First, thanks to Mark Gordon for releasing the RC6 for Linux!

I tried to render several sample scenes and I saw that RC6 crashes
when rendering allpatterns and allnormals from the portfolio
directory.  I also saw the old problems with media1.pov and
media2.pov, but these were already reported by Christoph Hormann.

I have included the stack traces for the two crashes below.  Although
the call stack is different, both of them occur in __libc_free().
This usually means that the malloc arena has been corrupted earlier by
another (possibly unrelated) part of the code or that the same pointer
has been freed twice.  The culprit can probably be detected easily by
using a tool such as Purify or (not so easily) by careful inspection
of the code.

When rendering allpatterns.pov, the crash occurs just before rendering
the first frame.  When rendering allnormals.pov, the first frame is
rendered correctly but the crash occurs before rendering the second
frame.



-----------------------------------------------------------------------------
~/povbeta/povray35/scenes/portfolio > gdb povray
[...]
(gdb) set args allpatterns.ini
(gdb) run
Starting program: /usr/local/bin/povray allpatterns.ini
This is a TIME LIMITED BETA TEST version.
Distribution in any form is EXPRESSLY PROHIBITED!
This copy expires in 17 day(s).

Persistence of Vision(tm) Ray Tracer Version 3.5.beta.RC6 Unix (.Linux.gcc)
[...]

Parsing.........
Generated the file: allpatterns1.html..
Generated the file: allpatterns2.html.
Generated the file: allpatterns3.html..
Generated the file: allpatterns4.html..
Generated the file: allpatterns5.html.
Generated the file: allpatterns6.html.

Program received signal SIGSEGV, Segmentation fault.
0x81bdb7e in chunk_free (ar_ptr=0x82aa180, p=0x82f6c70) at malloc.c:3228

(gdb) where
#0  0x81bdb7e in chunk_free (ar_ptr=0x82aa180, p=0x82f6c70) at malloc.c:3228
#1  0x81c02d1 in __libc_free (mem=0x82f6c78) at malloc.c:3154
#2  0x805d660 in FNCode_Delete (f=0xbffff0b0) at fncode.cpp:457
#3  0x80654e0 in POVFPU_RemoveFunction (fn=0) at fnpovfpu.cpp:1090
#4  0x806c55a in Destroy_Function (Function=0x82f03d8) at function.cpp:107
#5  0x80abf47 in Destroy_TPat_Fields (Tpat=0x82f63a0) at pattern.cpp:425
#6  0x80b49f7 in Destroy_Pigment (Pigment=0x82f63a0) at pigment.cpp:279
#7  0x80a0cb1 in Destroy_Ident_Data (Data=0x82f63a0, Type=200)
    at parse.cpp:8149
#8  0x80e3b72 in Destroy_Entry (Index=1, Entry=0x82f6368) at tokenize.cpp:3337
#9  0x80e3a84 in Destroy_Table (index=1) at tokenize.cpp:3291
#10 0x80e1613 in Terminate_Tokenizer () at tokenize.cpp:926
#11 0x809420e in Parse () at parse.cpp:304
#12 0x80c3d53 in FrameRender () at povray.cpp:876
#13 0x80c3bfa in FrameLoop () at povray.cpp:786
#14 0x80c3a6c in povray_render (argc=2, argv=0x82e1d48) at povray.cpp:497
#15 0x80c37e3 in main (argc=2, argv=0xbffff7ec) at povray.cpp:286
#16 0x81a1f22 in __libc_start_main (main=0x80c36c4 <main>, argc=2, 
    ubp_av=0xbffff7ec, init=0x80480b4 <_init>, fini=0x81f5a00 <_fini>, 
    rtld_fini=0, stack_end=0xbffff7dc) at ../sysdeps/generic/libc-start.c:129

-----------------------------------------------------------------------------

(gdb) set args allnormals.ini
(gdb) run
Starting program: /usr/local/bin/povray allnormals.ini
This is a TIME LIMITED BETA TEST version.
Distribution in any form is EXPRESSLY PROHIBITED!
This copy expires in 17 day(s).

Persistence of Vision(tm) Ray Tracer Version 3.5.beta.RC6 Unix (.Linux.gcc)
[...]

  Parsing.........
Generated the file: allnormals1.html..
Generated the file: allnormals2.html..
Generated the file: allnormals3.html..
Generated the file: allnormals4.html.
Generated the file: allnormals5.html..
Generated the file: allnormals6.html

Creating bounding slabs.
Scene contains 1 frame level objects; 0 infinite.

Displaying...
Using 24 bit TrueColor visual...
 00:00:00 so far, Rendering frame 1, going to 33.
  0:00:14 Rendering line  200 of  200 supersampled 0 times.         
Program received signal SIGSEGV, Segmentation fault.
0x81bdb7e in chunk_free (ar_ptr=0x82aa180, p=0x82f7598) at malloc.c:3228
(gdb) where
#0  0x81bdb7e in chunk_free (ar_ptr=0x82aa180, p=0x82f7598) at malloc.c:3228
#1  0x81c02d1 in __libc_free (mem=0x82f75a0) at malloc.c:3154
#2  0x805d660 in FNCode_Delete (f=0x82f6f70) at fncode.cpp:457
#3  0x8064e96 in POVFPU_Reset () at fnpovfpu.cpp:635
#4  0x8064d53 in POVFPU_Terminate () at fnpovfpu.cpp:571
#5  0x80c4377 in FrameRender () at povray.cpp:1119
#6  0x80c3bfa in FrameLoop () at povray.cpp:786
#7  0x80c3a6c in povray_render (argc=2, argv=0x82e1d48) at povray.cpp:497
#8  0x80c37e3 in main (argc=2, argv=0xbffff7ec) at povray.cpp:286
#9  0x81a1f22 in __libc_start_main (main=0x80c36c4 <main>, argc=2, 
    ubp_av=0xbffff7ec, init=0x80480b4 <_init>, fini=0x81f5a00 <_fini>, 
    rtld_fini=0, stack_end=0xbffff7dc) at ../sysdeps/generic/libc-start.c:129

Post a reply to this message