Issue metadata
Sign in to add a comment
|
Data race in sw::Renderer::initializeThreads |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5208893753131008 Fuzzer: inferno_layout_test_unmodified Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race WRITE 4 Crash Address: 0x7fc828db1058 Crash State: sw::Renderer::initializeThreads sw::Renderer::updateConfiguration sw::Renderer::draw Sanitizer: thread (TSAN) Reproducer Testcase: https://clusterfuzz.com/download/AMIfv96qdjvQ_v8wGvA5dyeycVCWxm8hP6DxE11vTx-lsEGe_17cQqBpkusnuWAZODRgIdvVQIvuoy-vUt-0cbzNHbqTt9_vUl1AjTkhHX4kBJWDBLwIImv4sJFB2vHVvWvuiigpmO_MvVeYAvJeNyXaK2pcyjedHPFjWi5HT9O1H2ygbtVsPUoTtVByQDZAz4Glo9NH16vTy_37nndKyGMluLswxd92jgLaBrWSbPSBwxgtb6Mx8qNHliJF72viF5RD8a-y32c4uiOg2Tg-9_1Ufrsvmf8X5dEm-7AIR4lc5Vanl8Zv3bu13jgqvG6j_BNKRwWk3ugDQaMRS05SEC5dleoaQ9_ArgokFTiWfJIK6WpgD7bJtv4?testcase_id=5208893753131008 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Apr 12 2017
This looks very similar to Issue 710753 . In both these cases the race is presumably happening in SwiftShader's custom exponential back-off mutex lock implementation. It has proven to be robust for many years, so my knee-jerk reaction is that this is a false positive. I'll familiarize myself more with TSAN before I make that conclusion, or fix things if there's an actual data race.
,
Apr 13 2017
Race happens in BackoffLock::isLocked(), same as Issue 710753 but called from a different location / different lock object.
,
May 27 2017
ClusterFuzz has detected this issue as fixed in range 475030:475039. Detailed report: https://clusterfuzz.com/testcase?key=5208893753131008 Fuzzer: inferno_layout_test_unmodified Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race WRITE 4 Crash Address: 0x7fc828db1058 Crash State: sw::Renderer::initializeThreads sw::Renderer::updateConfiguration sw::Renderer::draw Sanitizer: thread (TSAN) Fixed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=475030:475039 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5208893753131008 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by msrchandra@chromium.org
, Apr 12 2017Components: Internals>GPU>SwiftShader
Labels: Test-Predator-Correct-CLs M-58
Owner: capn@chromium.org
Status: Assigned (was: Untriaged)