1657381 - Crash in [@ mozilla::layers::WebRenderCommandBuilder::GenerateFallbackData]

Status: NEW

(Core :: Graphics: WebRender, defect, P3)

Description

[Simon Giesecke [:sg] [he/him]]

This bug is for crash report bp-fef0fff4-f524-4587-be34-29d650200805.

Top 10 frames of crashing thread:

0 xul.dll mozilla::layers::WebRenderCommandBuilder::GenerateFallbackData gfx/layers/wr/WebRenderCommandBuilder.cpp:2374
1 xul.dll mozilla::layers::WebRenderCommandBuilder::PushItemAsImage gfx/layers/wr/WebRenderCommandBuilder.cpp:2588
2 xul.dll mozilla::layers::WebRenderCommandBuilder::CreateWebRenderCommandsFromDisplayList gfx/layers/wr/WebRenderCommandBuilder.cpp:1757
3 xul.dll mozilla::layers::WebRenderCommandBuilder::BuildWebRenderCommands gfx/layers/wr/WebRenderCommandBuilder.cpp:1578
4 xul.dll mozilla::layers::WebRenderLayerManager::EndTransactionWithoutLayer gfx/layers/wr/WebRenderLayerManager.cpp:323
5 xul.dll nsDisplayList::PaintRoot layout/painting/nsDisplayList.cpp:2405
6 xul.dll static nsLayoutUtils::PaintFrame layout/base/nsLayoutUtils.cpp:4318
7 xul.dll mozilla::PresShell::Paint layout/base/PresShell.cpp:6365
8 xul.dll nsViewManager::ProcessPendingUpdatesPaint view/nsViewManager.cpp:460
9 xul.dll nsViewManager::ProcessPendingUpdatesForView view/nsViewManager.cpp:395

In the diagnostic builds, the crash reason is MOZ_DIAGNOSTIC_ASSERT(isSome())

Comment 1

[Dzmitry Malyshau [:kvark]]

Marking as S3 for the low volume, but adding Andrew to see he has ideas.

Comment 2

[Markus Stange [:mstange]]

This can be reproduced by toggling gfx.webrender.blob-images at runtime.
https://crash-stats.mozilla.org/report/index/3f9e22c0-9f89-4e6d-abc8-f972a0201016

STR:

1. Go to about:config.
2. Set gfx.webrender.force-disabled to true.
3. Restart.
4. Set gfx.webrender.blob-images to false and gfx.webrender.force-disabled to false.
5. Restart.
6. Set gfx.webrender.blob-images to true. Crash.

Comment 4

[Jeff Muizelaar [:jrmuizel]]

Is there a reason we want this to work?

Comment 5

[Markus Stange [:mstange]]

No, it's just annoying for people to be prevented from turning the pref back on to true because they crash every time they try.

We could remove the pref or make it non-live.