Closed
Bug 1379939
Opened 8 years ago
Closed 8 years ago
WebGL Null Dereference read in xul!mozilla::ScopedDrawHelper::ScopedDrawHelper+1ca
Categories
(Core :: Graphics: CanvasWebGL, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1379995
People
(Reporter: aral.yaman, Unassigned)
Details
Attachments
(3 files)
User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
Build ID: 20170710030203
Steps to reproduce:
Open crash.html and click the "crash me" button
Actual results:
Firefox is going to crash
See attached windbgOutput and Crashreport https://crash-stats.mozilla.com/report/index/4db01008-3559-484b-9f93-d0f350170711
Expected results:
No crash
|
Reporter | |
Comment 1•8 years ago
|
||
|
||
Updated•8 years ago
|
Component: Untriaged → Canvas: WebGL
Product: Firefox → Core
|
|
Reporter | |
Comment 2•8 years ago
|
||
Comment on attachment 8885214 [details]
crash.html
><!DOCTYPE html>
><html>
><button onclick="start()"> crash me </button>
><head>
><script>
>function start() {
> gl = canvas.getContext("webgl") || canvas.getContext("experimental-webgl");
> var program = gl.createProgram();
> var vShader = gl.createShader(gl.VERTEX_SHADER);
> var fShader = gl.createShader(gl.FRAGMENT_SHADER);
> gl.shaderSource(vShader,'attribute vec3 pos;void main(){gl_Position = vec4(pos, 2.0);}');
> gl.shaderSource(fShader,'void main() {gl_FragColor = vec4(0.5, 0.5, 1.0, 1.0);}');
> gl.compileShader(vShader);
> gl.compileShader(fShader);
> gl.attachShader(program, vShader);
> gl.attachShader(program, fShader);
> gl.linkProgram(program);
> var buffer = gl.createBuffer();
> var attr = gl.getAttribLocation(program, 'pos');
> gl.bindBuffer(gl.ARRAY_BUFFER, buffer);
> gl.enableVertexAttribArray(attr);
> gl.bufferData(gl.ARRAY_BUFFER, new Float32Array([-1, 0, 0,0, 1, 0,0, -1, 0,1, 0, 0]),gl.STATIC_DRAW);
> gl.useProgram(program);
> gl.vertexAttribPointer(attr, 3, gl.FLOAT, false, 0, 0);
> gl.drawArrays(gl.TRIANGLES, 0, 3);
> gl.deleteBuffer(buffer);
> gl.drawArrays(gl.TRIANGLES, 0, 3);
>}
></script></head><body ><h1>try crash</h1><canvas id="canvas" width="400" height="240" style="border: 1px dotted grey"></canvas></body></html>
|
|
Reporter | |
Comment 3•8 years ago
|
||
|
|
||
Updated•8 years ago
|
Keywords: crash,
crashreportid
|
||
Comment 5•8 years ago
|
||
I think this is a duplicate of Bug 1379995.
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•