Crash happens in Intel IPP library, in IppInit() function

[Richard_L_1]

Hi Experts,

One of our component module is using Intel IPP library for graphics rendering. However, when we are running stress test benchmark, crashes were observed. It happens in the entry point of this library – the ippInit() function. The crash stack is as follows. We have also have several dump stacks.

Could you please help to take a look? Thanks!

ffffd001`54d3e648 fffff801`f99e6383 : 00000000`0000001a 00000000`00041284 fffff960`01100420 00000000`00000195 : nt!KeBugCheckEx

ffffd001`54d3e650 fffff801`f98ea3cc : 00000000`00000075 ffffd001`54d3e7a0 00000000`00000000 80000004`5fe91221 : nt!CcTestControl+0x19d33

ffffd001`54d3e6a0 fffff801`f99043f2 : 80000004`5fe91221 00000980`00000000 80000004`5fe91221 00000000`00000000 : nt!ObReferenceObjectSafeWithTag+0xa280

ffffd001`54d3e8b0 fffff801`f98dce39 : 00000000`00000001 ffffe800`3aa3f900 ffffd001`54d3eb10 ffffd001`4adc8000 : nt!RtlFindClearBitsAndSet+0x18be

ffffd001`54d3e950 fffff801`f99c962f : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObfDereferenceObject+0x839

ffffd001`54d3eb10 fffff960`010ee905 : fffff960`010ee719 00000000`00000000 00000000`00000000 00000000`00000fdf : nt!setjmpex+0x1f1f

ffffd001`54d3eca8 fffff960`010ee719 : 00000000`00000000 00000000`00000000 00000000`00000fdf 00000000`00030101 : icappexport!ownSetFeatureMask+0x5

ffffd001`54d3ecb0 fffff960`010ee572 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : icappexport!ippSetCpuFeaturesMask+0x9

ffffd001`54d3ece0 fffff960`010ee399 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000010 : icappexport!ippStaticInit+0x72

ffffd001`54d3ed30 fffff960`010f9209 : 00000000`00000010 00000000`00010286 ffffd001`54d3ed88 00000000`00000018 : icappexport!ippInit+0x9

ffffd001`54d3ed60 fffff960`00d5de5c : 00000000`00000000 00000000`00000010 ffffd001`54d3efc0 00000000`00030101 : icappexport!InitIppLibrary+0x9 

ffffd001`54d3ed90 fffff960`00d5e1b0 : fffff901`400d4010 00000000`00000010 ffffd001`54d3efc0 00000000`00030101 : icardd+0xbe5c

ffffd001`54d3ede0 fffff960`00d5c300 : ffffe800`38bb6990 fffff960`001b912f 00000000`00030101 00000000`00000003 : icardd+0xc1b0

ffffd001`54d3ee20 fffff960`008d72b1 : ffffd001`54d3efc0 ffffd001`54d3ef19 ffffd001`54d3efc0 00000000`00000018 : icardd+0xa300

ffffd001`54d3eea0 fffff960`008c6c41 : 00000000`00000338 ffffd001`54d3efc0 fffff901`40086b50 00000000`00000001 : cdd+0x2c2b1

ffffd001`54d3eed0 fffff960`00247ac0 : fffff901`400c2860 00000000`00000003 fffff901`400b14a0 00000000`00000000 : cdd+0x1bc41

ffffd001`54d3ef80 fffff960`002484aa : 00000000`00000000 00000000`00000000 fffff901`400b1470 00000000`0000000e : win32k!EngAlphaBlend+0xcf0

ffffd001`54d3f010 fffff960`00248117 : fffff901`400a85a0 00000000`00000000 fffff901`400b1470 fffff960`001a59fa : win32k!EngAlphaBlend+0x16da

ffffd001`54d3f060 fffff960`0024024e : 00000000`00000000 00000000`00000000 ffffd001`54d3f271 ffffd001`54d3f0e0 : win32k!EngAlphaBlend+0x1347

ffffd001`54d3f0b0 fffff960`0023ed7a : fffff901`400a85a0 ffffd001`54d3f1f8 ffffd001`00000000 fffff901`00000001 : win32k!EngTransparentBlt+0x4fda

ffffd001`54d3f190 fffff960`0023d43b : 00000000`00000000 00000000`00000000 00000000`00000000 ffffd000`00000000 : win32k!EngTransparentBlt+0x3b06

ffffd001`54d3f2c0 fffff960`0023cd04 : 00000000`00000000 00000000`00000001 ffffd001`54d3f5d0 fffff801`f99c9757 : win32k!EngTransparentBlt+0x21c7

ffffd001`54d3f530 fffff960`002488fb : 00000000`00000000 00000000`00000000 00000000`00000002 00000000`00000000 : win32k!EngTransparentBlt+0x1a90

ffffd001`54d3f6f0 fffff960`0034445d : 00000000`00000000 00000000`00000000 00000000`00000009 ffffd001`54d3fad0 : win32k!EngAlphaBlend+0x1b2b

ffffd001`54d3f790 fffff960`003440a3 : ffffd000`00000000 00000000`00000000 ffffc000`15e2df10 00000000`00000000 : win32k!EngAcquireSemaphoreSharedNoWait+0x17a29

ffffd001`54d3f840 fffff801`f99cabb3 : ffffe800`32b44880 00000017`2a39f6d0 00000000`00000000 00000017`2a39f800 : win32k!EngAcquireSemaphoreSharedNoWait+0x1766f

ffffd001`54d3fb00 00007ffe`40e22fda : 00007ffe`40e22cda 00000000`00000000 00000000`00000000 00000000`00000000 : nt!setjmpex+0x34a3

00000017`2a39f688 00007ffe`40e22cda : 00000000`00000000 00000000`00000000 00000000`00000000 00007ffe`40e38140 : winsrv+0x2fda

00000017`2a39f690 00000000`00000000 : 00000000`00000000 00000000`00000000 00007ffe`40e38140 00000000`00000000 : winsrv+0x2cda

[Igor_A_Intel]

Hi Richard,

You haven't provided enough information:

1) which IPP version do you use

2) OS (guess Windows)

3) arch (ia32 or Intel64)

4) CPU (supported instruction set is enough - SSE42, AVX, AVX2 or smthng else)

5) IPP is linked statically (I guess as I see ippStaticInit) - single or multithreaded version?

6) Did you try to run PX/MX version (just comment ippInit())?

7) And I think that stack dump is not enough to understand the reason of crash; what the kind of crash - access violation, bad instruction ,etc.? which cpu instruction leaded to crash? disasm of several last instructions before crash? and of course the best approach is to provide us some reproducer

Regards, Igor

[Richard_L_1]

Hi Igor,

Thanks very much for your support!

We will give your access to the environment where this issue is reproduced, you will be able to find every information you need on that. I will update you as soon as the environment is ready.

Thanks,

Richard

[Chao_Y_Intel]

Richard,  thanks. We will follow with you for some details.

Regards,
Chao

[Chason_D_]

Chao Y (Intel) wrote:

Richard,  thanks. We will follow with you for some details.

Regards,
Chao

Hello Chao,

I have a similar issue that my app crashed in ipp library.

If there is a common method to debug this type problem? thanks.

======

Program received signal SIGSEGV, Segmentation fault.
0x0000000000401884 in lwrt_int_stub ()
(gdb) bt
#0  0x0000000000401884 in lwrt_int_stub ()
#1  0x0000000000401c9d in int_sig_handler ()
#2  <signal handler called>
#3  0x000000000076794a in l9_fft_rel_fx ()
#4  0x0000000000b0a47b in l9_cng_params_upd_fx ()
#5  0x0000000000ae1ce1 in l9_acelp_core_dec_fx ()
#6  0x00000000006fbead in l9_evs_dec_fx ()
#7  0x00000000006ee6a7 in l9_ippsIntel_EVS_Decoder_Exec ()
#8  0x000000000068538f in Decode ()

Best Regards,

Chason

[Chason_D_]

Hi, Richard,

Would you like share the root cause of this issue? Thanks:)

Regards, Chason

[Chao_Y_Intel]

Hi Chason,  do you a test code that could show this problem?  From the calling stack, this looks a different problem. The original code was reported for the init() function, but the calling stack from your code is different.

Regards,
Chao