Closed Bug 1617424 Opened 4 years ago Closed 4 years ago

Crash in [@ mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload]

Categories

(Core :: Graphics: WebRender, defect, P1)

75 Branch
defect

Tracking

()

RESOLVED FIXED
mozilla75
Tracking Status
firefox-esr68 --- unaffected
firefox73 --- unaffected
firefox74 --- unaffected
firefox75 blocking fixed

People

(Reporter: jan, Unassigned)

References

(Blocks 2 open bugs, Regression)

Details

(4 keywords)

Crash Data

KDE, Xwayland, Debian Testing, Macbook Pro
I scrolled down by touchpad and suddenly tab content became grey.
This looks like a regression from yesterday.

This bug is for crash report bp-370eee68-a6b9-4efe-bdcf-b00000200223.

Top 10 frames of crashing thread:

0 libxul.so mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload gfx/layers/wr/WebRenderBridgeParent.cpp:1055
1 libxul.so mozilla::layers::APZCTreeManager::SampleForWebRender gfx/layers/apz/src/APZCTreeManager.cpp:722
2 libxul.so mozilla::layers::APZSampler::SampleForWebRender gfx/layers/apz/src/APZSampler.cpp:99
3 libxul.so mozilla::layers::APZSampler::SampleForWebRender gfx/layers/apz/src/APZSampler.cpp:74
4 libxul.so apz_sample_transforms gfx/layers/apz/src/APZSampler.cpp:276
5 libxul.so <webrender_bindings::bindings::SamplerCallback as webrender::renderer::AsyncPropertySampler>::sample gfx/webrender_bindings/src/bindings.rs:975
6 libxul.so webrender::render_backend::RenderBackend::update_document gfx/wr/webrender/src/render_backend.rs:1501
7 libxul.so webrender::render_backend::RenderBackend::run gfx/wr/webrender/src/render_backend.rs:956
8 libxul.so std::sys_common::backtrace::__rust_begin_short_backtrace src/libstd/sys_common/backtrace.rs:136
9 libxul.so _fini 

Severity: normal → critical
Flags: needinfo?(sefeng)
Regressed by: 1600793
Has Regression Range: --- → yes
Has STR: --- → no
Version: unspecified → 75 Branch
See Also: → 1617432
See Also: → 1617431

Thanks for filing Jan Andre. Marking as blocker for 75 as this is a new top crash.
Sean, do you think you can come up with a quick fix today or should we backout bug 1600793? Thanks

Keywords: topcrash
Priority: -- → P1
Blocks: clouseau
Crash Signature: [@ mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload] → [@ mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload] [@ arena_t::DallocSmall | arena_dalloc | BaseAllocator::realloc | replace_realloc]
Crash Signature: [@ mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload] [@ arena_t::DallocSmall | arena_dalloc | BaseAllocator::realloc | replace_realloc] → [@ mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload] [@ arena_t::DallocSmall | arena_dalloc | BaseAllocator::realloc | replace_realloc] [@ arena_t::DallocSmall | arena_dalloc | replace_free | nsTHashtable<T>::s_ClearEntry | PLDHashTable::…
Crash Signature: PLDHashTable::RemoveEntry | mozilla::layers::WebRenderBridgeParent::RemovePendingScrollPayload] [@ nsTArray_base<T>::EnsureCapacity<T> | mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload] → PLDHashTable::RemoveEntry | mozilla::layers::WebRenderBridgeParent::RemovePendingScrollPayload] [@ nsTArray_base<T>::EnsureCapacity<T> | mozilla::layers::WebRenderBridgeParent::AddPendingScrollPayload] [@ arena_t::DallocSmall | arena_dalloc | replace_f…
Status: NEW → RESOLVED
Closed: 4 years ago
Flags: needinfo?(sefeng)
Resolution: --- → FIXED
Target Milestone: --- → mozilla75
Flags: qe-verify+

Hi Jan,

I tried to reproduce this issue on an affected build but only managed to encountered a different crash bp-70734a2c-5e65-48c2-85b2-f54470200325.

Can you please confirm if this issue is no longer reproducible for you ?

Thank you!

Flags: needinfo?(jan)

(In reply to Emil Ghitta, QA [:emilghitta] from comment #5)

I tried to reproduce this issue on an affected build but only managed to encountered a different crash bp-70734a2c-5e65-48c2-85b2-f54470200325.

That's bug 1617432. But crashes of that signature seem to still occur in very-low amount.

Can you please confirm if this issue is no longer reproducible for you ?

"Has STR: --- → No", but according to above crash data section, no further crash happened.

Flags: needinfo?(jan)

Please specify a root cause for this bug. See :tmaity for more information.

Root Cause: --- → ?
Root Cause: ? → Coding: Concurrency Issue
You need to log in before you can comment on or make changes to this bug.