1630075 - Crash in mozilla::ipc::SharedMemory::SystemProtect

Status: RESOLVED DUPLICATE of bug 1630316

(Core :: Graphics: WebGPU, defect, P3)

Description

[Dzmitry Malyshau [:kvark]]

Call stack:

#0  0x00007f818a880e3d in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1  0x00007f81805bd218 in epoll_wait (epfd=-1973628800, events=<optimized out>, maxevents=-1970794947, timeout=<optimized out>)
    at /mnt/code/firefox/ipc/chromium/src/third_party/libevent/epoll_sub.c:64
#2  0x00007f81805bd218 in epoll_dispatch (base=0x7f818a525800, tv=<optimized out>) at /mnt/code/firefox/ipc/chromium/src/third_party/libevent/epoll.c:462
#3  0x00007f81805c63a6 in event_base_loop (base=0x7f818a525800, flags=<optimized out>) at /mnt/code/firefox/ipc/chromium/src/third_party/libevent/event.c:1947
#4  0x00007f818059b8ff in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) (this=0x7f818a5cc0c0, delegate=0x7f8179e49c90)
    at /mnt/code/firefox/ipc/chromium/src/base/message_pump_libevent.cc:344
#5  0x00007f8180599c87 in MessageLoop::RunInternal() (this=0x7f8179e49c90) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:315
#6  0x00007f8180599bdf in MessageLoop::RunHandler() (this=0x7f8179e49c90) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:308
#7  0x00007f8180599bdf in MessageLoop::Run() (this=0x7f8179e49c90) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:290
#8  0x00007f81805a894e in base::Thread::ThreadMain() (this=0x7f818a562348) at /mnt/code/firefox/ipc/chromium/src/base/thread.cc:192
#9  0x00007f818059fc65 in ThreadFunc(void*) (closure=0x4) at /mnt/code/firefox/ipc/chromium/src/base/platform_thread_posix.cc:40
#10 0x00007f818acc7606 in start_thread (arg=<optimized out>) at pthread_create.c:477
#11 0x00007f818a887753 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
(gdb) t 3
[Switching to thread 3 (Thread 0x7f8179dd4700 (LWP 482698))]
#0  0x00007f818a846331 in __GI___clock_nanosleep (clock_id=clock_id@entry=0, flags=flags@entry=0, req=req@entry=0x7f8179dd2da0, rem=rem@entry=0x7f8179dd2da0)
    at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:48
48	../sysdeps/unix/sysv/linux/clock_nanosleep.c: No such file or directory.
(gdb) bt
#0  0x00007f818a846331 in __GI___clock_nanosleep (clock_id=clock_id@entry=0, flags=flags@entry=0, req=req@entry=0x7f8179dd2da0, rem=rem@entry=0x7f8179dd2da0)
    at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:48
#1  0x00007f818a84bd07 in __GI___nanosleep (requested_time=requested_time@entry=0x7f8179dd2da0, remaining=remaining@entry=0x7f8179dd2da0) at nanosleep.c:27
#2  0x00007f818a84bc3e in __sleep (seconds=0) at ../sysdeps/posix/sleep.c:55
#3  0x00007f81843eb669 in ah_crap_handler(int) (signum=11) at /mnt/code/firefox/toolkit/xre/nsSigHandlers.cpp:95
#4  0x00007f818a7aca40 in <signal handler called> () at /usr/lib/haswell/libc.so.6
#5  0x00007f81806218ed in mozilla::ipc::SharedMemory::SystemProtect(char*, unsigned long, int) (aAddr=<optimized out>, aSize=<optimized out>, aRights=<optimized out>)
    at /mnt/code/firefox/ipc/glue/SharedMemory_posix.cpp:17
#6  0x00007f8180621a3e in mozilla::ipc::Shmem::Shmem(mozilla::ipc::Shmem::PrivateIPDLCaller, mozilla::ipc::SharedMemory*, int)
    (this=0x7f8179dd3530, aSegment=0x7f81644cf150, aId=85892) at /mnt/code/firefox/ipc/glue/Shmem.cpp:246
#7  0x00007f818062267f in mozilla::ipc::IPDLParamTraits<mozilla::ipc::Shmem>::Read(IPC::Message const*, PickleIterator*, mozilla::ipc::IProtocol*, mozilla::ipc::Shmem*)
    (aMsg=<optimized out>, aIter=<optimized out>, aActor=<optimized out>, aResult=0x7f8179dd3730) at /mnt/code/firefox/ipc/glue/Shmem.cpp:455
#8  0x00007f81809c41b9 in mozilla::webgpu::PWebGPUParent::OnMessageReceived(IPC::Message const&) (this=0x7f8165fd9310, msg__=...) at PWebGPUParent.cpp:1493
#9  0x00007f81806dca0c in mozilla::layers::PCompositorManagerParent::OnMessageReceived(IPC::Message const&) (this=0x7f816608d800, msg__=...) at PCompositorManagerParent.cpp:197
#10 0x00007f8180610645 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
    (this=0x7f816608d910, aProxy=0x7f8161f9f7c0, aMsg=...) at /mnt/code/firefox/ipc/glue/MessageChannel.cpp:2187
#11 0x00007f818060f38e in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) (this=0x7f816608d910, aMsg=...) at /mnt/code/firefox/ipc/glue/MessageChannel.cpp:2111
#12 0x00007f818060fadb in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) (this=0x7f816608d910, aTask=...)
    at /mnt/code/firefox/ipc/glue/MessageChannel.cpp:1959
#13 0x00007f818060fe22 in mozilla::ipc::MessageChannel::MessageTask::Run() (this=0x7f81644db5c0) at /mnt/code/firefox/ipc/glue/MessageChannel.cpp:1990
#14 0x00007f8180599e0c in MessageLoop::RunTask(already_AddRefed<nsIRunnable>) (this=0x7f8179dd3c90, aTask=...) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:442
#15 0x00007f818059a3ad in MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask&&) (this=0x7f8179dd3c90, pending_task=...)
    at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:450
#16 0x00007f818059a5dc in MessageLoop::DoWork() (this=0x7f8179dd3c90) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:523
#17 0x00007f818059afee in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) (this=0x7f8179c29970, delegate=0x7f8179dd3c90)
    at /mnt/code/firefox/ipc/chromium/src/base/message_pump_default.cc:35
#18 0x00007f8180599c87 in MessageLoop::RunInternal() (this=0x7f8179dd3c90) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:315
#19 0x00007f8180599bdf in MessageLoop::RunHandler() (this=0x7f8179dd3c90) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:308
#20 0x00007f8180599bdf in MessageLoop::Run() (this=0x7f8179dd3c90) at /mnt/code/firefox/ipc/chromium/src/base/message_loop.cc:290
#21 0x00007f81805a894e in base::Thread::ThreadMain() (this=0x7f818a5abb00) at /mnt/code/firefox/ipc/chromium/src/base/thread.cc:192
#22 0x00007f818059fc65 in ThreadFunc(void*) (closure=0x7f818a952310 <_IO_stdfile_2_lock>) at /mnt/code/firefox/ipc/chromium/src/base/platform_thread_posix.cc:40
#23 0x00007f818acc7606 in start_thread (arg=<optimized out>) at pthread_create.c:47

Comment 1

[Dzmitry Malyshau [:kvark]]

Seen that before, Jeff?

Comment 2

[Kelsey Gilbert [:jgilbert]]

I have not.

Comment 3

[Dzmitry Malyshau [:kvark]]

Could be a dupe of 1630316

Comment 4

[Dzmitry Malyshau [:kvark]]

Going to close this as a dupe