[kwin] [Bug 489764] kwin_wayland crashed in convert_ubyte_rgba_to_bgra when clicking on Konsole's icon in the task manager such that the wallpaper was shown

[Matt Fagnani]

https://bugs.kde.org/show_bug.cgi?id=489764
--- Comment #10 from Matt Fagnani <matt.fagn...@bell.net> ---
The crashing line in convert_ubyte_rgba_to_bgra was using the s[i] source image
pointers with what looked like bit-wise and left bit shifting values
https://gitlab.freedesktop.org/mesa/mesa/-/blob/mesa-24.1.2/src/mesa/main/format_utils.c#L219

        for (i = 0; i < width/2; i++) {
            d[i] = ( (s[i] & 0xff00ff00ff00ff00) |
                    ((s[i] &       0xff000000ff) << 16) |
                    ((s[i] &   0xff000000ff0000) >> 16));
         }

While s was optimized out as were most other variables, i = 144 in each of a
few core dumps I looked at with gdb. In get_tex_rgba_uncompressed in frame 1,
width=1366 and height=608. A source texture image pointer of the animation of
maximizing or minimizing the window or the window preview might've sometimes
been uninitialized or corrupted, so that s[i] might been an invalid pointer.

-- 
You are receiving this mail because:
You are watching all bug changes.