Closed Bug 1681027 Opened 3 years ago Closed 1 year ago

Crash in [@ __memmove_avx_unaligned_erms | png_combine_row]

Categories

(Core :: Widget: Gtk, defect, P2)

defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: gsvelto, Unassigned)

Details

(Keywords: crash)

Crash Data

Crash report: https://crash-stats.mozilla.org/report/index/89fedee4-a20c-45e5-af29-8705e0201205

Reason: SIGSEGV /SEGV_MAPERR

Top 10 frames of crashing thread:

0 libc.so.6 __memmove_avx_unaligned_erms 
1 libpng16.so.16 png_combine_row ./pngrutil.c:3853
2 libpng16.so.16 png_read_row ./pngread.c:686
3 libpng16.so.16 png_read_image ./pngread.c:833
4 libpixbufloader-png.so libpixbufloader-png.so@0x3acc 
5 libgmodule-2.0.so.0 <name omitted> ../../../gmodule/gmodule.c:796
6  @0x7f9091d8af3f 
7 libgdk_pixbuf-2.0.so.0 gdk_pixbuf_new_from_file ../gdk-pixbuf/gdk-pixbuf-io.c:1135
8 libxul.so nsWindow::SetIcon widget/gtk/nsWindow.cpp:2529
9 libxul.so nsWindow::Create widget/gtk/nsWindow.cpp:4549

Tentatively filing this crash under the Widget: Gtk but there's a good chance that this is a problem that's external to Firefox. The crashes seem to be originating from a version of libpixbufloader-png.so for which we don't have symbols. I've scraped new versions but to no avail so it might be that a defective version was pushed out and then quickly updated. We'll see how the crash rate evolves.

This crash comes from gdk_pixbuf_new_from_file() which comes from Gtk library, so it's not a crash in our codebase.

Component: Widget: Gtk → Other
Product: Core → External Software Affecting Firefox

The crashes are happening when we try to set the Window Icon to the Firefox one. It doesn't matter that it's not in our codebase, it's a crash in our usage of GTK and we rely on whatever the user has installed here.

I checked some crash reports and some of them are from "Ubuntu 20.04.1 LTS" so this is recent enough that we can't just ignore it.

That said the really weird part is that if GTK crashes trying to load (our?) Icon files, why doesn't it do so in a reproducible manner?

Component: Other → Widget: Gtk
Product: External Software Affecting Firefox → Core

(In reply to Gian-Carlo Pascutto [:gcp] from comment #2)

The crashes are happening when we try to set the Window Icon to the Firefox one. It doesn't matter that it's not in our codebase, it's a crash in our usage of GTK and we rely on whatever the user has installed here.

I checked some crash reports and some of them are from "Ubuntu 20.04.1 LTS" so this is recent enough that we can't just ignore it.

That said the really weird part is that if GTK crashes trying to load (our?) Icon files, why doesn't it do so in a reproducible manner?

The crash comes from /usr/lib/libpng16.so.16 which is libpng-1.6 system library. It looks to me that a wrong/malformed image is used by Gtk theme or system png library fails to load it.

Priority: -- → P2

I get this crash when running mozregression on Ubuntu 21.04. Any tab I open crashes.

Not sure how helpful this is, but I seemingly get the same crash when opening URLs from the Slack snap app in Ubuntu 20.04.2 5.10.0-1034-oem (Crash report: 20cc018e-772d-43e9-a180-fa1ec0210713).

Only occurs when Firefox is NOT open and attempting to open a URL link from Slack. Firefox immediately crashes and doesn't open. This appears to be repeatable 100% of the time.
I don't see the same behaviour if Firefox is already running. In this case, URLs simply open with no issue.

New signature

Crash Signature: [@ __memmove_avx_unaligned_erms | png_combine_row] [@ __memcpy_sse2_unaligned_erms | png_combine_row] [@ __memcpy_ssse3 | png_combine_row] [@ __memcpy_avx_unaligned | png_combine_row] [@ __memcpy_ssse3_back | png_combine_row] → [@ __memmove_avx_unaligned_erms | png_combine_row] [@ __memcpy_sse2_unaligned_erms | png_combine_row] [@ __memcpy_ssse3 | png_combine_row] [@ __memcpy_avx_unaligned | png_combine_row] [@ __memcpy_ssse3_back | png_combine_row] [@ png_combine_row]

why doesn't it do so in a reproducible manner?

To answer this: it does crash in a reproducible manner for some users.

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.