Skip to content

[Bug]: iHD driver new-delete-type-mismatch issue #2006

@shinnits

Description

@shinnits

Which component impacted?

Decode

Is it regression? Good in old configuration?

None

What happened?

  1. When an application using VA-API, running VP9 HW decoding and is built with ASan, it reports there is new-delete-typ-mismatch issue as follows.
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from VideoDecoderTest
[ RUN      ] VideoDecoderTest.FlushAtEndOfStream
INFO video_decode_accelerator_tests[21021:21023]: [media/gpu/chromeos/video_decoder_pipeline.cc:750] VideoDecoderPipeline |decoder_| Initialize() successful
=================================================================
==21021==ERROR: AddressSanitizer: new-delete-type-mismatch on 0x753159effbc0 in thread T2 (ThreadPoolForeg):
  object passed to delete has wrong type:
  size of the allocated type:   352 bytes;
  size of the deallocated type: 328 bytes.
==21021==WARNING: invalid path to external symbolizer!
==21021==WARNING: Failed to use and restart external symbolizer!
    #0 0x5d2c14415a32  (/usr/local/video_decode_accelerator_tests+0x27f0a32) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #1 0x74015788d1a3  (/usr/lib64/va/drivers/iHD_drv_video.so+0x128d1a3) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #2 0x74015788d0ed  (/usr/lib64/va/drivers/iHD_drv_video.so+0x128d0ed) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #3 0x7401577febe0  (/usr/lib64/va/drivers/iHD_drv_video.so+0x11febe0) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #4 0x7401577f7db0  (/usr/lib64/va/drivers/iHD_drv_video.so+0x11f7db0) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #5 0x7401575d596c  (/usr/lib64/va/drivers/iHD_drv_video.so+0xfd596c) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #6 0x74015747f7b3  (/usr/lib64/va/drivers/iHD_drv_video.so+0xe7f7b3) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #7 0x74015747cb60  (/usr/lib64/va/drivers/iHD_drv_video.so+0xe7cb60) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #8 0x740157472a0f  (/usr/lib64/va/drivers/iHD_drv_video.so+0xe72a0f) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #9 0x7401581973f9  (/usr/lib64/libva.so.2+0x133f9) (BuildId: 989ec81679db36aeb91407f0f9b43d5ed1b1ee63)
    #10 0x5d2c174a2030  (/usr/local/video_decode_accelerator_tests+0x587d030) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #11 0x5d2c173ea0c8  (/usr/local/video_decode_accelerator_tests+0x57c50c8) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #12 0x5d2c173eaba1  (/usr/local/video_decode_accelerator_tests+0x57c5ba1) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #13 0x5d2c1775ca68  (/usr/local/video_decode_accelerator_tests+0x5b37a68) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #14 0x5d2c1775d115  (/usr/local/video_decode_accelerator_tests+0x5b38115) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #15 0x5d2c1721846a  (/usr/local/video_decode_accelerator_tests+0x55f346a) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #16 0x5d2c1c0e8379  (/usr/local/video_decode_accelerator_tests+0xa4c3379) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #17 0x5d2c1c0e4761  (/usr/local/video_decode_accelerator_tests+0xa4bf761) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #18 0x5d2c1c0f3f8c  (/usr/local/video_decode_accelerator_tests+0xa4cef8c) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #19 0x5d2c177dbc31  (/usr/local/video_decode_accelerator_tests+0x5bb6c31) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #20 0x5d2c1c545731  (/usr/local/video_decode_accelerator_tests+0xa920731) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #21 0x5d2c1c544999  (/usr/local/video_decode_accelerator_tests+0xa91f999) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #22 0x5d2c17a18d84  (/usr/local/video_decode_accelerator_tests+0x5df3d84) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #23 0x5d2c17a187e7  (/usr/local/video_decode_accelerator_tests+0x5df37e7) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #24 0x5d2c17a7017c  (/usr/local/video_decode_accelerator_tests+0x5e4b17c) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #25 0x5d2c1455ac26  (/usr/local/video_decode_accelerator_tests+0x2935c26) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)

0x753159effbc0 is located 0 bytes inside of 352-byte region [0x753159effbc0,0x753159effd20)
allocated by thread T2 (ThreadPoolForeg) here:
    #0 0x5d2c14593d5d  (/usr/local/video_decode_accelerator_tests+0x296ed5d) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #1 0x74015788d462  (/usr/lib64/va/drivers/iHD_drv_video.so+0x128d462) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #2 0x7401577fed29  (/usr/lib64/va/drivers/iHD_drv_video.so+0x11fed29) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #3 0x740157844585  (/usr/lib64/va/drivers/iHD_drv_video.so+0x1244585) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #4 0x74015784440e  (/usr/lib64/va/drivers/iHD_drv_video.so+0x124440e) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #5 0x740157844253  (/usr/lib64/va/drivers/iHD_drv_video.so+0x1244253) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #6 0x740157888b85  (/usr/lib64/va/drivers/iHD_drv_video.so+0x1288b85) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #7 0x7401577f7ee6  (/usr/lib64/va/drivers/iHD_drv_video.so+0x11f7ee6) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #8 0x740157849f71  (/usr/lib64/va/drivers/iHD_drv_video.so+0x1249f71) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #9 0x74015784b838  (/usr/lib64/va/drivers/iHD_drv_video.so+0x124b838) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #10 0x740157480596  (/usr/lib64/va/drivers/iHD_drv_video.so+0xe80596) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #11 0x74015747d2bf  (/usr/lib64/va/drivers/iHD_drv_video.so+0xe7d2bf) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #12 0x740157473fba  (/usr/lib64/va/drivers/iHD_drv_video.so+0xe73fba) (BuildId: da645dd8c86937b55da0b5cb2b161dbc808f1b69)
    #13 0x7401581981e2  (/usr/lib64/libva.so.2+0x141e2) (BuildId: 989ec81679db36aeb91407f0f9b43d5ed1b1ee63)
    #14 0x5d2c1749887d  (/usr/local/video_decode_accelerator_tests+0x587387d) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #15 0x5d2c174990cd  (/usr/local/video_decode_accelerator_tests+0x58740cd) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #16 0x5d2c17449639  (/usr/local/video_decode_accelerator_tests+0x5824639) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #17 0x5d2c17365a70  (/usr/local/video_decode_accelerator_tests+0x5740a70) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #18 0x5d2c173643f6  (/usr/local/video_decode_accelerator_tests+0x573f3f6) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #19 0x5d2c173f07c0  (/usr/local/video_decode_accelerator_tests+0x57cb7c0) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #20 0x5d2c174000ab  (/usr/local/video_decode_accelerator_tests+0x57db0ab) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #21 0x5d2c1c0e8379  (/usr/local/video_decode_accelerator_tests+0xa4c3379) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #22 0x5d2c1c0e4761  (/usr/local/video_decode_accelerator_tests+0xa4bf761) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #23 0x5d2c1c0f3f8c  (/usr/local/video_decode_accelerator_tests+0xa4cef8c) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #24 0x5d2c177dbc31  (/usr/local/video_decode_accelerator_tests+0x5bb6c31) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #25 0x5d2c1c545731  (/usr/local/video_decode_accelerator_tests+0xa920731) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #26 0x5d2c1c544999  (/usr/local/video_decode_accelerator_tests+0xa91f999) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #27 0x5d2c17a18d84  (/usr/local/video_decode_accelerator_tests+0x5df3d84) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #28 0x5d2c17a187e7  (/usr/local/video_decode_accelerator_tests+0x5df37e7) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #29 0x5d2c17a7017c  (/usr/local/video_decode_accelerator_tests+0x5e4b17c) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)

Thread T2 (ThreadPoolForeg) created by T0 here:
    #0 0x5d2c14540d81  (/usr/local/video_decode_accelerator_tests+0x291bd81) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #1 0x5d2c17a6f76f  (/usr/local/video_decode_accelerator_tests+0x5e4a76f) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #2 0x5d2c17a176e7  (/usr/local/video_decode_accelerator_tests+0x5df26e7) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #3 0x5d2c1c18d580  (/usr/local/video_decode_accelerator_tests+0xa568580) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #4 0x5d2c179dd3a4  (/usr/local/video_decode_accelerator_tests+0x5db83a4) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #5 0x5d2c179dcdc6  (/usr/local/video_decode_accelerator_tests+0x5db7dc6) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #6 0x5d2c179bbfe6  (/usr/local/video_decode_accelerator_tests+0x5d96fe6) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #7 0x5d2c177d7af8  (/usr/local/video_decode_accelerator_tests+0x5bb2af8) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #8 0x5d2c177d6cb3  (/usr/local/video_decode_accelerator_tests+0x5bb1cb3) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #9 0x5d2c1459870d  (/usr/local/video_decode_accelerator_tests+0x297370d) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #10 0x5d2c145985c5  (/usr/local/video_decode_accelerator_tests+0x29735c5) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #11 0x5d2c14597057  (/usr/local/video_decode_accelerator_tests+0x2972057) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #12 0x5d2c177e40b7  (/usr/local/video_decode_accelerator_tests+0x5bbf0b7) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #13 0x5d2c145a7eef  (/usr/local/video_decode_accelerator_tests+0x2982eef) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #14 0x5d2c14e45a71  (/usr/local/video_decode_accelerator_tests+0x3220a71) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #15 0x5d2c177f1109  (/usr/local/video_decode_accelerator_tests+0x5bcc109) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #16 0x5d2c177f0b3d  (/usr/local/video_decode_accelerator_tests+0x5bcbb3d) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #17 0x5d2c145a43d8  (/usr/local/video_decode_accelerator_tests+0x297f3d8) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #18 0x78015acd8f09  (/lib64/libc.so.6+0x24f09) (BuildId: 39374cab42d753f715f17ff0d9b0a3a58b9d835d)
    #19 0x78015acd8fc5  (/lib64/libc.so.6+0x24fc5) (BuildId: 39374cab42d753f715f17ff0d9b0a3a58b9d835d)
    #20 0x5d2c144c73f4  (/usr/local/video_decode_accelerator_tests+0x28a23f4) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)

SUMMARY: AddressSanitizer: new-delete-type-mismatch (/usr/local/video_decode_accelerator_tests+0x27f0a32) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a) 
==21021==HINT: if you don't care about these errors you may set ASAN_OPTIONS=new_delete_type_mismatch=0

==21021==ADDITIONAL INFO

==21021==Note: Please include this section with the ASan report.
Task trace:
    #0 0x5d2c1775d3ba  (/usr/local/video_decode_accelerator_tests+0x5b383ba) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)
    #1 0x5d2c177c189f  (/usr/local/video_decode_accelerator_tests+0x5b9c89f) (BuildId: a7cd763de01b3f8d75a54678e7ec946b0d1e562a)


==21021==END OF ADDITIONAL INFO

==21021==ABORTING

What's the usage scenario when you are seeing the problem?

Others

What impacted?

The crash can be reproduced on MTL platform mainly. But it might affect other platform as well since driver is universal across these platforms.

Debug Information

1.vainfo

Trying display: drm
libva info: VA-API version 1.22.0
libva info: Trying to open /usr/lib64/va/drivers/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_22
libva info: va_openDriver() returns 0
vainfo: VA-API version: 1.22 (libva 2.22.0)
vainfo: Driver version: Intel iHD driver for Intel(R) Gen Graphics - 24.4.4 (7127f0232)
vainfo: Supported profile and entrypoints
  1. Some instruments done from customer side and my side -

Allocation

Deallocation

And get the result that
=> It was allocated as 352 bytes, but it was freed as 328 bytes. Allocated as a MOS_BUFFER and freed as a MOS_RESOURCE.

Do you want to contribute a patch to fix the issue?

None

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions