1687438 - Crash in [@ MacIOSurface::GetPlaneCount]

Status: RESOLVED FIXED

(Core :: Graphics, defect, P3)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Crash report: https://crash-stats.mozilla.org/report/index/140667eb-8f56-40c0-8cfd-9d9870210116

Reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS

Top 10 frames of crashing thread:

0 XUL MacIOSurface::GetPlaneCount const gfx/2d/MacIOSurface.cpp:301
1 XUL mozilla::gl::GLBlitHelper::BlitImage const gfx/gl/GLBlitHelper.cpp:1005
2 XUL mozilla::gl::GLBlitHelper::BlitSdToFramebuffer gfx/gl/GLBlitHelper.cpp:709
3 XUL mozilla::webgl::TexUnpackImage::TexOrSubImage const dom/canvas/TexUnpackBlob.cpp:788
4 XUL mozilla::WebGLTexture::TexImage dom/canvas/WebGLTextureUpload.cpp:1074
5 XUL mozilla::WebGLContext::TexImage const dom/canvas/WebGLContextTextures.cpp:201
6 XUL mozilla::dom::WebGLParent::RecvDispatchCommands dom/canvas/WebGLParent.cpp:68
7 XUL mozilla::dom::PWebGLParent::OnMessageReceived ipc/ipdl/PWebGLParent.cpp:201
8 XUL mozilla::layers::PCompositorManagerParent::OnMessageReceived ipc/ipdl/PCompositorManagerParent.cpp:205
9 XUL mozilla::ipc::MessageChannel::DispatchMessage ipc/glue/MessageChannel.cpp:2077

Comment 1

[Kelsey Gilbert [:jgilbert]]

Attachment: Bug 1687438 - Bail if null iosurf for GLBlitHelper::BlitImage.

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/f40ca5c464c2
Bail if null iosurf for GLBlitHelper::BlitImage. r=lsalzman

Comment 3

[Kelsey Gilbert [:jgilbert]]

Looks like a null deref/struct member access.

Comment 4

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/f40ca5c464c2