1514314 - Hit MOZ_CRASH(Unable to find a bin!) at libcore/option.rs:1008

Status: RESOLVED WORKSFORME

(Core :: Graphics: WebRender, defect, P3)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

Hit MOZ_CRASH(Unable to find a bin!) at libcore/option.rs:1008

#0 MOZ_CrashOOL(char const*, int, char const*) src/obj-firefox/dist/include/mozilla/Assertions.h:314:3
#1 GeckoCrashOOL src/toolkit/xre/nsAppRunner.cpp:5118:3
#2 gkrust_shared::panic_hook::h401d739bae90b680 src/toolkit/library/rust/shared/lib.rs:234:8
#3 core::ops::function::Fn::call::h45a1e4aef5328104 src/libcore/ops/function.rs:78:4
#4 std::panicking::rust_panic_with_hook::h71214e7ce0f7ac01 /rustc/abe02cefd6cd1916df62ad7dc80161bea50b72e8/src/libstd/panicking.rs:480:16
#5 std::panicking::continue_panic_fmt::ha8b8442f4ea9bcac /rustc/abe02cefd6cd1916df62ad7dc80161bea50b72e8/src/libstd/panicking.rs:390:4
#6 rust_begin_unwind /rustc/abe02cefd6cd1916df62ad7dc80161bea50b72e8/src/libstd/panicking.rs:325:4
#7 core::panicking::panic_fmt::h0c93626b89c38af6 /rustc/abe02cefd6cd1916df62ad7dc80161bea50b72e8/src/libcore/panicking.rs:77:13
#8 core::option::expect_failed::h143b3841283cabae /rustc/abe02cefd6cd1916df62ad7dc80161bea50b72e8/src/libcore/option.rs:1008:4
#9 _$LT$core..option..Option$LT$T$GT$$GT$::expect::hf49811cd08a06408 src/libcore/option.rs:322:20
#10 webrender::texture_allocator::FreeListBin::for_size::h8c4288919fd83ac2 src/gfx/wr/webrender/src/texture_allocator.rs:28
#11 webrender::texture_allocator::ArrayAllocationTracker::find_index_of_best_rect::h2201d5e0e2efbdee src/gfx/wr/webrender/src/texture_allocator.rs:92
#12 webrender::texture_allocator::ArrayAllocationTracker::allocate::h027f63df01bd3e0d src/gfx/wr/webrender/src/texture_allocator.rs:184
#13 _$LT$webrender..tiling..RenderTargetList$LT$T$GT$$GT$::allocate::h22736ca46bc49a3c src/gfx/wr/webrender/src/tiling.rs:216:46
#14 webrender::tiling::RenderPass::build::h45c54ebc5a98f098 src/gfx/wr/webrender/src/tiling.rs:966
#15 webrender::frame_builder::FrameBuilder::build::h9cd37aaa2b9c417c src/gfx/wr/webrender/src/frame_builder.rs:481:12
#16 webrender::render_backend::Document::build_frame::h2d761a959650c667 src/gfx/wr/webrender/src/render_backend.rs:453:24
#17 webrender::render_backend::RenderBackend::update_document::h025531d8280a6988 src/gfx/wr/webrender/src/render_backend.rs:1292:40
#18 webrender::render_backend::RenderBackend::prepare_transaction::h4e249645b05ec615 src/gfx/wr/webrender/src/render_backend.rs:1149:12
#19 webrender::render_backend::RenderBackend::process_api_msg::hed3cac4ae697ceb6 src/gfx/wr/webrender/src/render_backend.rs:1084
#20 webrender::render_backend::RenderBackend::run::h86711d8166bf90b7 src/gfx/wr/webrender/src/render_backend.rs:859:20
#21 webrender::renderer::Renderer::new::_$u7b$$u7b$closure$u7d$$u7d$::hd1fdba1dafd51c81 src/gfx/wr/webrender/src/renderer.rs:1963:12
#22 std::sys_common::backtrace::__rust_begin_short_backtrace::hf832fac6e06a10d4 src/libstd/sys_common/backtrace.rs:136
#23 std::thread::Builder::spawn::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h2a8afb0c6904aaa9 src/libstd/thread/mod.rs:409:20
#24 _$LT$std..panic..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h4e32a72b426a8e64 src/libstd/panic.rs:313
#25 std::panicking::try::do_call::h5178cf8ba36f0661 (.llvm.17563859318216925522) src/libstd/panicking.rs:310
#26 __rust_maybe_catch_panic /rustc/abe02cefd6cd1916df62ad7dc80161bea50b72e8/src/libpanic_abort/lib.rs:39:4

Comment 1

[Darkspirit]

bp-08116d8e-01ee-4e22-8c70-c3ff80181214

Comment 2

[Jeff Muizelaar [:jrmuizel]]

Do you still see this?

Comment 3

[Tyson Smith [:tsmith]]

This test case now give me this assertion:
Hit MOZ_CRASH(assertion failed: combined_local_clip_rect.size.width >= 0.0 && combined_local_clip_rect.size.height >= 0.0) at gfx/wr/webrender/src/prim_store/mod.rs:2188

Comment 4

[Tyson Smith [:tsmith]]

This bug was last seen by fuzzers with build m-c 20190303-06f0c5e35c3a

Comment 5

[Glenn Watson [:gw]]

Appears to no longer be getting hit (the atlas allocator has significantly changed since then).