On the Mesa side I think the bug is in https://cgit.freedesktop.org/mesa/mesa/tree/src/gallium/drivers/svga/svga_tgsi_vgpu10.c?id=ccb4ea5a43e89fcc93fff98c881639223f1538e5#n5130 where it isn't asserting that start+count <= VGPU10_MAX_TEMPS.
Bug 1843782 Comment 70 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
On the Mesa side I think the bug is in https://cgit.freedesktop.org/mesa/mesa/tree/src/gallium/drivers/svga/svga_tgsi_vgpu10.c?id=ccb4ea5a43e89fcc93fff98c881639223f1538e5#n5130 where it isn't asserting that first+count <= VGPU10_MAX_TEMPS.
On the Mesa side I think the bug is in https://cgit.freedesktop.org/mesa/mesa/tree/src/gallium/drivers/svga/svga_tgsi_vgpu10.c?id=ccb4ea5a43e89fcc93fff98c881639223f1538e5#n5130 where it isn't asserting that first+count <= VGPU10_MAX_TEMPS (which is defined as 4096 in https://cgit.freedesktop.org/mesa/mesa/tree/src/gallium/drivers/svga/include/VGPU10ShaderTokens.h?id=ccb4ea5a43e89fcc93fff98c881639223f1538e5#n43 ).