nir/large_constants: more careful data copying
authorSergii Romantsov <sergii.romantsov@globallogic.com>
Thu, 12 Sep 2019 12:28:45 +0000 (15:28 +0300)
committerConnor Abbott <cwabbott0@gmail.com>
Mon, 16 Sep 2019 07:58:49 +0000 (07:58 +0000)
A filed of nir_variable.location may be equel to -1.
That may cause copying to invalid address of list-node,
making some internal fields corrupted.

Patch fixes segfault during freeing context due to
corrupted address of ralloc_header.destructor.

v2: copy data if var is constant (Connor Abbott)

CC: Caio Marcelo de Oliveira Filho <caio.oliveira@intel.com>
Fixes: b6d475356846 (nir/large_constants: De-duplicate constants)
Signed-off-by: Sergii Romantsov <sergii.romantsov@globallogic.com>
Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=111676
Reviewed-by: Connor Abbott <cwabbott0@gmail.com>
src/compiler/nir/nir_opt_large_constants.c

index fae4ed27960a57fe9ee95d7f30bf90e59db01360..8fd1f0d2e9972553fb76fb77617e010eabd48244 100644 (file)
@@ -318,7 +318,7 @@ nir_opt_large_constants(nir_shader *shader,
    shader->constant_data = rzalloc_size(shader, shader->constant_data_size);
    for (int i = 0; i < num_locals; i++) {
       struct var_info *info = &var_infos[i];
-      if (!info->duplicate) {
+      if (!info->duplicate && info->is_constant) {
          memcpy((char *)shader->constant_data + info->var->data.location,
                 info->constant_data, info->constant_data_size);
       }