1754878 - Crash in [@ webrender::device::gl::TextureUploader::upload]

Status: NEW

(Core :: Graphics: WebRender, defect)

Description

[Andrew McCreight [:mccr8]]

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/98a84b6e-a96c-4ea5-b97a-5b0040220210

MOZ_CRASH Reason: assertion failed: src_size <= len * mem::size_of::<T>()

Top 10 frames of crashing thread:

0 libxul.so RustMozCrash mozglue/static/rust/wrappers.cpp:18
1 libxul.so mozglue_static::panic_hook mozglue/static/rust/lib.rs:91
2 libxul.so core::ops::function::Fn::call library/core/src/ops/function.rs:70
3 libxul.so std::panicking::rust_panic_with_hook library/std/src/panicking.rs:610
4 libxul.so std::panicking::begin_panic_handler::{{closure}} library/std/src/panicking.rs:500
5 libxul.so std::sys_common::backtrace::__rust_end_short_backtrace library/std/src/sys_common/backtrace.rs:139
6 libxul.so rust_begin_unwind library/std/src/panicking.rs:498
7 libxul.so core::panicking::panic_fmt library/core/src/panicking.rs:107
8 libxul.so core::panicking::panic library/core/src/panicking.rs:48
9 libxul.so webrender::device::gl::TextureUploader::upload gfx/wr/webrender/src/device/gl.rs:4584