[cairo] crash with pixman-0.17.4

[Yogish Kulkarni]

I got crash in neon_composite_src_0565_8888 with latest pixman version.
I have done some analysis,

[1] No crash before commit 6bd17f1e9861693262fa88bfeff5d3279b3f6e7d 
[2] If reverted commits 6bd17f1e9861693262fa88bfeff5d3279b3f6e7d &
c7b84f8b043018368fade4ad13730cfcaaf5c8cc from pixman-0.17.4 NO crash

I guess this crash is related to pixman out of bound work around. 
Anyone has clue ?


Program received signal SIGSEGV, Segmentation fault.
0x4019dbdc in pixman_composite_src_0565_8888_asm_neon () at
pixman-arm-neon-asm.h:565
565 */
Current language:  auto; currently asm
(gdb) bt
#0  0x4019dbdc in pixman_composite_src_0565_8888_asm_neon () at
pixman-arm-neon-asm.h:565
#1  0x4019ca70 in neon_composite_src_0565_8888 (imp=<value optimized
out>, op=<value optimized out>, src_image=0x247538, mask_image=<value
optimized out>, dst_image=0x2475f8, 
    src_x=108, src_y=930, mask_x=0, mask_y=0, dest_x=0, dest_y=0,
width=263, height=74) at pixman-arm-neon.c:257
#2  0x40196d9c in walk_region_internal (imp=0x15ad40, op=PIXMAN_OP_SRC,
src_image=0x247538, mask_image=0x0, dst_image=0x2475f8, src_x=108,
src_y=930, mask_x=0, mask_y=0, 
    dest_x=0, dest_y=0, width=263, height=74, src_repeat=0,
mask_repeat=0, region=0xbe8ac234, composite_rect=0x4019ca0c
<neon_composite_src_0565_8888>) at pixman-utils.c:444
#3  0x401980bc in _pixman_run_fast_path (paths=<value optimized out>,
imp=0x15ad40, op=PIXMAN_OP_SRC, src=0x247538, mask=0x0, dest=0x2475f8,
src_x=108, src_y=930, mask_x=0, 
    mask_y=0, dest_x=0, dest_y=0, width=263, height=74) at
pixman-utils.c:749
#4  0x4019ce2c in arm_neon_composite (imp=0x15ad40, op=PIXMAN_OP_SRC,
src=0x247538, mask=0x0, dest=0x2475f8, src_x=108, src_y=930, mask_x=0,
mask_y=0, dest_x=0, dest_y=0, 
    width=263, height=74) at pixman-arm-neon.c:454
#5  0x4016ad4c in _pixman_implementation_composite (imp=0x107, op=73,
src=0x2343d8, mask=0x107, dest=0x2475f8, src_x=108, src_y=930, mask_x=0,
mask_y=0, dest_x=0, dest_y=0, 
    width=263, height=74) at pixman-implementation.c:229
#6  0x4018f484 in pixman_image_composite (op=PIXMAN_OP_SRC,
src=0x247538, mask=0x0, dest=0x2475f8, src_x=<value optimized out>,
src_y=-2940, mask_x=0, mask_y=0, dest_x=0, 
    dest_y=0, width=263, height=74) at pixman.c:204
#7  0x00060fdc in fbComposite (op=1 '\1', pSrc=0x247420, pMask=0x0,
pDst=0x247488, xSrc=<value optimized out>, ySrc=930, xMask=0, yMask=0,
xDst=0, yDst=0, width=263, height=74)
    at fbpict.c:185
#8  0x0004bb28 in KdCheckComposite (op=1 '\1', pSrc=0x247420, pMask=0x0,
pDst=0x247488, xSrc=109, ySrc=887, xMask=0, yMask=0, xDst=0, yDst=0,
width=263, height=74)
    at kasync.c:282
#9  0x00049de0 in kaaComposite (op=1 '\1', pSrc=0x247420, pMask=0x0,
pDst=0x247488, xSrc=109, ySrc=887, xMask=0, yMask=0, xDst=0, yDst=0,
width=263, height=74)
    at kaapict.c:1040
#10 0x000bd5c4 in damageComposite (op=1 '\1', pSrc=0x247420, pMask=0x0,
pDst=0x247488, xSrc=109, ySrc=887, xMask=0, yMask=0, xDst=0, yDst=0,
width=263, height=74)
    at damage.c:576
#11 0x000a4e74 in CompositePicture (op=1 '\1', pSrc=0x247420, pMask=0x0,
pDst=0x247488, xSrc=109, ySrc=887, xMask=0, yMask=0, xDst=0, yDst=0,
width=263, height=74)
    at picture.c:1674
#12 0x000fc19c in compNewPixmap (pWin=<value optimized out>, x=108,
y=930, w=<value optimized out>, h=1104333712) at compalloc.c:522
#13 0x000fc398 in compAllocPixmap (pWin=0x107) at compalloc.c:546
#14 0x000fbac4 in compCheckRedirect (pWin=0x20e888) at compwindow.c:161
#15 0x000fbbac in compRealizeWindow (pWin=0x20e888) at compwindow.c:242
#16 0x000198c4 in RealizeTree (pWin=0x20df00) at window.c:2696
#17 0x0001b450 in MapWindow (pWin=0x20df00, client=0x1786a0) at
window.c:2818
#18 0x0002e848 in ProcMapWindow (client=0x1786a0) at dispatch.c:695
#19 0x0002f020 in Dispatch () at dispatch.c:454
#20 0x00015f08 in main (argc=11, argv=0xbe8acba4, envp=<value optimized
out>) at main.c:465
(gdb) 


-- Yogish