Live wallpaper crashing on ICS -panda

[vishal]

live wallpaper "WATER", "magic smoke" all crash on https://android-build.linaro.org/builds/~linaro-android/landing-panda-11.12-release/#build=3 . It appears to be crashing in renderscripts.

Here is the logs from the crash

V/RenderScript( 988): 0x1de368 rsContextCreateGL ret
V/ScriptC ( 988): Create script for resource = fall
I/bcc ( 988): LIBBCC build time: 2011/12/19 08:08:25
I/bcc ( 988): LIBBCC build revision: df1bc78e24cf2b6a71f2b3809ffb46521e5521a8 (git)
D/StopWatch( 988): StopWatch calcFileSHA1 time (us): 14495
D/StopWatch( 988): StopWatch calcFileSHA1 time (us): 1525
W/bcc ( 988): Unable to open /data/data/com.android.wallpaper/cache/fall.o in read mode. (reason: No such file or directory)
F/libc ( 988): Fatal signal 11 (SIGSEGV) at 0xda8e09f0 (code=1)
I/DEBUG ( 89): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG ( 89): Build fingerprint: 'pandaboard/pandaboard/pandaboard:4.0.1/ITL41F/3:eng/test-keys'
I/DEBUG ( 89): pid: 988, tid: 1001 >>> com.android.wallpaper <<<
I/DEBUG ( 89): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr da8e09f0
I/DEBUG ( 89): r0 002e39e0 r1 00241eb0 r2 00000001 r3 00251eb0
I/DEBUG ( 89): r4 00000014 r5 002e39e0 r6 00000001 r7 00000001
I/DEBUG ( 89): r8 0023afe0 r9 00000000 10 00302774 fp 0032bb10
I/DEBUG ( 89): ip 0031fd90 sp 5b4d2290 lr 5b4d1d68 pc 599921aa cpsr 00000030
I/DEBUG ( 89): d0 00000000000000d0 d1 00000000ffffff38
I/DEBUG ( 89): d2 000000000000002e d3 ffffffffffffff00
I/DEBUG ( 89): d4 0000000000000150 d5 0000000000000150
I/DEBUG ( 89): d6 ffffffffffffffff d7 ffffffffffffffff
I/DEBUG ( 89): d8 0000003f333f2f2a d9 0000000000000000
I/DEBUG ( 89): d10 0000000000000000 d11 0000000000000000
I/DEBUG ( 89): d12 0000000000000000 d13 0000000000000000
I/DEBUG ( 89): d14 0000000000000000 d15 0000000000000000
I/DEBUG ( 89): d16 000000000000000e d17 000000000000000e
I/DEBUG ( 89): d18 0000000000000000 d19 0000000000000000
I/DEBUG ( 89): d20 0000000000000084 d21 ffffffffffffffff
I/DEBUG ( 89): d22 8000000000000000 d23 7fffffffffffffff
I/DEBUG ( 89): d24 00000000ffffffff d25 0000000000000000
I/DEBUG ( 89): d26 0000000000000000 d27 0000000000000000
I/DEBUG ( 89): d28 0000000000000003 d29 0000000000200000
I/DEBUG ( 89): d30 0000000000400000 d31 0000000000400000
I/DEBUG ( 89): scr 80000012
I/DEBUG ( 89):
I/DEBUG ( 89): #00 pc 0014d1aa /system/lib/libbcc.so
I/DEBUG ( 89): #01 pc 0014bf38 /system/lib/libbcc.so
I/DEBUG ( 89): #02 pc 0019f2bc /system/lib/libbcc.so
I/DEBUG ( 89): #03 pc 00116eae /system/lib/libbcc.so
I/DEBUG ( 89): #04 pc 0011827e /system/lib/libbcc.so
I/DEBUG ( 89): #05 pc 0011872a /system/lib/libbcc.so
I/DEBUG ( 89): #06 pc 00179698 /system/lib/libbcc.so
I/DEBUG ( 89): #07 pc 002f4020 /system/lib/libbcc.so
I/DEBUG ( 89): #08 pc 002f409c /system/lib/libbcc.so
I/DEBUG ( 89): #09 pc 002f3d14 /system/lib/libbcc.so
I/DEBUG ( 89): #10 pc 002f3dfa /system/lib/libbcc.so
I/DEBUG ( 89): #11 pc 0002093e /system/lib/libbcc.so
I/DEBUG ( 89): #12 pc 00021260 /system/lib/libbcc.so
I/DEBUG ( 89): #13 pc 00022b60 /system/lib/libbcc.so
I/DEBUG ( 89): #14 pc 000232b8 /system/lib/libbcc.so
I/DEBUG ( 89): #15 pc 0001fdc6 /system/lib/libbcc.so (bccPrepareExecutable)
I/DEBUG ( 89): #16 pc 0002b7a4 /system/lib/libRS.so (_Z13rsdScriptInitPKN7android12renderscript7ContextEPNS0_7ScriptCEPKcS7_PKhjj)
I/DEBUG ( 89): #17 pc 00028ef0 /system/lib/libRS.so (_ZN7android12renderscript7ScriptC11runCompilerEPNS0_7ContextEPKcS5_PKhj)
I/DEBUG ( 89): #18 pc 000291aa /system/lib/libRS.so (_ZN7android12renderscript17rsi_ScriptCCreateEPNS0_7ContextEPKcjS4_jS4_j)
I/DEBUG ( 89): #19 pc 00032dda /system/lib/libRS.so (_ZN7android12renderscript17rsp_ScriptCCreateEPNS0_7ContextEPKvj)
I/DEBUG ( 89): #20 pc 0002a100 /system/lib/libRS.so (_ZN7android12renderscript8ThreadIO16playCoreCommandsEPNS0_7ContextEby)
I/DEBUG ( 89):
I/DEBUG ( 89): code around pc:
I/DEBUG ( 89): 59992188 f8d820c8 9906302c 3b02fb00 d0da4559
I/DEBUG ( 89): 59992198 270169ab e004f8da f8d84628 4632c014
I/DEBUG ( 89): 599921a8 f8539904 9711a03e f8d84663 f1da7010
I/DEBUG ( 89): 599921b8 f8cd0a01 bf389040 0a00f04f af109700
I/DEBUG ( 89): 599921c8 af119701 f7ff9702 9f11fb9b bfb22f00
I/DEBUG ( 89):
I/DEBUG ( 89): code around lr:
I/DEBUG ( 89): 5b4d1d48 00000000 00001000 0000a000 b0003358
I/DEBUG ( 89): 5b4d1d58 00000001 00000000 0000000a 0000000a
I/DEBUG ( 89): 5b4d1d68 00000000 00000001 00000000 5b4d1e43
I/DEBUG ( 89): 5b4d1d78 00000000 00000001 00000000 b00019d0
I/DEBUG ( 89): 5b4d1d88 00000000 5b4d1e24 5b4d1e24 0000000a
I/DEBUG ( 89):
I/DEBUG ( 89): stack:
I/DEBUG ( 89): 5b4d2250 0023afe0
I/DEBUG ( 89): 5b4d2254 59891c21 /system/lib/libbcc.so
I/DEBUG ( 89): 5b4d2258 59bd7518
I/DEBUG ( 89): 5b4d225c 0023afe0
I/DEBUG ( 89): 5b4d2260 00000000
I/DEBUG ( 89): 5b4d2264 0032bbd8
I/DEBUG ( 89): 5b4d2268 00000000
I/DEBUG ( 89): 5b4d226c 00000001
I/DEBUG ( 89): 5b4d2270 00241eb0
I/DEBUG ( 89): 5b4d2274 00000000
I/DEBUG ( 89): 5b4d2278 598711f9 /system/lib/libbcc.so
I/DEBUG ( 89): 5b4d227c 00000000
I/DEBUG ( 89): 5b4d2280 59991ad5 /system/lib/libbcc.so

[Abhishek Paliwal (abhishek-paliwal)]

Observed on https://android-build.linaro.org/builds/~linaro-android/staging-panda/#build=171 as well

[Abhishek Paliwal (abhishek-paliwal)]

Also observed on landing-snowball :
https://android-build.linaro.org/builds/~linaro-android/landing-snowball/#build=110

[Bernhard Rosenkraenzer (berolinux)]

Assigning to me because it seems related to the strict-aliasing changes

[vishal (vishalbhoj)]

Here is some more debug info

./android-toolchain-eabi/bin/arm-linux-androideabi-addr2line -C -f -e out/target/product/pandaboard/symbols/system/lib/libbcc.so 0018e562
llvm::ScheduleDAGSDNodes::AddSchedEdges()
/mnt/work/ICS/ICS/external/llvm/include/llvm/CodeGen/SelectionDAGNodes.h:590
vishal@ubuntu:/mnt/work/ICS/ICS$ cd /mnt/work/ICS/ICS/external/llvm/include/llvm/CodeGen/
vishal@ubuntu:/mnt/work/ICS/ICS/external/llvm/include/llvm/CodeGen$ git log SelectionDAGNodes.h

[Bernhard Rosenkraenzer (berolinux)]

The problem turns out to be unrelated to strict-aliasing changes after all.

libbcc compiled with 4.6 -> breaks
libbcc compiled with 4.4 -> works

12.02 -> 12.03 because this is more complicated to debug/fix than it first seemed.

[mickael guene (mickael-guene)]

 Hi all this bug is due to compiler bug that generate wrong code for :
bool CheckComplexPattern(SDNode *Root, SDNode *Parent, SDValue N, unsigned PatternNo, SmallVectorImpl<std::pair<SDValue, SDNode*> > &Result)
when this function call :
SelectAddrModeImm12(N, Result[NextRes+0].first, Result[NextRes+1].first);

 To fix it you need patch from here :
http://gcc.gnu.org/ml/gcc-patches/2011-11/msg02413.html
 But also patch from here :
http://old.nabble.com/-PATCH--Fix-sibcall-argument-overlap-checking-if-pretend_args_size-(PR-target-52129)-td33271254.html

 It seems that both have been integrated in development version of 2.6 and 2.7 linaro series and should be fix in next delivery.

[Zach Pfeffer (pfefferz)]

Would you retest.

[Abhishek Paliwal (abhishek-paliwal)]

Fixed in :
https://android-build.linaro.org/builds/~linaro-android/panda-ics-gcc46-omapzoom-stable-blob-12.03-release/#build=1

Able to change live wallpapers

[Zach Pfeffer (pfefferz)]

Released in 12.03.