mesa issueshttps://gitlab.freedesktop.org/mesa/mesa/-/issues2023-08-22T09:56:51Zhttps://gitlab.freedesktop.org/mesa/mesa/-/issues/9434ubsan reports outside array bounds2023-08-22T09:56:51ZDavid Heidelbergubsan reports outside array boundsLog: https://gitlab.freedesktop.org/okias/mesa/-/jobs/46185857
```
FAILED: src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_target_nv50.cpp.o
compiler-wrapper-g++.sh -Isrc/nouveau/codegen/libnouveau_codegen.a.p -Isrc/nouveau/codegen -...Log: https://gitlab.freedesktop.org/okias/mesa/-/jobs/46185857
```
FAILED: src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_target_nv50.cpp.o
compiler-wrapper-g++.sh -Isrc/nouveau/codegen/libnouveau_codegen.a.p -Isrc/nouveau/codegen -I../src/nouveau/codegen -Isrc -I../src -Iinclude -I../include -I../src/gallium/include -Isrc/gallium/auxiliary -I../src/gallium/auxiliary -Isrc/mapi -I../src/mapi -Isrc/mesa -I../src/mesa -I../subprojects/perfetto/sdk -Isrc/compiler/nir -I../src/compiler/nir -I/usr/include/libdrm -fvisibility=hidden -fdiagnostics-color=always -fsanitize=undefined -D_FILE_OFFSET_BITS=64 -Wall -Winvalid-pch -Werror -std=c++17 -O2 -g -D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS '-DPACKAGE_VERSION="23.3.0-devel"' '-DPACKAGE_BUGREPORT="https://gitlab.freedesktop.org/mesa/mesa/-/issues"' -DHAVE_OPENGL=1 -DHAVE_OPENGL_ES_1=1 -DHAVE_OPENGL_ES_2=1 -DHAVE_ETNAVIV -DHAVE_FREEDRENO -DHAVE_KMSRO -DHAVE_LIMA -DHAVE_NOUVEAU -DHAVE_PANFROST -DHAVE_SWRAST -DHAVE_TEGRA -DHAVE_V3D -DHAVE_VC4 -DHAVE_ZINK -DVIDEO_CODEC_VC1DEC=1 -DVIDEO_CODEC_H264DEC=1 -DVIDEO_CODEC_H264ENC=1 -DVIDEO_CODEC_H265DEC=1 -DVIDEO_CODEC_H265ENC=1 -DHAVE_X11_PLATFORM -DHAVE_WAYLAND_PLATFORM -DHAVE_SURFACELESS_PLATFORM -DHAVE_DRM_PLATFORM -DHAVE_XCB_PLATFORM -DENABLE_ST_OMX_BELLAGIO=0 -DENABLE_ST_OMX_TIZONIA=0 -DGLX_INDIRECT_RENDERING -DGLX_DIRECT_RENDERING -DGLX_USE_DRM -DGLAPI_EXPORT_PROTO_ENTRY_POINTS=0 -DALLOW_KCMP -DENABLE_SHADER_CACHE -DHAVE___BUILTIN_BSWAP32 -DHAVE___BUILTIN_BSWAP64 -DHAVE___BUILTIN_CLZ -DHAVE___BUILTIN_CLZLL -DHAVE___BUILTIN_CTZ -DHAVE___BUILTIN_EXPECT -DHAVE___BUILTIN_FFS -DHAVE___BUILTIN_FFSLL -DHAVE___BUILTIN_POPCOUNT -DHAVE___BUILTIN_POPCOUNTLL -DHAVE___BUILTIN_UNREACHABLE -DHAVE___BUILTIN_TYPES_COMPATIBLE_P -DHAVE_FUNC_ATTRIBUTE_CONST -DHAVE_FUNC_ATTRIBUTE_FLATTEN -DHAVE_FUNC_ATTRIBUTE_MALLOC -DHAVE_FUNC_ATTRIBUTE_PURE -DHAVE_FUNC_ATTRIBUTE_UNUSED -DHAVE_FUNC_ATTRIBUTE_WARN_UNUSED_RESULT -DHAVE_FUNC_ATTRIBUTE_WEAK -DHAVE_FUNC_ATTRIBUTE_FORMAT -DHAVE_FUNC_ATTRIBUTE_PACKED -DHAVE_FUNC_ATTRIBUTE_RETURNS_NONNULL -DHAVE_FUNC_ATTRIBUTE_ALIAS -DHAVE_FUNC_ATTRIBUTE_NORETURN -DHAVE_FUNC_ATTRIBUTE_VISIBILITY -DHAVE_UINT128 -DHAVE_REALLOCARRAY -DHAVE_FMEMOPEN -D_GNU_SOURCE -DUSE_GCC_ATOMIC_BUILTINS -DUSE_AARCH64_ASM -DMAJOR_IN_SYSMACROS -DHAS_SCHED_H -DHAS_SCHED_GETAFFINITY -DHAVE_LINUX_FUTEX_H -DHAVE_ENDIAN_H -DHAVE_DLFCN_H -DHAVE_SYS_SHM_H -DHAVE_SYS_INOTIFY_H -DHAVE_STRTOF -DHAVE_MKOSTEMP -DHAVE_MEMFD_CREATE -DHAVE_RANDOM_R -DHAVE_FLOCK -DHAVE_STRTOK_R -DHAVE_GETRANDOM -DHAVE_POSIX_FALLOCATE -DHAVE_GNU_QSORT_R -DHAVE_STRUCT_TIMESPEC -DHAVE_PROGRAM_INVOCATION_NAME -DHAVE_ISSIGNALING -DHAVE_POSIX_MEMALIGN -DHAVE_DIRENT_D_TYPE -DHAVE_STRTOD_L -DHAVE_DLADDR -DHAVE_DL_ITERATE_PHDR -DHAVE_ZLIB -DHAVE_COMPRESSION -DHAVE_PTHREAD -DHAVE_PTHREAD_SETAFFINITY -DHAVE_LIBDRM -DUSE_LIBELF -DWL_HIDE_DEPRECATED -DHAVE_DRI -DHAVE_DRI2 -DHAVE_DRI3 -DHAVE_DRI3_MODIFIERS -DHAVE_DRISW_KMS -DHAVE_PERFETTO -Werror=return-type -Werror=empty-body -Wmisleading-indentation -Wno-non-virtual-dtor -Wno-missing-field-initializers -Wno-format-truncation -fno-math-errno -fno-trapping-math -flifetime-dse=1 -Werror=format -Wformat-security -ffunction-sections -fdata-sections -fPIC -pthread -MD -MQ src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_target_nv50.cpp.o -MF src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_target_nv50.cpp.o.d -o src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_target_nv50.cpp.o -c ../src/nouveau/codegen/nv50_ir_target_nv50.cpp
../src/nouveau/codegen/nv50_ir_target_nv50.cpp: In member function 'void nv50_ir::TargetNV50::initOpInfo()':
../src/nouveau/codegen/nv50_ir_target_nv50.cpp:179:28: error: array subscript [0, 255] is outside array bounds of 'nv50_ir::Target::OpInfo [133]' [-Werror=array-bounds]
179 | opInfo[prop->op].srcMods[s] |= NV50_IR_MOD_NEG;
| ~~~~~~~~~~~~~~~^
In file included from ../src/nouveau/codegen/nv50_ir_target_nv50.h:23,
from ../src/nouveau/codegen/nv50_ir_target_nv50.cpp:23:
../src/nouveau/codegen/nv50_ir_target.h:268:11: note: while referencing 'nv50_ir::Target::opInfo'
268 | OpInfo opInfo[OP_LAST + 1];
| ^~~~~~
../src/nouveau/codegen/nv50_ir_target_nv50.cpp:181:28: error: array subscript [0, 255] is outside array bounds of 'nv50_ir::Target::OpInfo [133]' [-Werror=array-bounds]
181 | opInfo[prop->op].srcMods[s] |= NV50_IR_MOD_ABS;
| ~~~~~~~~~~~~~~~^
../src/nouveau/codegen/nv50_ir_target.h:268:11: note: while referencing 'nv50_ir::Target::opInfo'
268 | OpInfo opInfo[OP_LAST + 1];
| ^~~~~~
../src/nouveau/codegen/nv50_ir_target_nv50.cpp:183:28: error: array subscript [0, 255] is outside array bounds of 'nv50_ir::Target::OpInfo [133]' [-Werror=array-bounds]
183 | opInfo[prop->op].srcMods[s] |= NV50_IR_MOD_NOT;
| ~~~~~~~~~~~~~~~^
../src/nouveau/codegen/nv50_ir_target.h:268:11: note: while referencing 'nv50_ir::Target::opInfo'
268 | OpInfo opInfo[OP_LAST + 1];
| ^~~~~~
cc1plus: all warnings being treated as errors
[1243/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir.cpp.o
[1244/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_print.cpp.o
[1245/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_ssa.cpp.o
[1246/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_emit_nv50.cpp.o
[1247/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_lowering_gv100.cpp.o
[1248/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_lowering_gm107.cpp.o
[1249/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_emit_gv100.cpp.o
[1250/2359] Compiling C++ object src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_from_nir.cpp.o
FAILED: src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_from_nir.cpp.o
compiler-wrapper-g++.sh -Isrc/nouveau/codegen/libnouveau_codegen.a.p -Isrc/nouveau/codegen -I../src/nouveau/codegen -Isrc -I../src -Iinclude -I../include -I../src/gallium/include -Isrc/gallium/auxiliary -I../src/gallium/auxiliary -Isrc/mapi -I../src/mapi -Isrc/mesa -I../src/mesa -I../subprojects/perfetto/sdk -Isrc/compiler/nir -I../src/compiler/nir -I/usr/include/libdrm -fvisibility=hidden -fdiagnostics-color=always -fsanitize=undefined -D_FILE_OFFSET_BITS=64 -Wall -Winvalid-pch -Werror -std=c++17 -O2 -g -D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS '-DPACKAGE_VERSION="23.3.0-devel"' '-DPACKAGE_BUGREPORT="https://gitlab.freedesktop.org/mesa/mesa/-/issues"' -DHAVE_OPENGL=1 -DHAVE_OPENGL_ES_1=1 -DHAVE_OPENGL_ES_2=1 -DHAVE_ETNAVIV -DHAVE_FREEDRENO -DHAVE_KMSRO -DHAVE_LIMA -DHAVE_NOUVEAU -DHAVE_PANFROST -DHAVE_SWRAST -DHAVE_TEGRA -DHAVE_V3D -DHAVE_VC4 -DHAVE_ZINK -DVIDEO_CODEC_VC1DEC=1 -DVIDEO_CODEC_H264DEC=1 -DVIDEO_CODEC_H264ENC=1 -DVIDEO_CODEC_H265DEC=1 -DVIDEO_CODEC_H265ENC=1 -DHAVE_X11_PLATFORM -DHAVE_WAYLAND_PLATFORM -DHAVE_SURFACELESS_PLATFORM -DHAVE_DRM_PLATFORM -DHAVE_XCB_PLATFORM -DENABLE_ST_OMX_BELLAGIO=0 -DENABLE_ST_OMX_TIZONIA=0 -DGLX_INDIRECT_RENDERING -DGLX_DIRECT_RENDERING -DGLX_USE_DRM -DGLAPI_EXPORT_PROTO_ENTRY_POINTS=0 -DALLOW_KCMP -DENABLE_SHADER_CACHE -DHAVE___BUILTIN_BSWAP32 -DHAVE___BUILTIN_BSWAP64 -DHAVE___BUILTIN_CLZ -DHAVE___BUILTIN_CLZLL -DHAVE___BUILTIN_CTZ -DHAVE___BUILTIN_EXPECT -DHAVE___BUILTIN_FFS -DHAVE___BUILTIN_FFSLL -DHAVE___BUILTIN_POPCOUNT -DHAVE___BUILTIN_POPCOUNTLL -DHAVE___BUILTIN_UNREACHABLE -DHAVE___BUILTIN_TYPES_COMPATIBLE_P -DHAVE_FUNC_ATTRIBUTE_CONST -DHAVE_FUNC_ATTRIBUTE_FLATTEN -DHAVE_FUNC_ATTRIBUTE_MALLOC -DHAVE_FUNC_ATTRIBUTE_PURE -DHAVE_FUNC_ATTRIBUTE_UNUSED -DHAVE_FUNC_ATTRIBUTE_WARN_UNUSED_RESULT -DHAVE_FUNC_ATTRIBUTE_WEAK -DHAVE_FUNC_ATTRIBUTE_FORMAT -DHAVE_FUNC_ATTRIBUTE_PACKED -DHAVE_FUNC_ATTRIBUTE_RETURNS_NONNULL -DHAVE_FUNC_ATTRIBUTE_ALIAS -DHAVE_FUNC_ATTRIBUTE_NORETURN -DHAVE_FUNC_ATTRIBUTE_VISIBILITY -DHAVE_UINT128 -DHAVE_REALLOCARRAY -DHAVE_FMEMOPEN -D_GNU_SOURCE -DUSE_GCC_ATOMIC_BUILTINS -DUSE_AARCH64_ASM -DMAJOR_IN_SYSMACROS -DHAS_SCHED_H -DHAS_SCHED_GETAFFINITY -DHAVE_LINUX_FUTEX_H -DHAVE_ENDIAN_H -DHAVE_DLFCN_H -DHAVE_SYS_SHM_H -DHAVE_SYS_INOTIFY_H -DHAVE_STRTOF -DHAVE_MKOSTEMP -DHAVE_MEMFD_CREATE -DHAVE_RANDOM_R -DHAVE_FLOCK -DHAVE_STRTOK_R -DHAVE_GETRANDOM -DHAVE_POSIX_FALLOCATE -DHAVE_GNU_QSORT_R -DHAVE_STRUCT_TIMESPEC -DHAVE_PROGRAM_INVOCATION_NAME -DHAVE_ISSIGNALING -DHAVE_POSIX_MEMALIGN -DHAVE_DIRENT_D_TYPE -DHAVE_STRTOD_L -DHAVE_DLADDR -DHAVE_DL_ITERATE_PHDR -DHAVE_ZLIB -DHAVE_COMPRESSION -DHAVE_PTHREAD -DHAVE_PTHREAD_SETAFFINITY -DHAVE_LIBDRM -DUSE_LIBELF -DWL_HIDE_DEPRECATED -DHAVE_DRI -DHAVE_DRI2 -DHAVE_DRI3 -DHAVE_DRI3_MODIFIERS -DHAVE_DRISW_KMS -DHAVE_PERFETTO -Werror=return-type -Werror=empty-body -Wmisleading-indentation -Wno-non-virtual-dtor -Wno-missing-field-initializers -Wno-format-truncation -fno-math-errno -fno-trapping-math -flifetime-dse=1 -Werror=format -Wformat-security -ffunction-sections -fdata-sections -fPIC -pthread -MD -MQ src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_from_nir.cpp.o -MF src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_from_nir.cpp.o.d -o src/nouveau/codegen/libnouveau_codegen.a.p/nv50_ir_from_nir.cpp.o -c ../src/nouveau/codegen/nv50_ir_from_nir.cpp
In member function 'bool {anonymous}::Converter::isResultFloat(nir_op)',
inlined from 'nv50_ir::DataType {anonymous}::Converter::getDType(nir_op, uint8_t)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:291:28,
inlined from 'nv50_ir::DataType {anonymous}::Converter::getDType(nir_alu_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:260:19,
inlined from 'bool {anonymous}::Converter::visit(nir_alu_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:2412:29:
../src/nouveau/codegen/nv50_ir_from_nir.cpp:229:45: error: array subscript [0, 511] is outside array bounds of 'const nir_op_info [428]' [-Werror=array-bounds]
229 | const nir_op_info &info = nir_op_infos[op];
| ~~~~~~~~~~~~~~~^
In file included from ../src/nouveau/codegen/nv50_ir_from_nir.cpp:25:
../src/compiler/nir/nir.h: In member function 'bool {anonymous}::Converter::visit(nir_alu_instr*)':
../src/compiler/nir/nir.h:1547:26: note: while referencing 'nir_op_infos'
1547 | extern const nir_op_info nir_op_infos[nir_num_opcodes];
| ^~~~~~~~~~~~
In member function 'bool {anonymous}::Converter::isResultFloat(nir_op)',
inlined from 'nv50_ir::DataType {anonymous}::Converter::getDType(nir_op, uint8_t)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:291:28,
inlined from 'nv50_ir::DataType {anonymous}::Converter::getDType(nir_alu_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:260:19,
inlined from 'bool {anonymous}::Converter::visit(nir_alu_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:2412:29:
../src/nouveau/codegen/nv50_ir_from_nir.cpp:229:45: error: array subscript [0, 511] is outside array bounds of 'const nir_op_info [428]' [-Werror=array-bounds]
229 | const nir_op_info &info = nir_op_infos[op];
| ~~~~~~~~~~~~~~~^
../src/compiler/nir/nir.h: In member function 'bool {anonymous}::Converter::visit(nir_alu_instr*)':
../src/compiler/nir/nir.h:1547:26: note: while referencing 'nir_op_infos'
1547 | extern const nir_op_info nir_op_infos[nir_num_opcodes];
| ^~~~~~~~~~~~
../src/nouveau/codegen/nv50_ir_from_nir.cpp: In member function 'bool {anonymous}::Converter::visit(nir_intrinsic_instr*)':
../src/nouveau/codegen/nv50_ir_from_nir.cpp:1577:61: error: array subscript [0, 1023] is outside array bounds of 'const nir_intrinsic_info [549]' [-Werror=array-bounds]
1577 | const nir_intrinsic_info &opInfo = nir_intrinsic_infos[op];
| ~~~~~~~~~~~~~~~~~~~~~~^
../src/compiler/nir/nir.h:2024:33: note: while referencing 'nir_intrinsic_infos'
2024 | extern const nir_intrinsic_info nir_intrinsic_infos[nir_num_intrinsics];
| ^~~~~~~~~~~~~~~~~~~
In file included from ../src/nouveau/codegen/nv50_ir_from_nir.cpp:30:
In member function 'unsigned int nv50_ir::TexInstruction::Target::getArgCount() const',
inlined from 'bool {anonymous}::Converter::visit(nir_tex_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:2952:48,
inlined from 'bool {anonymous}::Converter::visit(nir_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:1498:19,
inlined from 'bool {anonymous}::Converter::visit(nir_block*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:1371:17,
inlined from 'bool {anonymous}::Converter::visit(nir_cf_node*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:1350:19:
../src/nouveau/codegen/nv50_ir.h:1017:65: error: array subscript [0, 31] is outside array bounds of 'const nv50_ir::TexInstruction::Target::Desc [18]' [-Werror=array-bounds]
1017 | unsigned int getArgCount() const { return descTable[target].argc; }
| ~~~~~~~~~~~~~~~~^
../src/nouveau/codegen/nv50_ir.h: In member function 'bool {anonymous}::Converter::visit(nir_cf_node*)':
../src/nouveau/codegen/nv50_ir.h:1056:32: note: while referencing 'nv50_ir::TexInstruction::Target::descTable'
1056 | static const struct Desc descTable[TEX_TARGET_COUNT];
| ^~~~~~~~~
In member function 'unsigned int nv50_ir::TexInstruction::Target::getDim() const',
inlined from 'bool {anonymous}::Converter::visit(nir_tex_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:3065:48,
inlined from 'bool {anonymous}::Converter::visit(nir_instr*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:1498:19,
inlined from 'bool {anonymous}::Converter::visit(nir_block*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:1371:17,
inlined from 'bool {anonymous}::Converter::visit(nir_cf_node*)' at ../src/nouveau/codegen/nv50_ir_from_nir.cpp:1350:19:
../src/nouveau/codegen/nv50_ir.h:1018:60: error: array subscript [0, 31] is outside array bounds of 'const nv50_ir::TexInstruction::Target::Desc [18]' [-Werror=array-bounds]
1018 | unsigned int getDim() const { return descTable[target].dim; }
| ~~~~~~~~~~~~~~~~^
../src/nouveau/codegen/nv50_ir.h: In member function 'bool {anonymous}::Converter::visit(nir_cf_node*)':
../src/nouveau/codegen/nv50_ir.h:1056:32: note: while referencing 'nv50_ir::TexInstruction::Target::descTable'
1056 | static const struct Desc descTable[TEX_TARGET_COUNT];
| ^~~~~~~~~
cc1plus: all warnings being treated as errors
```https://gitlab.freedesktop.org/mesa/mesa/-/issues/3011Possible array out of bounds in nv50_program.c2021-03-05T23:23:56ZRafał MikrutPossible array out of bounds in nv50_program.c`prog->in` is an array with 16 elements, but `< 0xff` assume that index may be even 254.
Probably `< 0xf` or `< 0x10` or `<= 0xf` or similar should be used.
https://gitlab.freedesktop.org/mesa/mesa/-/blob/master/src/gallium/drivers/nouv...`prog->in` is an array with 16 elements, but `< 0xff` assume that index may be even 254.
Probably `< 0xf` or `< 0x10` or `<= 0xf` or similar should be used.
https://gitlab.freedesktop.org/mesa/mesa/-/blob/master/src/gallium/drivers/nouveau/nv50/nv50_program.h#L70-71
```c
struct nv50_varying in[16];
struct nv50_varying out[16];
```
https://gitlab.freedesktop.org/mesa/mesa/-/blob/master/src/gallium/drivers/nouveau/nv50/nv50_program.c#L213-214
```c
for (i = 0; i < 2; ++i)
if (prog->vp.bfc[i] < 0xff)
prog->fp.colors += bitcount4(prog->in[prog->vp.bfc[i]].mask) << 16;
```https://gitlab.freedesktop.org/mesa/mesa/-/issues/1957Nouveau VDPAU/VA-API failed H.264 at 480p for NVAC2024-01-10T16:49:50ZkjliewNouveau VDPAU/VA-API failed H.264 at 480p for NVACHardware: Geforce 9400/ION IGP (NVAC)
Fully updated ArchLinux x86_64 with upstream kernel on GNOME/Wayland/X11
Test clip URL https://www.youtube.com/watch?v=azvR__GRQic
```
135 mp4 854x480 480p 666k , avc1.4d401e, 2...Hardware: Geforce 9400/ION IGP (NVAC)
Fully updated ArchLinux x86_64 with upstream kernel on GNOME/Wayland/X11
Test clip URL https://www.youtube.com/watch?v=azvR__GRQic
```
135 mp4 854x480 480p 666k , avc1.4d401e, 24fps
```
Downloaded with `youtube-dl -f` and played back locally with mpv using:
```
$ LIBVA_DRIVER_NAME=nouveau mpv --hwdec=vaapi --vo=vaapi /path/to/MP4
$ VDPAU_DRIVER=nouveau mpv --hwdec=vdpau --vo=vdpau /path/to/MP4
```
The 1080p and 720p version of the test clip, when played back from start to end, they were fine. Quit playing (use 'Q') without pausing the video has the tendency to crash the DE. Collected relevant dmesg from remote ssh login when DE crashed.
```
Oct 18 12:48:27 archlinux kernel: nouveau 0000:04:00.0: Xwayland[689]: failed to idle channel 2 [Xwayland[689]]
Oct 18 12:48:42 archlinux kernel: nouveau 0000:04:00.0: Xwayland[689]: failed to idle channel 2 [Xwayland[689]]
Oct 18 12:48:52 archlinux sshd[1343]: Accepted password for user from 192.168.1.130 port 36958 ssh2
Oct 18 12:48:52 archlinux sshd[1343]: pam_unix(sshd:session): session opened for user user by (uid=0)
Oct 18 12:48:57 archlinux kernel: nouveau 0000:04:00.0: Xwayland[689]: failed to idle channel 2 [Xwayland[689]]
```https://gitlab.freedesktop.org/mesa/mesa/-/issues/1158nv92 hang with MSI Kombustor 2.5 (via wine)2021-03-05T23:05:37ZBugzilla Migration Usernv92 hang with MSI Kombustor 2.5 (via wine)## Submitted by Andrew Randrianasulu
Assigned to **Nouveau Project**
**[Link to original bug (#106660)](https://bugs.freedesktop.org/show_bug.cgi?id=106660)**
## Description
Created attachment 139782
xzipped trace file
Hello.
I ...## Submitted by Andrew Randrianasulu
Assigned to **Nouveau Project**
**[Link to original bug (#106660)](https://bugs.freedesktop.org/show_bug.cgi?id=106660)**
## Description
Created attachment 139782
xzipped trace file
Hello.
I was trying to see if various tests/demos still work with more recent wine (3.9), and run MSIKombustorDX11.exe. Just clicking on "Run preset 720" with default test "Wavy Plane (GL2)" resulted in GPU hang.
I was able to capture apitrace with llvmpipe, and replaying this trace also hang GPU.
Mesa at Mesa 18.2.0-devel (git-936cd3c87a), X server at "X.Org X Server 1.19.5", ddx at "commit ac8f7b949e50d96f281b09f7fe96c92ea4d178ec - dri3: don't check permissions on render node", libdrm - "commit cb592ac8166e348bf61afa3f7b7f626ccaf55a0f", kernel was 4.16.9-x64 but currently 4.15.
**Attachment 139782**, "xzipped trace file":
[MSIKombustorDX11.trace.xz](/uploads/b34591494d9eaee801dde1c7d57472bb/MSIKombustorDX11.trace.xz)
Version: githttps://gitlab.freedesktop.org/mesa/mesa/-/issues/1118[NV84] fifo intr 00c00000, subchan mapping messed up2021-03-05T23:03:37ZBugzilla Migration User[NV84] fifo intr 00c00000, subchan mapping messed up## Submitted by Thibaud CANALE
Assigned to **Nouveau Project**
**[Link to original bug (#98709)](https://bugs.freedesktop.org/show_bug.cgi?id=98709)**
## Description
Created attachment 127955
dmesg content after the kernel dump.
...## Submitted by Thibaud CANALE
Assigned to **Nouveau Project**
**[Link to original bug (#98709)](https://bugs.freedesktop.org/show_bug.cgi?id=98709)**
## Description
Created attachment 127955
dmesg content after the kernel dump.
Hello everyone,
I met an error bricking my graphical session, just after launching a game (named Hacknet, some irony).
I attached the content of dmesg after the crash.
I am about to do an apitrace of the program.
My GPU is an 8600 GT on a MSI board, I am using kernel 4.7.10-hardened and Mesa 12.0.3. I consider updating the version of Mesa on my system, but it might be unlikely related.
I can provide more information if you need it.
Thanks for support.
**Attachment 127955**, "dmesg content after the kernel dump.":
[crash_nouveau_2016-11-13.txt](/uploads/fc305ca5fd6a50975d2f1379d01e7eb1/crash_nouveau_2016-11-13.txt)
Version: 12.0https://gitlab.freedesktop.org/mesa/mesa/-/issues/1102GT215GLM Rendering hickups with gnome-shell2021-03-05T23:01:57ZBugzilla Migration UserGT215GLM Rendering hickups with gnome-shell## Submitted by Tomáš Chvátal
Assigned to **Nouveau Project**
**[Link to original bug (#95212)](https://bugs.freedesktop.org/show_bug.cgi?id=95212)**
## Description
Created attachment 123364
dmesg.log
With the nouveau there are r...## Submitted by Tomáš Chvátal
Assigned to **Nouveau Project**
**[Link to original bug (#95212)](https://bugs.freedesktop.org/show_bug.cgi?id=95212)**
## Description
Created attachment 123364
dmesg.log
With the nouveau there are rendering issues like disortion on the screen or actual textures missing. The server is not crashing, yet the rendering errors happen too often for any reasonable usage.
Card is:
01:00.0 VGA compatible controller: NVIDIA Corporation GT215GLM [Quadro FX 1800M] (rev a2)
Error looks like:
```
[ 942.990602] nouveau 0000:01:00.0: gr: magic set 1:
[ 942.990612] nouveau 0000:01:00.0: gr: 00408e04: ae28bf08
[ 942.990615] nouveau 0000:01:00.0: gr: 00408e08: ed00f7d6
[ 942.990617] nouveau 0000:01:00.0: gr: 00408e0c: 40000430
[ 942.990622] nouveau 0000:01:00.0: gr: 00408e10: e9e90000
[ 942.990625] nouveau 0000:01:00.0: gr: TRAP_TEXTURE - TP1: 00000003 [ FAULT]
[ 942.990628] nouveau 0000:01:00.0: gr: magic set 2:
[ 942.990631] nouveau 0000:01:00.0: gr: 00409604: ae28ae08
[ 942.990634] nouveau 0000:01:00.0: gr: 00409608: ed00f7d6
[ 942.990636] nouveau 0000:01:00.0: gr: 0040960c: 40000430
[ 942.990638] nouveau 0000:01:00.0: gr: 00409610: e9e90000
[ 942.990640] nouveau 0000:01:00.0: gr: TRAP_TEXTURE - TP2: 00000003 [ FAULT]
[ 942.990642] nouveau 0000:01:00.0: gr: magic set 3:
[ 942.990645] nouveau 0000:01:00.0: gr: 00409e04: ae286308
[ 942.990647] nouveau 0000:01:00.0: gr: 00409e08: ed00f7d6
[ 942.990649] nouveau 0000:01:00.0: gr: 00409e0c: 40000430
[ 942.990652] nouveau 0000:01:00.0: gr: 00409e10: e9e90000
[ 942.990653] nouveau 0000:01:00.0: gr: TRAP_TEXTURE - TP3: 00000003 [ FAULT]
[ 942.990656] nouveau 0000:01:00.0: gr: 00200000 [] ch 6 [003f939000 gnome-shell[1993]] subc 3 class 8597 mthd 15e0 data 00000000
[ 942.990668] nouveau 0000:01:00.0: fb: trapped read at ed00f7d600 on channel 6 [3f939000 gnome-shell[1993]] engine 00 [PGRAPH] client 0a [TEXTURE] subclient 00 [] reason 00000000 [PT_NOT_PRESENT]
```
Full output stored in dmesg.log attachment
**Attachment 123364**, "dmesg.log":
[dmesg.log](/uploads/cb669dc43d7e95a7fdc7340656a7f2d4/dmesg.log)
Version: 11.2https://gitlab.freedesktop.org/mesa/mesa/-/issues/1075[NV50/Gallium] World of Zoo (in Wine) has rendering issues2021-03-05T23:00:00ZBugzilla Migration User[NV50/Gallium] World of Zoo (in Wine) has rendering issues## Submitted by Béla Gyebrószki
Assigned to **Nouveau Project**
**[Link to original bug (#91170)](https://bugs.freedesktop.org/show_bug.cgi?id=91170)**
## Description
When the game loads to the menu the screen is scrambled with fl...## Submitted by Béla Gyebrószki
Assigned to **Nouveau Project**
**[Link to original bug (#91170)](https://bugs.freedesktop.org/show_bug.cgi?id=91170)**
## Description
When the game loads to the menu the screen is scrambled with flashing polygons.
This doesn't occur with the binary drivers (340.76) or when starting the game with the software renderer.Disabling shader optimization doesn't resolve the problem.
Screenshot:
http://imgur.com/xro8Ixr
Trace file:
https://drive.google.com/open?id=0B-tTbLKBl-tOdTJxT1o0c2dZMmc
The problem is first visible in frame #152, when the second splash screen is displayed.
Demo version is available on Steam (needs Wine to run):
http://store.steampowered.com/app/43100/
Fedora 22 32-bit
Mesa 10.6-branchpoint-773-g1de93f9
Kernel 4.0.6-300.fc22.i686+PAE
Xorg 1.17.2
libdrm-2.4.61-3.fc22.i686
Version: githttps://gitlab.freedesktop.org/mesa/mesa/-/issues/1064[NV96] Artifacts in output of fragment program containing not unrolled loops ...2021-03-05T22:59:41ZBugzilla Migration User[NV96] Artifacts in output of fragment program containing not unrolled loops with conditional break## Submitted by Grzegorz Wójcik
Assigned to **Nouveau Project**
**[Link to original bug (#78161)](https://bugs.freedesktop.org/show_bug.cgi?id=78161)**
## Description
Created attachment 98301
apitrace of simple test program.
Prob...## Submitted by Grzegorz Wójcik
Assigned to **Nouveau Project**
**[Link to original bug (#78161)](https://bugs.freedesktop.org/show_bug.cgi?id=78161)**
## Description
Created attachment 98301
apitrace of simple test program.
Problem appear in shaders containing loops with conditional break when loop is not unrolled by nouveau. I checked emitted code with ST_DEBUG=tgsi NV50_PROG_DEBUG=1.
Tested with Mesa 10.2.0-devel (git-475f5ff) from 2014-04-30.
This bug exists for more than year, I first saw it in 2013-02.
I think that artifacts appear in areas where is big difference in number of iterations executed for pixel before breaking from loop.
**Attachment 98301**, "apitrace of simple test program.":
[test2.37.trace](/uploads/ae6440dce874fd77fc627ea27bc221cc/test2.37.trace)
Version: githttps://gitlab.freedesktop.org/mesa/mesa/-/issues/1061[NV86] Screen corruption and crashes in bastion on NVS-140M2021-03-05T22:59:33ZBugzilla Migration User[NV86] Screen corruption and crashes in bastion on NVS-140M## Submitted by Matthias Blankertz
Assigned to **Nouveau Project**
**[Link to original bug (#76605)](https://bugs.freedesktop.org/show_bug.cgi?id=76605)**
## Description
Created attachment 96381
dmesg
When I run the game bastion ...## Submitted by Matthias Blankertz
Assigned to **Nouveau Project**
**[Link to original bug (#76605)](https://bugs.freedesktop.org/show_bug.cgi?id=76605)**
## Description
Created attachment 96381
dmesg
When I run the game bastion there is screen corruption, and after some time the computer locks up.
The menu renders OK-ish (with only some flickering corruption). When ingame, the screen flickers between (mostly) uncorrupted and corrupted at random intervals. After some time the computer crashes. Before the crash there is a lot of output in dmesg by nouveau.
I am running archlinux.
Versions:
xorg 1.15.0
mesa 10.1.0
xf86-video-nouveau 1.0.10
nouveau-dri 10.1.0
linux 3.13.7
**Attachment 96381**, "dmesg":
[bastion.dmesg](/uploads/1189802262e925744e232772f406512c/bastion.dmesg)
Version: 10.1https://gitlab.freedesktop.org/mesa/mesa/-/issues/1060[NVAC] xbmc failure with vdpau enabled2021-03-05T22:59:07ZBugzilla Migration User[NVAC] xbmc failure with vdpau enabled## Submitted by Martin Bednar
Assigned to **Nouveau Project**
**[Link to original bug (#76173)](https://bugs.freedesktop.org/show_bug.cgi?id=76173)**
## Description
When using xbmc with vdpau acceleration enabled, I get a green sc...## Submitted by Martin Bednar
Assigned to **Nouveau Project**
**[Link to original bug (#76173)](https://bugs.freedesktop.org/show_bug.cgi?id=76173)**
## Description
When using xbmc with vdpau acceleration enabled, I get a green screen (audio works), and this appears in the kernel log :
nouveau E[ PFIFO][0000:03:00.0] DMA_PUSHER - ch 6 [xbmc.bin[22420]] get 0x00200f06c8 put 0x00200f0770 ib_get 0x000000db ib_put 0x000000dc state 0x80000000 (err: INVALID_CMD) push 0x00400040
Sometimes it makes xbmc crash completely.
This is on an nv50 (Chipset: MCP79/MCP7A (NVAC) ) : VGA compatible controller: NVIDIA Corporation ION VGA (rev b1)
Mesa 10.1
libdrm 2.4.52
It works all right using mplayer.
Just a wild guess : something to do with GL_NV_vdpau_interop?
If you need any more information, I'd be happy to provide it.
Version: 10.3https://gitlab.freedesktop.org/mesa/mesa/-/issues/1058[nv96] Freespace 2 open crashes2021-03-05T22:58:31ZBugzilla Migration User[nv96] Freespace 2 open crashes## Submitted by Maarten Maathuis `@madman2003`
Assigned to **Nouveau Project**
**[Link to original bug (#72939)](https://bugs.freedesktop.org/show_bug.cgi?id=72939)**
## Description
This has been an issue for much longer, it looks...## Submitted by Maarten Maathuis `@madman2003`
Assigned to **Nouveau Project**
**[Link to original bug (#72939)](https://bugs.freedesktop.org/show_bug.cgi?id=72939)**
## Description
This has been an issue for much longer, it looks to be a memory related problem. Textures are corrupted and after a little while the card hangs. I've confirmed with the binary blob that the hardware works fine.
The errors that i got were:
Dec 20 22:12:41 madman kernel: [ 66.490366] nouveau E[ PGRAPH][0000:01:00.0] TRAP_MP_EXEC - TP 0 MP 0: INVALID_OPCODE at 07d7e0 warp 15, opcode 80070279 00060780
Dec 20 22:12:41 madman kernel: [ 66.490379] nouveau E[ PGRAPH][0000:01:00.0] TRAP_MP_EXEC - TP 0 MP 1: INVALID_OPCODE at 07d7e0 warp 1, opcode 80070279 00060780
Dec 20 22:12:41 madman kernel: [ 66.490384] nouveau E[ PGRAPH][0000:01:00.0] TRAP
Dec 20 22:12:41 madman kernel: [ 66.490390] nouveau E[ PGRAPH][0000:01:00.0] ch 4 [0x001f91e000 fs2_open[2611]] subc 3 class 0x8297 mthd 0x15f0 data 0x0dd80dd8
This was with a 3.13-rc4 kernel and a very recent git mesa (also tried mesa 9.25, had the same problem).
In general i don't think any graphic intensive runs for a very long time. It's just that this one is very easy to make crash.
My question is, what can i do to narrow this down? Keep in mind that this has been going on for more than 6 months probably (maybe even a year) and I can't take my kernel too far back into the past (because my system is compiled against modern linux headers).
Version: githttps://gitlab.freedesktop.org/mesa/mesa/-/issues/1055[nva5] Wrong provoking vertex is selected for flat attribute interpolation (c...2021-03-05T19:32:31ZBugzilla Migration User[nva5] Wrong provoking vertex is selected for flat attribute interpolation (clipping?)## Submitted by alzeih
Assigned to **Nouveau Project**
**[Link to original bug (#66642)](https://bugs.freedesktop.org/show_bug.cgi?id=66642)**
## Description
The following piglit test:
interpolation-flat-gl_BackColor-smooth-non...## Submitted by alzeih
Assigned to **Nouveau Project**
**[Link to original bug (#66642)](https://bugs.freedesktop.org/show_bug.cgi?id=66642)**
## Description
The following piglit test:
interpolation-flat-gl_BackColor-smooth-none.shader_test
appears to select the wrong provoking vertex depending on the exact value of v[0].y.
For v[0].y > -1.0, the triangle ends up red.
For v[0].y = -1.0, the triangle ends up green.
For v[0].y < -1.0, the triangle ends up (correctly) blue.
Hardware: nva5 (GT330M) in MacBookPro6,2
Mesa version: 1415a1884c
Kernel: 3.9.8-1-ARCH
Suspect the clipper doesn't respect the index of the provoking vertex in the triangle?
Version: githttps://gitlab.freedesktop.org/mesa/mesa/-/issues/1049[NV50 gallium] artifacts in prboom on NV862021-03-05T22:58:24ZBugzilla Migration User[NV50 gallium] artifacts in prboom on NV86## Submitted by Sven Joachim
Assigned to **Nouveau Project**
**[Link to original bug (#49295)](https://bugs.freedesktop.org/show_bug.cgi?id=49295)**
## Description
Created attachment 60784
Doom 1, Episode 1, Map 4 under prboom 2.5...## Submitted by Sven Joachim
Assigned to **Nouveau Project**
**[Link to original bug (#49295)](https://bugs.freedesktop.org/show_bug.cgi?id=49295)**
## Description
Created attachment 60784
Doom 1, Episode 1, Map 4 under prboom 2.5.0
Under prboom 2.5.0 with OpenGL renderer, I'm seeing bad artifacts:
- Walls are very bright, sometimes transparent. In some cases,
the texture disappears completely and is replaced by a solid color.
- A "hall of mirrors effect" as described in http://doomwiki.org/wiki/Hall_of_mirrors_effect.
I'm attaching a screenshot from Doom 1, Episode 1, Map 4 shortly after the start.
There are no error messages in the kernel logs, and other 3D games (including doomsday, another Doom source port) are unaffected.
Hardware is a GeForce 8500 GT, software stack as follows:
Mesa from git commit 4c15a77f27
Kernel 3.4.0-rc5
Libdrm from git commit 754655c795
Nouveau DDX from git commit 174f170720
**Attachment 60784**, "Doom 1, Episode 1, Map 4 under prboom 2.5.0":
![E1M4](/uploads/729449ad08464609a77c0b069cd78849/E1M4.png)
Version: githttps://gitlab.freedesktop.org/mesa/mesa/-/issues/1048[NVA8] UT2003: Splash-screen is transparent with gnome-shell enabled2021-03-05T22:58:17ZBugzilla Migration User[NVA8] UT2003: Splash-screen is transparent with gnome-shell enabled## Submitted by Roy
Assigned to **Nouveau Project**
**[Link to original bug (#37768)](https://bugs.freedesktop.org/show_bug.cgi?id=37768)**
## Description
Created attachment 47340
Screenshot of the transparent splash-screen
When ...## Submitted by Roy
Assigned to **Nouveau Project**
**[Link to original bug (#37768)](https://bugs.freedesktop.org/show_bug.cgi?id=37768)**
## Description
Created attachment 47340
Screenshot of the transparent splash-screen
When Gnome-Shell is enabled and I try to start Unreal Tournament 2003, the splash screen is not shown with a black background. Instead, there is a high level of transparency, which can be seen in the attached image.
If I change the gnome-shell background to black, the image shows correctly. This implies that there is no missing colour information but instead an incorrect alpha value is used. With gnome-shell disabled the splash screen shows as normal.
Dmesg or console output does not show anything strange.
Running:
kernel-2.6.38.6-27.fc15.x86_64 (but also tried with Koji kernel and upstream nouveau module)
mesa-dri-drivers-7.11-0.11.20110525.0.fc15.i686
xorg-x11-drv-nouveau-0.0.16-24.20110324git8378443.fc15.x86_64
xorg-x11-server-Xorg-1.10.1-14.fc15.x86_64
**Attachment 47340**, "Screenshot of the transparent splash-screen":
![Schermafdruk-Naamloos_venster](/uploads/732caa8035c209e7ef2afe0b5b0ac5cc/Schermafdruk-Naamloos_venster.png)