1704558 - Crash in [@ memcpy | SkSpriteBlitter_Memcpy::blitRect]

Status: RESOLVED WORKSFORME

(Core :: Graphics: Canvas2D, defect, P3)

Description

[Gabriele Svelto [:gsvelto]]

Crash report: https://crash-stats.mozilla.org/report/index/073a54f3-12a2-4874-991a-564850210411

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0 vcruntime140.dll memcpy d:\agent\_work\1\s\src\vctools\crt\vcruntime\src\string\amd64\memcpy.asm:454
1 xul.dll SkSpriteBlitter_Memcpy::blitRect gfx/skia/skia/src/core/SkBlitter_Sprite.cpp:89
2 xul.dll static SkScan::FillIRect gfx/skia/skia/src/core/SkScan.cpp:27
3 xul.dll SkDraw::drawBitmap const gfx/skia/skia/src/core/SkDraw.cpp:1108
4 xul.dll SkBitmapDevice::drawBitmap gfx/skia/skia/src/core/SkBitmapDevice.cpp:417
5 xul.dll SkBitmapDevice::drawBitmapRect gfx/skia/skia/src/core/SkBitmapDevice.cpp:518
6 xul.dll SkBaseDevice::drawImageRect gfx/skia/skia/src/core/SkDevice.cpp:141
7 xul.dll SkCanvas::onDrawImage gfx/skia/skia/src/core/SkCanvas.cpp:2447
8 xul.dll SkCanvas::drawImage gfx/skia/skia/src/core/SkCanvas.cpp:1884
9 xul.dll mozilla::gfx::DrawTargetSkia::CopySurface gfx/2d/DrawTargetSkia.cpp:1708

There are some crashes in the release channel under this signature but I don't think they're interesting. The bulk of recent crashes are on nightly and started with buildid 20210330215136.

Comment 1

[Nicolas Silva [:nical]]

There is a lot of "Killing GPU process due to IPC reply timeout" in the gfx critical error logs. I wonder if we are destroying the shmem because of the GPU process crash and then trying to write into it during DL building.

Sotaro, do you know if texture client lifetime related changes landed that could correlate with buildid 20210330215136 ?

Comment 2

[Sotaro Ikeda [:sotaro]]

(In reply to Nicolas Silva [:nical] from comment #1)

Sotaro, do you know if texture client lifetime related changes landed that could correlate with buildid 20210330215136 ?

How can we know a change list of buildid 20210330215136 ?

I wonder if Bug 1701236 might be related.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.