[ODE] heightfield bug

[Bram Stolk]

Hi,

I can reproduce the bug Jean reported:
press 'b' 4 times rapidly in demo_heightfield, and it crashes.
Same goes for 4 spheres.
See below for call stack.

This crash is not present in 0.8
Unfortunately, 0.8.1-rc1 is no longer available at the SF files section.
Can someone send me a copy, if you have one?

The demo_heightfield.cpp code does not seem to have an obvious error.
I think it is in ODE's heightfield code.
And it was probably introduced by Oleh's changes?

Oleh, can you investigate this?

thanks,

  Bram


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1223166240 (LWP 22152)]
dxHeightfield::dCollideHeightfieldZone (this=0x80c2660, minX=7, maxX=9,
minZ=3, maxZ=5, o2=0x81713d0, numMaxContactsPossible=64, flags=64,
    contact=0xbfacd810, skip=112) at heightfield.h:149
149             if (trianglelistReservedSize < newSize)
(gdb) where
#0  dxHeightfield::dCollideHeightfieldZone (this=0x80c2660, minX=7, maxX=9,
minZ=3, maxZ=5, o2=0x81713d0, numMaxContactsPossible=64, flags=64,
    contact=0xbfacd810, skip=112) at heightfield.h:149
#1  0x0808e4f0 in dCollideHeightfield (o1=0x80c2660, o2=0x81713d0, flags=64,
contact=0xbfacd810, skip=112) at heightfield.cpp:1748
#2  0x0805ac89 in dCollide (o1=0x81713d0, o2=0x80c2660, flags=64,
contact=0xbfacd810, skip=112) at collision_kernel.cpp:259
#3  0x0804cbb5 in nearCallback (data=0x0, o1=0x81713d0, o2=0x80c2660) at
demo_heightfield.cpp:1568
#4  0x08060b59 in collideAABBs (g1=0x81713d0, g2=0x80c2660, data=0x0,
callback=0x804ca40 <nearCallback>) at collision_space_internal.h:81
#5  0x08061ad1 in dxHashSpace::collide (this=0x80c2318, data=0x0,
callback=0x804ca40 <nearCallback>) at collision_space.cpp:575
#6  0x08060c77 in dSpaceCollide (space=0x80c2318, data=0x0,
callback=0x804ca40 <nearCallback>) at collision_space.cpp:738
#7  0x0804d14f in simLoop (pause=0) at demo_heightfield.cpp:1898
#8  0x080511e3 in dsDrawFrame (width=352, height=288, fn=0xbfad0294,
pause=0) at drawstuff.cpp:1164
#9  0x08052b9d in dsPlatformSimLoop (window_width=352, window_height=288,
fn=0xbfad0294, initial_pause=0) at x11.cpp:372
#10 0x0804fa6e in dsSimulationLoop (argc=1, argv=0xbfad0364,
window_width=352, window_height=288, fn=0xbfad0294) at drawstuff.cpp:1276
#11 0x0804bdc8 in main (argc=1, argv=0xbfad0364) at
demo_heightfield.cpp:2125
(gdb) Quit
(gdb)





-- 
Zapp: Captain's log, stardate...er..
Kif: Ohhh. April 13th.
Zapp: April 13th. Point 2.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ode.org/pipermail/ode/attachments/20070927/666b1cf7/attachment.htm