[Impeller] Fatal SIGSEGV crash 3.32.5 with drawAtlas + BlendMode.colorBurn

### Steps to reproduce

1. Install flutter **3.32.5**
2. Use example code
3. Run on Google Pixel 8a with impeller
4. Crash when using canvas.drawAtlas with BlendMode.colorBurn

What works and what doesn't:
Flutter 3.32.5 + Pixel 8a + Skia: works
Flutter 3.29.3 + Pixel 8a + Impeller: works
Flutter 3.32.5 + Pixel 8a + Impeller: crash

### Expected results

Should render without crash like with 3.29.3.

### Actual results

F/libc    (19240): Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x6011a0e000 in tid 19328 (1.raster), pid 19240 (le.test_project)

### Code sample

<details open><summary>Code sample</summary>

```dart
import 'dart:ui' as ui;

import 'package:flutter/material.dart';

late final ui.Image atlas;

// Create dummy atlas.
Future<ui.Image> createAtlas() async {
  final recorder = ui.PictureRecorder();
  final canvas = Canvas(recorder, const Rect.fromLTWH(0, 0, 100, 100));
  canvas.drawRect(
    const Rect.fromLTWH(0, 0, 100, 100),
    Paint()..color = Colors.blue,
  );

  final picture = recorder.endRecording();
  return await picture.toImage(100, 100);
}

void main() async {
  atlas = await createAtlas();
  runApp(const MyApp());
}

class MyApp extends StatelessWidget {
  const MyApp({super.key});

  @override
  Widget build(BuildContext context) {
    return MaterialApp(
      title: 'Flutter Demo',
      home: Scaffold(
        body: CustomPaint(
          painter: AtlasPainter(),
          size: MediaQuery.sizeOf(context),
        ),
      ),
    );
  }
}

class AtlasPainter extends CustomPainter {
  const AtlasPainter();

  @override
  void paint(Canvas canvas, Size size) {
    final transform = RSTransform(1, 0, 50, 50);
    final rect = Rect.fromLTWH(0, 0, 100, 100);
    final color = Colors.green;

    canvas.drawAtlas(
      atlas,
      [transform],
      [rect],
      [color],
      BlendMode.colorBurn,
      null,
      Paint(),
    );
  }

  @override
  bool shouldRepaint(covariant CustomPainter oldDelegate) => true;
}
```

</details>


### Screenshots or Video




### Logs

<details open><summary>Logs</summary>

```console
√ Built build\app\outputs\flutter-apk\app-debug.apk
I/flutter (19240): [IMPORTANT:flutter/shell/platform/android/android_context_vk_impeller.cc(61)] Using the Impeller rendering backend (Vulkan).
Connecting to VM Service at ws://127.0.0.1:12671/gkJ2I2sXDR8=/ws
Connected to the VM Service.
F/libc    (19240): Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x6011a0e000 in tid 19328 (1.raster), pid 19240 (le.test_project)
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Build fingerprint: 'google/akita/akita:15/BP1A.250505.005.B1/13277630:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2025-07-07 19:41:42.818694151+0200
Process uptime: 4s
Cmdline: com.example.test_project
pid: 19240, tid: 19328, name: 1.raster  >>> com.example.test_project <<<
uid: 10453
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
pac_enabled_keys: 000000000000000f (PR_PAC_APIAKEY, PR_PAC_APIBKEY, PR_PAC_APDAKEY, PR_PAC_APDBKEY)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000006011a0e000
    x0  b400007a4cfb4050  x1  0000000000000041  x2  0000000000000000  x3  b400007956c6ed58
    x4  0000000000000000  x5  0000000000000000  x6  0000000000000000  x7  0000000000000000
    x8  0000006011a0e000  x9  0000000000000000  x10 b400007956c6ed58  x11 006300632ec00022
    x12 0500000000051688  x13 0000005fffe0e280  x14 0000000000000000  x15 b400007836d65666
    x16 0000007710b2ede0  x17 0000007a5f123040  x18 00000077087f0000  x19 b400007a4cfb4050
    x20 0000000000000000  x21 0000000000000041  x22 b400007836d04950  x23 b400007956ce19f0
    x24 0000000000000001  x25 b400007966cafbe0  x26 b400007836d04350  x27 0000000000000030
    x28 0000000000000041  x29 0000000000000000
    lr  000000776236c7b0  sp  00000077091f68b0  pc  000000776236cfb8  pst 0000000040001000
38 total frames
backtrace:
      #00 pc 000000000093afb8  /vendor/lib64/egl/libGLES_mali.so (hal::halp::descriptor_set_internal::update(unsigned int, unsigned int, hal::halp::texture_descriptor_internal const&, bool, bool)+56) (BuildId: b2c513c2de7b6713)
      #01 pc 000000000093a7ac  /vendor/lib64/egl/libGLES_mali.so (vulkan::descriptor_set::update_descriptor_set(vulkan::descriptor_set_layout const&, hal::descriptor_set&, VkWriteDescriptorSet const&)+700) (BuildId: b2c513c2de7b6713)
      #02 pc 0000000000939c78  /vendor/lib64/egl/libGLES_mali.so (vkUpdateDescriptorSets+136) (BuildId: b2c513c2de7b6713)
      #03 pc 00000000021c349c  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #04 pc 000000000217d204  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #05 pc 0000000002182948  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #06 pc 0000000002144d94  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #07 pc 0000000002145a7c  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #08 pc 0000000002145034  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #09 pc 0000000002145f98  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #10 pc 0000000001df1a50  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #11 pc 000000000214c84c  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #12 pc 0000000001df21c0  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #13 pc 0000000001df14e4  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #14 pc 0000000001df19a0  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #15 pc 000000000214dbf0  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #16 pc 000000000225a718  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #17 pc 00000000020c016c  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #18 pc 00000000020c004c  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #19 pc 00000000020c00d4  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #20 pc 00000000021e35f0  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #21 pc 00000000021e30a4  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #22 pc 00000000021e1f38  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #23 pc 00000000021e2914  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #24 pc 00000000021e4540  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #25 pc 00000000021e23a8  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #26 pc 00000000021e2140  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #27 pc 00000000021f0bbc  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #28 pc 0000000001d8b03c  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #29 pc 0000000001d90b34  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #30 pc 0000000000012a08  /system/lib64/libutils.so (android::Looper::pollOnce(int, int*, int*, void**)+1704) (BuildId: d4eb94a715daedade6859a886dcfa613)
      #31 pc 0000000000025624  /system/lib64/libandroid.so (ALooper_pollOnce+100) (BuildId: ac847135139ea79d26350bef537ddbb2)
      #32 pc 0000000001d90abc  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #33 pc 0000000001d8af88  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #34 pc 0000000001d8ee00  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #35 pc 0000000001d8ec98  /data/app/~~XKsM8HUe84WH-cMB087LGA==/com.example.test_project-Bzf9eq3CMk5ND16aomKaIA==/lib/arm64/libflutter.so (BuildId: 23a73fa24a831307633022087d5dcb9e7956000a)
      #36 pc 0000000000070374  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+180) (BuildId: 3cad38c74be79004f5b2927be886e077)
      #37 pc 00000000000620a0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 3cad38c74be79004f5b2927be886e077)
Lost connection to device.

Exited.
```

</details>


### Flutter Doctor output

<details open><summary>Doctor output</summary>

```console
[√] Flutter (Channel stable, 3.32.5, on Microsoft Windows [Version 10.0.19045.5965], locale de-DE) [439ms]
    • Flutter version 3.32.5 on channel stable at C:\development\flutter    
    • Upstream repository https://github.com/flutter/flutter.git
    • Framework revision fcf2c11572 (13 days ago), 2025-06-24 11:44:07 -0700
    • Engine revision dd93de6fb1
    • Dart version 3.8.1
    • DevTools version 2.45.1

[√] Windows Version (10 Pro 64-Bit, 22H2, 2009) [1.540ms]

[√] Android toolchain - develop for Android devices (Android SDK version 34.0.0) [2,8s]
    • Android SDK at C:\Users\Dominik\AppData\Local\Android\sdk
    • Platform android-35, build-tools 34.0.0
    • Java binary at: C:\Program Files\Android\Android Studio1\jbr\bin\java
      This is the JDK bundled with the latest Android Studio installation on this machine.
      To manually set the JDK path, use: `flutter config --jdk-dir="path/to/jdk"`.
    • Java version OpenJDK Runtime Environment (build 21.0.3+-12282718-b509.11)
    • All Android licenses accepted.

[√] Chrome - develop for the web [38ms]
    • Chrome at C:\Program Files\Google\Chrome\Application\chrome.exe

[X] Visual Studio - develop Windows apps [36ms]
    X Visual Studio not installed; this is necessary to develop Windows apps.
      Download at https://visualstudio.microsoft.com/downloads/.
      Please install the "Desktop development with C++" workload, including all of its default components

[!] Android Studio (version 2021.2) [33ms]
    • Android Studio at C:\Program Files\Android\Android Studio
    • Flutter plugin can be installed from:
       https://plugins.jetbrains.com/plugin/9212-flutter
    • Dart plugin can be installed from:
       https://plugins.jetbrains.com/plugin/6351-dart
    X Unable to determine bundled Java version.
    • Try updating or re-installing Android Studio.

[√] Android Studio (version 2024.2) [30ms]
    • Android Studio at C:\Program Files\Android\Android Studio1
    • Flutter plugin can be installed from:
       https://plugins.jetbrains.com/plugin/9212-flutter
    • Dart plugin can be installed from:
       https://plugins.jetbrains.com/plugin/6351-dart
    • Java version OpenJDK Runtime Environment (build 21.0.3+-12282718-b509.11)

[√] VS Code (version 1.101.2) [29ms]
    • VS Code at C:\Users\Dominik\AppData\Local\Programs\Microsoft VS Code
    • Flutter extension version 3.114.0

[√] Connected device (4 available) [369ms]
    • Pixel 8a (mobile) • 42231JEKB00416 • android-arm64  • Android 15 (API 35)
    • Windows (desktop) • windows        • windows-x64    • Microsoft Windows [Version 10.0.19045.5965]
    • Chrome (web)      • chrome         • web-javascript • Google Chrome 138.0.7204.97
    • Edge (web)        • edge           • web-javascript • Microsoft Edge 136.0.3240.76

[√] Network resources [693ms]
    • All expected network resources are available.
```

</details>


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Impeller] Fatal SIGSEGV crash 3.32.5 with drawAtlas + BlendMode.colorBurn #171719

Steps to reproduce

Expected results

Actual results

Code sample

Screenshots or Video

Logs

Flutter Doctor output

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[Impeller] Fatal SIGSEGV crash 3.32.5 with drawAtlas + BlendMode.colorBurn #171719

Description

Steps to reproduce

Expected results

Actual results

Code sample

Screenshots or Video

Logs

Flutter Doctor output

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions