Closed Bug 1768190 Opened 2 years ago Closed 2 years ago

Assertion failure: [GFX1]: void mozilla::gl::GLContext::raw_fDrawArrays(GLenum, GLint, GLsizei): Generated unexpected GL_INVALID_OPERATION error, at /gfx/2d/Logging.h:754

Categories

(Core :: Graphics: CanvasWebGL, defect, P1)

x86_64
Linux
defect

Tracking

()

VERIFIED FIXED
105 Branch
Tracking Status
firefox-esr91 --- wontfix
firefox-esr102 108+ fixed
firefox103 --- wontfix
firefox104 --- wontfix
firefox105 --- verified

People

(Reporter: jkratzer, Assigned: jgilbert)

References

(Blocks 1 open bug, Regressed 1 open bug)

Details

(Keywords: assertion, testcase, Whiteboard: [bugmon:bisected,confirmed][fuzzblocker])

Attachments

(2 files)

Testcase found while fuzzing mozilla-central rev fe0b18ac5fe1 (built with: --enable-debug --enable-fuzzing).

Testcase can be reproduced using the following commands:

$ pip install fuzzfetch grizzly-framework
$ python -m fuzzfetch --build fe0b18ac5fe1 --debug --fuzzing -n firefox
$ python -m grizzly.replay ./firefox/firefox testcase.html
Assertion failure: [GFX1]: void mozilla::gl::GLContext::raw_fDrawArrays(GLenum, GLint, GLsizei): Generated unexpected GL_INVALID_OPERATION error, at /gfx/2d/Logging.h:754

    ==834344==ERROR: UndefinedBehaviorSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f70f545d00f bp 0x7f70cc0d4310 sp 0x7f70cc0d4300 T834436)
    ==834344==The signal is caused by a WRITE memory access.
    ==834344==Hint: address points to the zero page.
        #0 0x7f70f545d00f in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::WriteLog(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) /gfx/2d/Logging.h:755:9
        #1 0x7f70f545cf1e in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::Flush() /gfx/2d/Logging.h:277:7
        #2 0x7f70f552919e in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::~Log() /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/Logging.h:270:12
        #3 0x7f70f553d2d2 in mozilla::gl::GLContext::AfterGLCall_Debug(char const*) const /gfx/gl/GLContext.cpp:2604:7
        #4 0x7f70f75a7173 in AfterGLCall /gfx/gl/GLContext.h:684:7
        #5 0x7f70f75a7173 in raw_fDrawArrays /gfx/gl/GLContext.h:1077:5
        #6 0x7f70f75a7173 in mozilla::gl::GLContext::fDrawArrays(unsigned int, int, int) /gfx/gl/GLContext.h:1090:5
        #7 0x7f70f75a6c36 in mozilla::WebGLContext::DrawArraysInstanced(unsigned int, int, int, int) /dom/canvas/WebGLContextDraw.cpp:719:13
        #8 0x7f70f7625b9e in DrawArraysInstanced /dom/canvas/HostWebGLContext.h:743:15
        #9 0x7f70f7625b9e in auto bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 99ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, int, int) const, &(mozilla::HostWebGLContext::DrawArraysInstanced(unsigned int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&)::'lambda'(auto&...)::operator()<unsigned int, int, int, int>(auto&...) const /dom/canvas/WebGLCommandQueue.h:246:13
        #10 0x7f70f76250f6 in __invoke_impl<bool, (lambda at /dom/canvas/WebGLCommandQueue.h:238:11), unsigned int &, int &, int &, int &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/bits/invoke.h:60:14
        #11 0x7f70f76250f6 in __invoke<(lambda at /dom/canvas/WebGLCommandQueue.h:238:11), unsigned int &, int &, int &, int &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/bits/invoke.h:95:14
        #12 0x7f70f76250f6 in __apply_impl<(lambda at /dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &, 0UL, 1UL, 2UL, 3UL> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1662:14
        #13 0x7f70f76250f6 in apply<(lambda at /dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1671:14
        #14 0x7f70f76250f6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:237:14
        #15 0x7f70f76250f6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 98ul, void (mozilla::HostWebGLContext::*)(unsigned long) const, &(mozilla::HostWebGLContext::BindVertexArray(unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #16 0x7f70f7624624 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #17 0x7f70f7624624 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 96ul, void (mozilla::HostWebGLContext::*)(unsigned long, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&, unsigned int) const, &(mozilla::HostWebGLContext::TransformFeedbackVaryings(unsigned long, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #18 0x7f70f7624388 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #19 0x7f70f7624388 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 94ul, void (mozilla::HostWebGLContext::*)() const, &(mozilla::HostWebGLContext::PauseTransformFeedback() const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #20 0x7f70f7623c4d in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #21 0x7f70f7623c4d in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 92ul, void (mozilla::HostWebGLContext::*)(unsigned int) const, &(mozilla::HostWebGLContext::BeginTransformFeedback(unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #22 0x7f70f762335a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #23 0x7f70f762335a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #24 0x7f70f762335a in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 89ul, void (mozilla::HostWebGLContext::*)(unsigned long, unsigned int, int) const, &(mozilla::HostWebGLContext::SamplerParameteri(unsigned long, unsigned int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #25 0x7f70f7621b40 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #26 0x7f70f7621b40 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #27 0x7f70f7621b40 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 86ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, float, int) const, &(mozilla::HostWebGLContext::ClearBufferfi(unsigned int, int, float, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #28 0x7f70f76204ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #29 0x7f70f76204ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #30 0x7f70f76204ff in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 83ul, void (mozilla::HostWebGLContext::*)(unsigned int) const, &(mozilla::HostWebGLContext::DisableVertexAttribArray(unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #31 0x7f70f761eea3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #32 0x7f70f761eea3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #33 0x7f70f761eea3 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 80ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int) const, &(mozilla::HostWebGLContext::VertexAttribDivisor(unsigned int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #34 0x7f70f761e51f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #35 0x7f70f761e51f in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 78ul, void (mozilla::HostWebGLContext::*)(unsigned int, bool, mozilla::RawBuffer<unsigned char> const&) const, &(mozilla::HostWebGLContext::UniformData(unsigned int, bool, mozilla::RawBuffer<unsigned char> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #36 0x7f70f7619d04 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #37 0x7f70f7619d04 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #38 0x7f70f7619d04 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 75ul, void (mozilla::HostWebGLContext::*)(bool, unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&, mozilla::avec3<unsigned int> const&, mozilla::RawBuffer<unsigned char> const&, unsigned int, mozilla::Maybe<unsigned long> const&) const, &(mozilla::HostWebGLContext::CompressedTexImage(bool, unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&, mozilla::avec3<unsigned int> const&, mozilla::RawBuffer<unsigned char> const&, unsigned int, mozilla::Maybe<unsigned long> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #39 0x7f70f7617d69 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #40 0x7f70f7617d69 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 73ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&) const, &(mozilla::HostWebGLContext::TexStorage(unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #41 0x7f70f7616fd5 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #42 0x7f70f7616fd5 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #43 0x7f70f7616fd5 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 70ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned long) const, &(mozilla::HostWebGLContext::BindTexture(unsigned int, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #44 0x7f70f7616222 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #45 0x7f70f7616222 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #46 0x7f70f7616222 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 67ul, void (mozilla::HostWebGLContext::*)(unsigned int) const, &(mozilla::HostWebGLContext::ReadBuffer(unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #47 0x7f70f7615345 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #48 0x7f70f7615345 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 65ul, void (mozilla::HostWebGLContext::*)(unsigned int, mozilla::RawBuffer<unsigned int const> const&) const, &(mozilla::HostWebGLContext::InvalidateFramebuffer(unsigned int, mozilla::RawBuffer<unsigned int const> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #49 0x7f70f7614928 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #50 0x7f70f7614928 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 63ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned long, mozilla::RawBuffer<unsigned char> const&) const, &(mozilla::HostWebGLContext::BufferSubData(unsigned int, unsigned long, mozilla::RawBuffer<unsigned char> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #51 0x7f70f7614005 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #52 0x7f70f7614005 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 61ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int, unsigned long, unsigned long, unsigned long) const, &(mozilla::HostWebGLContext::CopyBufferSubData(unsigned int, unsigned int, unsigned long, unsigned long, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #53 0x7f70f7613404 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #54 0x7f70f7613404 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #55 0x7f70f7613404 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 58ul, void (mozilla::HostWebGLContext::*)(int, int, int, int) const, &(mozilla::HostWebGLContext::Viewport(int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #56 0x7f70f76129a7 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #57 0x7f70f76129a7 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #58 0x7f70f76129a7 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 55ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int, int, unsigned int) const, &(mozilla::HostWebGLContext::StencilFuncSeparate(unsigned int, unsigned int, int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #59 0x7f70f7611eae in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #60 0x7f70f7611eae in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 53ul, void (mozilla::HostWebGLContext::*)(int, int, int, int) const, &(mozilla::HostWebGLContext::Scissor(int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #61 0x7f70f761052f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #62 0x7f70f761052f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #63 0x7f70f761052f in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 50ul, void (mozilla::HostWebGLContext::*)(float, float) const, &(mozilla::HostWebGLContext::PolygonOffset(float, float) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #64 0x7f70f760fb7c in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #65 0x7f70f760fb7c in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #66 0x7f70f760fb7c in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 47ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int) const, &(mozilla::HostWebGLContext::Hint(unsigned int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #67 0x7f70f760f3b3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #68 0x7f70f760f3b3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #69 0x7f70f760f3b3 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 44ul, void (mozilla::HostWebGLContext::*)() const, &(mozilla::HostWebGLContext::Flush() const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #70 0x7f70f760e8ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #71 0x7f70f760e8ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #72 0x7f70f760e8ff in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 41ul, void (mozilla::HostWebGLContext::*)(bool) const, &(mozilla::HostWebGLContext::DepthMask(bool) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #73 0x7f70f760dda4 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #74 0x7f70f760dda4 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #75 0x7f70f760dda4 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 38ul, void (mozilla::HostWebGLContext::*)(unsigned long) const, &(mozilla::HostWebGLContext::CompileShader(unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #76 0x7f70f760ca42 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #77 0x7f70f760ca42 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #78 0x7f70f760ca42 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 35ul, void (mozilla::HostWebGLContext::*)(float) const, &(mozilla::HostWebGLContext::ClearDepth(float) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #79 0x7f70f760bf9a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #80 0x7f70f760bf9a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #81 0x7f70f760bf9a in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 32ul, void (mozilla::HostWebGLContext::*)(mozilla::Maybe<unsigned int>, unsigned int, unsigned int, unsigned int, unsigned int) const, &(mozilla::HostWebGLContext::BlendFuncSeparate(mozilla::Maybe<unsigned int>, unsigned int, unsigned int, unsigned int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #82 0x7f70f760aa77 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #83 0x7f70f760aa77 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #84 0x7f70f760aa77 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 29ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned long) const, &(mozilla::HostWebGLContext::BindFramebuffer(unsigned int, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #85 0x7f70f760a3dc in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #86 0x7f70f760a3dc in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 27ul, void (mozilla::HostWebGLContext::*)(unsigned long, unsigned long) const, &(mozilla::HostWebGLContext::AttachShader(unsigned long, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #87 0x7f70f7608865 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #88 0x7f70f7608865 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #89 0x7f70f7608865 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 24ul, void (mozilla::HostWebGLContext::*)(mozilla::avec2<unsigned int> const&), &(mozilla::HostWebGLContext::Resize(mozilla::avec2<unsigned int> const&))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #90 0x7f70f760740f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #91 0x7f70f760740f in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 22ul, void (mozilla::HostWebGLContext::*)(unsigned int, mozilla::Maybe<unsigned int>, bool) const, &(mozilla::HostWebGLContext::SetEnabled(unsigned int, mozilla::Maybe<unsigned int>, bool) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #92 0x7f70f7606b96 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #93 0x7f70f7606b96 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #94 0x7f70f7606b96 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 19ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::DeleteTexture(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #95 0x7f70f7606346 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #96 0x7f70f7606346 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #97 0x7f70f7606346 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 16ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::DeleteSampler(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #98 0x7f70f7605af6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #99 0x7f70f7605af6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #100 0x7f70f7605af6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 13ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::DeleteProgram(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #101 0x7f70f76052a6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #102 0x7f70f76052a6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #103 0x7f70f76052a6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 10ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateVertexArray(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #104 0x7f70f76041b6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #105 0x7f70f76041b6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #106 0x7f70f76041b6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 7ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateSync(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #107 0x7f70f7603970 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #108 0x7f70f7603970 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #109 0x7f70f7603970 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 4ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateRenderbuffer(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #110 0x7f70f7603116 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #111 0x7f70f7603116 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #112 0x7f70f7603116 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 1ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateFramebuffer(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
        #113 0x7f70f75ef3c7 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
        #114 0x7f70f75ef3c7 in mozilla::dom::WebGLParent::RecvDispatchCommands(mozilla::ipc::Shmem&&, unsigned long) /dom/canvas/WebGLParent.cpp:64:21
        #115 0x7f70f768f302 in mozilla::dom::PWebGLParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PWebGLParent.cpp:241:55
        #116 0x7f70f5952cfe in mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCanvasManagerParent.cpp:214:32
        #117 0x7f70f50132d1 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /ipc/glue/MessageChannel.cpp:1776:25
        #118 0x7f70f5010166 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message&&) /ipc/glue/MessageChannel.cpp:1701:9
        #119 0x7f70f5010c69 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /ipc/glue/MessageChannel.cpp:1505:3
        #120 0x7f70f5011ba4 in mozilla::ipc::MessageChannel::MessageTask::Run() /ipc/glue/MessageChannel.cpp:1583:14
        #121 0x7f70f4462b67 in nsThread::ProcessNextEvent(bool, bool*) /xpcom/threads/nsThread.cpp:1174:16
        #122 0x7f70f446909d in NS_ProcessNextEvent(nsIThread*, bool) /xpcom/threads/nsThreadUtils.cpp:465:10
        #123 0x7f70f5019ea4 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /ipc/glue/MessagePump.cpp:330:5
        #124 0x7f70f4f34bc7 in MessageLoop::RunInternal() /ipc/chromium/src/base/message_loop.cc:380:10
        #125 0x7f70f4f34ad2 in RunHandler /ipc/chromium/src/base/message_loop.cc:373:3
        #126 0x7f70f4f34ad2 in MessageLoop::Run() /ipc/chromium/src/base/message_loop.cc:355:3
        #127 0x7f70f445e056 in nsThread::ThreadFunc(void*) /xpcom/threads/nsThread.cpp:378:10
        #128 0x7f710afd32e7 in _pt_root /nsprpub/pr/src/pthreads/ptthread.c:201:5
        #129 0x7f710bd45608 in start_thread /build/glibc-sMfBJT/glibc-2.31/nptl/pthread_create.c:477:8
        #130 0x7f710b90c162 in __clone /build/glibc-sMfBJT/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
    
    UndefinedBehaviorSanitizer can not provide additional info.
    SUMMARY: UndefinedBehaviorSanitizer: SEGV /gfx/2d/Logging.h:755:9 in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::WriteLog(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
    ==834344==ABORTING
Attached file Testcase

Bugmon Analysis
Verified bug as reproducible on mozilla-central 20220506095052-fe0b18ac5fe1.
Unable to bisect testcase (Testcase reproduces on start build!):

Start: 1a24ffb3930b812fe08797f65cbfcea172fcc31f (20210507095221)
End: fe0b18ac5fe152cad89a780b5e48c2b325fea839 (20220506095052)
BuildFlags: BuildFlags(asan=False, tsan=False, debug=True, fuzzing=True, coverage=False, valgrind=False, no_opt=False, fuzzilli=False)

Whiteboard: [bugmon:confirm] → [bugmon:bisected,confirmed]

This is a frequent crash and I'm fairly sure it's related to another crash that is also frequent while fuzzing.

We also see this crash on Linux ASan with the following stack.

==62393==ERROR: AddressSanitizer: ABRT on unknown address 0x03e80000f3b9 (pc 0x7f5a7c02a00b bp 0x7f5a2fe75308 sp 0x7f5a2fe750a0 T39)
    #0 0x7f5a7c02a00b in raise /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
    #1 0x7f5a7c009858 in abort /build/glibc-SzIz7B/glibc-2.31/stdlib/abort.c:79:7
    #2 0x7f5a453c8208 in llvm::report_fatal_error(llvm::Twine const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34208) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #3 0x7f5a453c8226 in llvm::report_fatal_error(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34226) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #4 0x7f5a45b5d86b in llvm::SelectionDAGISel::CannotYetSelect(llvm::SDNode*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c986b) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #5 0x7f5a45b5cfbc in llvm::SelectionDAGISel::SelectCodeCommon(llvm::SDNode*, unsigned char const*, unsigned int) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c8fbc) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #6 0x7f5a4767034d  (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2ddc34d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #7 0x7f5a45b5612e in llvm::SelectionDAGISel::DoInstructionSelection() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c212e) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #8 0x7f5a45b5584f in llvm::SelectionDAGISel::CodeGenAndEmitDAG() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c184f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #9 0x7f5a45b54bd9 in llvm::SelectionDAGISel::SelectAllBasicBlocks(llvm::Function const&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c0bd9) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #10 0x7f5a45b52915 in llvm::SelectionDAGISel::runOnMachineFunction(llvm::MachineFunction&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12be915) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #11 0x7f5a47662884  (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2dce884) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #12 0x7f5a45776e2d in llvm::MachineFunctionPass::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xee2e2d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #13 0x7f5a4559436c in llvm::FPPassManager::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd0036c) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #14 0x7f5a45599d52 in llvm::FPPassManager::runOnModule(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd05d52) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #15 0x7f5a455949be in llvm::legacy::PassManagerImpl::run(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd009be) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #16 0x7f5a469f48e7 in llvm::MCJIT::emitObject(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x21608e7) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #17 0x7f5a469f4bc0 in llvm::MCJIT::generateCodeForModule(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2160bc0) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #18 0x7f5a469f554d in llvm::MCJIT::finalizeObject() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x216154d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #19 0x7f5a469b270f in LLVMGetPointerToGlobal (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x211e70f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #20 0x7f5a4a92083f  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8d683f) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #21 0x7f5a4a912437  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8c8437) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #22 0x7f5a4a8f89cf  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8ae9cf) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #23 0x7f5a4a356862  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x30c862) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #24 0x7f5a5865b44c in mozilla::gl::GLContext::raw_fDrawArrays(unsigned int, int, int) /builds/worker/workspace/obj-build/dist/include/GLContext.h:1076:5
    #25 0x7f5a5b8140c8 in mozilla::gl::GLContext::fDrawArrays(unsigned int, int, int) /builds/worker/checkouts/gecko/gfx/gl/GLContext.h:1090:5
    #26 0x7f5a5b81321d in mozilla::WebGLContext::DrawArraysInstanced(unsigned int, int, int, int) /builds/worker/checkouts/gecko/dom/canvas/WebGLContextDraw.cpp:719:13
    #27 0x7f5a5b8f5e8b in DrawArraysInstanced /builds/worker/checkouts/gecko/dom/canvas/HostWebGLContext.h:743:15
    #28 0x7f5a5b8f5e8b in auto bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 99ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, int, int) const, &(mozilla::HostWebGLContext::DrawArraysInstanced(unsigned int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&)::'lambda'(auto&...)::operator()<unsigned int, int, int, int>(auto&...) const /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:246:13
    #29 0x7f5a5b89dfb5 in apply<(lambda at /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1671:14
    #30 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:237:14
    #31 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #32 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #33 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #34 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #35 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #36 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #37 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #38 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #39 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #40 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #41 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #42 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #43 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #44 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #45 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #46 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #47 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #48 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #49 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #50 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #51 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #52 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #53 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #54 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #55 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #56 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #57 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #58 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #59 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #60 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #61 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #62 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #63 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #64 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #65 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #66 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #67 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #68 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #69 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #70 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #71 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #72 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #73 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #74 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #75 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #76 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #77 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #78 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #79 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #80 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #81 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #82 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #83 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #84 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #85 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #86 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #87 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #88 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #89 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #90 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #91 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #92 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #93 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #94 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #95 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #96 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #97 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #98 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #99 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #100 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #101 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #102 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #103 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #104 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #105 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #106 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #107 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #108 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #109 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #110 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #111 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #112 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #113 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #114 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #115 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #116 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #117 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #118 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #119 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #120 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #121 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #122 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #123 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #124 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #125 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #126 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #127 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #128 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #129 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #130 0x7f5a5b89dfb5 in mozilla::dom::WebGLParent::RecvDispatchCommands(mozilla::ipc::Shmem&&, unsigned long) /builds/worker/checkouts/gecko/dom/canvas/WebGLParent.cpp:64:21
    #131 0x7f5a5b9d6b70 in mozilla::dom::PWebGLParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PWebGLParent.cpp:242:79
    #132 0x7f5a58e067cc in mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCanvasManagerParent.cpp:214:32
    #133 0x7f5a57bcfb09 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1781:25
    #134 0x7f5a57bccb77 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1706:9
    #135 0x7f5a57bcd7c4 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1506:3
    #136 0x7f5a57bcea52 in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1604:14
    #137 0x7f5a564a56ee in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1174:16
    #138 0x7f5a564af02c in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10
    #139 0x7f5a57bd8b71 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:330:5
    #140 0x7f5a57a4d611 in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10
    #141 0x7f5a57a4d611 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3
    #142 0x7f5a57a4d611 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3
    #143 0x7f5a5649d2bb in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:378:10
    #144 0x7f5a7b8d857e in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5
    #145 0x7f5a7c53f608 in start_thread /build/glibc-SzIz7B/glibc-2.31/nptl/pthread_create.c:477:8
    #146 0x7f5a7c106132 in __clone /build/glibc-SzIz7B/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: ABRT /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1 in raise
Thread T39 (Compositor) created by T0 here:
    #0 0x562b683e2a6c in __interceptor_pthread_create /builds/worker/fetches/llvm-project/compiler-rt/lib/asan/asan_interceptors.cpp:208:3
    #1 0x7f5a7b8c862c in _PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:458:14
    #2 0x7f5a7b8b99ce in PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:533:12
    #3 0x7f5a564a0565 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:604:18
    #4 0x7f5a564acd0f in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadManager.cpp:534:12
    #5 0x7f5a564b8ae1 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:161:57
    #6 0x7f5a58a0be72 in NS_NewNamedThread<11UL> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:74:10
    #7 0x7f5a58a0be72 in mozilla::layers::CompositorThreadHolder::CreateCompositorThread() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:66:17
    #8 0x7f5a58a0c261 in CompositorThreadHolder /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:40:25
    #9 0x7f5a58a0c261 in mozilla::layers::CompositorThreadHolder::Start() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:109:33
    #10 0x7f5a58c63a6b in gfxPlatform::Init() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:956:3
    #11 0x7f5a58c673d6 in GetPlatform /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:466:5
    #12 0x7f5a58c673d6 in gfxPlatform::InitializeCMS() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:2089:9
    #13 0x7f5a5e9de024 in EnsureCMSInitialized /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:982:7
    #14 0x7f5a5e9de024 in gfxPlatform::GetCMSMode() /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:526:5
    #15 0x7f5a5e9dd88d in nsXPLookAndFeel::GetColorValue(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins, unsigned int&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:879:9
    #16 0x7f5a5e9e19ee in mozilla::LookAndFeel::GetColor(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1279:47
    #17 0x7f5a5e94c25c in Color /builds/worker/workspace/obj-build/dist/include/mozilla/LookAndFeel.h:444:12
    #18 0x7f5a5e94c25c in ThemedAccentColor /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:88:37
    #19 0x7f5a5e94c25c in mozilla::widget::ThemeColors::RecomputeAccentColors() /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:197:20
    #20 0x7f5a5e94bea5 in mozilla::widget::Theme::LookAndFeelChanged() /builds/worker/checkouts/gecko/widget/Theme.cpp:180:3
    #21 0x7f5a5e9dbc66 in nsXPLookAndFeel::GetInstance() /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:361:3
    #22 0x7f5a5e9e238d in mozilla::LookAndFeel::GetThemeInfo(nsTSubstring<char>&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1392:3
    #23 0x7f5a562fe64a in nsSystemInfo::Init() /builds/worker/checkouts/gecko/xpcom/base/nsSystemInfo.cpp:1047:5
    #24 0x7f5a5641979a in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:10236:7
    #25 0x7f5a56451880 in CreateInstance /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:185:46
    #26 0x7f5a56451880 in nsComponentManagerImpl::GetServiceLocked(mozilla::Maybe<mozilla::detail::BaseMonitorAutoLock<mozilla::Monitor> >&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1290:17
    #27 0x7f5a56452328 in nsComponentManagerImpl::GetService(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1380:10
    #28 0x7f5a56427aad in mozilla::xpcom::GetServiceHelper::operator()(nsID const&, void**) const /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:12236:50
    #29 0x7f5a562b5d01 in nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&, nsID const&) /builds/worker/checkouts/gecko/xpcom/base/nsCOMPtr.cpp:109:7
    #30 0x7f5a57efa03f in nsCOMPtr /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:999:5
    #31 0x7f5a57efa03f in GetServiceImpl /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:83:32
    #32 0x7f5a57efa03f in GetService /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:130:8
    #33 0x7f5a57efa03f in xpc::Services_Resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*) /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:153:25
    #34 0x7f5a63eaafb7 in CallResolveOp /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:640:8
    #35 0x7f5a63eaafb7 in NativeLookupOwnPropertyInline<js::CanGC, js::LookupResolveMode::CheckResolve> /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:760:14
    #36 0x7f5a63eaafb7 in NativeGetPropertyInline<js::CanGC> /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2136:10
    #37 0x7f5a63eaafb7 in js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2184:10
    #38 0x7f5a63bc5699 in GetProperty /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:120:10
    #39 0x7f5a63bc5699 in js::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, js::PropertyName*, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:127:10
    #40 0x7f5a6559cadb in js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:4668:10
    #41 0x7f5a655753e4 in GetPropertyOperation /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:203:10
    #42 0x7f5a655753e4 in Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:2984:12
    #43 0x7f5a65567781 in js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:389:13
    #44 0x7f5a65595a4f in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:539:13
    #45 0x7f5a655975da in InternalCall /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:574:10
    #46 0x7f5a655975da in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:605:8
    #47 0x7f5a63cc9e8c in JS_CallFunctionValue(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/CallAndConstruct.cpp:53:10
    #48 0x7f5a57f3fc35 in nsXPCWrappedJS::CallMethod(unsigned short, nsXPTMethodInfo const*, nsXPTCMiniVariant*) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedJSClass.cpp:981:17
    #49 0x7f5a564f59c2 in PrepareAndDispatch /builds/worker/checkouts/gecko/xpcom/reflect/xptcall/md/unix/xptcstubs_x86_64_linux.cpp:115:37
    #50 0x7f5a564f471a in SharedStub xptcstubs_x86_64_linux.cpp
    #51 0x7f5a56447ddd in NS_CreateServicesFromCategory(char const*, nsISupports*, char const*, char16_t const*) /builds/worker/checkouts/gecko/xpcom/components/nsCategoryManager.cpp:687:19
    #52 0x7f5a63891a29 in nsXREDirProvider::DoStartup() /builds/worker/checkouts/gecko/toolkit/xre/nsXREDirProvider.cpp:936:11
    #53 0x7f5a6386eda0 in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5483:18
    #54 0x7f5a63871655 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5925:8
    #55 0x7f5a63872393 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5992:21
    #56 0x562b684376cd in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:225:22
    #57 0x562b684376cd in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:397:16
    #58 0x7f5a7c00b082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16

The severity field is not set for this bug.
:jgilbert, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(jgilbert)

This issue is one of our most frequent fuzzing crashes, marking as a fuzzblocker.

Please prioritize it appropriately, thank you.

Whiteboard: [bugmon:bisected,confirmed] → [bugmon:bisected,confirmed][fuzzblocker]
Attachment #9275436 - Attachment mime type: text/plain → text/html
Flags: needinfo?(jgilbert)

(In reply to Tyson Smith [:tsmith] from comment #4)

This is a frequent crash and I'm fairly sure it's related to another crash that is also frequent while fuzzing.

We also see this crash on Linux ASan with the following stack.

==62393==ERROR: AddressSanitizer: ABRT on unknown address 0x03e80000f3b9 (pc 0x7f5a7c02a00b bp 0x7f5a2fe75308 sp 0x7f5a2fe750a0 T39)
    #0 0x7f5a7c02a00b in raise /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
    #1 0x7f5a7c009858 in abort /build/glibc-SzIz7B/glibc-2.31/stdlib/abort.c:79:7
    #2 0x7f5a453c8208 in llvm::report_fatal_error(llvm::Twine const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34208) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #3 0x7f5a453c8226 in llvm::report_fatal_error(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34226) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #4 0x7f5a45b5d86b in llvm::SelectionDAGISel::CannotYetSelect(llvm::SDNode*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c986b) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #5 0x7f5a45b5cfbc in llvm::SelectionDAGISel::SelectCodeCommon(llvm::SDNode*, unsigned char const*, unsigned int) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c8fbc) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #6 0x7f5a4767034d  (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2ddc34d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #7 0x7f5a45b5612e in llvm::SelectionDAGISel::DoInstructionSelection() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c212e) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #8 0x7f5a45b5584f in llvm::SelectionDAGISel::CodeGenAndEmitDAG() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c184f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #9 0x7f5a45b54bd9 in llvm::SelectionDAGISel::SelectAllBasicBlocks(llvm::Function const&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c0bd9) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #10 0x7f5a45b52915 in llvm::SelectionDAGISel::runOnMachineFunction(llvm::MachineFunction&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12be915) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #11 0x7f5a47662884  (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2dce884) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #12 0x7f5a45776e2d in llvm::MachineFunctionPass::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xee2e2d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #13 0x7f5a4559436c in llvm::FPPassManager::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd0036c) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #14 0x7f5a45599d52 in llvm::FPPassManager::runOnModule(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd05d52) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #15 0x7f5a455949be in llvm::legacy::PassManagerImpl::run(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd009be) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #16 0x7f5a469f48e7 in llvm::MCJIT::emitObject(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x21608e7) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #17 0x7f5a469f4bc0 in llvm::MCJIT::generateCodeForModule(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2160bc0) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #18 0x7f5a469f554d in llvm::MCJIT::finalizeObject() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x216154d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #19 0x7f5a469b270f in LLVMGetPointerToGlobal (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x211e70f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
    #20 0x7f5a4a92083f  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8d683f) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #21 0x7f5a4a912437  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8c8437) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #22 0x7f5a4a8f89cf  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8ae9cf) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #23 0x7f5a4a356862  (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x30c862) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
    #24 0x7f5a5865b44c in mozilla::gl::GLContext::raw_fDrawArrays(unsigned int, int, int) /builds/worker/workspace/obj-build/dist/include/GLContext.h:1076:5
    #25 0x7f5a5b8140c8 in mozilla::gl::GLContext::fDrawArrays(unsigned int, int, int) /builds/worker/checkouts/gecko/gfx/gl/GLContext.h:1090:5
    #26 0x7f5a5b81321d in mozilla::WebGLContext::DrawArraysInstanced(unsigned int, int, int, int) /builds/worker/checkouts/gecko/dom/canvas/WebGLContextDraw.cpp:719:13
    #27 0x7f5a5b8f5e8b in DrawArraysInstanced /builds/worker/checkouts/gecko/dom/canvas/HostWebGLContext.h:743:15
    #28 0x7f5a5b8f5e8b in auto bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 99ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, int, int) const, &(mozilla::HostWebGLContext::DrawArraysInstanced(unsigned int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&)::'lambda'(auto&...)::operator()<unsigned int, int, int, int>(auto&...) const /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:246:13
    #29 0x7f5a5b89dfb5 in apply<(lambda at /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1671:14
    #30 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:237:14
    #31 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #32 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #33 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #34 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #35 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #36 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #37 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #38 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #39 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #40 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #41 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #42 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #43 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #44 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #45 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #46 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #47 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #48 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #49 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #50 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #51 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #52 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #53 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #54 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #55 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #56 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #57 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #58 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #59 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #60 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #61 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #62 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #63 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #64 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #65 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #66 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #67 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #68 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #69 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #70 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #71 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #72 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #73 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #74 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #75 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #76 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #77 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #78 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #79 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #80 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #81 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #82 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #83 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #84 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #85 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #86 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #87 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #88 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #89 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #90 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #91 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #92 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #93 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #94 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #95 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #96 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #97 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #98 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #99 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #100 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #101 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #102 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #103 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #104 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #105 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #106 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #107 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #108 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #109 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #110 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #111 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #112 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #113 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #114 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #115 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #116 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #117 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #118 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #119 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #120 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #121 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #122 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #123 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #124 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #125 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #126 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #127 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #128 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #129 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
    #130 0x7f5a5b89dfb5 in mozilla::dom::WebGLParent::RecvDispatchCommands(mozilla::ipc::Shmem&&, unsigned long) /builds/worker/checkouts/gecko/dom/canvas/WebGLParent.cpp:64:21
    #131 0x7f5a5b9d6b70 in mozilla::dom::PWebGLParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PWebGLParent.cpp:242:79
    #132 0x7f5a58e067cc in mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCanvasManagerParent.cpp:214:32
    #133 0x7f5a57bcfb09 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1781:25
    #134 0x7f5a57bccb77 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1706:9
    #135 0x7f5a57bcd7c4 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1506:3
    #136 0x7f5a57bcea52 in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1604:14
    #137 0x7f5a564a56ee in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1174:16
    #138 0x7f5a564af02c in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10
    #139 0x7f5a57bd8b71 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:330:5
    #140 0x7f5a57a4d611 in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10
    #141 0x7f5a57a4d611 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3
    #142 0x7f5a57a4d611 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3
    #143 0x7f5a5649d2bb in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:378:10
    #144 0x7f5a7b8d857e in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5
    #145 0x7f5a7c53f608 in start_thread /build/glibc-SzIz7B/glibc-2.31/nptl/pthread_create.c:477:8
    #146 0x7f5a7c106132 in __clone /build/glibc-SzIz7B/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: ABRT /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1 in raise
Thread T39 (Compositor) created by T0 here:
    #0 0x562b683e2a6c in __interceptor_pthread_create /builds/worker/fetches/llvm-project/compiler-rt/lib/asan/asan_interceptors.cpp:208:3
    #1 0x7f5a7b8c862c in _PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:458:14
    #2 0x7f5a7b8b99ce in PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:533:12
    #3 0x7f5a564a0565 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:604:18
    #4 0x7f5a564acd0f in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadManager.cpp:534:12
    #5 0x7f5a564b8ae1 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:161:57
    #6 0x7f5a58a0be72 in NS_NewNamedThread<11UL> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:74:10
    #7 0x7f5a58a0be72 in mozilla::layers::CompositorThreadHolder::CreateCompositorThread() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:66:17
    #8 0x7f5a58a0c261 in CompositorThreadHolder /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:40:25
    #9 0x7f5a58a0c261 in mozilla::layers::CompositorThreadHolder::Start() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:109:33
    #10 0x7f5a58c63a6b in gfxPlatform::Init() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:956:3
    #11 0x7f5a58c673d6 in GetPlatform /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:466:5
    #12 0x7f5a58c673d6 in gfxPlatform::InitializeCMS() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:2089:9
    #13 0x7f5a5e9de024 in EnsureCMSInitialized /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:982:7
    #14 0x7f5a5e9de024 in gfxPlatform::GetCMSMode() /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:526:5
    #15 0x7f5a5e9dd88d in nsXPLookAndFeel::GetColorValue(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins, unsigned int&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:879:9
    #16 0x7f5a5e9e19ee in mozilla::LookAndFeel::GetColor(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1279:47
    #17 0x7f5a5e94c25c in Color /builds/worker/workspace/obj-build/dist/include/mozilla/LookAndFeel.h:444:12
    #18 0x7f5a5e94c25c in ThemedAccentColor /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:88:37
    #19 0x7f5a5e94c25c in mozilla::widget::ThemeColors::RecomputeAccentColors() /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:197:20
    #20 0x7f5a5e94bea5 in mozilla::widget::Theme::LookAndFeelChanged() /builds/worker/checkouts/gecko/widget/Theme.cpp:180:3
    #21 0x7f5a5e9dbc66 in nsXPLookAndFeel::GetInstance() /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:361:3
    #22 0x7f5a5e9e238d in mozilla::LookAndFeel::GetThemeInfo(nsTSubstring<char>&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1392:3
    #23 0x7f5a562fe64a in nsSystemInfo::Init() /builds/worker/checkouts/gecko/xpcom/base/nsSystemInfo.cpp:1047:5
    #24 0x7f5a5641979a in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:10236:7
    #25 0x7f5a56451880 in CreateInstance /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:185:46
    #26 0x7f5a56451880 in nsComponentManagerImpl::GetServiceLocked(mozilla::Maybe<mozilla::detail::BaseMonitorAutoLock<mozilla::Monitor> >&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1290:17
    #27 0x7f5a56452328 in nsComponentManagerImpl::GetService(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1380:10
    #28 0x7f5a56427aad in mozilla::xpcom::GetServiceHelper::operator()(nsID const&, void**) const /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:12236:50
    #29 0x7f5a562b5d01 in nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&, nsID const&) /builds/worker/checkouts/gecko/xpcom/base/nsCOMPtr.cpp:109:7
    #30 0x7f5a57efa03f in nsCOMPtr /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:999:5
    #31 0x7f5a57efa03f in GetServiceImpl /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:83:32
    #32 0x7f5a57efa03f in GetService /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:130:8
    #33 0x7f5a57efa03f in xpc::Services_Resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*) /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:153:25
    #34 0x7f5a63eaafb7 in CallResolveOp /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:640:8
    #35 0x7f5a63eaafb7 in NativeLookupOwnPropertyInline<js::CanGC, js::LookupResolveMode::CheckResolve> /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:760:14
    #36 0x7f5a63eaafb7 in NativeGetPropertyInline<js::CanGC> /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2136:10
    #37 0x7f5a63eaafb7 in js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2184:10
    #38 0x7f5a63bc5699 in GetProperty /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:120:10
    #39 0x7f5a63bc5699 in js::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, js::PropertyName*, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:127:10
    #40 0x7f5a6559cadb in js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:4668:10
    #41 0x7f5a655753e4 in GetPropertyOperation /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:203:10
    #42 0x7f5a655753e4 in Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:2984:12
    #43 0x7f5a65567781 in js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:389:13
    #44 0x7f5a65595a4f in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:539:13
    #45 0x7f5a655975da in InternalCall /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:574:10
    #46 0x7f5a655975da in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:605:8
    #47 0x7f5a63cc9e8c in JS_CallFunctionValue(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/CallAndConstruct.cpp:53:10
    #48 0x7f5a57f3fc35 in nsXPCWrappedJS::CallMethod(unsigned short, nsXPTMethodInfo const*, nsXPTCMiniVariant*) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedJSClass.cpp:981:17
    #49 0x7f5a564f59c2 in PrepareAndDispatch /builds/worker/checkouts/gecko/xpcom/reflect/xptcall/md/unix/xptcstubs_x86_64_linux.cpp:115:37
    #50 0x7f5a564f471a in SharedStub xptcstubs_x86_64_linux.cpp
    #51 0x7f5a56447ddd in NS_CreateServicesFromCategory(char const*, nsISupports*, char const*, char16_t const*) /builds/worker/checkouts/gecko/xpcom/components/nsCategoryManager.cpp:687:19
    #52 0x7f5a63891a29 in nsXREDirProvider::DoStartup() /builds/worker/checkouts/gecko/toolkit/xre/nsXREDirProvider.cpp:936:11
    #53 0x7f5a6386eda0 in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5483:18
    #54 0x7f5a63871655 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5925:8
    #55 0x7f5a63872393 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5992:21
    #56 0x562b684376cd in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:225:22
    #57 0x562b684376cd in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:397:16
    #58 0x7f5a7c00b082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16

This looks like a driver bug :(

It looks like there's no buffer bound, but that should be fine, and use generic vertex attribs as inputs?

Severity: -- → S3
Priority: -- → P1

This bug prevents fuzzing from making progress; however, it has low severity. It is important for fuzz blocker bugs to be addressed in a timely manner (see here why?).
:jgilbert, could you increase the severity?

For more information, please visit auto_nag documentation.

Flags: needinfo?(jgilbert)
[KHR_debug: 0x23110931e00] ID 1282: SOURCE_API, TYPE_ERROR, SEVERITY_HIGH:
    Two textures of different types use the same sampler location.
[gl:0000023110931E00] raw_fDrawArrays: Generated unexpected GL_INVALID_OPERATION error.
Flags: needinfo?(jgilbert)

We validate this, but only if there's a texture bound to the tex unit.
E.g. if there's no texture bound at all to TEXTURE0, but we have both a sampler2D and a samplerCube set to 0, we don't validate this. (but we should, unfortunately)

Previously, we checked this but only if there was a texture bound to the
tex unit. However technically we're supposed to check regardless. ANGLE
and Mesa both do, which causes this error.

Assignee: nobody → jgilbert
Status: NEW → ASSIGNED
Pushed by jgilbert@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/63f3dba2a24f
Forbid same tex unit different sampler types even if unbound. r=gfx-reviewers,lsalzman
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 105 Branch

Since nightly and release are affected, beta will likely be affected too.
For more information, please visit auto_nag documentation.

The patch landed in nightly and beta is affected.
:jgilbert, is this bug important enough to require an uplift?

  • If yes, please nominate the patch for beta approval.
  • If no, please set status-firefox104 to wontfix.

For more information, please visit auto_nag documentation.

Flags: needinfo?(jgilbert)

Bugmon Analysis
Verified bug as fixed on rev mozilla-central 20220802094116-020fc676eb89.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.

Status: RESOLVED → VERIFIED
Keywords: bugmon
Flags: needinfo?(jgilbert)
Regressions: 1782978
Duplicate of this bug: 1755448

Please nominate this for ESR102 approval. It grafts cleanly.

Flags: needinfo?(jgilbert)

Comment on attachment 9288028 [details]
Bug 1768190 - Forbid same tex unit different sampler types even if unbound.

ESR Uplift Approval Request

  • If this is not a sec:{high,crit} bug, please state case for ESR consideration: This might prevent sec and correctness issues already fixed on Release.
  • User impact if declined: Sec and correctness issues already fixed on Release might still happen on Esr102
  • Fix Landed on Version: 105
  • Risk to taking this patch: Low
  • Why is the change risky/not risky? (and alternatives if risky): We have a lot of tests that should catch this, including a test to ensure that it's fixed.
Flags: needinfo?(jgilbert)
Attachment #9288028 - Flags: approval-mozilla-esr102?

Comment on attachment 9288028 [details]
Bug 1768190 - Forbid same tex unit different sampler types even if unbound.

Approved for 102.6esr.

Attachment #9288028 - Flags: approval-mozilla-esr102? → approval-mozilla-esr102+
Blocks: 1763635
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: