Open Bug 1673732 Opened 5 years ago Updated 3 years ago

Assertion failure: !mIsMapped, at /builds/worker/checkouts/gecko/gfx/2d/SourceSurfaceSkia.cpp:27

Categories

(Core :: Graphics, defect)

Product:
Core
Component:
Graphics
Type:
defect

Tracking

()

Tracking Flags:
Tracking Status
firefox84 --- affected

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: testcase, Whiteboard: [bugmon:confirmed])

Attachments

(1 file)

testcase.zip
3.34 KB, application/zip
Details
Attached file testcase.zip —

Testcase found while fuzzing mozilla-central rev 3d6ed9f4cf34 (built with --enable-debug).

Assertion failure: !mIsMapped, at /builds/worker/checkouts/gecko/gfx/2d/SourceSurfaceSkia.cpp:27

==2443553==ERROR: UndefinedBehaviorSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f93bd753889 bp 0x7fff6e3db130 sp 0x7fff6e3db110 T2443553)
==2443553==The signal is caused by a WRITE memory access.
==2443553==Hint: address points to the zero page.
    #0 0x7f93bd753889 in mozilla::gfx::SourceSurfaceSkia::~SourceSurfaceSkia() /builds/worker/checkouts/gecko/gfx/2d/SourceSurfaceSkia.cpp:27:3
    #1 0x7f93bd7539bd in mozilla::gfx::SourceSurfaceSkia::~SourceSurfaceSkia() /builds/worker/checkouts/gecko/gfx/2d/SourceSurfaceSkia.cpp:24:41
    #2 0x7f93bd72218e in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:50:40
    #3 0x7f93bd72218e in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:381:36
    #4 0x7f93bd72218e in ~RefPtr /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:81:7
    #5 0x7f93bd72218e in mozilla::gfx::DrawTargetSkia::~DrawTargetSkia() /builds/worker/checkouts/gecko/gfx/2d/DrawTargetSkia.cpp:295:1
    #6 0x7f93bd72237d in mozilla::gfx::DrawTargetSkia::~DrawTargetSkia() /builds/worker/checkouts/gecko/gfx/2d/DrawTargetSkia.cpp:277:35
    #7 0x7f93bdc0d592 in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:50:40
    #8 0x7f93bdc0d592 in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:381:36
    #9 0x7f93bdc0d592 in ~RefPtr /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:81:7
    #10 0x7f93bdc0d592 in gfxContext::AzureState::~AzureState() /builds/worker/workspace/obj-build/dist/include/gfxContext.h:484:10
    #11 0x7f93bdc0d067 in Destruct /builds/worker/workspace/obj-build/dist/include/nsTArray.h:645:45
    #12 0x7f93bdc0d067 in DestructRange /builds/worker/workspace/obj-build/dist/include/nsTArray.h:2379:7
    #13 0x7f93bdc0d067 in ClearAndRetainStorage /builds/worker/workspace/obj-build/dist/include/nsTArray.h:1457:5
    #14 0x7f93bdc0d067 in ~nsTArray_Impl /builds/worker/workspace/obj-build/dist/include/nsTArray.h:1012:7
    #15 0x7f93bdc0d067 in gfxContext::~gfxContext() /builds/worker/checkouts/gecko/gfx/thebes/gfxContext.cpp:104:1
    #16 0x7f93bd9eb396 in gfxContext::Release() /builds/worker/workspace/obj-build/dist/include/gfxContext.h:60:3
    #17 0x7f93c10c5c90 in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:50:40
    #18 0x7f93c10c5c90 in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:381:36
    #19 0x7f93c10c5c90 in ~RefPtr /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:81:7
    #20 0x7f93c10c5c90 in mozilla::nsImageRenderer::Draw(nsPresContext*, gfxContext&, nsRect const&, nsRect const&, nsRect const&, nsPoint const&, nsSize const&, mozilla::gfx::IntRectTyped<mozilla::CSSPixel> const&, float) /builds/worker/checkouts/gecko/layout/painting/nsImageRenderer.cpp:557:1
    #21 0x7f93c10c6be1 in mozilla::nsImageRenderer::DrawLayer(nsPresContext*, gfxContext&, nsRect const&, nsRect const&, nsPoint const&, nsRect const&, nsSize const&, float) /builds/worker/checkouts/gecko/layout/painting/nsImageRenderer.cpp:747:10
    #22 0x7f93c1062542 in nsCSSRendering::PaintStyleImageLayerWithSC(nsCSSRendering::PaintBGParams const&, gfxContext&, mozilla::ComputedStyle*, nsStyleBorder const&) /builds/worker/checkouts/gecko/layout/painting/nsCSSRendering.cpp:2621:38
    #23 0x7f93c0f4e3fb in mozilla::PaintMaskSurface(mozilla::SVGIntegrationUtils::PaintFramesParams const&, mozilla::gfx::DrawTarget*, float, mozilla::ComputedStyle*, nsTArray<mozilla::SVGMaskFrame*> const&, mozilla::gfx::BaseMatrix<float> const&, nsPoint const&) /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:502:35
    #24 0x7f93c0f76673 in mozilla::CreateAndPaintMaskSurface(mozilla::SVGIntegrationUtils::PaintFramesParams const&, float, mozilla::ComputedStyle*, nsTArray<mozilla::SVGMaskFrame*> const&, nsPoint const&) /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:572:25
    #25 0x7f93c0f4e9f2 in PaintMaskAndClipPathInternal<(lambda at /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:1052:41)> /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:926:37
    #26 0x7f93c0f4e9f2 in mozilla::SVGIntegrationUtils::PaintMaskAndClipPath(mozilla::SVGIntegrationUtils::PaintFramesParams const&) /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:1052:3
    #27 0x7f93c10a7851 in nsDisplayMasksAndClipPaths::PaintAsLayer(nsDisplayListBuilder*, gfxContext*, mozilla::layers::LayerManager*) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:9405:3
    #28 0x7f93c104f2e9 in PaintInactiveLayer /builds/worker/checkouts/gecko/layout/painting/FrameLayerBuilder.cpp:4204:54
    #29 0x7f93c104f2e9 in mozilla::FrameLayerBuilder::PaintItems(std::vector<mozilla::AssignedDisplayItem, std::allocator<mozilla::AssignedDisplayItem> >&, mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&, gfxContext*, nsDisplayListBuilder*, nsPresContext*, mozilla::gfx::IntPointTyped<mozilla::gfx::UnknownUnits> const&, float, float) /builds/worker/checkouts/gecko/layout/painting/FrameLayerBuilder.cpp:7076:7
    #30 0x7f93c1051641 in mozilla::FrameLayerBuilder::DrawPaintedLayer(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*) /builds/worker/checkouts/gecko/layout/painting/FrameLayerBuilder.cpp:7256:19
    #31 0x7f93bdac2ac1 in mozilla::layers::BasicPaintedLayer::PaintThebes(gfxContext*, mozilla::layers::Layer*, void (*)(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*), void*) /builds/worker/checkouts/gecko/gfx/layers/basic/BasicPaintedLayer.cpp:92:9
    #32 0x7f93bdabfba9 in mozilla::layers::BasicLayerManager::PaintSelfOrChildren(mozilla::layers::PaintLayerContext&, gfxContext*) /builds/worker/checkouts/gecko/gfx/layers/basic/BasicLayerManager.cpp:700:13
    #33 0x7f93bdabea07 in mozilla::layers::BasicLayerManager::PaintLayer(gfxContext*, mozilla::layers::Layer*, void (*)(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*), void*) /builds/worker/checkouts/gecko/gfx/layers/basic/BasicLayerManager.cpp
    #34 0x7f93bdabfa72 in mozilla::layers::BasicLayerManager::PaintSelfOrChildren(mozilla::layers::PaintLayerContext&, gfxContext*) /builds/worker/checkouts/gecko/gfx/layers/basic/BasicLayerManager.cpp:723:7
    #35 0x7f93bdabea07 in mozilla::layers::BasicLayerManager::PaintLayer(gfxContext*, mozilla::layers::Layer*, void (*)(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*), void*) /builds/worker/checkouts/gecko/gfx/layers/basic/BasicLayerManager.cpp
    #36 0x7f93bdabc777 in mozilla::layers::BasicLayerManager::EndTransactionInternal(void (*)(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) /builds/worker/checkouts/gecko/gfx/layers/basic/BasicLayerManager.cpp:609:5
    #37 0x7f93c10828fd in nsDisplayList::PaintRoot(nsDisplayListBuilder*, gfxContext*, unsigned int) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:2556:19
    #38 0x7f93c0ced785 in nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags) /builds/worker/checkouts/gecko/layout/base/nsLayoutUtils.cpp:3463:13
    #39 0x7f93c0f50ed7 in mozilla::PaintFrameCallback::operator()(gfxContext*, mozilla::gfx::RectTyped<mozilla::gfx::UnknownUnits, double> const&, mozilla::gfx::SamplingFilter, mozilla::gfx::BaseMatrix<double> const&) /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:1296:3
    #40 0x7f93bdbd9f9d in gfxCallbackDrawable::Draw(gfxContext*, mozilla::gfx::RectTyped<mozilla::gfx::UnknownUnits, double> const&, mozilla::gfx::ExtendMode, mozilla::gfx::SamplingFilter, double, mozilla::gfx::BaseMatrix<double> const&) /builds/worker/checkouts/gecko/gfx/thebes/gfxDrawable.cpp:149:12
    #41 0x7f93bdbd9c5e in gfxCallbackDrawable::MakeSurfaceDrawable(gfxContext*, mozilla::gfx::SamplingFilter) /builds/worker/checkouts/gecko/gfx/thebes/gfxDrawable.cpp:111:3
    #42 0x7f93bdbd9eef in gfxCallbackDrawable::Draw(gfxContext*, mozilla::gfx::RectTyped<mozilla::gfx::UnknownUnits, double> const&, mozilla::gfx::ExtendMode, mozilla::gfx::SamplingFilter, double, mozilla::gfx::BaseMatrix<double> const&) /builds/worker/checkouts/gecko/gfx/thebes/gfxDrawable.cpp:141:24
    #43 0x7f93bdc7ad81 in CreateSamplingRestrictedDrawable /builds/worker/checkouts/gecko/gfx/thebes/gfxUtils.cpp:323:14
    #44 0x7f93bdc7ad81 in gfxUtils::DrawPixelSnapped(gfxContext*, gfxDrawable*, mozilla::gfx::SizeTyped<mozilla::gfx::UnknownUnits, double> const&, mozilla::image::ImageRegion const&, mozilla::gfx::SurfaceFormat, mozilla::gfx::SamplingFilter, unsigned int, double, bool) /builds/worker/checkouts/gecko/gfx/thebes/gfxUtils.cpp:550:48
    #45 0x7f93bdd09388 in mozilla::image::DynamicImage::Draw(gfxContext*, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::image::ImageRegion const&, unsigned int, mozilla::gfx::SamplingFilter, mozilla::Maybe<mozilla::SVGImageContext> const&, unsigned int, float) /builds/worker/checkouts/gecko/image/DynamicImage.cpp:203:5
    #46 0x7f93c0cf729d in DrawImageInternal(gfxContext&, nsPresContext*, imgIContainer*, mozilla::gfx::SamplingFilter, nsRect const&, nsRect const&, nsPoint const&, nsRect const&, mozilla::Maybe<mozilla::SVGImageContext> const&, unsigned int, mozilla::gfx::ExtendMode, float) /builds/worker/checkouts/gecko/layout/base/nsLayoutUtils.cpp:6242:22
    #47 0x7f93c0cf9c1e in nsLayoutUtils::DrawImage(gfxContext&, mozilla::ComputedStyle*, nsPresContext*, imgIContainer*, mozilla::gfx::SamplingFilter, nsRect const&, nsRect const&, nsPoint const&, nsRect const&, unsigned int, float) /builds/worker/checkouts/gecko/layout/base/nsLayoutUtils.cpp:6526:10
    #48 0x7f93c10c59f1 in mozilla::nsImageRenderer::Draw(nsPresContext*, gfxContext&, nsRect const&, nsRect const&, nsRect const&, nsPoint const&, nsSize const&, mozilla::gfx::IntRectTyped<mozilla::CSSPixel> const&, float) /builds/worker/checkouts/gecko/layout/painting/nsImageRenderer.cpp:516:16
    #49 0x7f93c10c6be1 in mozilla::nsImageRenderer::DrawLayer(nsPresContext*, gfxContext&, nsRect const&, nsRect const&, nsPoint const&, nsRect const&, nsSize const&, float) /builds/worker/checkouts/gecko/layout/painting/nsImageRenderer.cpp:747:10
    #50 0x7f93c1062542 in nsCSSRendering::PaintStyleImageLayerWithSC(nsCSSRendering::PaintBGParams const&, gfxContext&, mozilla::ComputedStyle*, nsStyleBorder const&) /builds/worker/checkouts/gecko/layout/painting/nsCSSRendering.cpp:2621:38
    #51 0x7f93c0f4e3fb in mozilla::PaintMaskSurface(mozilla::SVGIntegrationUtils::PaintFramesParams const&, mozilla::gfx::DrawTarget*, float, mozilla::ComputedStyle*, nsTArray<mozilla::SVGMaskFrame*> const&, mozilla::gfx::BaseMatrix<float> const&, nsPoint const&) /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:502:35
    #52 0x7f93c0f76673 in mozilla::CreateAndPaintMaskSurface(mozilla::SVGIntegrationUtils::PaintFramesParams const&, float, mozilla::ComputedStyle*, nsTArray<mozilla::SVGMaskFrame*> const&, nsPoint const&) /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:572:25
    #53 0x7f93c0f4e9f2 in PaintMaskAndClipPathInternal<(lambda at /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:1052:41)> /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:926:37
    #54 0x7f93c0f4e9f2 in mozilla::SVGIntegrationUtils::PaintMaskAndClipPath(mozilla::SVGIntegrationUtils::PaintFramesParams const&) /builds/worker/checkouts/gecko/layout/svg/SVGIntegrationUtils.cpp:1052:3
    #55 0x7f93c10a7851 in nsDisplayMasksAndClipPaths::PaintAsLayer(nsDisplayListBuilder*, gfxContext*, mozilla::layers::LayerManager*) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:9405:3
    #56 0x7f93c104f2e9 in PaintInactiveLayer /builds/worker/checkouts/gecko/layout/painting/FrameLayerBuilder.cpp:4204:54
    #57 0x7f93c104f2e9 in mozilla::FrameLayerBuilder::PaintItems(std::vector<mozilla::AssignedDisplayItem, std::allocator<mozilla::AssignedDisplayItem> >&, mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&, gfxContext*, nsDisplayListBuilder*, nsPresContext*, mozilla::gfx::IntPointTyped<mozilla::gfx::UnknownUnits> const&, float, float) /builds/worker/checkouts/gecko/layout/painting/FrameLayerBuilder.cpp:7076:7
    #58 0x7f93c1051641 in mozilla::FrameLayerBuilder::DrawPaintedLayer(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*) /builds/worker/checkouts/gecko/layout/painting/FrameLayerBuilder.cpp:7256:19
    #59 0x7f93bdad07f7 in mozilla::layers::ClientPaintedLayer::RenderLayerWithReadback(mozilla::layers::ReadbackProcessor*) /builds/worker/checkouts/gecko/gfx/layers/client/ClientPaintedLayer.cpp
    #60 0x7f93bdaf0620 in mozilla::layers::ClientContainerLayer::RenderLayer() /builds/worker/checkouts/gecko/gfx/layers/client/ClientContainerLayer.h:53:29
    #61 0x7f93bdaf0620 in mozilla::layers::ClientContainerLayer::RenderLayer() /builds/worker/checkouts/gecko/gfx/layers/client/ClientContainerLayer.h:53:29
    #62 0x7f93bdacbfb0 in mozilla::layers::ClientLayerManager::EndTransactionInternal(void (*)(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) /builds/worker/checkouts/gecko/gfx/layers/client/ClientLayerManager.cpp:343:13
    #63 0x7f93bdacc6ce in mozilla::layers::ClientLayerManager::EndTransaction(void (*)(mozilla::layers::PaintedLayer*, gfxContext*, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::layers::DrawRegionClip, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) /builds/worker/checkouts/gecko/gfx/layers/client/ClientLayerManager.cpp:406:3
    #64 0x7f93c10828fd in nsDisplayList::PaintRoot(nsDisplayListBuilder*, gfxContext*, unsigned int) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:2556:19
    #65 0x7f93c0ced785 in nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags) /builds/worker/checkouts/gecko/layout/base/nsLayoutUtils.cpp:3463:13
    #66 0x7f93c0c6ae8c in mozilla::PresShell::Paint(nsView*, nsRegion const&, mozilla::PaintFlags) /builds/worker/checkouts/gecko/layout/base/PresShell.cpp:6360:5
    #67 0x7f93c093c26f in nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*) /builds/worker/checkouts/gecko/view/nsViewManager.cpp:460:18
    #68 0x7f93c093bd63 in nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) /builds/worker/checkouts/gecko/view/nsViewManager.cpp:395:22
    #69 0x7f93c093d6cf in nsViewManager::ProcessPendingUpdates() /builds/worker/checkouts/gecko/view/nsViewManager.cpp:1018:5
    #70 0x7f93c0c2a991 in nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:2382:11
    #71 0x7f93c0c31d91 in TickDriver /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:374:13
    #72 0x7f93c0c31d91 in mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:353:7
    #73 0x7f93c0c31c7c in mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:368:5
    #74 0x7f93c0c31228 in RunRefreshDrivers /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:829:5
    #75 0x7f93c0c31228 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:747:16
    #76 0x7f93c0c30b30 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyParentProcessVsync() /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:649:7
    #77 0x7f93c0c305a9 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:570:9
    #78 0x7f93c0fef667 in mozilla::layout::VsyncChild::RecvNotify(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/ipc/VsyncChild.cpp:55:16
    #79 0x7f93bd2a2305 in mozilla::layout::PVsyncChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PVsyncChild.cpp:187:54
    #80 0x7f93bd053b4d in mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PBackgroundChild.cpp:6268:32
    #81 0x7f93bcd10bde in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:2150:25
    #82 0x7f93bcd0d39f in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:2074:9
    #83 0x7f93bcd0e7a6 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1922:3
    #84 0x7f93bcd0f3cb in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1953:13
    #85 0x7f93bc4081df in mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:245:16
    #86 0x7f93bc40685a in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:515:26
    #87 0x7f93bc405904 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:374:15
    #88 0x7f93bc405ab7 in mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:171:36
    #89 0x7f93bc40b779 in operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:88:37
    #90 0x7f93bc40b779 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_4>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:577:5
    #91 0x7f93bc41c957 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1197:14
    #92 0x7f93bc42269a in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:513:10
    #93 0x7f93bcd16474 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:109:5
    #94 0x7f93bcc883b3 in MessageLoop::RunInternal() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:334:10
    #95 0x7f93bcc882cd in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:327:3
    #96 0x7f93bcc882cd in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:309:3
    #97 0x7f93c0982308 in nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:137:27
    #98 0x7f93c217daa3 in XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:913:20
    #99 0x7f93bcd17289 in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:237:9
    #100 0x7f93bcc883b3 in MessageLoop::RunInternal() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:334:10
    #101 0x7f93bcc882cd in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:327:3
    #102 0x7f93bcc882cd in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:309:3
    #103 0x7f93c217d688 in XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:744:34
    #104 0x5583a3c93647 in content_process_main /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:56:28
    #105 0x5583a3c93647 in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:304:18
    #106 0x7f93d0d1a0b2 in __libc_start_main /build/glibc-ZN95T4/glibc-2.31/csu/../csu/libc-start.c:308:16

UndefinedBehaviorSanitizer can not provide additional info.
SUMMARY: UndefinedBehaviorSanitizer: SEGV /builds/worker/checkouts/gecko/gfx/2d/SourceSurfaceSkia.cpp:27:3 in mozilla::gfx::SourceSurfaceSkia::~SourceSurfaceSkia()
Flags: in-testsuite?

Bugmon Analysis:
Unable to reproduce bug using the following builds:

mozilla-central 20201027212052-ab66bd46c2d6
mozilla-central 20201027044126-46a0e993f8bb
Removing bugmon keyword as no further action possible.
Please review the bug and re-add the keyword for further analysis.

Keywords: bugmon
Whiteboard: [bugmon:confirm] → [bugmon:confirmed]
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: