BUS_ADRALN - Invalid address alignment error

[KGS]

While running firefox on IPF , I see the following error.

Program received signal SIGBUS, Bus error
si_code: 1 - BUS_ADRALN - Invalid address alignment. Please refer to the following link that helps in handling unaligned data: http://docs.hp.com/en/7730/newhelp0610/pragmas.htm#pragma-pack-ex3.
0x200000006cfae3a0:0 in _moz_pixman_transform_point_3d () at pixman-utils.c:49
49 v += partial >> 16;
Current language: auto; currently c


Code :

36 {
37 pixman_vector_t result;
38 int i, j;
39 pixman_fixed_32_32_t partial;
40 pixman_fixed_48_16_t v;
41
42 for (j = 0; j < 3; j++)
43 {
44 v = 0;
45 for (i = 0; i < 3; i++)
46 {
47 partial = ((pixman_fixed_48_16_t) transform->matrix[j][i] *
48 (pixman_fixed_48_16_t) vector->vector[i]);
49 v += partial >> 16;
50 }
51
52 if (v > pixman_max_fixed_48_16 || v < pixman_min_fixed_48_16)
53 return FALSE;
54
55 result.vector[j] = (pixman_fixed_48_16_t) v;
56 }
57

THe above code works fine on PA. I see the issue only on IPF .
aCC version : aCC: HP C/aC++ B3910B A.06.20 [May 13 2008]


Any idea ?

[smatador]

Hi,
First search on itrc, perhaps this thread help you
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1327992

[Dennis Handly]

Do you have misaligned data?
What are the hardware types of v & partial?

What does this give:
(gdb) bt
(gdb) info reg
(gdb) disas $pc-16*8 $pc+16*4

[KGS]

Details form gdb attached :
(gdb) bt
#0 0x200000006cfae3a0:0 in _moz_pixman_transform_point_3d ()
at pixman-utils.c:49
#1 0x200000006cfe92c0:0 in fbFetchTransformed () at pixman-transformed.c:587
#2 0x200000006cfe7b00:0 in pixman_composite_rect_general_no_accessors ()
at pixman-compose.c:384
#3 0x200000006cfb0310:0 in pixman_composite_rect_general ()
at pixman-compose.c:472
#4 0x200000006869cc60:0 in pixman_image_composite_rect ()
at pixman-pict.c:1297
#5 0x200000006869c9e0:0 in pixman_walk_composite_region ()
at pixman-pict.c:1247
#6 0x200000006869d700:0 in pixman_image_composite () at pixman-pict.c:1893
#7 0x2000000069d668d0:0 in _cairo_image_surface_composite_trapezoids (
op=CAIRO_OPERATOR_OVER, pattern=0x40755ba0, abstract_dst=0x4081feb0,
antialias=CAIRO_ANTIALIAS_DEFAULT, src_x=376, src_y=69, dst_x=0, dst_y=0,
width=144, height=18, traps=0x40a23aa0, num_traps=164)
at cairo-image-surface.c:1189
#8 0x2000000069db0360:0 in _cairo_surface_composite_trapezoids (
op=CAIRO_OPERATOR_OVER, pattern=0x40755ba0, dst=0x4081feb0,
antialias=CAIRO_ANTIALIAS_DEFAULT, src_x=376, src_y=69, dst_x=0, dst_y=0,
width=144, height=18, traps=0x40a23aa0, num_traps=164)
at cairo-surface.c:1724
#9 0x2000000069db8160:0 in _cairo_surface_fallback_composite_trapezoids (
op=CAIRO_OPERATOR_OVER, pattern=0x40755ba0, dst=0x400aef00,
antialias=CAIRO_ANTIALIAS_DEFAULT, src_x=376, src_y=69, dst_x=376,
dst_y=69, width=144, height=18, traps=0x40a23aa0, num_traps=164)
at cairo-surface-fallback.c:1238
#10 0x2000000069db0420:0 in _cairo_surface_composite_trapezoids (
op=CAIRO_OPERATOR_OVER, pattern=0x40755ba0, dst=0x400aef00,
antialias=CAIRO_ANTIALIAS_DEFAULT, src_x=376, src_y=69, dst_x=376,
dst_y=69, width=144, height=18, traps=0x40a1e9e0, num_traps=164)
at cairo-surface.c:1735
#11 0x2000000069db4ea0:0 in _composite_traps_draw_func (closure=0x7fffc460,
op=CAIRO_OPERATOR_OVER, src=0x40755ba0, dst=0x400aef00, dst_x=0, dst_y=0,
extents=0x7fffc470) at cairo-surface-fallback.c:501
#12 0x2000000069db4730:0 in _clip_and_composite (clip=0x4078d6c0,
op=CAIRO_OPERATOR_OVER, src=0x40755ba0, draw_func=0x69cfcdf0,
draw_closure=0x7fffc460, dst=0x400aef00, extents=0x7fffc470)
at cairo-surface-fallback.c:395
#13 0x2000000069db57b0:0 in _clip_and_composite_trapezoids (src=0x40755ba0,
op=CAIRO_OPERATOR_OVER, dst=0x400aef00, traps=0x7fffc510, clip=0x4078d6c0,
antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:660
#14 0x2000000069db64b0:0 in _cairo_surface_fallback_stroke (
surface=0x400aef00, op=CAIRO_OPERATOR_OVER, source=0x40755ba0,
path=0x4078d7a4, stroke_style=0x4078d648, ctm=0x7fffc5e0,
ctm_inverse=0x7fffc610, tolerance=0.10000000000000001,
antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:839
#15 0x2000000069daff40:0 in _cairo_surface_stroke (surface=0x400aef00,
op=CAIRO_OPERATOR_OVER, source=0x7fffc8a0, path=0x4078d7a4,
stroke_style=0x4078d648, ctm=0x4078d708, ctm_inverse=0x4078d738,
tolerance=0.10000000000000001, antialias=CAIRO_ANTIALIAS_DEFAULT)
at cairo-surface.c:1641
#16 0x2000000069d5e790:0 in _cairo_gstate_stroke (gstate=0x4078d630,
path=0x4078d7a4) at cairo-gstate.c:941
#17 0x2000000069d4cb60:0 in cairo_stroke_preserve (cr=0x4078d610)
at cairo.c:2115
#18 0x2000000069d4cab0:0 in cairo_stroke (cr=0x4078d610) at cairo.c:2088
#19 0x200000006aa44090:0 in gtk_default_draw_focus () at gtkstyle.c:4604
#20 0x200000006aa54be0:0 in gtk_paint_focus () at gtkstyle.c:6235
#21 0x200000006d1769f0:0 in moz_gtk_button_paint () at gtk2drawing.c:836
#22 0x200000006d171cd0:0 in moz_gtk_widget_paint () at gtk2drawing.c:2967
#23 0x200000006d1cc370:0 in ThemeRenderer::NativeDraw ()
at nsNativeThemeGTK.cpp:682
#24 0x200000006d1d1690:0 in NativeRendering (closure=,
screen=, drawable=, visual=,
offset_x=, offset_y=,
rectangles=, num_rects=)
at gfxXlibNativeRenderer.cpp:137
#25 0x200000006d1cda30:0 in _draw_with_xlib_direct () at cairo-xlib-utils.c:317
#26 0x200000006d1ccc00:0 in cairo_draw_with_xlib () at cairo-xlib-utils.c:542
#27 0x200000006d1cc890:0 in gfxXlibNativeRenderer::Draw (this=,
dpy=, ctx=, width=,
height=, flags=, output=)
at gfxXlibNativeRenderer.cpp:180
#28 0x200000006d1cb8e0:0 in nsNativeThemeGTK::DrawWidgetBackground ()
at nsNativeThemeGTK.cpp:842
#29 0x200000006d716dd0:0 in nsCSSRendering::PaintBackgroundWithSC ()
at nsCSSRendering.cpp:3495
#30 0x200000006d716960:0 in nsCSSRendering::PaintBackground ()
at nsCSSRendering.cpp:3346
#31 0x200000006d7164b0:0 in nsDisplayBackground::Paint ()
at nsDisplayList.cpp:541
#32 0x200000006d7c6f60:0 in nsDisplayList::Paint () at nsDisplayList.cpp:296
#33 0x200000006d7c51e0:0 in nsLayoutUtils::PaintFrame ()
at nsLayoutUtils.cpp:988
#34 0x200000006dc851c0:0 in PresShell::Paint () at nsPresShell.cpp:5378
#35 0x200000006e42f7a0:0 in nsViewManager::Refresh () at nsViewManager.cpp:614
#36 0x200000006e42cd40:0 in nsViewManager::DispatchEvent ()
at nsViewManager.cpp:1133
#37 0x200000006d673e30:0 in HandleEvent () at nsView.cpp:168
#38 0x200000006d15d3b0:0 in nsCommonWidget::DispatchEvent ()
at nsCommonWidget.cpp:158
#39 0x200000006d133710:0 in nsWindow::OnExposeEvent () at nsWindow.cpp:1766
#40 0x200000006d1329a0:0 in expose_event_cb () at nsWindow.cpp:4532
#41 0x200000006a8ed880:0 in _gtk_marshal_BOOLEAN__BOXED ()
at gtkmarshalers.c:82
#42 0x2000000069793bf0:0 in g_closure_invoke () at gclosure.c:767
#43 0x20000000697d8830:0 in signal_emit_unlocked_R () at gsignal.c:3244
#44 0x20000000697dba70:0 in g_signal_emit_valist () at gsignal.c:2987
#45 0x20000000697dc0d0:0 in g_signal_emit () at gsignal.c:3034
#46 0x200000006ac151c0:0 in gtk_widget_event_internal () at gtkwidget.c:4744
#47 0x200000006ac15660:0 in gtk_widget_send_expose () at gtkwidget.c:4569
#48 0x200000006a8e48e0:0 in gtk_main_do_event () at gtkmain.c:1550
#49 0x200000006a31d500:0 in gdk_window_process_updates_internal ()
at gdkwindow.c:2598
#50 0x200000006a31cba0:0 in gdk_window_update_idle () at gdkwindow.c:2660
#51 0x200000006a2b6f10:0 in gdk_threads_dispatch () at gdk.c:473
#52 0x2000000069636c50:0 in g_idle_dispatch () at gmain.c:4235
#53 0x200000006963fa10:0 in g_main_dispatch () at gmain.c:2144
#54 0x2000000069643e60:0 in g_main_context_dispatch () at gmain.c:2697
#55 0x2000000069644f00:0 in g_main_context_iterate () at gmain.c:2778
#56 0x2000000069645aa0:0 in g_main_context_iteration () at gmain.c:2841
#57 0x200000006d25ff90:0 in nsAppShell::ProcessNextNativeEvent ()
at nsAppShell.cpp:144
#58 0x200000006d25f810:0 in nsBaseAppShell::OnProcessNextEvent ()
at nsBaseAppShell.cpp:151
#59 0x200000006cae59e0:0 in nsThread::ProcessNextEvent () at nsThread.cpp:497
#60 0x200000006cae4500:0 in NS_ProcessNextEvent_P () at nsThreadUtils.cpp:227
#61 0x200000006ebc8030:0 in nsXULWindow::ShowModal () at nsXULWindow.cpp:401
#62 0x200000006ebd8560:0 in nsContentTreeOwner::ShowAsModal ()
at nsContentTreeOwner.cpp:524
#63 0x200000006e959ad0:0 in nsWindowWatcher::OpenWindowJSInternal ()
at nsWindowWatcher.cpp:949
#64 0x200000006e9580f0:0 in nsWindowWatcher::OpenWindow ()
at nsWindowWatcher.cpp:418
#65 0x200000006e950430:0 in nsPromptService::DoDialog ()
at nsPromptService.cpp:774
#66 0x200000006e946a30:0 in nsPromptService::ConfirmEx ()
at nsPromptService.cpp:391
#67 0x200000006e321820:0 in NS_InvokeByIndex_P+0x140 ()
from /proj/client_java/mozilla/Firefox/3.0.10/IA_new/mozilla/dist/firefox/libxul.so
#68 0x200000006c955d20:0 in XPCWrappedNative::CallMethod ()
at xpcwrappednative.cpp:2392
#69 0x200000006f19e9d0:0 in XPC_WN_CallMethod ()
at xpcwrappednativejsops.cpp:1473
#70 0x200000006af547d0:0 in js_Invoke () at jsinterp.c:1302
#71 0x200000006af3a880:0 in js_Interpret () at jsinterp.c:4877
#72 0x200000006af54d90:0 in js_Invoke () at jsinterp.c:1320
#73 0x200000006c9b29a0:0 in nsXPCWrappedJSClass::CallMethod ()
at xpcwrappedjsclass.cpp:1523
#74 0x200000006c965b60:0 in nsXPCWrappedJS::CallMethod ()
at xpcwrappedjs.cpp:559
#75 0x200000006c96fe00:0 in PrepareAndDispatch () at xptcstubs_ipf32.cpp:150
#76 0x200000006c96f590:0 in SharedStub+0x110 ()
from /proj/client_java/mozilla/Firefox/3.0.10/IA_new/mozilla/dist/firefox/libxul.so
#77 0x200000006c96f410:0 in nsXPTCStubBase::Stub3 ()
at ../../../../../../dist/include/xpcom/xptcstubsdef.inc:1
#78 0x200000006f114730:0 in nsObserverList::NotifyObservers ()
at nsObserverList.cpp:128
#79 0x200000006f114460:0 in nsObserverService::NotifyObservers ()
at nsObserverService.cpp:181
#80 0x200000006f4d20b0:0 in XRE_main () at nsAppRunner.cpp:3174
#81 0x4001a10:0 in main (argc=, argv=)
at nsBrowserApp.cpp:158
(gdb) type v
Undefined command: "type". Try "help".
(gdb) info reg
pr0: 0x1
pr1: 0x1
pr2: 0x1
pr3: 0x1
pr4: 0
pr5: 0x1
pr6: 0
pr7: 0
pr8: 0x1
pr9: 0x1
pr10: 0x1
pr11: 0
pr12: 0
pr13: 0x1
pr14: 0
pr15: 0x1
pr16: 0x1
pr17: 0x1
pr18: 0
pr19: 0
pr20: 0
pr21: 0
pr22: 0
pr23: 0
pr24: 0
pr25: 0
pr26: 0
pr27: 0
pr28: 0
pr29: 0
pr30: 0
pr31: 0
pr32: 0
pr33: 0
pr34: 0
pr35: 0
pr36: 0
pr37: 0
pr38: 0
pr39: 0
pr40: 0
pr41: 0
pr42: 0
pr43: 0
pr44: 0
pr45: 0
pr46: 0
pr47: 0
pr48: 0
pr49: 0
pr50: 0
pr51: 0
pr52: 0
pr53: 0
pr54: 0
pr55: 0x1
pr56: 0x1
pr57: 0x1
pr58: 0x1
pr59: 0x1
pr60: 0x1
pr61: 0x1
pr62: 0x1
pr63: 0x1
gr0: 0
gr1: 0x200000006b411fd8
gr2: 0
gr3: 0
gr4: 0
gr5: 0xc000000000000408
gr6: 0x200000006f782980
gr7: 0x200000006f7698a0
gr8: 0
gr9: 0x12
gr10: 0xffffffff80000000
gr11: 0x7fffffff
gr12: 0x200000007fffb730
gr13: 0x2000000068478f68
gr14: 0x200000007fffb758
gr15: 0x8000
gr16: 0x8000
gr17: 0x200000006b400bc0
gr18: 0x8
gr19: 0x200000006b3fda58
gr20: 0x16
gr21: 0x20000000405d7bd4
gr22: 0x200000006b3dce84
gr23: 0x200000006b3dcd0c
gr24: 0
gr25: 0
gr26: 0
gr27: 0x200000007fffb650
gr28: 0
gr29: 0
gr30: 0x200000006869cb60
gr31: 0x710
gr32: 0x12
gr33: 0x200000007fffb750
gr34: 0
gr35: 0
gr36: 0
gr37: 0
gr38: 0
gr39: 0
br0: 0x200000006cfe92c0
br1: 0x200000006869cb60
br2: 0
br3: 0
br4: 0
br5: 0
br6: 0x200000006cfb01e0
br7: 0x200000006cfe9230
rsc: 0x1f
bsp: 0x200000006f8021b0
bspst: 0x200000006f801fe8
rnat: 0
ccv: 0
unat: 0
fpsr: 0x9804c9e74633f
pfs: 0xc000000000000614
(sor:0, sol:12, sof:20)
lc: 0
ec: 0
ip: 0x200000006cfae3a0:0
cfm: 0x8
(sor:0, sol:0, sof:8)
psr: 0x10130862e01a
(gdb)
pr0: 0x1
pr1: 0x1
pr2: 0x1
pr3: 0x1
pr4: 0
pr5: 0x1
pr6: 0
pr7: 0
pr8: 0x1
pr9: 0x1
pr10: 0x1
pr11: 0
pr12: 0
pr13: 0x1
pr14: 0
pr15: 0x1
pr16: 0x1
pr17: 0x1
pr18: 0
pr19: 0
pr20: 0
pr21: 0
pr22: 0
pr23: 0
pr24: 0
pr25: 0
pr26: 0
pr27: 0
pr28: 0
pr29: 0
pr30: 0
pr31: 0
pr32: 0
pr33: 0
pr34: 0
pr35: 0
pr36: 0
pr37: 0
pr38: 0
pr39: 0
pr40: 0
pr41: 0
pr42: 0
pr43: 0
pr44: 0
pr45: 0
pr46: 0
pr47: 0
pr48: 0
pr49: 0
pr50: 0
pr51: 0
pr52: 0
pr53: 0
pr54: 0
pr55: 0x1
pr56: 0x1
pr57: 0x1
pr58: 0x1
pr59: 0x1
pr60: 0x1
pr61: 0x1
pr62: 0x1
pr63: 0x1
gr0: 0
gr1: 0x200000006b411fd8
gr2: 0
gr3: 0
gr4: 0
gr5: 0xc000000000000408
gr6: 0x200000006f782980
gr7: 0x200000006f7698a0
gr8: 0
gr9: 0x12
gr10: 0xffffffff80000000
gr11: 0x7fffffff
gr12: 0x200000007fffb730
gr13: 0x2000000068478f68
gr14: 0x200000007fffb758
gr15: 0x8000
gr16: 0x8000
gr17: 0x200000006b400bc0
gr18: 0x8
gr19: 0x200000006b3fda58
gr20: 0x16
gr21: 0x20000000405d7bd4
gr22: 0x200000006b3dce84
gr23: 0x200000006b3dcd0c
gr24: 0
gr25: 0
gr26: 0
gr27: 0x200000007fffb650
gr28: 0
gr29: 0
gr30: 0x200000006869cb60
gr31: 0x710
gr32: 0x12
gr33: 0x200000007fffb750
gr34: 0
gr35: 0
gr36: 0
gr37: 0
gr38: 0
gr39: 0
br0: 0x200000006cfe92c0
br1: 0x200000006869cb60
br2: 0
br3: 0
br4: 0
br5: 0
br6: 0x200000006cfb01e0
br7: 0x200000006cfe9230
rsc: 0x1f
bsp: 0x200000006f8021b0
bspst: 0x200000006f801fe8
rnat: 0
ccv: 0
unat: 0
fpsr: 0x9804c9e74633f
pfs: 0xc000000000000614
(sor:0, sol:12, sof:20)
lc: 0
ec: 0
ip: 0x200000006cfae3a0:0
cfm: 0x8
(sor:0, sol:0, sof:8)
psr: 0x10130862e01a
(gdb) disas $pc-16*8 $pc+16*4
Dump of assembler code from 0x200000006cfae320:0 to 0x200000006cfae3e0:0:
;;; DOC Line Information: [Line, Column Start, Column End] [Line, Column] [Line]
;;; File: cairo-matrix.c
;;; 567 return (matrix->xx == 1.0 && matrix->yx == 0.0 &&
0x200000006cfae320:0 <_cairo_matrix_is_identity+0x160>:
ldfd f9=[r11];;
0x200000006cfae320:1 <_cairo_matrix_is_identity+0x161>:
nop.m 0x0
0x200000006cfae320:2 <_cairo_matrix_is_identity+0x162>:
nop.i 0x0
0x200000006cfae330:0 <_cairo_matrix_is_identity+0x170>:
nop.m 0x0
0x200000006cfae330:1 <_cairo_matrix_is_identity+0x171>:
(p8) fcmp.neq.unc.s0 p8=f1,f9
0x200000006cfae330:2 <_cairo_matrix_is_identity+0x172>:
br _cairo_matrix_is_identity+0x80;;
0x200000006cfae340:0 <_cairo_matrix_is_identity+0x180>:
ldfd f7=[r10]
0x200000006cfae340:1 <_cairo_matrix_is_identity+0x181>:
(p8) cmp4.ne.and p6=r0,r0;;
0x200000006cfae340:2 <_cairo_matrix_is_identity+0x182>:
nop.i 0x0
0x200000006cfae350:0 <_cairo_matrix_is_identity+0x190>:
nop.m 0x0
0x200000006cfae350:1 <_cairo_matrix_is_identity+0x191>:
(p7) fcmp.eq.unc.s0 p7,p8=f0,f7
0x200000006cfae350:2 <_cairo_matrix_is_identity+0x192>:
br _cairo_matrix_is_identity+0xd0;;
;;; File: pixman-utils.c
;;; 36 {
0x200000006cfae360:0 <_moz_pixman_transform_point_3d>:
addp4 r14=0,r33
0x200000006cfae360:1 <_moz_pixman_transform_point_3d+0x1>:
addp4 r8=4,r33
0x200000006cfae360:2 <_moz_pixman_transform_point_3d+0x2>:
addp4 r9=0,r32
0x200000006cfae370:0 <_moz_pixman_transform_point_3d+0x10>:
addp4 r20=4,r32
0x200000006cfae370:1 <_moz_pixman_transform_point_3d+0x11>:
0x200000006cfae370:2 <_moz_pixman_transform_point_3d+0x12>:
movl r11=0x7fffffff;;
0x200000006cfae380:0 <_moz_pixman_transform_point_3d+0x20>:
ld4 r16=[r14],8
0x200000006cfae380:1 <_moz_pixman_transform_point_3d+0x21>:
0x200000006cfae380:2 <_moz_pixman_transform_point_3d+0x22>:
movl r10=0xffffffff80000000
;;; 49 v += partial >> 16;
0x200000006cfae390:0 <_moz_pixman_transform_point_3d+0x30>:
ld4 r15=[r8]
0x200000006cfae390:1 <_moz_pixman_transform_point_3d+0x31>:
mov r8=0
0x200000006cfae390:2 <_moz_pixman_transform_point_3d+0x32>:
nop.i 0x0;;
0x200000006cfae3a0:0 <_moz_pixman_transform_point_3d+0x40>:
ld4 r17=[r9],8
0x200000006cfae3a0:1 <_moz_pixman_transform_point_3d+0x41>:
sxt4 r18=r16
0x200000006cfae3a0:2 <_moz_pixman_transform_point_3d+0x42>:
sxt4 r16=r15
0x200000006cfae3b0:0 <_moz_pixman_transform_point_3d+0x50>:
ld4 r15=[r20],12
0x200000006cfae3b0:1 <_moz_pixman_transform_point_3d+0x51>:
nop.m 0x0
0x200000006cfae3b0:2 <_moz_pixman_transform_point_3d+0x52>:
nop.f 0x0;;
0x200000006cfae3c0:0 <_moz_pixman_transform_point_3d+0x60>:
ld4 r19=[r14]
0x200000006cfae3c0:1 <_moz_pixman_transform_point_3d+0x61>:
ld4 r14=[r9],4
0x200000006cfae3c0:2 <_moz_pixman_transform_point_3d+0x62>:
sxt4 r17=r17
0x200000006cfae3d0:0 <_moz_pixman_transform_point_3d+0x70>:
setf.sig f13=r18
0x200000006cfae3d0:1 <_moz_pixman_transform_point_3d+0x71>:
setf.sig f12=r16
0x200000006cfae3d0:2 <_moz_pixman_transform_point_3d+0x72>:
sxt4 r15=r15;;
End of assembler dump.
(gdb) c
Continuing.

Program terminated with signal SIGBUS, Bus error.
The program no longer exists.
(gdb) quit

[Dennis Handly]

0x200000006cfae3a0:0 <_moz_pixman_transform_point_3d+0x40>:
ld4 r17=[r9],8

It is aborting here, r9 is bad, which comes from the first parm, r32:
gr9: 0x12
gr32: 0x12

So someone is passing a null pointer into this function. Along the way, 18 was added to null.

Your source fragment doesn't have the function parms. Also you aren't really aborting on line 49. You may want to drop the opt level to +O1.