:lsalzman confirms that the memory `FlipYDataSourceSurface` is trying to write to in the crashes is deliberately mapped read-only. This means the crash does not indicate a dangling pointer, so this is probably not security-sensitive. Tyler, do you want to re-flag this?
Bug 1879651 Comment 10 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
:lsalzman confirms that the memory `FlipYDataSourceSurface` is trying to write to in the crashes is deliberately mapped read-only, but that that's probably a bug and it needs to be mapped read-write anyway. This means the crash does not indicate a dangling pointer, so this is probably not security-sensitive. Tyler, do you want to re-flag this?