Closed Bug 1460087 Opened 6 years ago Closed 6 years ago

Crash in mozalloc_abort | abort | webrender::frame_builder::FrameBuilder::build

Categories

(Core :: Graphics: WebRender, defect, P3)

Product:
Core
Component:
Graphics: WebRender
Platform:
x86_64
Linux
Type:
defect

Tracking

()

Status:
RESOLVED WONTFIX
Tracking Flags:
Tracking Status
firefox-esr52 --- unaffected
firefox-esr60 --- disabled
firefox60 --- disabled
firefox61 --- disabled
firefox62 --- disabled

People

(Reporter: jan, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash, nightly-community)

Crash Data

Seen on Socorro.

bp-c30edafe-ed12-445e-91a4-b296b0180508 build 2018-05-08_100105 Linux
> index out of bounds: the len is 95 but the index is 3857049061

-----

See Also:

bug 1458926 mentions webrender::frame_builder::FrameBuilder::build.

(Kartikaya Gupta (email:kats@mozilla.com) from bug 1424126 comment 2)
> However, the value `3857049061` is 0xE5E5E5E5 which is jemalloc fills in for freed memory. so this is really a use-after-free instance which is bad news.
> Hopefully it doesn't come back.
Crash Signature: [@ mozalloc_abort | abort | webrender::frame_builder::FrameBuilder::build ]
See Also: → 1478040
Priority: P2 → P3
Very low volume
Blocks: stage-wr-next
No longer blocks: stage-wr-trains
Closing because no crash reported since 12 weeks.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
Closing because no crash reported since 12 weeks.
You need to log in before you can comment on or make changes to this bug.