[Bug 53217] New: d3d11:d3d11 - test_cube_maps() crashes in Wine

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=53217

Bug ID: 53217
           Summary: d3d11:d3d11 - test_cube_maps() crashes in Wine
           Product: Wine
           Version: unspecified
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: directx-d3d
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

d3d11:d3d11 - test_cube_maps() crashes in Wine:

$ WINETEST_REPORT_SUCCESS=1 WINETEST_NO_MT_D3D=1 ./wine
dlls/d3d11/tests/d3d11_test.exe d3d11
Unhandled exception: page fault on write access to 0x00000000 in 32-bit code
(0x70baff74).
[...]
0614:err:d3d:wined3d_debug_callback 00165DA0: "GL_OUT_OF_MEMORY in
glMapBufferRange(map failed)".
0614:err:d3d:wined3d_allocator_chunk_gl_map Failed to map chunk memory.
0614:err:d3d:wined3d_bo_gl_map Failed to map chunk.
0614:err:d3d:wined3d_context_gl_map_bo_address Failed to map bo.
Unhandled exception: page fault on write access to 0x00000000 in 32-bit code
(0x70baff74).
[...]
Backtrace:
=>0 0x70baff74 memset+0x24(dst=0x000000000, c=0, n=0x4b0000)
[Z:\home\winetest\tools\testbot\var\wine\dlls\msvcrt\string.c:3150] in ucrtbase
(0x020ef908)
  1 0x715283e3 wined3d_texture_load_location+0x423(texture=0016C8C0,
sub_resource_idx=0, context=0016D920, location=0x8)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\texture.c:853] in wined3d
(0x020ef9a8)
  2 0x715173ae surface_cpu_blt+0x9ee(dst_texture=0016C8C0,
dst_sub_resource_idx=0, dst_box=020EFB38, src_texture=00171550,
src_sub_resource_idx=0, src_box=020EFB50, flags=0x20000000, fx=020EFB68,
filter=WINED3D_TEXF_POINT)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\surface.c:752] in wined3d
(0x020efaf8)
  3 0x71518ea2 cpu_blitter_blit+0xc2(blitter=0016E408,
op=WINED3D_BLIT_OP_RAW_BLIT, context=0016D920, src_texture=00171550,
src_sub_resource_idx=0, src_location=0x10, src_rect=020EFE10,
dst_texture=0016C8C0, dst_sub_resource_idx=<is not available>,
dst_location=0x8, dst_rect=020EFE20, color_key=00000000,
filter=WINED3D_TEXF_POINT, resolve_format=00000000)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\surface.c:1328] in
wined3d (0x020efb98)
  4 0x715368a2 ffp_blitter_blit+0xa2(blitter=0016E420,
op=WINED3D_BLIT_OP_RAW_BLIT, context=0016D920, src_texture=00171550,
src_sub_resource_idx=0, src_location=0x10, src_rect=020EFE10,
dst_texture=0016C8C0, dst_sub_resource_idx=0, dst_location=0x8,
dst_rect=020EFE20, colour_key=00000000, filter=WINED3D_TEXF_POINT,
resolve_format=00000000)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\texture.c:6213] in
wined3d (0x020efc58)
  5 0x714dc91d glsl_blitter_blit+0x1ad(blitter=0016E438,
op=WINED3D_BLIT_OP_RAW_BLIT, context=0016D920, src_texture=00171550,
src_sub_resource_idx=0, src_location=0x10, src_rect=020EFE10,
dst_texture=0016C8C0, dst_sub_resource_idx=0, dst_location=0x8,
dst_rect=020EFE20, colour_key=00000000, filter=WINED3D_TEXF_POINT,
resolve_format=00000000)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\glsl_shader.c:13270] in
wined3d (0x020efd78)
  6 0x7151a181 texture2d_blt+0x3c1(dst_texture=0016C8C0,
dst_sub_resource_idx=0, dst_box=013EFAC4, src_texture=00171550,
src_sub_resource_idx=0, src_box=013EFAE4, flags=0x20000000, fx=013EFB00,
filter=WINED3D_TEXF_POINT)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\surface.c:1639] in
wined3d (0x020efe48)
  7 0x7149b07d wined3d_cs_exec_blt_sub_resource+0xcd(cs=013E0020,
data=013EFAB8) [Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\cs.c:2579]
in wined3d (0x020efec8)
  8 0x7149cb2b wined3d_cs_command_unlock(queue=<internal error>, cs=<internal
error>) [Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\cs.c:3310] in
wined3d (0x020eff28)
  9 0x7149cb2b wined3d_cs_execute_next+0x53(queue=<internal error>,
cs=<internal error>)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\cs.c:3309] in wined3d
(0x020eff28)
  10 0x7149cb2b wined3d_cs_run+0x11b(ctx=<internal error>)
[Z:\home\winetest\tools\testbot\var\wine\dlls\wined3d\cs.c:3375] in wined3d
(0x020eff28)
  11 0x7b62a170 in kernel32 (+0x2a170) (0x020eff48)
  12 0x7bc5a937 in ntdll (+0x5a937) (0x020eff5c)
  13 0x7bc5aff0 RtlCreateUserThread(entry=7149CA10, arg=013E0020)
[Z:\home\winetest\tools\testbot\var\wine\dlls\ntdll\thread.c:261] in ntdll
(0x020effec)
0x70baff74 memset+0x24
[Z:\home\winetest\tools\testbot\var\wine\dlls\msvcrt\string.c:3150] in
ucrtbase: movl    %eax,0x0(%ebx)
3150            *(unaligned_ui64 *)(d + 0) = v;

https://test.winehq.org/data/patterns.html#d3d11:d3d11

The crash happens with sub_resource_idx = 30.

This impacts Debian 11 + QXL (the TestBot VMs), Intel (fg-deb64) and AMD RX460
(cw-rx460)... but only for 32-bit builds.