523)
==27872==  Address 0x4ec6e00 is 24 bytes inside a block of size 1,572 free'd
==27872==    at 0x4024E3A: free (vg_replace_malloc.c:323)
==27872==    by 0x7AD01AC: _mesa_free (imports.c:85)
==27872==    by 0x7A60767: driDestroyTextureObject (texmem.c:353)
==27872==    by 0x7A7E26D: r300DeleteTexture (r300_tex.c:1000)
==27872==    by 0x7AF2F00: _mesa_reference_texobj (texobj.c:317)
==27872==    by 0x7AF45A0: _mesa_DeleteTextures (texobj.c:852)
==27872==    by 0x5926692: __glXDisp_DeleteTextures (indirect_dispatch.c:2848)
==27872==    by 0x5951079: __glXDispatch (glxext.c:523)
==27872==    by 0x808C51E: Dispatch (dispatch.c:437)
==27872==    by 0x80716F4: main (main.c:397)


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
--
_______________________________________________
Dri-devel mailing list
Dri-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dri-devel

Reply via email to