Closed Bug 1587210 Opened 3 years ago Closed 3 years ago

Crash in [@ mozilla::layers::DIGroup::ClearImageKey]


(Core :: Graphics: WebRender, defect, P1)




Tracking Status
firefox-esr60 --- unaffected
firefox-esr68 --- unaffected
firefox67 --- unaffected
firefox68 --- unaffected
firefox69 --- unaffected
firefox70 --- unaffected
firefox71 blocking fixed


(Reporter: marcia, Assigned: jrmuizel)


(Keywords: crash, regression, Whiteboard: [rca: coding error])

Crash Data


(1 file)

This bug is for crash report bp-a7d555f2-d910-4dad-bf47-75a380191008.

Seen while looking at nightly crash stats - crashes started in 20191008093420: 21 crashes/8 installs so far, Windows and Linux.

Possible regression range based on build id:

All the URLs are netflix. MOZ_RELEASE_ASSERT(aForce || mInvalidRect.IsEmpty()

Top 10 frames of crashing thread:

0 xul.dll void mozilla::layers::DIGroup::ClearImageKey gfx/layers/wr/WebRenderCommandBuilder.cpp:348
1 xul.dll void mozilla::layers::WebRenderCommandBuilder::DoGroupingForDisplayList gfx/layers/wr/WebRenderCommandBuilder.cpp:1512
2 xul.dll mozilla::layers::WebRenderCommandBuilder::CreateWebRenderCommandsFromDisplayList gfx/layers/wr/WebRenderCommandBuilder.cpp:1677
3 xul.dll bool nsDisplaySVGWrapper::CreateWebRenderCommands layout/painting/nsDisplayList.cpp:6277
4 xul.dll mozilla::layers::WebRenderCommandBuilder::CreateWebRenderCommandsFromDisplayList gfx/layers/wr/WebRenderCommandBuilder.cpp:1771
5 xul.dll bool nsDisplayTransform::CreateWebRenderCommands layout/painting/nsDisplayList.cpp:8658
6 xul.dll mozilla::layers::WebRenderCommandBuilder::CreateWebRenderCommandsFromDisplayList gfx/layers/wr/WebRenderCommandBuilder.cpp:1771
7 xul.dll bool nsDisplayTransform::CreateWebRenderCommands layout/painting/nsDisplayList.cpp:8658
8 xul.dll mozilla::layers::WebRenderCommandBuilder::CreateWebRenderCommandsFromDisplayList gfx/layers/wr/WebRenderCommandBuilder.cpp:1771
9 xul.dll bool nsDisplayTransform::CreateWebRenderCommands layout/painting/nsDisplayList.cpp:8658

Adding the macOS specific signatures which also spiked in the same buildID.

Crash Signature: [@ mozilla::layers::DIGroup::ClearImageKey] → [@ mozilla::layers::DIGroup::ClearImageKey] [@ mozilla::layers::WebRenderCommandBuilder::CreateWebRenderCommandsFromDisplayList ]
OS: Windows 10 → All
Hardware: Desktop → All

That's a lot of crashes for Nightly, marked as blocking the release.

Blob image changes regression maybe?

Flags: needinfo?(jmuizelaar)

Yep. I have a decent idea of the cause.

Flags: needinfo?(jmuizelaar)

In the future mInvalidRect and some other state should move out of DIGroup
and into a non-persistant struct that's only used during Group building.
This will allow us to completely avoid errors like this.

Assignee: nobody → jmuizelaar
Priority: -- → P1
Pushed by
Always clear mInvalidRect. r=mstange
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla71

This bug has been identified as part of a pilot on determining root causes of blocking and dot release drivers.

It needs a root-cause set for it. Please see the list at

Add the root cause as a whiteboard tag in the form [rca - <cause> ] and remove the rca-needed keyword.

If you have questions, please contact :tmaity.

Keywords: rca-needed
Keywords: rca-needed
Whiteboard: [rca: coding error]
You need to log in before you can comment on or make changes to this bug.