1736268 - Crash in [@ wl_proxy_marshal_constructor | mozilla::widget::WaylandShmPool::Create]

Status: RESOLVED WORKSFORME

(Core :: Widget: Gtk, defect, P2)

Description

[Matt Fagnani]

I updated Firefox Nightly 95.0a1 (2021-10-17) on Wayland to build id 20211017213754 in Plasma 5.22.5 in a Fedora 35 KDE Plasma installation. I started Nightly on Wayland. Firefox segmentation faulted within 3 seconds of starting in wl_proxy_marshal_constructor in libwayland-client-1.19.0-2.fc35.x86_64. I might've clicked on the Bookmarks menu, but I'm not sure if Firefox crashed before that. The crash address was 0x0, so a null pointer dereference might've happened. I haven't seen a crash with this specific trace before.
However, I reported a crash also in wl_proxy_marshal_constructor at at src/wayland-client.c:830 in which the rest of the trace was different https://bugzilla.mozilla.org/show_bug.cgi?id=1655282 I haven't seen that crash in several months.

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/4d792c64-f848-48d6-8285-0be2f0211018

Reason: SIGSEGV / SEGV_MAPERR

Top 10 frames of crashing thread:

0 libwayland-client.so.0 wl_proxy_marshal_constructor /usr/src/debug/wayland-1.19.0-2.fc35.x86_64/src/wayland-client.c:830
1 libxul.so mozilla::widget::WaylandShmPool::Create widget/gtk/WaylandBuffer.cpp:117
2 libxul.so mozilla::widget::WaylandBufferSHM::Create widget/gtk/WaylandBuffer.cpp:190
3 libxul.so mozilla::widget::WindowSurfaceWaylandMB::ObtainBufferFromPool widget/gtk/WindowSurfaceWaylandMultiBuffer.cpp:327
4 libxul.so mozilla::widget::WindowSurfaceWaylandMB::Lock widget/gtk/WindowSurfaceWaylandMultiBuffer.cpp:198
5 libxul.so mozilla::widget::WindowSurfaceProvider::StartRemoteDrawingInRegion widget/gtk/WindowSurfaceProvider.cpp:112
6 libxul.so mozilla::wr::RenderCompositorSWGL::StartCompositing gfx/webrender_bindings/RenderCompositorSWGL.cpp:186
7 libxul.so <webrender::compositor::sw_compositor::SwCompositor as webrender::composite::Compositor>::start_compositing gfx/wr/webrender/src/compositor/sw_compositor.rs:1398
8 libxul.so webrender::renderer::Renderer::draw_frame gfx/wr/webrender/src/renderer/mod.rs:4582
9 libxul.so webrender::renderer::Renderer::render_impl gfx/wr/webrender/src/renderer/mod.rs:2000

Comment 1

[Martin Stránský [:stransky] (ni? me) (PTO, back on Feb 17)]

If it's fission the fd pool may be depleted.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.