1269204 - crash in igd10umd32.dll@0x6d89f

Status: RESOLVED FIXED

(Core :: Audio/Video: Playback, defect, P1)

Description

[Marco Castelluccio [:marco]]

This bug was filed from the Socorro interface and is 
report bp-d508449a-83e0-4370-806f-57fc12160427.
=============================================================

All crashes are on Windows 8 and Windows 8.1.

The crash started to appear in Firefox 47.

Comment 1

[Marco Castelluccio [:marco]]

Crashing Thread (57)
Frame 	Module 	Signature 	Source
Ø 0 	igd10umd32.dll 	igd10umd32.dll@0x6d89f 	
Ø 1 	igd10umd32.dll 	igd10umd32.dll@0x69f3d 	
Ø 2 	igd10umd32.dll 	igd10umd32.dll@0x6d674 	
Ø 3 	igd10umd32.dll 	igd10umd32.dll@0x8af2e 	
Ø 4 	igd10umd32.dll 	igd10umd32.dll@0x868bb 	
Ø 5 	igd10umd32.dll 	igd10umd32.dll@0x8699f 	
Ø 6 	igd10umd32.dll 	igd10umd32.dll@0x86f13 	
Ø 7 	igd10umd32.dll 	igd10umd32.dll@0x6e70d 	
Ø 8 	igd10umd32.dll 	igd10umd32.dll@0x79718 	
9 	d3d11.dll 	CVideoProcessor::Blt(ID3D11VideoProcessorOutputView*, unsigned int, unsigned int, D3D11_VIDEO_PROCESSOR_STREAM const*) 	
10 	d3d11.dll 	d3d11.dll@0x2d569 	
11 	msvproc.dll 	CxCodeVideoProcMFTDataHandler::DoProcessSampleD3D11(unsigned long, _MFT_OUTPUT_DATA_BUFFER*, unsigned long*, int*) 	
12 	msvproc.dll 	CxCodeVideoProcMFTDataHandler::InternalProcessOutput(unsigned long, unsigned long, _MFT_OUTPUT_DATA_BUFFER*, unsigned long*) 	
13 	msvproc.dll 	__report_gsfailure 	
14 	msvproc.dll 	CMFTBase::ProcessOutput(unsigned long, unsigned long, _MFT_OUTPUT_DATA_BUFFER*, unsigned long*) 	
15 	xul.dll 	mozilla::MFTDecoder::Output(RefPtr<IMFSample>*) 	dom/media/platforms/wmf/MFTDecoder.cpp
16 	xul.dll 	mozilla::D3D11DXVA2Manager::CopyToImage(IMFSample*, mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::ImageContainer*, mozilla::layers::Image**) 	dom/media/platforms/wmf/DXVA2Manager.cpp
17 	xul.dll 	mozilla::WMFVideoMFTManager::CreateD3DVideoFrame(IMFSample*, __int64, mozilla::VideoData**) 	dom/media/platforms/wmf/WMFVideoMFTManager.cpp
18 	xul.dll 	mozilla::WMFVideoMFTManager::Output(__int64, RefPtr<mozilla::MediaData>&) 	dom/media/platforms/wmf/WMFVideoMFTManager.cpp
19 		@0x146d45b7 	
20 	xul.dll 	mozilla::WMFMediaDataDecoder::ProcessOutput() 	dom/media/platforms/wmf/WMFMediaDataDecoder.cpp
21 	xul.dll 	mozilla::WMFMediaDataDecoder::ProcessDecode(mozilla::MediaRawData*) 	dom/media/platforms/wmf/WMFMediaDataDecoder.cpp
22 	xul.dll 	nsRunnableMethodImpl<void ( mozilla::DataStorage::*)(char const*), 1, char const*>::Run() 	xpcom/glue/nsThreadUtils.h
23 	xul.dll 	mozilla::TaskQueue::Runner::Run() 	xpcom/threads/TaskQueue.cpp
24 	xul.dll 	nsThreadPool::Run() 	xpcom/threads/nsThreadPool.cpp
25 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp

Comment 2

[[:philipp]]

[Tracking Requested - why for this release]:
also adding a tracking flag to make sure this is on our radar. those signatures are all regressing in 47 builds and make up 0.5% of crashes on 47 beta builds currently.

Comment 3

[Maire Reavy [:mreavy]]

Anthony, This is being tracked as a new regression in fx47. Is there anyone available to look at this?  Thanks.

Comment 4

[Chris Pearce [:cpearce (Not reading bugmail)]]

Gerald: can you blacklist here too please?

Comment 5

[Gerald Squelart (he/him) (not at Mozilla since 2022-09-15)]

I'll look into this soon after/with bug 1268905.

Comment 6

[Gerald Squelart (he/him) (not at Mozilla since 2022-09-15)]

Attachment: MozReview Request: Bug 1269204 - Disable D3D11 with idg10umd32 9.17.10.2857 - r?cpearce

Review commit: https://reviewboard.mozilla.org/r/53056/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/53056/

Comment 7

[Chris Pearce [:cpearce (Not reading bugmail)]]

Comment on attachment 8753176 [details]
MozReview Request: Bug 1269204 - Disable D3D11 with idg10umd32 9.17.10.2857 - r?cpearce

https://reviewboard.mozilla.org/r/53056/#review49882

Comment 8

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/5e036bee6915

Comment 9

[Marco Castelluccio [:marco]]

Looks like igd10iumd32.dll is also affected? See https://crash-stats.mozilla.com/report/index/6bc4331d-c2d3-4c5b-aa76-9acac2160511.

Comment 10

[Marco Castelluccio [:marco]]

CVideoProcessor::CLS::FinalConstruct also looks related with Intel devices.

Comment 11

[Marco Castelluccio [:marco]]

Also igd11dxva32.dll.

Comment 12

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/5e036bee6915

Comment 13

[Ritu Kothari (:ritu) (Inactive, please n-i to RyanVM, jcristau, or pascal)]

Hello Gerald, should we consider uplifting this fix to Beta47? Thanks!

Comment 14

[Gerald Squelart (he/him) (not at Mozilla since 2022-09-15)]

(In reply to Ritu Kothari (:ritu) from comment #13)
> Hello Gerald, should we consider uplifting this fix to Beta47? Thanks!

Thank you for asking.

I am working on a better solution right now in bug 1273691, which will include fixes for bug 1268905, this bug 1269204, and bug 1273406.
I'm hoping to just uplift that bug, and it will be easier to uplift future related ones too (through a pref change instead of a code change).

Comment 15

[Gerald Squelart (he/him) (not at Mozilla since 2022-09-15)]

Moved the following signatures to bug 1274127: (as they were not covered by the fix in this bug here)
[@ igd10iumd32.dll@0x12d7bc]
[@ igd10iumd32.dll@0x12e1cc]
[@ igd10umd32.dll@0x14b17c]
[@ @0x0 | igd10umd32.dll@0x178a5f]

Also taking one of the reports from [@ TppRaiseInvalidParameter].

Comment 16

[Gerald Squelart (he/him) (not at Mozilla since 2022-09-15)]

Moved the following signatures to bug 1274132: (as they were not covered by the fix in this bug here)
[@ CVideoProcessor::CLS::FinalConstruct]
[@ TppRaiseInvalidParameter]
[@ igd11dxva32.dll@0x3144f]

Comment 17

[Gerald Squelart (he/him) (not at Mozilla since 2022-09-15)]

Fixed in 48 by landing bug 1273691 there.