1364700 - Crash in NOutermost::CDevice::CreateLayeredChild

Status: RESOLVED WORKSFORME

(Core :: Graphics: Layers, defect, P3)

Description

[Julian Seward [:jseward]]

This bug was filed from the Socorro interface and is 
report bp-f1607c6b-6744-4518-834c-d07870170511.
=============================================================

This is #17 topcrash in the Windows nightlies of 20170511063838.
It's only a single instance but looks like it might be actionable.

Comment 1

[Vincent Liu[:vliu]]

The last 3 frames were in d3d11.dll, I couldn't see anything. 
00000068`b3bfbf70 00007ffa`ab213602 d3d11!NOutermost::CDevice::CreateLayeredChild+0x355
00000068`b3bfc160 00007ffa`ab20e94f d3d11!CDevice::CreateTexture2D_Worker+0x412
00000068`b3bfc580 00007ffa`839a8edf d3d11!CDevice::CreateTexture2D+0xbf

The aTextureFlags carried in CreateForDrawing() was IMMEDIATE_UPLOAD, which means we don't need to have a sourceSurface fed into UploadData when we called CreateTexture2D() in [1].

00000068`b3bfcb48 mozilla::layers::TextureFlags aTextureFlags = IMMEDIATE_UPLOAD (0n1024)
@r15              class mozilla::gfx::SourceSurface * aSurface = 0x00000000`00000000

[1]: https://searchfox.org/mozilla-central/rev/24c443a440104dabd9447608bd41b8766e8fc2f5/gfx/layers/d3d11/TextureD3D11.cpp#452

Based on above, I don't see anything to cause this crash.

Comment 2

[David Anderson [:dvander] - inactive, e-mail if emergency]

Agreed, unless the address being passed to copy pixels from is garbage, this is probably a driver bug. I guess we can see if it spikes.

Comment 3

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

This is a P1 bug without an assignee. 

P1 are bugs which are being worked on for the current release cycle/iteration/sprint. 

If the bug is not assigned by Monday, 28 August, the bug's priority will be reset to '--'.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.