1678454 - Hit MOZ_CRASH(assertion failed: `(left == right)` left: `Some((1, (561.8844, -0.05859374, 0.0)))`, right: `None`) at src/third_party/rust/plane-split/src/polygon.rs:552

Status: VERIFIED FIXED

(Core :: Graphics: WebRender, defect)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

The attached test case requires a fuzzing builds (--enable-fuzzing) for use of window.printPreview()

Hit MOZ_CRASH(assertion failed: (left == right) left: Some((1, (561.8844, -0.05859374, 0.0))), right: None) at src/third_party/rust/plane-split/src/polygon.rs:552

#0 0x7fc244b34ab5 in MOZ_Crash /builds/worker/workspace/obj-build/dist/include/mozilla/Assertions.h:254:3
#1 0x7fc244b34ab5 in RustMozCrash src/mozglue/static/rust/wrappers.cpp:17:3
#2 0x7fc244b34a64 in mozglue_static::panic_hook::h6e70bafc479dc06d src/mozglue/static/rust/lib.rs:89:9
#3 0x7fc244b3438b in core::ops::function::Fn::call::h01fce3a141895069 /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/core/src/ops/function.rs:70:5
#4 0x7fc245af8357 in std::panicking::rust_panic_with_hook::haa1ed36ada4ffb03 /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/std/src/panicking.rs:573:17
#5 0x7fc245af7f08 in std::panicking::begin_panic_handler::_$u7b$$u7b$closure$u7d$$u7d$::h7001af1bb21aeaeb /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/std/src/panicking.rs:476:9
#6 0x7fc245af337b in std::sys_common::backtrace::__rust_end_short_backtrace::h39910f557f5f2367 /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/std/src/sys_common/backtrace.rs:153:18
#7 0x7fc245af7ec8 in rust_begin_unwind /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/std/src/panicking.rs:475:5
#8 0x7fc245af7e7a in std::panicking::begin_panic_fmt::hc1b1320af38b7e12 /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/std/src/panicking.rs:429:5
#9 0x7fc24436d1a8 in plane_split::polygon::Polygon$LT$T$C$U$C$A$GT$::split_with_normal::h2caf30ea558193da src/third_party/rust/plane-split/src/polygon.rs
#10 0x7fc24436d1a8 in plane_split::clip::Clipper$LT$T$C$U$C$A$GT$::clip::hef1c9d5efc941ee8 src/third_party/rust/plane-split/src/clip.rs:110:44
#11 0x7fc2444f4538 in webrender::util::project_rect::h37a74a2163c8d9c5 src/gfx/wr/webrender/src/util.rs:1021:23
#12 0x7fc2444f4538 in webrender::space::SpaceMapper$LT$F$C$T$GT$::map::h72ea41bdd0d2c56a src/gfx/wr/webrender/src/space.rs:125:23
#13 0x7fc2444ea310 in webrender::clip::ClipStore::build_clip_chain_instance::he5f1808a808466ee src/gfx/wr/webrender/src/clip.rs:1184:29
#14 0x7fc244581dc0 in webrender::prepare::update_clip_task_for_brush::h827219a48e7c789d src/gfx/wr/webrender/src/prepare.rs:1373:38
#15 0x7fc244581dc0 in webrender::prepare::update_clip_task::h514ed2f4dcfe949d src/gfx/wr/webrender/src/prepare.rs:1448:67
#16 0x7fc244581dc0 in webrender::prepare::prepare_prim_for_render::h784457f199c9fab9 src/gfx/wr/webrender/src/prepare.rs:252:13
#17 0x7fc24457f84f in webrender::prepare::prepare_primitives::ha98bf02ede4d6111 src/gfx/wr/webrender/src/prepare.rs:117:16
#18 0x7fc24458025b in webrender::prepare::prepare_prim_for_render::h784457f199c9fab9 src/gfx/wr/webrender/src/prepare.rs:216:13
#19 0x7fc24457f84f in webrender::prepare::prepare_primitives::ha98bf02ede4d6111 src/gfx/wr/webrender/src/prepare.rs:117:16
#20 0x7fc244526d29 in webrender::frame_builder::FrameBuilder::build_layer_screen_rects_and_cull_layers::h93137735e5e3e18d src/gfx/wr/webrender/src/frame_builder.rs:415:13
#21 0x7fc244526d29 in webrender::frame_builder::FrameBuilder::build::hc714398ccfd072db src/gfx/wr/webrender/src/frame_builder.rs:510:9
#22 0x7fc2445a5d34 in webrender::render_backend::Document::build_frame::h857fa5717e387402 src/gfx/wr/webrender/src/render_backend.rs:622:25
#23 0x7fc2445b6665 in webrender::render_backend::RenderBackend::update_document::h658c80cf708466af src/gfx/wr/webrender/src/render_backend.rs:1501:41
#24 0x7fc2445ae196 in webrender::render_backend::RenderBackend::prepare_transactions::h94057ff9965b1c61 src/gfx/wr/webrender/src/render_backend.rs:1356:28
#25 0x7fc2445ae196 in webrender::render_backend::RenderBackend::process_api_msg::h6690b6762a0e5fef src/gfx/wr/webrender/src/render_backend.rs:1216:17
#26 0x7fc2443aa3c3 in webrender::render_backend::RenderBackend::run::h2f9c8dc0d3ec756d src/gfx/wr/webrender/src/render_backend.rs:892:21
#27 0x7fc2443aa3c3 in webrender::renderer::Renderer::new::_$u7b$$u7b$closure$u7d$$u7d$::h2568c5f3e7c1ebfc src/gfx/wr/webrender/src/renderer.rs:2780:13
#28 0x7fc2443aa3c3 in std::sys_common::backtrace::__rust_begin_short_backtrace::h6cde425ea617684e /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/std/src/sys_common/backtrace.rs:137:18
#29 0x7fc2443ca3cf in std::thread::Builder::spawn_unchecked::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h00f0b0cb19182be4 /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/std/src/thread/mod.rs:458:17
#30 0x7fc2443ca3cf in _$LT$std..panic..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::hf43f5114ef875487 /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/std/src/panic.rs:308:9
#31 0x7fc2443ca3cf in std::panicking::try::do_call::h4cb181af34bf1a1f /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/std/src/panicking.rs:373:40
#32 0x7fc2443ca3cf in std::panicking::try::h4f83ff7f3527638f /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/std/src/panicking.rs:337:19
#33 0x7fc2443ca3cf in std::panic::catch_unwind::hcbba4c6bfbaa1b67 /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/std/src/panic.rs:379:14
#34 0x7fc2443ca3cf in std::thread::Builder::spawn_unchecked::_$u7b$$u7b$closure$u7d$$u7d$::hd8ac2883c989d090 /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/std/src/thread/mod.rs:457:30
#35 0x7fc2443ca3cf in core::ops::function::FnOnce::call_once$u7b$$u7b$vtable.shim$u7d$$u7d$::h6decdaa530827fa5 /builds/worker/fetches/rustc/lib/rustlib/src/rust/library/core/src/ops/function.rs:227:5
#36 0x7fc245b07909 in _$LT$alloc..boxed..Box$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$A$GT$$GT$::call_once::h670c50864ac2cb92 /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/alloc/src/boxed.rs:1042:9
#37 0x7fc245b07909 in _$LT$alloc..boxed..Box$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$A$GT$$GT$::call_once::h2511952749086d81 /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/alloc/src/boxed.rs:1042:9
#38 0x7fc245b07909 in std::sys::unix::thread::Thread::new::thread_start::h5ad4ddffe24373a8 /rustc/18bf6b4f01a6feaf7259ba7cdae58031af1b7b39/library/std/src/sys/unix/thread.rs:87:17
#39 0x7fc2515b7608 in start_thread /build/glibc-ZN95T4/glibc-2.31/nptl/pthread_create.c:477:8
#40 0x7fc251180292 in clone /build/glibc-ZN95T4/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Comment 1

[Tyson Smith [:tsmith]]

Attachment: prefs.js

Comment 2

[Tyson Smith [:tsmith]]

A Pernosco session is available here: https://pernos.co/debug/iL46PVazQ-vf9EVFgKR6Sw/index.html

Comment 3

[Jason Kratzer [:jkratzer]]

Bugmon Analysis:
Verified bug as reproducible on mozilla-central 20201119214432-b703fa5c3d16.
The bug appears to have been introduced in the following build range:

Start: 5d3392ccb733c35bc89b75949e58a2c79beac740 (20200120163646)
End: 81ae47660566a29c5395432886e4fd9a403eac97 (20200120163937)
Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=5d3392ccb733c35bc89b75949e58a2c79beac740&tochange=81ae47660566a29c5395432886e4fd9a403eac97

Comment 4

[Jeff Muizelaar [:jrmuizel]]

Regression window looks wrong.

Comment 5

[Dzmitry Malyshau [:kvark]]

Attachment: Update plane-split dependency to 0.17.1

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/345cccc10679
Update plane-split dependency to 0.17.1 r=jrmuizel

Comment 7

[Andreea Pavel [:apavel]]

https://hg.mozilla.org/mozilla-central/rev/345cccc10679

Comment 8

[Jason Kratzer [:jkratzer]]

Bugmon Analysis:
Verified bug as fixed on rev mozilla-central 20201121092754-8d8561344299.
Removing bugmon keyword as no further action possible.
Please review the bug and re-add the keyword for further analysis.

Comment 9

[BugBot [:suhaib / :marco/ :calixte]]

:kvark, since this bug contains a bisection range, could you fill (if possible) the regressed_by field?
For more information, please visit auto_nag documentation.

Comment 10

[Dzmitry Malyshau [:kvark]]

The range was incorrect