1638255 - Crash in [@ mozilla::dom::GeneratePlaceholderCanvasData]

Status: RESOLVED DUPLICATE of bug 1638211

(Core :: DOM: Security, defect)

Description

[Calixte Denizet (:calixte)]

This bug is for crash report bp-fcc6ff64-4d3f-44da-b529-daed40200515.

Top 10 frames of crashing thread:

0 xul.dll mozilla::dom::GeneratePlaceholderCanvasData dom/canvas/GeneratePlaceholderCanvasData.h:94
1 xul.dll static mozilla::dom::ImageEncoder::ExtractDataInternal dom/base/ImageEncoder.cpp:389
2 xul.dll mozilla::dom::EncodingRunnable::ProcessImageData dom/base/ImageEncoder.cpp:162
3 xul.dll mozilla::dom::EncodingRunnable::Run dom/base/ImageEncoder.cpp:186
4 xul.dll nsThreadPool::Run xpcom/threads/nsThreadPool.cpp:300
5 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1211
6 xul.dll mozilla::ipc::MessagePumpForNonMainThreads::Run ipc/glue/MessagePump.cpp:332
7 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:308
8 xul.dll MessageLoop::Run ipc/chromium/src/base/message_loop.cc:290
9 xul.dll static nsThread::ThreadFunc xpcom/threads/nsThread.cpp:444

There are 4 crashes (from 3 installations) in nightly 78 with buildid 20200514211114. In analyzing the backtrace, the regression may have been introduced by patch [1] to fix bug 1621433.

[1] https://hg.mozilla.org/mozilla-central/rev?node=ab2a75db3ebe

Comment 1

[Tom Ritter [:tjr]]

We noticed and fixed this already :)