Open Bug 1749192 Opened 2 years ago Updated 1 year ago

AddressSanitizer: CHECK failed: sanitizer_allocator_secondary.h:42 "((n)) < ((kMaxNumChunks))" (0x100000, 0x100000) (tid=90732)

Categories

(Core :: Graphics: WebRender, defect)

Firefox 95
defect

Tracking

()

People

(Reporter: 2366719611, Assigned: ahale)

References

(Blocks 1 open bug)

Details

Crash Data

Attachments

(4 files)

Attached file 4976.html

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36

Steps to reproduce:

open the attached html file

Actual results:

the browser crashed, the original html file and the runtime log are in the attached files.
the main stacktrace:
AddressSanitizer: CHECK failed: sanitizer_allocator_secondary.h:42 "((n)) < ((kMaxNumChunks))" (0x100000, 0x100000) (tid=90732)
#0 0x561b1dc062c1 in __asan::CheckUnwind() /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_rtl.cpp:67:3
#1 0x561b1dc1b7c4 in __sanitizer::CheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/sanitizer_common/sanitizer_termination.cpp:86:5
#2 0x561b1db87b2a in EnsureSpace /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_allocator_secondary.h:42:5
#3 0x561b1db87b2a in __sanitizer::LargeMmapAllocator<__asan::AsanMapUnmapCallback, __sanitizer::LargeMmapAllocatorPtrArrayDynamic, __sanitizer::LocalAddressSpaceView>::Allocate(__sanitizer::AllocatorStats*, unsigned long, unsigned long) /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_allocator_secondary.h:119:18
#4 0x561b1db8770b in __sanitizer::CombinedAllocator<__sanitizer::SizeClassAllocator64<__asan::AP64<__sanitizer::LocalAddressSpaceView> >, __sanitizer::LargeMmapAllocatorPtrArrayDynamic>::Allocate(__sanitizer::SizeClassAllocator64LocalCache<__sanitizer::SizeClassAllocator64<__asan::AP64<__sanitizer::LocalAddressSpaceView> > >, unsigned long, unsigned long) /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_allocator_combined.h:71:24
#5 0x561b1db833fd in __asan::Allocator::Allocate(unsigned long, unsigned long, __sanitizer::BufferedStackTrace
, __asan::AllocType, bool) /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_allocator.cpp:537:29
#6 0x561b1db839f9 in Calloc /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_allocator.cpp:748:17
#7 0x561b1db839f9 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_allocator.cpp:984:34
#8 0x561b1dbfe9b3 in calloc /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cpp:139:10
#9 0x7f62ccb7c99f in alloc::alloc::alloc_zeroed::h33ecff7ade7dcb18 /builds/worker/fetches/rust/library/alloc/src/alloc.rs:155:14
#10 0x7f62ccb7c99f in alloc::alloc::Global::alloc_impl::hf1ff7293a539fac9 /builds/worker/fetches/rust/library/alloc/src/alloc.rs:166:43
#11 0x7f62ccb7c99f in $LT$alloc..alloc..Global$u20$as$u20$core..alloc..Allocator$GT$::allocate_zeroed::hb2906b1432dc75a3 /builds/worker/fetches/rust/library/alloc/src/alloc.rs:231:9
#12 0x7f62ccb7c99f in alloc::raw_vec::RawVec$LT$T$C$A$GT$::allocate_in::h244ff823c0819019 /builds/worker/fetches/rust/library/alloc/src/raw_vec.rs:205:38
#13 0x7f62ccb7c99f in alloc::raw_vec::RawVec$LT$T$C$A$GT$::with_capacity_zeroed_in::h66a320b84839d87c /builds/worker/fetches/rust/library/alloc/src/raw_vec.rs:151:9
#14 0x7f62ccb7c99f in $LT$u8$u20$as$u20$alloc..vec..spec_from_elem..SpecFromElem$GT$::from_elem::hbae5f582a25fec92 /builds/worker/fetches/rust/library/alloc/src/vec/spec_from_elem.rs:39:31
#15 0x7f62ccb7c99f in alloc::vec::from_elem::h76a6624129227c3c /builds/worker/fetches/rust/library/alloc/src/vec/mod.rs:2296:5
#16 0x7f62ccb7c99f in webrender_bindings::moz2d_renderer::rasterize_blob::h6f1bd00235eb1314 /builds/worker/checkouts/gecko/gfx/webrender_bindings/src/moz2d_renderer.rs:598:22
#17 0x7f62ccb2637f in core::ops::function::Fn::call::h58bae1af513c0c01 /builds/worker/fetches/rust/library/core/src/ops/function.rs:70:5
#18 0x7f62ccb2637f in core::ops::function::impls::
$LT$impl$u20$core..ops..function..FnMut$LT$A$GT$$u20$for$u20$$RF$F$GT$::call_mut::hf120aacbf717c6ff /builds/worker/fetches/rust/library/core/src/ops/function.rs:247:13
#19 0x7f62ccb2637f in core::ops::function::impls::
$LT$impl$u20$core..ops..function..FnOnce$LT$A$GT$$u20$for$u20$$RF$mut$u20$F$GT$::call_once::he693a57af84a82a1 /builds/worker/fetches/rust/library/core/src/ops/function.rs:280:13
#20 0x7f62ccb2637f in core::option::Option$LT$T$GT$::map::h969495e38401997a /builds/worker/fetches/rust/library/core/src/option.rs:836:29
#21 0x7f62ccb2637f in $LT$core..iter..adapters..map..Map$LT$I$C$F$GT$$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::h5aab0b1c98c34613 /builds/worker/fetches/rust/library/core/src/iter/adapters/map.rs:103:9
#22 0x7f62ccb2637f in rayon::iter::plumbing::Folder::consume_iter::hf63b17f6b1df37c1 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:178:21
#23 0x7f62ccb2637f in $LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$$GT$::consume_iter::h448aa5b0d4224bcb /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/map.rs:248:21
#24 0x7f62ccb2637f in rayon::iter::plumbing::Producer::fold_with::h14512be4b2798f9c /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:110:9
#25 0x7f62ccb2637f in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:438:13
#26 0x7f62cca90052 in rayon::iter::plumbing::bridge_producer_consumer::helper::
$u7b$$u7b$closure$u7d$$u7d$::h68b566d50ac5baf4 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:427:21
#27 0x7f62cca90052 in rayon_core::join::join_context::call_b::
$u7b$$u7b$closure$u7d$$u7d$::hfdee6d3597efe380 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:129:25
#28 0x7f62cca90052 in rayon_core::job::StackJob$LT$L$C$F$C$R$GT$::run_inline::hb957a8e389dfd710 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/job.rs:97:9
#29 0x7f62cca90052 in rayon_core::join::join_context::$u7b$$u7b$closure$u7d$$u7d$::hb3a81382b9de5bb0 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:158:36
#30 0x7f62ccb26855 in rayon_core::registry::in_worker::hef5a9fceac383c01 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13
#31 0x7f62ccb26855 in rayon_core::join::join_context::hd774efb1343e6ef6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:132:5
#32 0x7f62ccb26855 in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:416:47
#33 0x7f62cca8fac9 in rayon::iter::plumbing::bridge_producer_consumer::helper::
$u7b$$u7b$closure$u7d$$u7d$::h062333dcb23abc6d /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:418:21
#34 0x7f62cca8fac9 in rayon_core::join::join_context::call_a::$u7b$$u7b$closure$u7d$$u7d$::h5e50eea704ccf84c /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:124:17
#35 0x7f62cca8fac9 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h53bd83714c1dd534 /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#36 0x7f62cca8fac9 in std::panicking::try::do_call::h87d5c012eb93320f /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#37 0x7f62cca8fac9 in std::panicking::try::h7d2032f1d851e63d /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#38 0x7f62cca8fac9 in std::panic::catch_unwind::h210261d879cf81a4 /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#39 0x7f62cca8fac9 in rayon_core::unwind::halt_unwinding::h7547b457eda8a0a6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/unwind.rs:17:5
#40 0x7f62cca8fac9 in rayon_core::join::join_context::
$u7b$$u7b$closure$u7d$$u7d$::hb3a81382b9de5bb0 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:141:24
#41 0x7f62ccb26855 in rayon_core::registry::in_worker::hef5a9fceac383c01 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13
#42 0x7f62ccb26855 in rayon_core::join::join_context::hd774efb1343e6ef6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:132:5
#43 0x7f62ccb26855 in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:416:47
#44 0x7f62cca8fac9 in rayon::iter::plumbing::bridge_producer_consumer::helper::
$u7b$$u7b$closure$u7d$$u7d$::h062333dcb23abc6d /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:418:21
#45 0x7f62cca8fac9 in rayon_core::join::join_context::call_a::$u7b$$u7b$closure$u7d$$u7d$::h5e50eea704ccf84c /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:124:17
#46 0x7f62cca8fac9 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h53bd83714c1dd534 /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#47 0x7f62cca8fac9 in std::panicking::try::do_call::h87d5c012eb93320f /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#48 0x7f62cca8fac9 in std::panicking::try::h7d2032f1d851e63d /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#49 0x7f62cca8fac9 in std::panic::catch_unwind::h210261d879cf81a4 /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#50 0x7f62cca8fac9 in rayon_core::unwind::halt_unwinding::h7547b457eda8a0a6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/unwind.rs:17:5
#51 0x7f62cca8fac9 in rayon_core::join::join_context::
$u7b$$u7b$closure$u7d$$u7d$::hb3a81382b9de5bb0 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:141:24
#52 0x7f62ccb26855 in rayon_core::registry::in_worker::hef5a9fceac383c01 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13
#53 0x7f62ccb26855 in rayon_core::join::join_context::hd774efb1343e6ef6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:132:5
#54 0x7f62ccb26855 in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:416:47
#55 0x7f62cca8fac9 in rayon::iter::plumbing::bridge_producer_consumer::helper::
$u7b$$u7b$closure$u7d$$u7d$::h062333dcb23abc6d /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:418:21
#56 0x7f62cca8fac9 in rayon_core::join::join_context::call_a::$u7b$$u7b$closure$u7d$$u7d$::h5e50eea704ccf84c /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:124:17
#57 0x7f62cca8fac9 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h53bd83714c1dd534 /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#58 0x7f62cca8fac9 in std::panicking::try::do_call::h87d5c012eb93320f /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#59 0x7f62cca8fac9 in std::panicking::try::h7d2032f1d851e63d /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#60 0x7f62cca8fac9 in std::panic::catch_unwind::h210261d879cf81a4 /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#61 0x7f62cca8fac9 in rayon_core::unwind::halt_unwinding::h7547b457eda8a0a6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/unwind.rs:17:5
#62 0x7f62cca8fac9 in rayon_core::join::join_context::
$u7b$$u7b$closure$u7d$$u7d$::hb3a81382b9de5bb0 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:141:24
#63 0x7f62ccb26855 in rayon_core::registry::in_worker::hef5a9fceac383c01 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13
#64 0x7f62ccb26855 in rayon_core::join::join_context::hd774efb1343e6ef6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:132:5
#65 0x7f62ccb26855 in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:416:47
#66 0x7f62cca8fac9 in rayon::iter::plumbing::bridge_producer_consumer::helper::
$u7b$$u7b$closure$u7d$$u7d$::h062333dcb23abc6d /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:418:21
#67 0x7f62cca8fac9 in rayon_core::join::join_context::call_a::$u7b$$u7b$closure$u7d$$u7d$::h5e50eea704ccf84c /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:124:17
#68 0x7f62cca8fac9 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h53bd83714c1dd534 /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#69 0x7f62cca8fac9 in std::panicking::try::do_call::h87d5c012eb93320f /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#70 0x7f62cca8fac9 in std::panicking::try::h7d2032f1d851e63d /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#71 0x7f62cca8fac9 in std::panic::catch_unwind::h210261d879cf81a4 /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#72 0x7f62cca8fac9 in rayon_core::unwind::halt_unwinding::h7547b457eda8a0a6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/unwind.rs:17:5
#73 0x7f62cca8fac9 in rayon_core::join::join_context::
$u7b$$u7b$closure$u7d$$u7d$::hb3a81382b9de5bb0 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:141:24
#74 0x7f62ccb26855 in rayon_core::registry::in_worker::hef5a9fceac383c01 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13
#75 0x7f62ccb26855 in rayon_core::join::join_context::hd774efb1343e6ef6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:132:5
#76 0x7f62ccb26855 in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:416:47
#77 0x7f62ccb2bbb6 in rayon::iter::plumbing::bridge_producer_consumer::helper::
$u7b$$u7b$closure$u7d$$u7d$::h68b566d50ac5baf4 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:427:21
#78 0x7f62ccb2bbb6 in rayon_core::join::join_context::call_b::$u7b$$u7b$closure$u7d$$u7d$::hfdee6d3597efe380 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:129:25
#79 0x7f62ccb2bbb6 in $LT$rayon_core..job..StackJob$LT$L$C$F$C$R$GT$$u20$as$u20$rayon_core..job..Job$GT$::execute::call::$u7b$$u7b$closure$u7d$$u7d$::h1e955c187f6f127a /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/job.rs:113:21
#80 0x7f62ccb2bbb6 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h0cf97725ea12cc4f /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#81 0x7f62ccb2bbb6 in std::panicking::try::do_call::h308d7d899021dcd6 /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#82 0x7f62ccb2bbb6 in std::panicking::try::h49bab19116fb9fe5 /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#83 0x7f62ccb2bbb6 in std::panic::catch_unwind::h7a9fbe84595d5fe5 /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#84 0x7f62ccb2bbb6 in rayon_core::unwind::halt_unwinding::h0233845d4c559122 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/unwind.rs:17:5
#85 0x7f62ccb2bbb6 in $LT$rayon_core..job..StackJob$LT$L$C$F$C$R$GT$$u20$as$u20$rayon_core..job..Job$GT$::execute::h18ae6be2bba781dd /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/job.rs:119:38
#86 0x7f62b4a64f40 in rayon_core::job::JobRef::execute::h3b89b4771b239d31 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/job.rs:59:9
#87 0x7f62b4a64f40 in rayon_core::registry::WorkerThread::execute::h14ef5cd50eacf450 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:749:9
#88 0x7f62b4a64f40 in rayon_core::registry::WorkerThread::wait_until_cold::hc38e8118cbb9ccc1 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:726:17
#89 0x7f62cca9029a in rayon_core::registry::WorkerThread::wait_until::hd66e31a5148165fd /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:700:13
#90 0x7f62cca9029a in rayon_core::join::join_context::
$u7b$$u7b$closure$u7d$$u7d$::hb3a81382b9de5bb0 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:166:17
#91 0x7f62ccb26855 in rayon_core::registry::in_worker::hef5a9fceac383c01 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13
#92 0x7f62ccb26855 in rayon_core::join::join_context::hd774efb1343e6ef6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:132:5
#93 0x7f62ccb26855 in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:416:47
#94 0x7f62cca8fac9 in rayon::iter::plumbing::bridge_producer_consumer::helper::
$u7b$$u7b$closure$u7d$$u7d$::h062333dcb23abc6d /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:418:21
#95 0x7f62cca8fac9 in rayon_core::join::join_context::call_a::
$u7b$$u7b$closure$u7d$$u7d$::h5e50eea704ccf84c /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:124:17
#96 0x7f62cca8fac9 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h53bd83714c1dd534 /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#97 0x7f62cca8fac9 in std::panicking::try::do_call::h87d5c012eb93320f /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#98 0x7f62cca8fac9 in std::panicking::try::h7d2032f1d851e63d /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#99 0x7f62cca8fac9 in std::panic::catch_unwind::h210261d879cf81a4 /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#100 0x7f62cca8fac9 in rayon_core::unwind::halt_unwinding::h7547b457eda8a0a6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/unwind.rs:17:5
#101 0x7f62cca8fac9 in rayon_core::join::join_context::
$u7b$$u7b$closure$u7d$$u7d$::hb3a81382b9de5bb0 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:141:24
#102 0x7f62ccb26855 in rayon_core::registry::in_worker::hef5a9fceac383c01 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13
#103 0x7f62ccb26855 in rayon_core::join::join_context::hd774efb1343e6ef6 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:132:5
#104 0x7f62ccb26855 in rayon::iter::plumbing::bridge_producer_consumer::helper::hd5a109659a3eab63 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:416:47
#105 0x7f62ccb2bbb6 in rayon::iter::plumbing::bridge_producer_consumer::helper::$u7b$$u7b$closure$u7d$$u7d$::h68b566d50ac5baf4 /builds/worker/checkouts/gecko/third_party/rust/rayon/src/iter/plumbing/mod.rs:427:21
#106 0x7f62ccb2bbb6 in rayon_core::join::join_context::call_b::
$u7b$$u7b$closure$u7d$$u7d$::hfdee6d3597efe380 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/join/mod.rs:129:25
#107 0x7f62ccb2bbb6 in $LT$rayon_core..job..StackJob$LT$L$C$F$C$R$GT$$u20$as$u20$rayon_core..job..Job$GT$::execute::call::$u7b$$u7b$closure$u7d$$u7d$::h1e955c187f6f127a /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/job.rs:113:21
#108 0x7f62ccb2bbb6 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h0cf97725ea12cc4f /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#109 0x7f62ccb2bbb6 in std::panicking::try::do_call::h308d7d899021dcd6 /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#110 0x7f62ccb2bbb6 in std::panicking::try::h49bab19116fb9fe5 /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#111 0x7f62ccb2bbb6 in std::panic::catch_unwind::h7a9fbe84595d5fe5 /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#112 0x7f62ccb2bbb6 in rayon_core::unwind::halt_unwinding::h0233845d4c559122 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/unwind.rs:17:5
#113 0x7f62ccb2bbb6 in $LT$rayon_core..job..StackJob$LT$L$C$F$C$R$GT$$u20$as$u20$rayon_core..job..Job$GT$::execute::h18ae6be2bba781dd /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/job.rs:119:38
#114 0x7f62b4a64f40 in rayon_core::job::JobRef::execute::h3b89b4771b239d31 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/job.rs:59:9
#115 0x7f62b4a64f40 in rayon_core::registry::WorkerThread::execute::h14ef5cd50eacf450 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:749:9
#116 0x7f62b4a64f40 in rayon_core::registry::WorkerThread::wait_until_cold::hc38e8118cbb9ccc1 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:726:17
#117 0x7f62cfc94abc in rayon_core::registry::WorkerThread::wait_until::hf33b8cdc05517fa3 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:700:13
#118 0x7f62cfc94abc in rayon_core::registry::main_loop::h08349609842826be /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:833:5
#119 0x7f62cfc94abc in rayon_core::registry::ThreadBuilder::run::h2425e934fff19899 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:55:18
#120 0x7f62cfc7af1f in $LT$rayon_core..registry..DefaultSpawn$u20$as$u20$rayon_core..registry..ThreadSpawn$GT$::spawn::$u7b$$u7b$closure$u7d$$u7d$::h6ee469972a1070d8 /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:100:20
#121 0x7f62cfc7af1f in std::sys_common::backtrace::__rust_begin_short_backtrace::he07c5ce4cd69053b /builds/worker/fetches/rust/library/std/src/sys_common/backtrace.rs:125:18
#122 0x7f62cfc81976 in std::thread::Builder::spawn_unchecked::
$u7b$$u7b$closure$u7d$$u7d$::
$u7b$$u7b$closure$u7d$$u7d$::hd767810eafd26570 /builds/worker/fetches/rust/library/std/src/thread/mod.rs:481:17
#123 0x7f62cfc81976 in $LT$core..panic..unwind_safe..AssertUnwindSafe$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$$LP$$RP$$GT$$GT$::call_once::h92f7d73e1e60ed6e /builds/worker/fetches/rust/library/core/src/panic/unwind_safe.rs:271:9
#124 0x7f62cfc81976 in std::panicking::try::do_call::h7e50076a0ea03165 /builds/worker/fetches/rust/library/std/src/panicking.rs:403:40
#125 0x7f62cfc81976 in std::panicking::try::h727a437ff00f16a0 /builds/worker/fetches/rust/library/std/src/panicking.rs:367:19
#126 0x7f62cfc81976 in std::panic::catch_unwind::h9bc43351ecbe950e /builds/worker/fetches/rust/library/std/src/panic.rs:129:14
#127 0x7f62cfc81976 in std::thread::Builder::spawn_unchecked::
$u7b$$u7b$closure$u7d$$u7d$::h853f8ba14a649b68 /builds/worker/fetches/rust/library/std/src/thread/mod.rs:480:30
#128 0x7f62cfc81976 in core::ops::function::FnOnce::call_once$u7b$$u7b$vtable.shim$u7d$$u7d$::hc1b2cb462d8e45d1 /builds/worker/fetches/rust/library/core/src/ops/function.rs:227:5
#129 0x7f62cfe07772 in std::sys::unix::thread::Thread::new::thread_start::h3b1213720f18b702 (/root/firefox-95/libxul.so+0x217cd772)
#130 0x7f62de4b3608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477:8
#131 0x7f62de07b292 in clone /build/glibc-eX1tMB/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Expected results:

the browser won't crash

Attached file 4976.html.log

runtime log

The Bugbug bot thinks this bug should belong to the 'Core::Graphics: WebRender' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Component: Untriaged → Graphics: WebRender
Product: Firefox → Core
Blocks: gfx-triage

This looks like an OOM

2366719611, is it possible to minimize the test case?

Flags: needinfo?(2366719611)

Lee feels that Nical's work in swapping out Rayon for a custom thread scheduler might address this.

No longer blocks: gfx-triage
Severity: -- → S3
Attached file reduced.html
Flags: needinfo?(2366719611)
Attached file reduced_html.log.txt

I have tried to reduce the html and uploaded it in the attachments. Please take a look, thank you!

Crash Signature: [@ OOM | small ]
Status: UNCONFIRMED → NEW
Ever confirmed: true
Blocks: gfx-triage
Assignee: nobody → ahale
No longer blocks: gfx-triage
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: