1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153
|
/* Copyright (c) 2020-2025 The Khronos Group Inc.
* Copyright (c) 2020-2025 Valve Corporation
* Copyright (c) 2020-2025 LunarG, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "gpuav/instrumentation/gpuav_instrumentation.h"
#include "chassis/chassis_modification_state.h"
#include "containers/small_vector.h"
#include "gpuav/core/gpuav.h"
#include "gpuav/error_message/gpuav_vuids.h"
#include "gpuav/shaders/gpuav_shaders_constants.h"
#include "gpuav/resources/gpuav_state_trackers.h"
#include "gpuav/shaders/gpuav_error_header.h"
#include "gpuav/debug_printf/debug_printf.h"
#include "containers/limits.h"
#include "gpuav/spirv/vertex_attribute_fetch_oob.h"
#include "state_tracker/cmd_buffer_state.h"
#include "state_tracker/descriptor_sets.h"
#include "state_tracker/last_bound_state.h"
#include "state_tracker/shader_object_state.h"
#include "state_tracker/pipeline_state.h"
#include "state_tracker/shader_module.h"
#include "utils/action_command_utils.h"
namespace gpuav {
// If application is using shader objects, bindings count will be computed from bound shaders
static uint32_t LastBoundPipelineOrShaderDescSetBindingsCount(const LastBound &last_bound) {
if (last_bound.pipeline_state && last_bound.pipeline_state->PreRasterPipelineLayoutState()) {
return static_cast<uint32_t>(last_bound.pipeline_state->PreRasterPipelineLayoutState()->set_layouts.size());
}
if (const vvl::ShaderObject *main_bound_shader = last_bound.GetFirstShader()) {
return static_cast<uint32_t>(main_bound_shader->set_layouts.size());
}
// Should not get there, it would mean no pipeline nor shader object was bound
assert(false);
return 0;
}
// If application is using shader objects, bindings count will be computed from bound shaders
static uint32_t LastBoundPipelineOrShaderPushConstantsRangesCount(const LastBound &last_bound) {
if (last_bound.pipeline_state && last_bound.pipeline_state->PreRasterPipelineLayoutState()) {
return static_cast<uint32_t>(
last_bound.pipeline_state->PreRasterPipelineLayoutState()->push_constant_ranges_layout->size());
}
if (const vvl::ShaderObject *main_bound_shader = last_bound.GetFirstShader()) {
return static_cast<uint32_t>(main_bound_shader->push_constant_ranges->size());
}
// Should not get there, it would mean no pipeline nor shader object was bound
assert(false);
return 0;
}
static VkPipelineLayout CreateInstrumentationPipelineLayout(Validator &gpuav, const Location &loc, const LastBound &last_bound,
VkDescriptorSetLayout dummy_desc_set_layout,
VkDescriptorSetLayout instrumentation_desc_set_layout,
uint32_t inst_desc_set_binding) {
// If not using shader objects, GPU-AV should be able to retrieve a pipeline layout from last bound pipeline
VkPipelineLayoutCreateInfo pipe_layout_ci = vku::InitStructHelper();
std::shared_ptr<const vvl::PipelineLayout> last_bound_pipeline_pipe_layout;
if (last_bound.pipeline_state && last_bound.pipeline_state->PreRasterPipelineLayoutState()) {
last_bound_pipeline_pipe_layout = last_bound.pipeline_state->PreRasterPipelineLayoutState();
}
if (last_bound_pipeline_pipe_layout) {
// Application is using classic pipelines, compose a pipeline layout from last bound pipeline
// ---
pipe_layout_ci.flags = last_bound_pipeline_pipe_layout->create_flags;
std::vector<VkPushConstantRange> ranges;
if (last_bound_pipeline_pipe_layout->push_constant_ranges_layout) {
ranges.reserve(last_bound_pipeline_pipe_layout->push_constant_ranges_layout->size());
for (const VkPushConstantRange &range : *last_bound_pipeline_pipe_layout->push_constant_ranges_layout) {
ranges.push_back(range);
}
}
pipe_layout_ci.pushConstantRangeCount = static_cast<uint32_t>(ranges.size());
pipe_layout_ci.pPushConstantRanges = ranges.data();
std::vector<VkDescriptorSetLayout> set_layouts;
set_layouts.reserve(inst_desc_set_binding + 1);
for (const auto &set_layout : last_bound_pipeline_pipe_layout->set_layouts) {
set_layouts.push_back(set_layout->VkHandle());
}
for (uint32_t set_i = static_cast<uint32_t>(last_bound_pipeline_pipe_layout->set_layouts.size());
set_i < inst_desc_set_binding; ++set_i) {
set_layouts.push_back(dummy_desc_set_layout);
}
set_layouts.push_back(instrumentation_desc_set_layout);
pipe_layout_ci.setLayoutCount = static_cast<uint32_t>(set_layouts.size());
pipe_layout_ci.pSetLayouts = set_layouts.data();
VkPipelineLayout pipe_layout_handle;
VkResult result = DispatchCreatePipelineLayout(gpuav.device, &pipe_layout_ci, VK_NULL_HANDLE, &pipe_layout_handle);
if (result != VK_SUCCESS) {
gpuav.InternalError(gpuav.device, loc, "Failed to create instrumentation pipeline layout");
return VK_NULL_HANDLE;
}
return pipe_layout_handle;
} else {
// Application is using shader objects, compose a pipeline layout from bound shaders
// ---
const vvl::ShaderObject *main_bound_shader = last_bound.GetFirstShader();
if (!main_bound_shader) {
// Should not get there, it would mean no pipeline nor shader object was bound
gpuav.InternalError(gpuav.device, loc, "Could not retrieve last bound computer/vertex/mesh shader");
return VK_NULL_HANDLE;
}
// From those VUIDs:
// VUID-vkCmdDraw-None-08878
// - All bound graphics shader objects must have been created with identical or identically defined push constant ranges
// VUID-vkCmdDraw-None-08879
// - All bound graphics shader objects must have been created with identical or identically defined arrays of descriptor set
// layouts
// => To compose a VkPipelineLayout, only need to get compute or vertex/mesh shader and look at their bindings,
// no need to check other shaders.
const vvl::ShaderObject::SetLayoutVector *set_layouts = &main_bound_shader->set_layouts;
PushConstantRangesId push_constants_layouts = main_bound_shader->push_constant_ranges;
if (last_bound.desc_set_pipeline_layout) {
pipe_layout_ci.flags = last_bound.desc_set_pipeline_layout->CreateFlags();
}
std::vector<VkDescriptorSetLayout> set_layout_handles;
if (set_layouts) {
set_layout_handles.reserve(inst_desc_set_binding + 1);
for (const auto &set_layout : *set_layouts) {
set_layout_handles.push_back(set_layout->VkHandle());
}
for (uint32_t set_i = static_cast<uint32_t>(set_layouts->size()); set_i < inst_desc_set_binding; ++set_i) {
set_layout_handles.push_back(dummy_desc_set_layout);
}
set_layout_handles.push_back(instrumentation_desc_set_layout);
pipe_layout_ci.setLayoutCount = static_cast<uint32_t>(set_layout_handles.size());
pipe_layout_ci.pSetLayouts = set_layout_handles.data();
}
if (push_constants_layouts) {
pipe_layout_ci.pushConstantRangeCount = static_cast<uint32_t>(push_constants_layouts->size());
pipe_layout_ci.pPushConstantRanges = push_constants_layouts->data();
}
VkPipelineLayout pipe_layout_handle;
VkResult result = DispatchCreatePipelineLayout(gpuav.device, &pipe_layout_ci, VK_NULL_HANDLE, &pipe_layout_handle);
if (result != VK_SUCCESS) {
gpuav.InternalError(gpuav.device, loc, "Failed to create instrumentation pipeline layout");
return VK_NULL_HANDLE;
}
return pipe_layout_handle;
}
}
// Computes vertex attributes fetching limits based on the set of bound vertex buffers.
// Used to detect out of bounds indices in index buffers.
static std::pair<std::optional<VertexAttributeFetchLimit>, std::optional<VertexAttributeFetchLimit>> GetVertexAttributeFetchLimits(
const vvl::CommandBuffer &cb_state) {
const LastBound &last_bound = cb_state.GetLastBoundGraphics();
const vvl::Pipeline *pipeline_state = last_bound.pipeline_state;
const bool dynamic_vertex_input = last_bound.IsDynamic(CB_DYNAMIC_STATE_VERTEX_INPUT_EXT);
const auto &vertex_binding_descriptions =
dynamic_vertex_input ? cb_state.dynamic_state_value.vertex_bindings : pipeline_state->vertex_input_state->bindings;
std::optional<VertexAttributeFetchLimit> vertex_attribute_fetch_limit_vertex_input_rate;
std::optional<VertexAttributeFetchLimit> vertex_attribute_fetch_limit_instance_input_rate;
small_vector<uint32_t, 32> vertex_shader_used_locations;
{
const ::spirv::EntryPoint *vertex_entry_point = last_bound.GetVertexEntryPoint();
if (!vertex_entry_point) {
return {std::optional<VertexAttributeFetchLimit>{}, std::optional<VertexAttributeFetchLimit>{}};
}
for (const ::spirv::StageInterfaceVariable &interface_var : vertex_entry_point->stage_interface_variables) {
for (const ::spirv::InterfaceSlot &interface_slot : interface_var.interface_slots) {
const uint32_t location = interface_slot.Location();
if (std::find(vertex_shader_used_locations.begin(), vertex_shader_used_locations.end(), location) ==
vertex_shader_used_locations.end()) {
vertex_shader_used_locations.emplace_back(location);
}
}
}
}
for (const auto &[binding, vertex_binding_desc] : vertex_binding_descriptions) {
const vvl::VertexBufferBinding *vbb = vvl::Find(cb_state.current_vertex_buffer_binding_info, binding);
if (!vbb) {
// Validation error
continue;
}
for (const auto &[location, attrib] : vertex_binding_desc.locations) {
if (std::find(vertex_shader_used_locations.begin(), vertex_shader_used_locations.end(), location) ==
vertex_shader_used_locations.end()) {
continue;
}
const VkDeviceSize attribute_size = GetVertexInputFormatSize(attrib.desc.format);
const VkDeviceSize stride =
vbb->stride != 0 ? vbb->stride : attribute_size; // Tracked stride should already handle all possible value origin
VkDeviceSize vertex_buffer_remaining_size =
vbb->effective_size > attrib.desc.offset ? vbb->effective_size - attrib.desc.offset : 0;
VkDeviceSize vertex_attributes_count = vertex_buffer_remaining_size / stride;
if (vertex_buffer_remaining_size > vertex_attributes_count * stride) {
vertex_buffer_remaining_size -= vertex_attributes_count * stride;
} else {
vertex_buffer_remaining_size = 0;
}
// maybe room for one more attribute but not full stride - not having stride space does not matter for last element
if (vertex_buffer_remaining_size >= attribute_size) {
vertex_attributes_count += 1;
}
if (vertex_binding_desc.desc.inputRate == VK_VERTEX_INPUT_RATE_VERTEX) {
if (!vertex_attribute_fetch_limit_vertex_input_rate.has_value()) {
vertex_attribute_fetch_limit_vertex_input_rate = VertexAttributeFetchLimit{};
}
vertex_attribute_fetch_limit_vertex_input_rate->max_vertex_attributes_count =
std::min(vertex_attribute_fetch_limit_vertex_input_rate->max_vertex_attributes_count, vertex_attributes_count);
if (vertex_attribute_fetch_limit_vertex_input_rate->max_vertex_attributes_count == vertex_attributes_count) {
vertex_attribute_fetch_limit_vertex_input_rate->binding_info = *vbb;
vertex_attribute_fetch_limit_vertex_input_rate->attribute.location = attrib.desc.location;
vertex_attribute_fetch_limit_vertex_input_rate->attribute.binding = attrib.desc.binding;
vertex_attribute_fetch_limit_vertex_input_rate->attribute.format = attrib.desc.format;
vertex_attribute_fetch_limit_vertex_input_rate->attribute.offset = attrib.desc.offset;
}
} else if (vertex_binding_desc.desc.inputRate == VK_VERTEX_INPUT_RATE_INSTANCE) {
if (!vertex_attribute_fetch_limit_instance_input_rate.has_value()) {
vertex_attribute_fetch_limit_instance_input_rate = VertexAttributeFetchLimit{};
}
vertex_attribute_fetch_limit_instance_input_rate->max_vertex_attributes_count =
std::min(vertex_attribute_fetch_limit_instance_input_rate->max_vertex_attributes_count,
vertex_attributes_count * vertex_binding_desc.desc.divisor);
if (vertex_attribute_fetch_limit_instance_input_rate->max_vertex_attributes_count ==
(vertex_attributes_count * vertex_binding_desc.desc.divisor)) {
vertex_attribute_fetch_limit_instance_input_rate->binding_info = *vbb;
vertex_attribute_fetch_limit_instance_input_rate->attribute.location = attrib.desc.location;
vertex_attribute_fetch_limit_instance_input_rate->attribute.binding = attrib.desc.binding;
vertex_attribute_fetch_limit_instance_input_rate->attribute.format = attrib.desc.format;
vertex_attribute_fetch_limit_instance_input_rate->attribute.offset = attrib.desc.offset;
vertex_attribute_fetch_limit_instance_input_rate->instance_rate_divisor = vertex_binding_desc.desc.divisor;
}
}
}
}
return {vertex_attribute_fetch_limit_vertex_input_rate, vertex_attribute_fetch_limit_instance_input_rate};
}
void UpdateInstrumentationDescSet(Validator &gpuav, CommandBufferSubState &cb_state, VkPipelineBindPoint bind_point,
VkDescriptorSet instrumentation_desc_set, const Location &loc,
InstrumentationErrorBlob &out_instrumentation_error_blob) {
small_vector<VkWriteDescriptorSet, 8> desc_writes = {};
VkDescriptorBufferInfo error_output_desc_buffer_info = {};
VkDescriptorBufferInfo vertex_attribute_fetch_limits_buffer_bi = {};
VkDescriptorBufferInfo indices_desc_buffer_info = {};
VkDescriptorBufferInfo cmd_errors_counts_desc_buffer_info = {};
if (gpuav.gpuav_settings.IsShaderInstrumentationEnabled()) {
// Error output buffer
{
error_output_desc_buffer_info.buffer = cb_state.GetErrorOutputBufferRange().buffer;
error_output_desc_buffer_info.offset = cb_state.GetErrorOutputBufferRange().offset;
error_output_desc_buffer_info.range = cb_state.GetErrorOutputBufferRange().size;
VkWriteDescriptorSet wds = vku::InitStructHelper();
wds.dstBinding = glsl::kBindingInstErrorBuffer;
wds.descriptorCount = 1;
wds.descriptorType = VK_DESCRIPTOR_TYPE_STORAGE_BUFFER;
wds.pBufferInfo = &error_output_desc_buffer_info;
wds.dstSet = instrumentation_desc_set;
desc_writes.emplace_back(wds);
}
// Buffer holding action command index in command buffer
{
indices_desc_buffer_info.range = sizeof(uint32_t);
indices_desc_buffer_info.buffer = gpuav.indices_buffer_.VkHandle();
indices_desc_buffer_info.offset = 0;
VkWriteDescriptorSet wds = vku::InitStructHelper();
wds.dstBinding = glsl::kBindingInstActionIndex;
wds.descriptorCount = 1;
wds.descriptorType = VK_DESCRIPTOR_TYPE_STORAGE_BUFFER_DYNAMIC;
wds.pBufferInfo = &indices_desc_buffer_info;
wds.dstSet = instrumentation_desc_set;
desc_writes.emplace_back(wds);
}
// Buffer holding a resource index from the per command buffer command resources list
{
VkWriteDescriptorSet wds = vku::InitStructHelper();
wds.dstBinding = glsl::kBindingInstCmdResourceIndex;
wds.descriptorCount = 1;
wds.descriptorType = VK_DESCRIPTOR_TYPE_STORAGE_BUFFER_DYNAMIC;
wds.pBufferInfo = &indices_desc_buffer_info;
wds.dstSet = instrumentation_desc_set;
desc_writes.emplace_back(wds);
}
// Errors count buffer
{
cmd_errors_counts_desc_buffer_info.range = VK_WHOLE_SIZE;
cmd_errors_counts_desc_buffer_info.buffer = cb_state.GetCmdErrorsCountsBuffer();
cmd_errors_counts_desc_buffer_info.offset = 0;
VkWriteDescriptorSet wds = vku::InitStructHelper();
wds.dstBinding = glsl::kBindingInstCmdErrorsCount;
wds.descriptorCount = 1;
wds.descriptorType = VK_DESCRIPTOR_TYPE_STORAGE_BUFFER;
wds.pBufferInfo = &cmd_errors_counts_desc_buffer_info;
wds.dstSet = instrumentation_desc_set;
desc_writes.emplace_back(wds);
}
// Vertex attribute fetching
// Only need to update if a draw (that is not mesh) is coming as we instrument all vertex entry points
if (gpuav.gpuav_settings.shader_instrumentation.vertex_attribute_fetch_oob && vvl::IsCommandDrawVertex(loc.function)) {
// This check is only for indexed draws
if (vvl::IsCommandDrawVertexIndexed(loc.function)) {
vko::BufferRange vertex_attribute_fetch_limits_buffer_range =
cb_state.gpu_resources_manager.GetHostVisibleBufferRange(4 * sizeof(uint32_t));
if (vertex_attribute_fetch_limits_buffer_range.buffer == VK_NULL_HANDLE) {
return;
}
auto vertex_attribute_fetch_limits_buffer_ptr =
(uint32_t *)vertex_attribute_fetch_limits_buffer_range.offset_mapped_ptr;
const auto [vertex_attribute_fetch_limit_vertex_input_rate, vertex_attribute_fetch_limit_instance_input_rate] =
GetVertexAttributeFetchLimits(cb_state.base);
if (vertex_attribute_fetch_limit_vertex_input_rate.has_value()) {
vertex_attribute_fetch_limits_buffer_ptr[0] = 1u;
vertex_attribute_fetch_limits_buffer_ptr[1] =
(uint32_t)vertex_attribute_fetch_limit_vertex_input_rate->max_vertex_attributes_count;
} else {
vertex_attribute_fetch_limits_buffer_ptr[0] = 0u;
}
if (vertex_attribute_fetch_limit_instance_input_rate.has_value()) {
vertex_attribute_fetch_limits_buffer_ptr[2] = 1u;
vertex_attribute_fetch_limits_buffer_ptr[3] =
(uint32_t)vertex_attribute_fetch_limit_instance_input_rate->max_vertex_attributes_count;
} else {
vertex_attribute_fetch_limits_buffer_ptr[2] = 0u;
}
out_instrumentation_error_blob.vertex_attribute_fetch_limit_vertex_input_rate =
vertex_attribute_fetch_limit_vertex_input_rate;
out_instrumentation_error_blob.vertex_attribute_fetch_limit_instance_input_rate =
vertex_attribute_fetch_limit_instance_input_rate;
out_instrumentation_error_blob.index_buffer_binding = cb_state.base.index_buffer_binding;
vertex_attribute_fetch_limits_buffer_bi.buffer = vertex_attribute_fetch_limits_buffer_range.buffer;
vertex_attribute_fetch_limits_buffer_bi.offset = vertex_attribute_fetch_limits_buffer_range.offset;
vertex_attribute_fetch_limits_buffer_bi.range = vertex_attribute_fetch_limits_buffer_range.size;
} else {
// Point all non-indexed draws to our global buffer that will bypass the check in shader
VertexAttributeFetchOff &resource = gpuav.shared_resources_manager.GetOrCreate<VertexAttributeFetchOff>(gpuav);
if (!resource.valid) return;
vertex_attribute_fetch_limits_buffer_bi.buffer = resource.buffer.VkHandle();
vertex_attribute_fetch_limits_buffer_bi.offset = 0;
vertex_attribute_fetch_limits_buffer_bi.range = VK_WHOLE_SIZE;
}
VkWriteDescriptorSet wds = vku::InitStructHelper();
wds.dstSet = instrumentation_desc_set;
wds.dstBinding = glsl::kBindingInstVertexAttributeFetchLimits;
wds.descriptorCount = 1;
wds.descriptorType = VK_DESCRIPTOR_TYPE_STORAGE_BUFFER;
wds.pBufferInfo = &vertex_attribute_fetch_limits_buffer_bi;
desc_writes.emplace_back(wds);
}
}
std::vector<VkDescriptorBufferInfo> buffer_infos(cb_state.on_instrumentation_desc_set_update_functions.size());
for (size_t func_i = 0; func_i < cb_state.on_instrumentation_desc_set_update_functions.size(); ++func_i) {
VkWriteDescriptorSet wds = vku::InitStructHelper();
wds.dstSet = instrumentation_desc_set;
wds.dstBinding = vvl::kU32Max;
wds.descriptorCount = 1;
wds.descriptorType = VK_DESCRIPTOR_TYPE_STORAGE_BUFFER;
wds.pBufferInfo = &buffer_infos[func_i];
cb_state.on_instrumentation_desc_set_update_functions[func_i](cb_state, bind_point, buffer_infos[func_i], wds.dstBinding);
assert(buffer_infos[func_i].buffer != VK_NULL_HANDLE);
assert(wds.dstBinding != vvl::kU32Max);
desc_writes.emplace_back(wds);
}
DispatchUpdateDescriptorSets(gpuav.device, static_cast<uint32_t>(desc_writes.size()), desc_writes.data(), 0, nullptr);
}
static bool WasInstrumented(const LastBound &last_bound) {
if (last_bound.pipeline_state) {
return last_bound.pipeline_state->instrumentation_data.was_instrumented;
}
for (uint32_t i = 0; i < kShaderObjectStageCount; ++i) {
const auto stage = static_cast<ShaderObjectStage>(i);
if (!last_bound.IsValidShaderBound(stage)) {
continue;
}
if (const vvl::ShaderObject *shader_object_state = last_bound.GetShaderState(stage)) {
auto &sub_state = SubState(*shader_object_state);
if (sub_state.was_instrumented) {
return true;
}
}
}
return false;
}
void PreCallSetupShaderInstrumentationResources(Validator &gpuav, CommandBufferSubState &cb_state, VkPipelineBindPoint bind_point,
const Location &loc) {
if (!gpuav.gpuav_settings.IsSpirvModified()) {
return;
}
assert(bind_point == VK_PIPELINE_BIND_POINT_GRAPHICS || bind_point == VK_PIPELINE_BIND_POINT_COMPUTE ||
bind_point == VK_PIPELINE_BIND_POINT_RAY_TRACING_KHR);
if (cb_state.max_actions_cmd_validation_reached_) {
return;
}
const vvl::BindPoint vvl_bind_point = ConvertToVvlBindPoint(bind_point);
const LastBound &last_bound = cb_state.base.lastBound[vvl_bind_point];
// If nothing was updated, we don't want to bind anything
if (!WasInstrumented(last_bound)) {
return;
}
if (!last_bound.pipeline_state && !last_bound.HasShaderObjects()) {
gpuav.InternalError(cb_state.VkHandle(), loc, "Neither pipeline state nor shader object states were found.");
return;
}
VkDescriptorSet instrumentation_desc_set =
cb_state.gpu_resources_manager.GetManagedDescriptorSet(cb_state.GetInstrumentationDescriptorSetLayout());
if (!instrumentation_desc_set) {
gpuav.InternalError(cb_state.VkHandle(), loc, "Unable to allocate instrumentation descriptor sets.");
return;
}
// Pathetic way of trying to make sure we take care of updating all
// bindings of the instrumentation descriptor set
assert(gpuav.instrumentation_bindings_.size() == 9);
InstrumentationErrorBlob instrumentation_error_blob;
UpdateInstrumentationDescSet(gpuav, cb_state, bind_point, instrumentation_desc_set, loc, instrumentation_error_blob);
instrumentation_error_blob.operation_index = (bind_point == VK_PIPELINE_BIND_POINT_GRAPHICS) ? cb_state.draw_index
: (bind_point == VK_PIPELINE_BIND_POINT_COMPUTE) ? cb_state.compute_index
: (bind_point == VK_PIPELINE_BIND_POINT_RAY_TRACING_KHR)
? cb_state.trace_rays_index
: 0;
instrumentation_error_blob.pipeline_bind_point = bind_point;
instrumentation_error_blob.uses_shader_object = last_bound.pipeline_state == nullptr;
// Bind instrumentation descriptor set, using an appropriate pipeline layout
// ---
// First find this appropriate pipeline layout.
// Always try to grab pipeline layout from last bound pipeline. Looking at PreRasterPipelineLayoutState
// is enough to get the layout whether the application is using standard pipelines or GPL.
// If GPU-AV failed to get a pipeline layout this way, fall back to pipeline layout specified in last
// vkCmdBindDescriptorSets, or in last vkCmdPushConstantRanges.
enum class PipelineLayoutSource { NoPipelineLayout, LastBoundPipeline, LastBoundDescriptorSet, LastPushedConstants };
std::shared_ptr<const vvl::PipelineLayout> inst_binding_pipe_layout_state;
PipelineLayoutSource inst_binding_pipe_layout_src = PipelineLayoutSource::NoPipelineLayout;
if (last_bound.pipeline_state && !last_bound.pipeline_state->PreRasterPipelineLayoutState()->Destroyed()) {
inst_binding_pipe_layout_state = last_bound.pipeline_state->PreRasterPipelineLayoutState();
inst_binding_pipe_layout_src = PipelineLayoutSource::LastBoundPipeline;
// One exception when using GPL is we need to look out for INDEPENDENT_SETS_BIT which will have null sets inside them.
// We have a fake merged_graphics_layout to mimic the complete layout, but the app must bind it to descriptor set
if (inst_binding_pipe_layout_state->IsIndependentSets()) {
inst_binding_pipe_layout_state = last_bound.desc_set_pipeline_layout;
inst_binding_pipe_layout_src = PipelineLayoutSource::LastBoundDescriptorSet;
}
} else if (last_bound.desc_set_pipeline_layout) {
inst_binding_pipe_layout_state = last_bound.desc_set_pipeline_layout;
inst_binding_pipe_layout_src = PipelineLayoutSource::LastBoundDescriptorSet;
} else if (cb_state.push_constant_latest_used_layout[vvl_bind_point] != VK_NULL_HANDLE) {
inst_binding_pipe_layout_state = gpuav.Get<vvl::PipelineLayout>(cb_state.push_constant_latest_used_layout[vvl_bind_point]);
inst_binding_pipe_layout_src = PipelineLayoutSource::LastPushedConstants;
}
// TODO: Using cb_state.per_command_resources.size() is kind of a hack? Worth considering passing the resource index as a
// parameter
const uint32_t error_logger_i = static_cast<uint32_t>(cb_state.per_command_error_loggers.size());
const std::array<uint32_t, 2> dynamic_offsets = {{instrumentation_error_blob.operation_index * gpuav.indices_buffer_alignment_,
error_logger_i * gpuav.indices_buffer_alignment_}};
if (inst_binding_pipe_layout_state) {
if ((uint32_t)inst_binding_pipe_layout_state->set_layouts.size() > gpuav.instrumentation_desc_set_bind_index_) {
gpuav.InternalWarning(cb_state.Handle(), loc,
"Unable to bind instrumentation descriptor set, it would override application's bound set");
return;
}
switch (inst_binding_pipe_layout_src) {
case PipelineLayoutSource::NoPipelineLayout:
// should not get there, because inst_desc_set_binding_pipe_layout_state is not null
assert(false);
break;
case PipelineLayoutSource::LastBoundPipeline:
DispatchCmdBindDescriptorSets(cb_state.VkHandle(), bind_point, inst_binding_pipe_layout_state->VkHandle(),
gpuav.instrumentation_desc_set_bind_index_, 1, &instrumentation_desc_set,
static_cast<uint32_t>(dynamic_offsets.size()), dynamic_offsets.data());
break;
case PipelineLayoutSource::LastBoundDescriptorSet:
case PipelineLayoutSource::LastPushedConstants: {
// Currently bound pipeline/set of shader objects may have bindings that are not compatible with last
// bound descriptor sets: GPU-AV may create this incompatibility by adding its empty padding descriptor sets.
// To alleviate that, since we could not get a pipeline layout from last pipeline binding (it was either
// destroyed, or never has been created if using shader objects), a pipeline layout matching bindings of last
// bound pipeline or
// last bound shader objects is created and used.
// If will also be cached: heuristic is next action command will likely need the same.
const uint32_t last_pipe_bindings_count = LastBoundPipelineOrShaderDescSetBindingsCount(last_bound);
const uint32_t last_pipe_pcr_count = LastBoundPipelineOrShaderPushConstantsRangesCount(last_bound);
// If the number of binding of the currently bound pipeline's layout (or the equivalent for shader objects) is
// less that the number of bindings in the pipeline layout used to bind descriptor sets,
// GPU-AV needs to create a temporary pipeline layout matching the the currently bound pipeline's layout
// to bind the instrumentation descriptor set
if (last_pipe_bindings_count < (uint32_t)inst_binding_pipe_layout_state->set_layouts.size() ||
last_pipe_pcr_count < (uint32_t)inst_binding_pipe_layout_state->push_constant_ranges_layout->size()) {
VkPipelineLayout instrumentation_pipe_layout = CreateInstrumentationPipelineLayout(
gpuav, loc, last_bound, gpuav.dummy_desc_layout_, gpuav.GetInstrumentationDescriptorSetLayout(),
gpuav.instrumentation_desc_set_bind_index_);
if (instrumentation_pipe_layout != VK_NULL_HANDLE) {
DispatchCmdBindDescriptorSets(cb_state.VkHandle(), bind_point, instrumentation_pipe_layout,
gpuav.instrumentation_desc_set_bind_index_, 1, &instrumentation_desc_set,
static_cast<uint32_t>(dynamic_offsets.size()), dynamic_offsets.data());
DispatchDestroyPipelineLayout(gpuav.device, instrumentation_pipe_layout, nullptr);
} else {
// Could not create instrumentation pipeline layout
return;
}
} else {
// No incompatibility detected, safe to use pipeline layout for last bound descriptor set/push constants.
DispatchCmdBindDescriptorSets(cb_state.VkHandle(), bind_point, inst_binding_pipe_layout_state->VkHandle(),
gpuav.instrumentation_desc_set_bind_index_, 1, &instrumentation_desc_set,
static_cast<uint32_t>(dynamic_offsets.size()), dynamic_offsets.data());
}
} break;
}
} else {
// If no pipeline layout was bound when using shader objects that don't use any descriptor set, and no push constants, bind
// the instrumentation pipeline layout
DispatchCmdBindDescriptorSets(cb_state.VkHandle(), bind_point, gpuav.GetInstrumentationPipelineLayout(),
gpuav.instrumentation_desc_set_bind_index_, 1, &instrumentation_desc_set,
static_cast<uint32_t>(dynamic_offsets.size()), dynamic_offsets.data());
}
// We want to grab the last (current) element in descriptor_binding_commands, but as a std::vector, the refernce might be
// garbage later, so just hold the index for later. It is possible to have no descriptor sets bound, for example if using push
// constants.
instrumentation_error_blob.descriptor_binding_index = vvl::kU32Max;
DescriptorSetBindings *desc_set_bindings = cb_state.shared_resources_cache.TryGet<DescriptorSetBindings>();
if (desc_set_bindings && !desc_set_bindings->descriptor_set_binding_commands.empty()) {
instrumentation_error_blob.descriptor_binding_index =
uint32_t(desc_set_bindings->descriptor_set_binding_commands.size() - 1);
}
instrumentation_error_blob.label_command_i =
!cb_state.base.GetLabelCommands().empty() ? uint32_t(cb_state.base.GetLabelCommands().size() - 1) : vvl::kU32Max;
CommandBufferSubState::ErrorLoggerFunc error_logger = [&gpuav, &cb_state, loc, instrumentation_error_blob](
const uint32_t *error_record, const LogObjectList &objlist,
const std::vector<std::string> &initial_label_stack) {
bool skip = false;
skip |=
LogInstrumentationError(gpuav, cb_state, objlist, instrumentation_error_blob, initial_label_stack, error_record, loc);
return skip;
};
cb_state.action_cmd_i_to_label_cmd_i_map[cb_state.action_command_count] = instrumentation_error_blob.label_command_i;
cb_state.per_command_error_loggers.emplace_back(error_logger);
}
void PostCallSetupShaderInstrumentationResources(Validator &gpuav, CommandBufferSubState &cb_state, const LastBound &last_bound,
const Location &loc) {
if (!gpuav.gpuav_settings.IsSpirvModified()) {
return;
}
// If nothing was updated, we don't want to bind anything
if (!WasInstrumented(last_bound)) {
return;
}
// Only need to rebind application desc sets if they have been disturbed by GPU-AV binding its instrumentation desc set.
// - Can happen if the pipeline layout used to bind instrumentation descriptor set is not compatible with the one used by the
// app to bind the last/all the last desc set.
// => We create this incompatibility when we add our empty descriptor set.
// See PositiveGpuAVDescriptorIndexing.SharedPipelineLayoutSubsetGraphics for instance
if (last_bound.desc_set_pipeline_layout) {
const uint32_t desc_set_bindings_counts_from_last_pipeline = LastBoundPipelineOrShaderDescSetBindingsCount(last_bound);
const bool any_disturbed_desc_sets_bindings =
desc_set_bindings_counts_from_last_pipeline <
static_cast<uint32_t>(last_bound.desc_set_pipeline_layout->set_layouts.size());
if (any_disturbed_desc_sets_bindings) {
const uint32_t disturbed_bindings_count = static_cast<uint32_t>(
last_bound.desc_set_pipeline_layout->set_layouts.size() - desc_set_bindings_counts_from_last_pipeline);
const uint32_t first_disturbed_set = desc_set_bindings_counts_from_last_pipeline;
for (uint32_t set_i = 0; set_i < disturbed_bindings_count; ++set_i) {
const uint32_t last_bound_set_i = set_i + first_disturbed_set;
const auto &last_bound_set_state = last_bound.ds_slots[last_bound_set_i].ds_state;
// last_bound.ds_slot is a LUT, and descriptor sets before the last one could be unbound.
if (!last_bound_set_state) {
continue;
}
VkDescriptorSet last_bound_set = last_bound_set_state->VkHandle();
const std::vector<uint32_t> &dynamic_offset = last_bound.ds_slots[last_bound_set_i].dynamic_offsets;
const uint32_t dynamic_offset_count = static_cast<uint32_t>(dynamic_offset.size());
DispatchCmdBindDescriptorSets(cb_state.VkHandle(), last_bound.bind_point,
last_bound.desc_set_pipeline_layout->VkHandle(), last_bound_set_i, 1, &last_bound_set,
dynamic_offset_count, dynamic_offset.data());
}
}
}
}
bool LogMessageInstDescriptorIndexingOOB(Validator &gpuav, const CommandBufferSubState &cb_state, const uint32_t *error_record,
std::string &out_error_msg, std::string &out_vuid_msg, const Location &loc,
const InstrumentationErrorBlob &instrumentation_error_blob) {
using namespace glsl;
bool error_found = true;
std::ostringstream strm;
const GpuVuid &vuid = GetGpuVuid(loc.function);
if (instrumentation_error_blob.descriptor_binding_index == vvl::kU32Max) {
assert(false); // This means we have hit a situtation where there are no descriptors bound
return false;
}
const DescriptorSetBindings &desc_set_bindings = cb_state.shared_resources_cache.Get<DescriptorSetBindings>();
const auto &descriptor_sets =
desc_set_bindings.descriptor_set_binding_commands[instrumentation_error_blob.descriptor_binding_index]
.bound_descriptor_sets;
// Currently we only encode the descriptor index here and save the binding in a parameter slot
// The issue becomes if the user has kErrorSubCodeDescriptorIndexingBounds then we can't back track to the exact binding because
// they have gone over it
const uint32_t encoded_set_index = error_record[kInstDescriptorIndexingSetAndIndexOffset];
const uint32_t set_num = encoded_set_index >> kInstDescriptorIndexingSetShift;
const uint32_t descriptor_index = encoded_set_index & kInstDescriptorIndexingIndexMask;
const uint32_t binding_num = error_record[kInstDescriptorIndexingParamOffset_1];
const uint32_t array_length = error_record[kInstDescriptorIndexingParamOffset_0];
const uint32_t error_sub_code = (error_record[kHeaderShaderIdErrorOffset] & kErrorSubCodeMask) >> kErrorSubCodeShift;
switch (error_sub_code) {
case kErrorSubCodeDescriptorIndexingBounds: {
strm << "(set = " << set_num << ", binding = " << binding_num << ") Index of " << descriptor_index
<< " used to index descriptor array of length " << array_length << ".";
out_vuid_msg = vuid.descriptor_index_oob_10068;
error_found = true;
} break;
case kErrorSubCodeDescriptorIndexingUninitialized: {
const auto &dsl = descriptor_sets[set_num]->Layout();
strm << "(set = " << set_num << ", binding = " << binding_num << ") Descriptor index " << descriptor_index
<< " is uninitialized.";
if (descriptor_index == 0 && array_length == 1) {
strm << " (There is no array, but descriptor is viewed as having an array of length 1)";
}
const VkDescriptorBindingFlags binding_flags = dsl.GetDescriptorBindingFlagsFromBinding(binding_num);
if (binding_flags & VK_DESCRIPTOR_BINDING_VARIABLE_DESCRIPTOR_COUNT_BIT) {
strm << " VK_DESCRIPTOR_BINDING_VARIABLE_DESCRIPTOR_COUNT_BIT was used and the original descriptorCount ("
<< dsl.GetDescriptorCountFromBinding(binding_num)
<< ") could have been reduced during AllocateDescriptorSets.";
} else if (gpuav.enabled_features.nullDescriptor) {
strm << " nullDescriptor feature is on, but vkUpdateDescriptorSets was not called with VK_NULL_HANDLE for this "
"descriptor.";
}
out_vuid_msg = vuid.invalid_descriptor_08114;
error_found = true;
} break;
case kErrorSubCodeDescriptorIndexingDestroyed: {
strm << "(set = " << set_num << ", binding = " << binding_num << ") Descriptor index " << descriptor_index
<< " references a resource that was destroyed.";
if (descriptor_index == 0 && array_length == 1) {
strm << " (There is no array, but descriptor is viewed as having an array of length 1)";
}
out_vuid_msg = "UNASSIGNED-Descriptor destroyed";
error_found = true;
} break;
}
out_error_msg += strm.str();
return error_found;
}
bool LogMessageInstDescriptorClass(Validator &gpuav, const CommandBufferSubState &cb_state, const uint32_t *error_record,
std::string &out_error_msg, std::string &out_vuid_msg, const Location &loc,
const InstrumentationErrorBlob &instrumentation_error_blob) {
using namespace glsl;
bool error_found = true;
std::ostringstream strm;
const GpuVuid &vuid = GetGpuVuid(loc.function);
if (instrumentation_error_blob.descriptor_binding_index == vvl::kU32Max) {
assert(false); // This means we have hit a situtation where there are no descriptors bound
return false;
}
const DescriptorSetBindings &desc_set_bindings = cb_state.shared_resources_cache.Get<DescriptorSetBindings>();
const auto &descriptor_sets =
desc_set_bindings.descriptor_set_binding_commands[instrumentation_error_blob.descriptor_binding_index]
.bound_descriptor_sets;
const uint32_t encoded_set_index = error_record[kInstDescriptorIndexingSetAndIndexOffset];
const uint32_t set_num = encoded_set_index >> kInstDescriptorIndexingSetShift;
const uint32_t global_descriptor_index = encoded_set_index & kInstDescriptorIndexingIndexMask;
const auto descriptor_set_state = descriptor_sets[set_num];
auto [binding_num, desc_index] = descriptor_set_state->GetBindingAndIndex(global_descriptor_index);
const auto *binding_state = descriptor_set_state->GetBinding(binding_num);
strm << "(set = " << set_num << ", binding = " << binding_num << ", index " << desc_index << ") ";
const uint32_t error_sub_code = (error_record[kHeaderShaderIdErrorOffset] & kErrorSubCodeMask) >> kErrorSubCodeShift;
switch (error_sub_code) {
case kErrorSubCodeDescriptorClassGeneralBufferBounds: {
if (binding_state->descriptor_class != vvl::DescriptorClass::GeneralBuffer) {
assert(false);
return false;
}
const vvl::Buffer *buffer_state =
static_cast<const vvl::BufferBinding *>(binding_state)->descriptors[desc_index].GetBufferState();
if (buffer_state) {
const uint32_t byte_offset = error_record[kInstDescriptorIndexingParamOffset_0];
const uint32_t resource_size = error_record[kInstDescriptorIndexingParamOffset_1];
strm << " access out of bounds. The descriptor buffer (" << gpuav.FormatHandle(buffer_state->Handle())
<< ") size is " << buffer_state->create_info.size << " bytes, " << resource_size
<< " bytes were bound, and the highest out of bounds access was at [" << byte_offset << "] bytes";
} else {
// This will only get called when using nullDescriptor without bindless
strm << "Trying to access a null descriptor, but vkUpdateDescriptorSets was not called with VK_NULL_HANDLE for "
"this descriptor. ";
}
if (binding_state->type == VK_DESCRIPTOR_TYPE_UNIFORM_BUFFER ||
binding_state->type == VK_DESCRIPTOR_TYPE_UNIFORM_BUFFER_DYNAMIC) {
out_vuid_msg =
instrumentation_error_blob.uses_shader_object ? vuid.uniform_access_oob_08612 : vuid.uniform_access_oob_06935;
} else {
out_vuid_msg =
instrumentation_error_blob.uses_shader_object ? vuid.storage_access_oob_08613 : vuid.storage_access_oob_06936;
}
} break;
case kErrorSubCodeDescriptorClassTexelBufferBounds: {
if (binding_state->descriptor_class != vvl::DescriptorClass::TexelBuffer) {
assert(false);
return false;
}
const vvl::BufferView *buffer_view_state =
static_cast<const vvl::TexelBinding *>(binding_state)->descriptors[desc_index].GetBufferViewState();
if (buffer_view_state) {
const uint32_t byte_offset = error_record[kInstDescriptorIndexingParamOffset_0];
const uint32_t resource_size = error_record[kInstDescriptorIndexingParamOffset_1];
strm << " access out of bounds. The descriptor texel buffer (" << gpuav.FormatHandle(buffer_view_state->Handle())
<< ") size is " << resource_size << " texels and the highest out of bounds access was at [" << byte_offset
<< "] bytes";
} else {
// This will only get called when using nullDescriptor without bindless
strm << "Trying to access a null descriptor, but vkUpdateDescriptorSets was not called with VK_NULL_HANDLE for "
"this descriptor. ";
}
// https://gitlab.khronos.org/vulkan/vulkan/-/issues/3977
out_vuid_msg = "UNASSIGNED-Descriptor Texel Buffer texel out of bounds";
} break;
default:
error_found = false;
assert(false); // other OOB checks are not implemented yet
}
out_error_msg += strm.str();
return error_found;
}
bool LogMessageInstBufferDeviceAddress(const uint32_t *error_record, std::string &out_error_msg, std::string &out_vuid_msg) {
using namespace glsl;
bool error_found = true;
std::ostringstream strm;
const uint32_t payload = error_record[kInstLogErrorParameterOffset_2];
const bool is_write = ((payload >> kInstBuffAddrAccessPayloadShiftIsWrite) & 1) != 0;
const bool is_struct = ((payload >> kInstBuffAddrAccessPayloadShiftIsStruct) & 1) != 0;
const uint64_t address = *reinterpret_cast<const uint64_t *>(error_record + kInstLogErrorParameterOffset_0);
const uint32_t error_sub_code = (error_record[kHeaderShaderIdErrorOffset] & kErrorSubCodeMask) >> kErrorSubCodeShift;
switch (error_sub_code) {
case kErrorSubCodeBufferDeviceAddressUnallocRef: {
const char *access_type = is_write ? "written" : "read";
const uint32_t byte_size = payload & kInstBuffAddrAccessPayloadMaskAccessInfo;
strm << "Out of bounds access: " << byte_size << " bytes " << access_type << " at buffer device address 0x" << std::hex
<< address << '.';
if (is_struct) {
// Added because glslang currently has no way to seperate out the struct (Slang does as of 2025.6.2)
strm << " This " << (is_write ? "write" : "read")
<< " corresponds to a full OpTypeStruct load. While not all members of the struct might be accessed, it is up "
"to the source language or tooling to detect that and reflect it in the SPIR-V.";
}
out_vuid_msg = "UNASSIGNED-Device address out of bounds";
} break;
case kErrorSubCodeBufferDeviceAddressAlignment: {
const char *access_type = is_write ? "OpStore" : "OpLoad";
const uint32_t alignment = (payload & kInstBuffAddrAccessPayloadMaskAccessInfo);
strm << "Unaligned pointer access: The " << access_type << " at buffer device address 0x" << std::hex << address
<< " is not aligned to the instruction Aligned operand of " << std::dec << alignment << '.';
out_vuid_msg = "VUID-RuntimeSpirv-PhysicalStorageBuffer64-06315";
} break;
default:
error_found = false;
break;
}
out_error_msg += strm.str();
return error_found;
}
bool LogMessageInstRayQuery(const uint32_t *error_record, std::string &out_error_msg, std::string &out_vuid_msg) {
using namespace glsl;
bool error_found = true;
std::ostringstream strm;
const uint32_t error_sub_code = (error_record[kHeaderShaderIdErrorOffset] & kErrorSubCodeMask) >> kErrorSubCodeShift;
switch (error_sub_code) {
case kErrorSubCodeRayQueryNegativeMin: {
// TODO - Figure a way to properly use GLSL floatBitsToUint and print the float values
strm << "OpRayQueryInitializeKHR operand Ray Tmin value is negative. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06349";
} break;
case kErrorSubCodeRayQueryNegativeMax: {
strm << "OpRayQueryInitializeKHR operand Ray Tmax value is negative. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06349";
} break;
case kErrorSubCodeRayQueryMinMax: {
strm << "OpRayQueryInitializeKHR operand Ray Tmax is less than RayTmin. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06350";
} break;
case kErrorSubCodeRayQueryMinNaN: {
strm << "OpRayQueryInitializeKHR operand Ray Tmin is NaN. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06351";
} break;
case kErrorSubCodeRayQueryMaxNaN: {
strm << "OpRayQueryInitializeKHR operand Ray Tmax is NaN. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06351";
} break;
case kErrorSubCodeRayQueryOriginNaN: {
strm << "OpRayQueryInitializeKHR operand Ray Origin contains a NaN. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06351";
} break;
case kErrorSubCodeRayQueryDirectionNaN: {
strm << "OpRayQueryInitializeKHR operand Ray Direction contains a NaN. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06351";
} break;
case kErrorSubCodeRayQueryOriginFinite: {
strm << "OpRayQueryInitializeKHR operand Ray Origin contains a non-finite value. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06348";
} break;
case kErrorSubCodeRayQueryDirectionFinite: {
strm << "OpRayQueryInitializeKHR operand Ray Direction contains a non-finite value. ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06348";
} break;
case kErrorSubCodeRayQueryBothSkip: {
const uint32_t value = error_record[kInstRayQueryParamOffset_0];
strm << "OpRayQueryInitializeKHR operand Ray Flags is 0x" << std::hex << value << ". ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06889";
} break;
case kErrorSubCodeRayQuerySkipCull: {
const uint32_t value = error_record[kInstRayQueryParamOffset_0];
strm << "OpRayQueryInitializeKHR operand Ray Flags is 0x" << std::hex << value << ". ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06890";
} break;
case kErrorSubCodeRayQueryOpaque: {
const uint32_t value = error_record[kInstRayQueryParamOffset_0];
strm << "OpRayQueryInitializeKHR operand Ray Flags is 0x" << std::hex << value << ". ";
out_vuid_msg = "VUID-RuntimeSpirv-OpRayQueryInitializeKHR-06891";
} break;
default:
error_found = false;
break;
}
out_error_msg += strm.str();
return error_found;
}
bool LogMessageInstIndexedDraw(Validator &gpuav, const uint32_t *error_record, std::string &out_error_msg,
std::string &out_vuid_msg, const Location &loc, const InstrumentationErrorBlob &inst_error_blob) {
const uint32_t error_sub_code =
(error_record[glsl::kHeaderShaderIdErrorOffset] & glsl::kErrorSubCodeMask) >> glsl::kErrorSubCodeShift;
if (error_sub_code != glsl::kErrorSubCode_IndexedDraw_OOBVertexIndex &&
error_sub_code != glsl::kErrorSubCode_IndexedDraw_OOBInstanceIndex) {
return false;
}
switch (loc.function) {
case vvl::Func::vkCmdDrawIndexed:
out_vuid_msg = "VUID-vkCmdDrawIndexed-None-02721";
break;
case vvl::Func::vkCmdDrawIndexedIndirectCount:
case vvl::Func::vkCmdDrawIndexedIndirectCountKHR:
out_vuid_msg = "VUID-vkCmdDrawIndexedIndirectCount-None-02721";
break;
case vvl::Func::vkCmdDrawIndexedIndirect:
out_vuid_msg = "VUID-vkCmdDrawIndexedIndirect-None-02721";
break;
case vvl::Func::vkCmdDrawMultiIndexedEXT:
out_vuid_msg = "VUID-vkCmdDrawMultiIndexedEXT-None-02721";
break;
default:
return false;
}
assert(inst_error_blob.vertex_attribute_fetch_limit_vertex_input_rate.has_value() ||
inst_error_blob.vertex_attribute_fetch_limit_instance_input_rate.has_value());
assert(inst_error_blob.index_buffer_binding.has_value());
auto add_vertex_buffer_binding_info = [&gpuav, error_sub_code](const VertexAttributeFetchLimit &vertex_attribute_fetch_limit,
std::string &out) {
out += "- Buffer: ";
out += gpuav.FormatHandle(vertex_attribute_fetch_limit.binding_info.buffer);
out += '\n';
out += "- Binding: ";
out += std::to_string(vertex_attribute_fetch_limit.attribute.binding);
out += '\n';
out += "- Binding size (effective): ";
out += std::to_string(vertex_attribute_fetch_limit.binding_info.effective_size);
out += " bytes\n";
out += "- Binding offset: ";
out += std::to_string(vertex_attribute_fetch_limit.binding_info.offset);
out += " bytes\n";
out += "- Binding stride: ";
out += std::to_string(vertex_attribute_fetch_limit.binding_info.stride);
out += " bytes\n";
out += "- Vertices count: ";
out += std::to_string(vertex_attribute_fetch_limit.max_vertex_attributes_count);
out += '\n';
if (error_sub_code == glsl::kErrorSubCode_IndexedDraw_OOBInstanceIndex) {
if (vertex_attribute_fetch_limit.instance_rate_divisor != vvl::kU32Max) {
out += "- Instance rate divisor: ";
out += std::to_string(vertex_attribute_fetch_limit.instance_rate_divisor);
out += '\n';
}
}
};
auto add_vertex_attribute_info = [](const VertexAttributeFetchLimit &vertex_attribute_fetch_limit, std::string &out) {
out += "At least the following vertex attribute caused OOB access:\n";
out += "- Location: ";
out += std::to_string(vertex_attribute_fetch_limit.attribute.location);
out += '\n';
out += "- Binding: ";
out += std::to_string(vertex_attribute_fetch_limit.attribute.binding);
out += '\n';
out += "- Format: ";
out += string_VkFormat(vertex_attribute_fetch_limit.attribute.format);
out += '\n';
out += "- Offset: ";
out += std::to_string(vertex_attribute_fetch_limit.attribute.offset);
out += " bytes\n";
};
if (error_sub_code == glsl::kErrorSubCode_IndexedDraw_OOBVertexIndex) {
out_error_msg += "Vertex index ";
const uint32_t oob_vertex_index = error_record[glsl::kHeaderStageInfoOffset_0];
out_error_msg += std::to_string(oob_vertex_index);
} else if (error_sub_code == glsl::kErrorSubCode_IndexedDraw_OOBInstanceIndex) {
out_error_msg += "Instance index ";
const uint32_t oob_instance_index = error_record[glsl::kHeaderStageInfoOffset_1];
out_error_msg += std::to_string(oob_instance_index);
const uint32_t instance_rate_divisor =
inst_error_blob.vertex_attribute_fetch_limit_instance_input_rate->instance_rate_divisor;
if (instance_rate_divisor > 1 && instance_rate_divisor != vvl::kU32Max) {
out_error_msg += " (or ";
out_error_msg += std::to_string(oob_instance_index / instance_rate_divisor);
out_error_msg += " if divided by instance rate divisor of ";
out_error_msg += std::to_string(instance_rate_divisor);
out_error_msg += ")";
}
}
out_error_msg += " is not within the smallest bound vertex buffer.\n";
if (error_sub_code == glsl::kErrorSubCode_IndexedDraw_OOBVertexIndex) {
out_error_msg += "Smallest vertex buffer binding info, causing OOB access with VK_VERTEX_INPUT_RATE_VERTEX:\n";
add_vertex_buffer_binding_info(*inst_error_blob.vertex_attribute_fetch_limit_vertex_input_rate, out_error_msg);
add_vertex_attribute_info(*inst_error_blob.vertex_attribute_fetch_limit_vertex_input_rate, out_error_msg);
} else if (error_sub_code == glsl::kErrorSubCode_IndexedDraw_OOBInstanceIndex) {
out_error_msg += "Smallest vertex buffer binding info, causing OOB access with VK_VERTEX_INPUT_RATE_INSTANCE:\n";
add_vertex_buffer_binding_info(*inst_error_blob.vertex_attribute_fetch_limit_instance_input_rate, out_error_msg);
add_vertex_attribute_info(*inst_error_blob.vertex_attribute_fetch_limit_instance_input_rate, out_error_msg);
}
if (error_sub_code == glsl::kErrorSubCode_IndexedDraw_OOBVertexIndex) {
const uint32_t index_bits_size = GetIndexBitsSize(inst_error_blob.index_buffer_binding->index_type);
const uint32_t max_indices_in_buffer =
static_cast<uint32_t>(inst_error_blob.index_buffer_binding->size / (index_bits_size / 8u));
out_error_msg += "Index buffer binding info:\n";
out_error_msg += "- Buffer: ";
out_error_msg += gpuav.FormatHandle(inst_error_blob.index_buffer_binding->buffer);
out_error_msg += '\n';
out_error_msg += "- Index type: ";
out_error_msg += string_VkIndexType(inst_error_blob.index_buffer_binding->index_type);
out_error_msg += '\n';
out_error_msg += "- Binding offset: ";
out_error_msg += std::to_string(inst_error_blob.index_buffer_binding->offset);
out_error_msg += " bytes\n";
out_error_msg += "- Binding size: ";
out_error_msg += std::to_string(inst_error_blob.index_buffer_binding->size);
out_error_msg += " bytes (or ";
out_error_msg += std::to_string(max_indices_in_buffer);
out_error_msg += ' ';
out_error_msg += string_VkIndexType(inst_error_blob.index_buffer_binding->index_type);
out_error_msg += ")\n";
}
out_error_msg +=
"Note: Vertex buffer binding size is the effective, valid one, based on how the VkBuffer was created and "
"vertex buffer binding parameters. So it can be clamped up to 0 if binding was invalid.";
return true;
}
// Pull together all the information from the debug record to build the error message strings,
// and then assemble them into a single message string.
// Retrieve the shader program referenced by the unique shader ID provided in the debug record.
// We had to keep a copy of the shader program with the same lifecycle as the pipeline to make
// sure it is available when the pipeline is submitted. (The ShaderModule tracking object also
// keeps a copy, but it can be destroyed after the pipeline is created and before it is submitted.)
//
bool LogInstrumentationError(Validator &gpuav, const CommandBufferSubState &cb_state, const LogObjectList &objlist,
const InstrumentationErrorBlob &instrumentation_error_blob,
const std::vector<std::string> &initial_label_stack, const uint32_t *error_record,
const Location &loc) {
// The second word in the debug output buffer is the number of words that would have
// been written by the shader instrumentation, if there was enough room in the buffer we provided.
// The number of words actually written by the shaders is determined by the size of the buffer
// we provide via the descriptor. So, we process only the number of words that can fit in the
// buffer.
// Each "report" written by the shader instrumentation is considered a "record". This function
// is hard-coded to process only one record because it expects the buffer to be large enough to
// hold only one record. If there is a desire to process more than one record, this function needs
// to be modified to loop over records and the buffer size increased.
std::string error_msg;
std::string vuid_msg;
bool error_found = false;
const uint32_t error_group = error_record[glsl::kHeaderShaderIdErrorOffset] >> glsl::kErrorGroupShift;
switch (error_group) {
case glsl::kErrorGroupInstDescriptorIndexingOOB:
error_found = LogMessageInstDescriptorIndexingOOB(gpuav, cb_state, error_record, error_msg, vuid_msg, loc,
instrumentation_error_blob);
break;
case glsl::kErrorGroupInstDescriptorClass:
error_found =
LogMessageInstDescriptorClass(gpuav, cb_state, error_record, error_msg, vuid_msg, loc, instrumentation_error_blob);
break;
case glsl::kErrorGroupInstBufferDeviceAddress:
error_found = LogMessageInstBufferDeviceAddress(error_record, error_msg, vuid_msg);
break;
case glsl::kErrorGroupInstRayQuery:
error_found = LogMessageInstRayQuery(error_record, error_msg, vuid_msg);
break;
case glsl::kErrorGroupInstIndexedDraw:
error_found = LogMessageInstIndexedDraw(gpuav, error_record, error_msg, vuid_msg, loc, instrumentation_error_blob);
break;
default:
break;
}
if (error_found) {
// Lookup the VkShaderModule handle and SPIR-V code used to create the shader, using the unique shader ID value returned
// by the instrumented shader.
const InstrumentedShader *instrumented_shader = nullptr;
const uint32_t shader_id = error_record[glsl::kHeaderShaderIdErrorOffset] & glsl::kShaderIdMask;
auto it = gpuav.instrumented_shaders_map_.find(shader_id);
if (it != gpuav.instrumented_shaders_map_.end()) {
instrumented_shader = &it->second;
}
std::string debug_region_name =
cb_state.GetDebugLabelRegion(instrumentation_error_blob.label_command_i, initial_label_stack);
Location loc_with_debug_region(loc, debug_region_name);
const uint32_t stage_id = error_record[glsl::kHeaderStageInstructionIdOffset] >> glsl::kStageIdShift;
const uint32_t instruction_position = error_record[glsl::kHeaderStageInstructionIdOffset] & glsl::kInstructionIdMask;
GpuShaderInstrumentor::ShaderMessageInfo shader_info{stage_id,
error_record[glsl::kHeaderStageInfoOffset_0],
error_record[glsl::kHeaderStageInfoOffset_1],
error_record[glsl::kHeaderStageInfoOffset_2],
instruction_position,
shader_id};
std::string debug_info_message = gpuav.GenerateDebugInfoMessage(cb_state.VkHandle(), shader_info, instrumented_shader,
instrumentation_error_blob.pipeline_bind_point,
instrumentation_error_blob.operation_index);
gpuav.LogError(vuid_msg.c_str(), objlist, loc_with_debug_region, "%s\n%s", error_msg.c_str(), debug_info_message.c_str());
}
return error_found;
}
} // namespace gpuav
|