<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW --- - Segmentation fault when using a complex path for clip and stroke" href="https://bugs.freedesktop.org/show_bug.cgi?id=74779#c6">Comment # 6</a> on <a class="bz_bug_link bz_status_NEW " title="NEW --- - Segmentation fault when using a complex path for clip and stroke" href="https://bugs.freedesktop.org/show_bug.cgi?id=74779">bug 74779</a> from <a class="email" href="mailto:sixtysix@inwind.it" title="Massimo <sixtysix@inwind.it>"> Massimo</a> <pre>Created <a href="attachment.cgi?id=104273" name="attach_104273" title="patch to instrument cairo-polygon-intersect.c">attachment 104273</a> <a href="attachment.cgi?id=104273&action=edit" title="patch to instrument cairo-polygon-intersect.c">[details]</a> <a href='page.cgi?id=splinter.html&bug=74779&attachment=104273'>[review]</a> patch to instrument cairo-polygon-intersect.c Adding comments to describe the easy parts of this bug: instrumenting src/cairo-polygon-intersect.c as in the attached patch and executing the 'creduced' test case prints on the console lines like: > 0x00000001a3ef00 0x00000001a3fae0 intptr_t diff: fffffffffffff420 -3040 int diff: 55555458 1431655512 a 0x00000001a3f9f0 0x00000001a3f950 intptr_t diff: 00000000000000a0 160 int diff: aaaaaab8 -1431655752 a 0x00000001a3f590 0x00000001a3f9f0 intptr_t diff: fffffffffffffba0 -1120 int diff: 555554f8 1431655672 a 0x00000001a3f0e0 0x00000001a3f040 intptr_t diff: 00000000000000a0 160 int diff: aaaaaab8 -1431655752 a 0x00000001a3ed70 0x00000001a3ee10 intptr_t diff: ffffffffffffff60 -160 int diff: 55555548 1431655752 a 0x00000001a3f040 0x00000001a3f0e0 intptr_t diff: ffffffffffffff60 -160 int diff: 55555548 1431655752 a 0x00000001a3f590 0x00000001a3f9f0 intptr_t diff: fffffffffffffba0 -1120 int diff: 555554f8 1431655672 a 0x00000001a3f9f0 0x00000001a3f950 intptr_t diff: 00000000000000a0 160 int diff: aaaaaab8 -1431655752 a 0x00000001a3f040 0x00000001a3f0e0 intptr_t diff: ffffffffffffff60 -160 int diff: 55555548 1431655752 a 0x00000001a3ed70 0x00000001a3ee10 intptr_t diff: ffffffffffffff60 -160 int diff: 55555548 1431655752 a 0x00000001a3f950 0x00000001a3f9f0 intptr_t diff: ffffffffffffff60 -160 int diff: 55555548 1431655752 a 0x007fff5ea37418 0x007fff5ea37518 intptr_t diff: ffffffffffffff00 -256 int diff: 55555540 1431655744 a 0x007fff5ea37678 0x007fff5ea37458 intptr_t diff: 0000000000000220 544 int diff: aaaaaad8 -1431655720 a 0x007fff5ea37658 0x007fff5ea373d8 intptr_t diff: 0000000000000280 640 int diff: aaaaaae0 -1431655712 a <a href="http://cgit.freedesktop.org/cairo/tree/src/cairo-polygon-intersect.c?id=7e856071a27b06a6ae35b6445635da9276975c69#n798">http://cgit.freedesktop.org/cairo/tree/src/cairo-polygon-intersect.c?id=7e856071a27b06a6ae35b6445635da9276975c69#n798</a> this shows that the last statement in 'cairo_bo_event_compare' is executed and on 64 bit platforms it invokes undefined behaviour (the compiler assumes that it must not happen and is entitled to emit whatever) For the record I'm using gcc from fc20: gcc (GCC) 4.8.3 20140624 (Red Hat 4.8.3-1) Copyright (C) 2013 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> </ul> </body> </html>