Bug#391952: The r300 driver causes a SIGSEV while running nexuiz.

Wolfgang Köbler wolfgang at koebler.com
Wed Feb 28 21:29:14 CET 2007


Here are additional infos about the bug:
0. I have not (yet) tried current mesa git.
1. I upgraded my debian mesa to experimental, which has version 6.5.2-3,
   including libgl1-mesa-dri-dbg
2. I reproduced the bug with the new versions
3. I included info about nexuiz config
4. I included info about how I ran gdb
5. I included the gdb output, including full backtrace

I hope it helps (and you do not get lost in the 400-something lines).

==========================================================================
about 1.
--------------------------------------------------------------------------
$ dpkg -l \*mesa\* libdrm2 \*nexuiz\* xserver-xorg|grep ^ii
ii  libdrm2               2.3.0-1        Userspace interface to kernel
ii  libgl1-mesa-dev       6.5.2-3        A free implementation of the 
ii  libgl1-mesa-dri       6.5.2-3        A free implementation of the 
ii  libgl1-mesa-dri-dbg   6.5.2-3        A free implementation of the 
ii  libgl1-mesa-glx       6.5.2-3        A free implementation of the 
ii  libglu1-mesa          6.5.2-3        The OpenGL utility library (G
ii  libglu1-mesa-dev      6.5.2-3        The OpenGL utility library --
ii  mesa-common-dev       6.5.2-3        Developer documentation for M
ii  mesa-utils            6.5.2-3        Miscellaneous Mesa GL utiliti
ii  nexuiz                2.2.1-1        A fast-paced 3D Ego-Shooter
ii  nexuiz-data           2.2.1-1        Nexuiz game data files
ii  xserver-xorg          7.1.0-12       the X.Org X server
==========================================================================
about 3.
--------------------------------------------------------------------------

https://bugs.freedesktop.org/show_bug.cgi?id=9170
> You might want to provide a little more information;
> what is enabled or disabled with the settings "high" and "low"?
high:
- no .nexuiz directory
- alternative: .nexuiz-high as .nexuiz (see below)
low:
- .nexuiz-low as .nexuiz (see below)

--------------------------------------------------------------------------
$ diff -Naur .nexuiz-high/data/config.cfg .nexuiz-low/data/config.cfg
--- .nexuiz-high/data/config.cfg        2007-02-28 19:23:55.000000000
+0100 +++ .nexuiz-low/data/config.cfg 2007-02-28 19:22:12.000000000
+0100 @@ -63,3 +63,15 @@
 bind "MWHEELDOWN" "weapprev"
 bind "MOUSE4" "weaplast"
 bind "MOUSE5" "+hook"
+cl_decals "0"
+cl_particles_quality "0.100000"
+seta g_campaign_index "6"
+gl_picmip "4"
+r_coronas "0"
+r_glsl_deluxemapping "0"
+r_shadow_realtime_dlight "0"
+r_shadow_realtime_world_shadows "0"
+showfps "1"
+vid_bitsperpixel "16"
+vid_height "480"
+vid_width "640"

--------------------------------------------------------------------------
..nexuiz-high/data/config.cfg :

bind "TAB" "+showscores"
bind "ENTER" "+jump"
bind "ESCAPE" "togglemenu"
bind "SPACE" "+jump"
bind "-" "sizedown"
bind "0" "impulse 210"
bind "1" "impulse 1"
bind "2" "impulse 2"
bind "3" "impulse 3"
bind "4" "impulse 4"
bind "5" "impulse 5"
bind "6" "impulse 6"
bind "7" "impulse 7"
bind "8" "impulse 8"
bind "9" "impulse 9"
bind "=" "sizeup"
bind "`" "toggleconsole"
bind "a" "+moveleft"
bind "d" "+moveright"
bind "e" "+hook"
bind "i" "+show_info"
bind "r" "messagemode2"
bind "s" "+back"
bind "t" "messagemode"
bind "w" "+forward"
bind "y" "messagemode2"
bind "~" "toggleconsole"
bind "BACKSPACE" "dropweapon"
bind "UPARROW" "+forward"
bind "DOWNARROW" "+back"
bind "LEFTARROW" "+moveleft"
bind "RIGHTARROW" "+moveright"
bind "SHIFT" "+crouch"
bind "F1" "vyes"
bind "F2" "vno"
bind "F3" "spec"
bind "F4" "ready"
bind "F5" "menu_showteamselect"
bind "F10" "quit"
bind "F11" "disconnect"
bind "F12" "screenshot"
bind "PAUSE" "pause"
bind "KP_INS" "messagemode"
bind "KP_END" "say_team quad soon (h:%h a:%a w:%w l:%l)"
bind "KP_DOWNARROW" "say_team item free x:%x (h:%h a:%a w:%w l:%l)"
bind "KP_PGDN" "say_team took item (h:%h a:%a w:%w l:%l)"
bind "KP_LEFTARROW" "say_team negative (h:%h a:%a w:%w l:%l)"
bind "KP_5" "say_team help me (h:%h a:%a w:%w l:%l)"
bind "KP_RIGHTARROW" "say_team incoming (h:%h a:%a w:%w l:%l)"
bind "KP_HOME" "say_team defending (h:%h a:%a w:%w l:%l)"
bind "KP_UPARROW" "say_team roaming (h:%h a:%a w:%w l:%l)"
bind "KP_PGUP" "say_team attacking (h:%h a:%a w:%w l:%l)"
bind "KP_DEL" "messagemode2"
bind "KP_SLASH" "say_team dropped flag (h:%h a:%a w:%w l:%l)"
bind "KP_MULTIPLY" "say_team killed flagcarrier (h:%h a:%a w:%w l:%l)"
bind "KP_MINUS" "say hi / good luck and have fun"
bind "KP_PLUS" "say good game"
bind "KP_ENTER" "say :-) / nice one"
bind "MOUSE1" "+attack"
bind "MOUSE2" "+attack2"
bind "MOUSE3" "+zoom"
bind "MWHEELUP" "weapnext"
bind "MWHEELDOWN" "weapprev"
bind "MOUSE4" "weaplast"
bind "MOUSE5" "+hook"

--------------------------------------------------------------------------
..nexuiz-low/data/config.cfg :

bind "TAB" "+showscores"
bind "ENTER" "+jump"
bind "ESCAPE" "togglemenu"
bind "SPACE" "+jump"
bind "-" "sizedown"
bind "0" "impulse 210"
bind "1" "impulse 1"
bind "2" "impulse 2"
bind "3" "impulse 3"
bind "4" "impulse 4"
bind "5" "impulse 5"
bind "6" "impulse 6"
bind "7" "impulse 7"
bind "8" "impulse 8"
bind "9" "impulse 9"
bind "=" "sizeup"
bind "`" "toggleconsole"
bind "a" "+moveleft"
bind "d" "+moveright"
bind "e" "+hook"
bind "i" "+show_info"
bind "r" "messagemode2"
bind "s" "+back"
bind "t" "messagemode"
bind "w" "+forward"
bind "y" "messagemode2"
bind "~" "toggleconsole"
bind "BACKSPACE" "dropweapon"
bind "UPARROW" "+forward"
bind "DOWNARROW" "+back"
bind "LEFTARROW" "+moveleft"
bind "RIGHTARROW" "+moveright"
bind "SHIFT" "+crouch"
bind "F1" "vyes"
bind "F2" "vno"
bind "F3" "spec"
bind "F4" "ready"
bind "F5" "menu_showteamselect"
bind "F10" "quit"
bind "F11" "disconnect"
bind "F12" "screenshot"
bind "PAUSE" "pause"
bind "KP_INS" "messagemode"
bind "KP_END" "say_team quad soon (h:%h a:%a w:%w l:%l)"
bind "KP_DOWNARROW" "say_team item free x:%x (h:%h a:%a w:%w l:%l)"
bind "KP_PGDN" "say_team took item (h:%h a:%a w:%w l:%l)"
bind "KP_LEFTARROW" "say_team negative (h:%h a:%a w:%w l:%l)"
bind "KP_5" "say_team help me (h:%h a:%a w:%w l:%l)"
bind "KP_RIGHTARROW" "say_team incoming (h:%h a:%a w:%w l:%l)"
bind "KP_HOME" "say_team defending (h:%h a:%a w:%w l:%l)"
bind "KP_UPARROW" "say_team roaming (h:%h a:%a w:%w l:%l)"
bind "KP_PGUP" "say_team attacking (h:%h a:%a w:%w l:%l)"
bind "KP_DEL" "messagemode2"
bind "KP_SLASH" "say_team dropped flag (h:%h a:%a w:%w l:%l)"
bind "KP_MULTIPLY" "say_team killed flagcarrier (h:%h a:%a w:%w l:%l)"
bind "KP_MINUS" "say hi / good luck and have fun"
bind "KP_PLUS" "say good game"
bind "KP_ENTER" "say :-) / nice one"
bind "MOUSE1" "+attack"
bind "MOUSE2" "+attack2"
bind "MOUSE3" "+zoom"
bind "MWHEELUP" "weapnext"
bind "MWHEELDOWN" "weapprev"
bind "MOUSE4" "weaplast"
bind "MOUSE5" "+hook"
cl_decals "0"
cl_particles_quality "0.100000"
seta g_campaign_index "6"
gl_picmip "4"
r_coronas "0"
r_glsl_deluxemapping "0"
r_shadow_realtime_dlight "0"
r_shadow_realtime_world_shadows "0"
showfps "1"
vid_bitsperpixel "16"
vid_height "480"
vid_width "640"
==========================================================================
about 4.

run via
$ cd /usr/share/games/nexuiz
$ gdb /usr/lib/games/nexuiz/nexuiz.bin < ~/cmd.txt > ~/result.txt 2>&1

with this cmd.txt:
--------------------------------------------------------------------------
run
bt full
quit
==========================================================================
about 5.: result.txt

GNU gdb 6.4.90-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and
you are welcome to change it and/or distribute copies of it under
certain conditions. Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details. This GDB was configured as "i486-linux-gnu"...(no debugging
symbols found) Using host libthread_db library
"/lib/tls/i686/cmov/libthread_db.so.1".

(gdb) Starting program: /usr/lib/games/nexuiz/nexuiz.bin 
Failed to read a valid object file image from memory.
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
Console initialized.
Nexuiz Linux 21:53:49 Dec 14 2006
[Thread debugging using libthread_db enabled]
[New Thread -1212040640 (LWP 10197)]
(no debugging symbols found)
Trying to load library... "libz.so.1" - loaded.
Compressed files support enabled
Added packfile data/data20061212.pk3 (2875 files)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
Trying to load library... "libcurl.so.3" - loaded.
cURL support enabled
Initializing client
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
Failed to init SDL joystick subsystem: 
(no debugging symbols found)
(no debugging symbols found)
Trying to load library... "libvorbis.so.0" - loaded.
(no debugging symbols found)
Trying to load library... "libvorbisfile.so.3" - loaded.
Ogg Vorbis support enabled
couldn't exec data/campaign.cfg
couldn't exec autoexec.cfg
Starting video system
Video: fullscreen 800x600x32x60hz
Linked against SDL version 1.2.11
Using SDL library version 1.2.11
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
checking for OpenGL 1.1.0...  enabled
GL_VENDOR: Tungsten Graphics, Inc.
GL_RENDERER: Mesa DRI R300 20060815 x86/MMX+/3DNow!+/SSE2 TCL
GL_VERSION: 1.3 Mesa 6.5.2
GL_EXTENSIONS: GL_ARB_fragment_program GL_ARB_imaging
GL_ARB_multisample GL_ARB_multitexture GL_ARB_texture_border_clamp
GL_ARB_texture_compression GL_ARB_texture_cube_map
GL_ARB_texture_env_add GL_ARB_texture_env_combine
GL_ARB_texture_env_crossbar GL_ARB_texture_env_dot3
GL_MESAX_texture_float GL_ARB_texture_mirrored_repeat
GL_ARB_texture_rectangle GL_ARB_transpose_matrix
GL_ARB_vertex_buffer_object GL_ARB_vertex_program GL_ARB_window_pos
GL_EXT_abgr GL_EXT_bgra GL_EXT_blend_color
GL_EXT_blend_equation_separate GL_EXT_blend_func_separate
GL_EXT_blend_minmax GL_EXT_blend_subtract GL_EXT_clip_volume_hint
GL_EXT_compiled_vertex_array GL_EXT_convolution GL_EXT_copy_texture
GL_EXT_draw_range_elements GL_EXT_gpu_program_parameters
GL_EXT_histogram GL_EXT_packed_pixels GL_EXT_polygon_offset
GL_EXT_rescale_normal GL_EXT_secondary_color
GL_EXT_separate_specular_color GL_EXT_stencil_wrap GL_EXT_subtexture
GL_EXT_texture GL_EXT_texture3D GL_EXT_texture_edge_clamp
GL_EXT_texture_env_add GL_EXT_texture_env_combine
GL_EXT_texture_env_dot3 GL_EXT_texture_filter_anisotropic
GL_EXT_texture_lod_bias GL_EXT_texture_mirror_clamp
GL_EXT_texture_object GL_EXT_texture_rectangle GL_EXT_vertex_array
GL_APPLE_packed_pixels GL_ATI_blend_equation_separate
GL_ATI_texture_env_combine3 GL_ATI_texture_mirror_once
GL_IBM_rasterpos_clip GL_IBM_texture_mirrored_repeat
GL_INGR_blend_func_separate GL_MESA_pack_invert GL_MESA_ycbcr_texture
GL_MESA_window_pos GL_NV_blend_square GL_NV_light_max_exponent
GL_NV_texture_rectangle GL_NV_texgen_reflection GL_NV_vertex_program
GL_OES_read_format GL_SGI_color_matrix GL_SGI_color_table
GL_SGIS_generate_mipmap GL_SGIS_texture_border_clamp
GL_SGIS_texture_edge_clamp GL_SGIS_texture_lod SDL_EXTENSIONS: Checking
OpenGL extensions... checking for glDrawRangeElements...  enabled
checking for GL_ARB_multitexture...  enabled checking for
GL_ARB_texture_env_combine...  enabled checking for
GL_ARB_texture_env_dot3...  enabled checking for GL_EXT_texture3D...
enabled checking for GL_ARB_texture_cube_map...  enabled checking for
GL_EXT_compiled_vertex_array...  enabled checking for
GL_EXT_texture_edge_clamp...  enabled checking for
GL_EXT_texture_filter_anisotropic...  enabled checking for
GL_EXT_stencil_two_side...  not detected checking for
GL_ARB_shader_objects...  not detected 0 SDL joystick(s) found: OpenGL
Backend starting... glDrawRangeElements detected (max vertices 3000,
max indices 3000) multitexture detected: texture units = 8 OpenGL
backend started. Trying to load library... "libjpeg.so.62" - loaded.
JPEG support enabled Trying to load library... "libpng12.so.0" -
loaded. PNG support enabled Draw_CachePic: failed to load gfx/complete
Draw_CachePic: failed to load gfx/inter Draw_CachePic: failed to load
gfx/finale SndSys_Init: using the SDL module Sound format: 48000Hz, 2
channels, 16 bits per sample Found 0 cdrom drives. CDAudio_Init: No CD
in player. Can't get initial CD volume CD Audio Initialized
Draw_CachePic: failed to load gfx/m_white No CD in player. Client using
port 0 Client opened a socket on address local:2 Client opened a socket
on address 0.0.0.0:32770 maps/downer.bsp: could not load texture for
missing shader "noshader" Server using port 26000 Server listening on
address local:1 Server listening on address 0.0.0.0:26000 Loaded
maps/downer.ent

Trying to connect...
"challenge `xu&N.Yp['r" received, sending connect request back to
local:1 Got challenge response
"challenge `xu&N.Yp['r" received, sending connect request back to
local:1 Got challenge response
Accepted

Connection accepted to local:1
<-- server to client keepalive

Server: Nexuiz build 21:53:49 Dec 14 2006 (progs 13480 crc)

<===================================>

Downer
CDAudio: Bad track number 0.
Player entered the game
No CD in player.
autoswitch turned on
You got the Mortar
[New Thread -1370727504 (LWP 10200)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1212040640 (LWP 10197)]
r300_setup_textures (ctx=0x12c4e538) at r300_state.c:1240
1240	r300_state.c: No such file or directory.
	in r300_state.c
(gdb) #0  r300_setup_textures (ctx=0x12c4e538) at r300_state.c:1240
	i = 2
	mtu = 8
	t = (struct r300_tex_obj *) 0x0
	r300 = (r300ContextPtr) 0x12c44628
	hw_tmu = 2
	last_hw_tmu = 1
	tmu_mappings = {0, 1, 0, 0, 0, 0, 0, 0}
	__FUNCTION__ = "r300_setup_textures"
	__PRETTY_FUNCTION__ = "r300_setup_textures"
	warn__LINE__ = 1
	warn__LINE__ = 1
	warn__LINE__ = 1
#1  0xb6f2e779 in r300UpdateShaderStates (rmesa=0x12c44628)
    at r300_state.c:1765
	ctx = (GLcontext *) 0x12c4e538
#2  0xb6f242a5 in radeonDrawRangeElements (mode=4, min=2333, max=2337, 
    count=6, type=5125, c_indices=0xac8ea3f8) at radeon_vtxfmt_a.c:485
	rmesa = (r300ContextPtr) 0x12c44628
	prim = {mode = 2929, start = 2129, count = 2135}
	elt_size = 2
	i = <value optimized out>
	ptr = (void *) 0xae957170
	rvb = {buf = 0x140f4ff0, address = 0xae8b7000 "\002", start =
655728, end = 655740, ptr = 655728, aos_offset = -129359504, aos_stride
= 0, aos_size = 0, aos_reg = 0}
	indices = (const GLvoid *) 0xac8ea3f8
	__FUNCTION__ = "radeonDrawRangeElements"
	warn__LINE__ = 1
	warn__LINE__ = 1
#3  0x08095162 in ?? ()
No symbol table info available.
#4  0x00000004 in ?? ()
No symbol table info available.
#5  0x0000091d in ?? ()
No symbol table info available.
#6  0x00000921 in ?? ()
No symbol table info available.
#7  0x00000006 in ?? ()
No symbol table info available.
#8  0x00001405 in ?? ()
No symbol table info available.
#9  0xac8ea3f8 in ?? ()
No symbol table info available.
#10 0x0000084d in ?? ()
No symbol table info available.
#11 0x00000004 in ?? ()
No symbol table info available.
#12 0x0000091d in ?? ()
No symbol table info available.
#13 0x00000006 in ?? ()
No symbol table info available.
#14 0xac8ea3f8 in ?? ()
No symbol table info available.
#15 0x00000002 in ?? ()
No symbol table info available.
#16 0x00000004 in ?? ()
No symbol table info available.
#17 0x0000091d in ?? ()
No symbol table info available.
#18 0x0000084d in ?? ()
No symbol table info available.
#19 0x14504724 in ?? ()
No symbol table info available.
#20 0x00000001 in ?? ()
No symbol table info available.
#21 0x00000000 in ?? ()
No symbol table info available.
(gdb) 
==========================================================================




More information about the Pkg-mesa-devel mailing list