1713771 - Crash in [@ vl_compositor_init]

Status: RESOLVED MOVED

(Core :: Widget: Gtk, defect)

Description

[Gabriele Svelto [:gsvelto]]

Crash report: https://crash-stats.mozilla.org/report/index/4a2250e7-5900-4313-baad-7621a0210525

Reason: SIGSEGV /SEGV_MAPERR

Top 10 frames of crashing thread:

0 libgallium_drv_video.so vl_compositor_init /usr/src/debug/mesa-21.1.1-1.fc34.x86_64/src/gallium/auxiliary/vl/vl_compositor.c:773
1 libgallium_drv_video.so __vaDriverInit_1_11 /usr/src/debug/mesa-21.1.1-1.fc34.x86_64/src/gallium/frontends/va/context.c:162
2 libva.so.2 va_openDriver /usr/src/debug/libva-2.11.0-1.fc34.x86_64/va/va.c:528
3 libva.so.2 vaInitialize /usr/src/debug/libva-2.11.0-1.fc34.x86_64/va/va.c:748
4 libxul.so mozilla::FFmpegVideoDecoder<58>::CreateVAAPIDeviceContext dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp:246
5 libxul.so mozilla::FFmpegVideoDecoder<58>::InitVAAPIDecoder dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp:285
6 libxul.so mozilla::FFmpegVideoDecoder<58>::Init dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp:387
7 libxul.so mozilla::MediaChangeMonitor::Init dom/media/platforms/wrappers/MediaChangeMonitor.cpp:299
8 libxul.so mozilla::detail::ProxyFunctionRunnable<mozilla::MediaDataDecoderProxy::Init xpcom/threads/MozPromise.h:1643
9 libxul.so mozilla::TaskQueue::Runner::Run xpcom/threads/TaskQueue.cpp:208

This looks like a NULL pointer dereference when using VA-API acceleration on recent Fedora builds.

Comment 1

[Emilio Cobos Álvarez [:emilio]]

Martin fyi

Comment 2

[Martin Stránský [:stransky] (ni? me)]

The code is:

c->pipe_cs_composit_supported = pipe->screen->get_param(pipe->screen, PIPE_CAP_PREFER_COMPUTE_FOR_MULTIMEDIA) &&
            pipe->screen->get_param(pipe->screen, PIPE_CAP_TGSI_TEX_TXF_LZ) &&
            pipe->screen->get_param(pipe->screen, PIPE_CAP_TGSI_DIV);

so I expect something is null here. I think this should be moved to mesa.

Comment 3

[Martin Stránský [:stransky] (ni? me)]

Filed as https://gitlab.freedesktop.org/mesa/mesa/-/issues/4871