Closed
Bug 1573528
Opened 5 years ago
Closed 2 years ago
Assertion failure: NS_IsMainThread(), at /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/ClearOnShutdown.h:95
Categories
(Core :: WebVR, defect, P3)
Core
WebVR
Tracking
()
RESOLVED
WORKSFORME
| Tracking | Status | |
|---|---|---|
| firefox70 | --- | affected |
People
(Reporter: jkratzer, Unassigned, NeedInfo)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, testcase, Whiteboard: [fuzzblocker])
Attachments
(1 file)
|
182 bytes,
text/html
|
Details |
Testcase found while fuzzing mozilla-central rev 58400ee2747a.
<html>
<head>
<script>
window.addEventListener('load', () => {
window.navigator.getVRDisplays().then(function (display) { })
})
</script>
</head>
</html>
Assertion failure: NS_IsMainThread(), at /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/ClearOnShutdown.h:95
rax = 0x0000555913d4c1a0 rdx = 0x0000000000000000
rcx = 0x00007effa1ecf374 rbx = 0x00007eff7a6bd000
rsi = 0x00007effae7338b0 rdi = 0x00007effae732680
rbp = 0x00007eff7adba970 rsp = 0x00007eff7adba950
r8 = 0x00007effae7338b0 r9 = 0x00007eff7adbb700
r10 = 0x0000000000000002 r11 = 0x0000000000000000
r12 = 0x0000000000000005 r13 = 0x00007eff7a6f9008
r14 = 0x00007effa4998658 r15 = 0x000000007a610000
rip = 0x00007eff9de730f7
OS|Linux|0.0.0 Linux 4.18.0-25-generic #26~18.04.1-Ubuntu SMP Thu Jun 27 07:28:31 UTC 2019 x86_64
CPU|amd64|family 6 model 94 stepping 3|1
GPU|||
Crash|SIGSEGV|0x0|67
67|0|libxul.so|void mozilla::ClearOnShutdown<mozilla::StaticRefPtr<mozilla::gfx::VRPuppetCommandBuffer> >(mozilla::StaticRefPtr<mozilla::gfx::VRPuppetCommandBuffer>*, mozilla::ShutdownPhase)|hg:hg.mozilla.org/mozilla-central:xpcom/base/ClearOnShutdown.h:58400ee2747af785469bbecf414d0d739591615c|96|0x2f
67|1|libxul.so|mozilla::gfx::VRPuppetCommandBuffer::Get()|hg:hg.mozilla.org/mozilla-central:gfx/vr/VRPuppetCommandBuffer.cpp:58400ee2747af785469bbecf414d0d739591615c|19|0x11
67|2|libxul.so|mozilla::gfx::PuppetSession::Initialize(mozilla::gfx::VRSystemState&)|hg:hg.mozilla.org/mozilla-central:gfx/vr/service/PuppetSession.cpp:58400ee2747af785469bbecf414d0d739591615c|33|0x5
67|3|libxul.so|mozilla::gfx::VRService::ServiceInitialize()|hg:hg.mozilla.org/mozilla-central:gfx/vr/service/VRService.cpp:58400ee2747af785469bbecf414d0d739591615c|170|0x14
67|4|libxul.so|mozilla::detail::RunnableMethodImpl<mozilla::gfx::VRService*, void (mozilla::gfx::VRService::*)(), true, (mozilla::RunnableKind)0>::Run()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.h:58400ee2747af785469bbecf414d0d739591615c|1176|0x13
67|5|libxul.so|MessageLoop::RunTask(already_AddRefed<nsIRunnable>)|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:58400ee2747af785469bbecf414d0d739591615c|442|0x45
67|6|libxul.so|MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask&&)|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:58400ee2747af785469bbecf414d0d739591615c|450|0x17
67|7|libxul.so|MessageLoop::DoWork()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:58400ee2747af785469bbecf414d0d739591615c|523|0x5
67|8|libxul.so|base::MessagePumpDefault::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_pump_default.cc:58400ee2747af785469bbecf414d0d739591615c|35|0x9
67|9|libxul.so|MessageLoop::RunInternal()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:58400ee2747af785469bbecf414d0d739591615c|315|0x17
67|10|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:58400ee2747af785469bbecf414d0d739591615c|290|0x8
67|11|libxul.so|base::Thread::ThreadMain()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/thread.cc:58400ee2747af785469bbecf414d0d739591615c|192|0x8
67|12|libxul.so|ThreadFunc|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/platform_thread_posix.cc:58400ee2747af785469bbecf414d0d739591615c|40|0x3
67|13|libpthread-2.27.so||||0x76db
67|14|libc-2.27.so||||0x12188f
Flags: in-testsuite?
|
||
Comment 1•5 years ago
|
||
The priority flag is not set for this bug.
:kip, could you have a look please?
For more information, please visit auto_nag documentation.
Flags: needinfo?(kgilbert)
|
||
Comment 2•5 years ago
|
||
This appears to be a shutdown related crash specific to the puppet interface itself, rather than the VR functionality enabled by default. I will investigate further and see if we can find the specific cause.
Flags: needinfo?(kgilbert)
Priority: -- → P3
|
|
||
Updated•5 years ago
|
Assignee: nobody → kgilbert
| Comment hidden (Intermittent Failures Robot) |
|
||
Comment 4•4 years ago
|
||
Same situation here as bug 1567351. This is blocking fuzzing. I can create a Pernosco session if needed.
Flags: needinfo?(kgilbert)
| Comment hidden (Intermittent Failures Robot) |
| Comment hidden (Intermittent Failures Robot) |
|
|
||
Comment 7•2 years ago
|
||
The bug assignee didn't login in Bugzilla in the last 7 months.
:jimm, could you have a look please?
For more information, please visit auto_nag documentation.
Assignee: kearwood → nobody
Flags: needinfo?(jmathies)
|
Reporter | |
Comment 8•2 years ago
|
||
The testcase no longer triggers the assertion listed in comment 0. Closing.
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WORKSFORME
|
||
Updated•2 years ago
|
Flags: needinfo?(jmathies)
You need to log in
before you can comment on or make changes to this bug.
Description
•