Open Bug 1560367 Opened 3 years ago Updated 6 days ago

Crashes in wr_moz2d_render_cb on a Pixel 2

Categories

(Core :: Graphics: WebRender, defect, P3)

ARM
Android
defect

Tracking

()

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: crash)

Crash Signature: [@ wr_moz2d_render_cb]
OS: Unspecified → Android
Priority: -- → P3
Hardware: Unspecified → ARM
Summary: application crashed [@ wr_moz2d_render_cb] → Crashes in wr_moz2d_render_cb on a Pixel 2
16:56:54     INFO -  Crash reason:  SIGSEGV /SEGV_MAPERR
16:56:54     INFO -  Crash address: 0x0
16:56:54     INFO -  Process uptime: not available
16:56:54     INFO -  Thread 54 (crashed)
16:56:54     INFO -   0  libxul.so!wr_moz2d_render_cb [Moz2DImageRenderer.cpp:f52cc2c0241aadfacf7aae7de150f80b62440a5d : 474 + 0x6b6]
16:56:54     INFO -       r0 = 0x00000000    r1 = 0x000001b3    r2 = 0x00000000    r3 = 0xadd1a87a
16:56:54     INFO -       r4 = 0xb5b362b0    r5 = 0xb5b362b0    r6 = 0xb5b36244    r7 = 0xb5b36468
16:56:54     INFO -       r8 = 0xb5b36350    r9 = 0xb5b3628c   r10 = 0x00000000   r12 = 0xcb6b9304
16:56:54     INFO -       fp = 0x00000064    sp = 0xb5b361e0    lr = 0xcc7c7127    pc = 0xc8c8a1b8
16:56:54     INFO -      Found by: given as instruction pointer in context
16:56:54     INFO -   1  libxul.so!webrender_bindings::moz2d_renderer::rasterize_blob [moz2d_renderer.rs:f52cc2c0241aadfacf7aae7de150f80b62440a5d : 527 + 0x17]
16:56:54     INFO -       r4 = 0x00000064    r5 = 0xb5b36578    r6 = 0x00000001    r7 = 0xb5b36584
16:56:54     INFO -       r8 = 0x00009c40    r9 = 0x00000003   r10 = 0xb5b36548    fp = 0xb5b365a0
16:56:54     INFO -       sp = 0xb5b36470    lr = 0xca64ab55    pc = 0xca64ab55
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   2  libxul.so!<webrender_bindings::moz2d_renderer::Moz2dBlobRasterizer as webrender_api::image::AsyncBlobImageRasterizer>::rasterize [function.rs:3c235d5600393dfe6c36eeed34042efad8d4f26e : 148 + 0x21]
16:56:54     INFO -       r4 = 0xb5b36548    r5 = 0x00000030    r6 = 0xb5b36540    r7 = 0xb1f50610
16:56:54     INFO -       r8 = 0x00000000    r9 = 0xb21c59c0   r10 = 0xb5b36510    fp = 0xb5b36584
16:56:54     INFO -       sp = 0xb5b364e8    pc = 0xca64a523
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   3  libxul.so!webrender::scene_builder::Transaction::rasterize_blobs [scene_builder.rs:f52cc2c0241aadfacf7aae7de150f80b62440a5d : 75 + 0xd]
16:56:54     INFO -       r4 = 0xaeafd390    r5 = 0x00000001    r6 = 0xca64a2d1    r7 = 0x00000001
16:56:54     INFO -       r8 = 0xc138fc54    r9 = 0x00000001   r10 = 0x00000001    fp = 0xaeafd390
16:56:54     INFO -       sp = 0xb5b365e0    pc = 0xca6ab159
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   4  libxul.so!std::sys_common::backtrace::__rust_begin_short_backtrace [backtrace.rs:3c235d5600393dfe6c36eeed34042efad8d4f26e : 136 + 0xdb]
16:56:54     INFO -       r4 = 0xb5b36690    r5 = 0x00000001    r6 = 0xb5b36680    r7 = 0xb5b36678
16:56:54     INFO -       r8 = 0xc138fc54    r9 = 0x00000001   r10 = 0x00000001    fp = 0xaeafd390
16:56:54     INFO -       sp = 0xb5b36628    pc = 0xca782537
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   5  libxul.so!std::thread::Builder::spawn_unchecked::{{closure}} [mod.rs:3c235d5600393dfe6c36eeed34042efad8d4f26e : 469 + 0x27]
16:56:54     INFO -       r4 = 0xb5b368f0    r5 = 0xbf29ba90    r6 = 0xb5b368b8    r7 = 0x00000000
16:56:54     INFO -       r8 = 0xbf29bac0    r9 = 0xcb6a1d64   r10 = 0xcaaaac6d    fp = 0x00000016
16:56:54     INFO -       sp = 0xb5b368b0    pc = 0xca7823f5
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   6  libxul.so!call_once<(),FnBox<()>> [boxed.rs:3c235d5600393dfe6c36eeed34042efad8d4f26e : 702 + 0x29]
16:56:54     INFO -       r4 = 0x0000002c    r5 = 0xb5b368f0    r6 = 0xb5b36920    r7 = 0xb5b36938
16:56:54     INFO -       r8 = 0xbf29bac0    r9 = 0xcb6a1d64   r10 = 0xcaaaac6d    fp = 0x00000016
16:56:54     INFO -       sp = 0xb5b368f0    pc = 0xcaaa9485
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   7  libxul.so!thread_start [thread.rs:3c235d5600393dfe6c36eeed34042efad8d4f26e : 80 + 0x7]
16:56:54     INFO -       r4 = 0xc134d958    r5 = 0xb5b36970    r6 = 0xb5b36970    r7 = 0x00000078
16:56:54     INFO -       r8 = 0x000017a0    r9 = 0x000017df   r10 = 0xcaaaac6d    fp = 0x00000016
16:56:54     INFO -       sp = 0xb5b36950    pc = 0xcaaaac79
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   8  libc.so + 0x47947
16:56:54     INFO -       r4 = 0xb5b36970    r5 = 0xb5b36970    r6 = 0xb5b36970    r7 = 0x00000078
16:56:54     INFO -       r8 = 0x000017a0    r9 = 0x000017df   r10 = 0xcaaaac6d    fp = 0x00000016
16:56:54     INFO -       sp = 0xb5b36958    pc = 0xe9660949
16:56:54     INFO -      Found by: call frame info
16:56:54     INFO -   9  libc.so + 0x4792f
16:56:54     INFO -       sp = 0xb5b3695c    pc = 0xe9660931
16:56:54     INFO -      Found by: stack scanning
16:56:54     INFO -  10  libc.so + 0x1b381
16:56:54     INFO -       sp = 0xb5b36960    pc = 0xe9634383
16:56:54     INFO -      Found by: stack scanning
16:56:54     INFO -  11  libc.so + 0x4792f
16:56:54     INFO -       sp = 0xb5b36968    pc = 0xe9660931
16:56:54     INFO -      Found by: stack scanning
16:56:54     INFO -  12  libxul.so!new [thread.rs:3c235d5600393dfe6c36eeed34042efad8d4f26e : 0 + 0x71]
16:56:54     INFO -       sp = 0xb5b369a4    pc = 0xcaaaac6d
16:56:54     INFO -      Found by: stack scanning

The gfx critical error is:

[GFX1-]: Replay failure: CreateSimilarDrawTarget PLAY

CreateSimilarDrawTarget suggests that it might be OOM?

I have been unsuccessful in reproducing this locally, running subsets of tests including the one that fails in automation. I might have to try running the whole chunk.

QA Whiteboard: qa-not-actionable
You need to log in before you can comment on or make changes to this bug.