https://gitlab.freedesktop.org/mesa/mesa/merge_requests/442
After adding varyings to nir_xfb_info, I added varyings as a pointer, and replaced outputs[0] for also a pointer, so now both needed to be allocated. But anv was copying such xfb info as: *xfb_info = *xfb_info_in
So after my changes, that line was assigning the outputs pointer, instead of copying. Then xfb_info_in was freed, and that included their outputs, that now are xfb_info outputs too. Unfourtunately, as as with other use after free crashes, the crash didn't happen always, just with some configurations. And that included not crashing on Intel CI.
Thanks @jasuarez <https://gitlab.freedesktop.org/jasuarez> for pinging me with this issue.
_______________________________________________ mesa-dev mailing list mesa-dev@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/mesa-dev