xuxiandi / angleproject

Automatically exported from code.google.com/p/angleproject
Other
0 stars 0 forks source link

Crash in ConstantUnion::getBConst with this=null, called from TIntermediate::promoteConstantUnion, from yyparse #240

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
This is https://bugzilla.mozilla.org/show_bug.cgi?id=699015

Testcase: https://bugzilla.mozilla.org/attachment.cgi?id=571303

Stack:

#0  0x00007ffff3bbcd96 in ConstantUnion::getBConst (this=0x0) at 
/home/decoder/LangFuzz/mozilla-central-browser/gfx/angle/src/compiler/ConstantUn
ion.h:22
#1  0x00007ffff3bc1f52 in TIntermediate::promoteConstantUnion 
(this=0x7fffffff9a30, promoteTo=EbtFloat, node=0x7fffd3c089a8)
    at /home/decoder/LangFuzz/mozilla-central-browser/gfx/angle/src/compiler/Intermediate.cpp:1394
#2  0x00007ffff3bbebb9 in TIntermediate::addConversion (this=0x7fffffff9a30, 
op=EOpConstructFloat, type=..., node=0x7fffd3c089a8)
    at /home/decoder/LangFuzz/mozilla-central-browser/gfx/angle/src/compiler/Intermediate.cpp:478
#3  0x00007ffff3bbe76b in TIntermediate::addUnaryMath (this=0x7fffffff9a30, 
op=EOpConstructFloat, childNode=0x7fffd3c089a8, line=5, symbolTable=...)
    at /home/decoder/LangFuzz/mozilla-central-browser/gfx/angle/src/compiler/Intermediate.cpp:326
#4  0x00007ffff3bcb802 in TParseContext::constructBuiltIn (this=0x7fffffff9960, 
type=0x7fffffff87f0, op=EOpConstructVec4, node=0x7fffd3c089a8, line=5, 
subset=true)
    at /home/decoder/LangFuzz/mozilla-central-browser/gfx/angle/src/compiler/ParseHelper.cpp:1242
#5  0x00007ffff3bcb3f6 in TParseContext::addConstructor (this=0x7fffffff9960, 
node=0x7fffd3c08da8, type=0x7fffffff87f0, op=EOpConstructVec4, 
fnCall=0x7fffd3c07bd8, line=5)
    at /home/decoder/LangFuzz/mozilla-central-browser/gfx/angle/src/compiler/ParseHelper.cpp:1159
#6  0x00007ffff3be1f17 in yyparse (context=0x7fffffff9960) at 
/home/decoder/LangFuzz/mozilla-central-browser/gfx/angle/src/compiler/glslang_ta
b.cpp:2468

Original issue reported on code.google.com by jacob.be...@gmail.com on 2 Nov 2011 at 8:32

GoogleCodeExporter commented 9 years ago

Original comment by kbr@chromium.org on 4 Nov 2011 at 12:45

GoogleCodeExporter commented 9 years ago

Original comment by z...@google.com on 27 Feb 2013 at 9:26