Assertion failure: [GFX1]: void mozilla::gl::GLContext::raw_fDrawArrays(GLenum, GLint, GLsizei): Generated unexpected GL_INVALID_OPERATION error, at /gfx/2d/Logging.h:754
Categories
(Core :: Graphics: CanvasWebGL, defect, P1)
Tracking
()
People
(Reporter: jkratzer, Assigned: jgilbert)
References
(Blocks 1 open bug, Regressed 1 open bug)
Details
(Keywords: assertion, testcase, Whiteboard: [bugmon:bisected,confirmed][fuzzblocker])
Attachments
(2 files)
1.43 KB,
text/html
|
Details | |
48 bytes,
text/x-phabricator-request
|
RyanVM
:
approval-mozilla-esr102+
|
Details | Review |
Testcase found while fuzzing mozilla-central rev fe0b18ac5fe1 (built with: --enable-debug --enable-fuzzing).
Testcase can be reproduced using the following commands:
$ pip install fuzzfetch grizzly-framework
$ python -m fuzzfetch --build fe0b18ac5fe1 --debug --fuzzing -n firefox
$ python -m grizzly.replay ./firefox/firefox testcase.html
Assertion failure: [GFX1]: void mozilla::gl::GLContext::raw_fDrawArrays(GLenum, GLint, GLsizei): Generated unexpected GL_INVALID_OPERATION error, at /gfx/2d/Logging.h:754
==834344==ERROR: UndefinedBehaviorSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f70f545d00f bp 0x7f70cc0d4310 sp 0x7f70cc0d4300 T834436)
==834344==The signal is caused by a WRITE memory access.
==834344==Hint: address points to the zero page.
#0 0x7f70f545d00f in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::WriteLog(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) /gfx/2d/Logging.h:755:9
#1 0x7f70f545cf1e in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::Flush() /gfx/2d/Logging.h:277:7
#2 0x7f70f552919e in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::~Log() /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/Logging.h:270:12
#3 0x7f70f553d2d2 in mozilla::gl::GLContext::AfterGLCall_Debug(char const*) const /gfx/gl/GLContext.cpp:2604:7
#4 0x7f70f75a7173 in AfterGLCall /gfx/gl/GLContext.h:684:7
#5 0x7f70f75a7173 in raw_fDrawArrays /gfx/gl/GLContext.h:1077:5
#6 0x7f70f75a7173 in mozilla::gl::GLContext::fDrawArrays(unsigned int, int, int) /gfx/gl/GLContext.h:1090:5
#7 0x7f70f75a6c36 in mozilla::WebGLContext::DrawArraysInstanced(unsigned int, int, int, int) /dom/canvas/WebGLContextDraw.cpp:719:13
#8 0x7f70f7625b9e in DrawArraysInstanced /dom/canvas/HostWebGLContext.h:743:15
#9 0x7f70f7625b9e in auto bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 99ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, int, int) const, &(mozilla::HostWebGLContext::DrawArraysInstanced(unsigned int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&)::'lambda'(auto&...)::operator()<unsigned int, int, int, int>(auto&...) const /dom/canvas/WebGLCommandQueue.h:246:13
#10 0x7f70f76250f6 in __invoke_impl<bool, (lambda at /dom/canvas/WebGLCommandQueue.h:238:11), unsigned int &, int &, int &, int &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/bits/invoke.h:60:14
#11 0x7f70f76250f6 in __invoke<(lambda at /dom/canvas/WebGLCommandQueue.h:238:11), unsigned int &, int &, int &, int &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/bits/invoke.h:95:14
#12 0x7f70f76250f6 in __apply_impl<(lambda at /dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &, 0UL, 1UL, 2UL, 3UL> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1662:14
#13 0x7f70f76250f6 in apply<(lambda at /dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1671:14
#14 0x7f70f76250f6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:237:14
#15 0x7f70f76250f6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 98ul, void (mozilla::HostWebGLContext::*)(unsigned long) const, &(mozilla::HostWebGLContext::BindVertexArray(unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#16 0x7f70f7624624 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#17 0x7f70f7624624 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 96ul, void (mozilla::HostWebGLContext::*)(unsigned long, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&, unsigned int) const, &(mozilla::HostWebGLContext::TransformFeedbackVaryings(unsigned long, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#18 0x7f70f7624388 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#19 0x7f70f7624388 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 94ul, void (mozilla::HostWebGLContext::*)() const, &(mozilla::HostWebGLContext::PauseTransformFeedback() const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#20 0x7f70f7623c4d in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#21 0x7f70f7623c4d in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 92ul, void (mozilla::HostWebGLContext::*)(unsigned int) const, &(mozilla::HostWebGLContext::BeginTransformFeedback(unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#22 0x7f70f762335a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#23 0x7f70f762335a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#24 0x7f70f762335a in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 89ul, void (mozilla::HostWebGLContext::*)(unsigned long, unsigned int, int) const, &(mozilla::HostWebGLContext::SamplerParameteri(unsigned long, unsigned int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#25 0x7f70f7621b40 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#26 0x7f70f7621b40 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#27 0x7f70f7621b40 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 86ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, float, int) const, &(mozilla::HostWebGLContext::ClearBufferfi(unsigned int, int, float, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#28 0x7f70f76204ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#29 0x7f70f76204ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#30 0x7f70f76204ff in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 83ul, void (mozilla::HostWebGLContext::*)(unsigned int) const, &(mozilla::HostWebGLContext::DisableVertexAttribArray(unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#31 0x7f70f761eea3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#32 0x7f70f761eea3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#33 0x7f70f761eea3 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 80ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int) const, &(mozilla::HostWebGLContext::VertexAttribDivisor(unsigned int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#34 0x7f70f761e51f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#35 0x7f70f761e51f in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 78ul, void (mozilla::HostWebGLContext::*)(unsigned int, bool, mozilla::RawBuffer<unsigned char> const&) const, &(mozilla::HostWebGLContext::UniformData(unsigned int, bool, mozilla::RawBuffer<unsigned char> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#36 0x7f70f7619d04 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#37 0x7f70f7619d04 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#38 0x7f70f7619d04 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 75ul, void (mozilla::HostWebGLContext::*)(bool, unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&, mozilla::avec3<unsigned int> const&, mozilla::RawBuffer<unsigned char> const&, unsigned int, mozilla::Maybe<unsigned long> const&) const, &(mozilla::HostWebGLContext::CompressedTexImage(bool, unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&, mozilla::avec3<unsigned int> const&, mozilla::RawBuffer<unsigned char> const&, unsigned int, mozilla::Maybe<unsigned long> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#39 0x7f70f7617d69 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#40 0x7f70f7617d69 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 73ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&) const, &(mozilla::HostWebGLContext::TexStorage(unsigned int, unsigned int, unsigned int, mozilla::avec3<unsigned int> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#41 0x7f70f7616fd5 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#42 0x7f70f7616fd5 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#43 0x7f70f7616fd5 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 70ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned long) const, &(mozilla::HostWebGLContext::BindTexture(unsigned int, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#44 0x7f70f7616222 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#45 0x7f70f7616222 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#46 0x7f70f7616222 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 67ul, void (mozilla::HostWebGLContext::*)(unsigned int) const, &(mozilla::HostWebGLContext::ReadBuffer(unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#47 0x7f70f7615345 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#48 0x7f70f7615345 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 65ul, void (mozilla::HostWebGLContext::*)(unsigned int, mozilla::RawBuffer<unsigned int const> const&) const, &(mozilla::HostWebGLContext::InvalidateFramebuffer(unsigned int, mozilla::RawBuffer<unsigned int const> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#49 0x7f70f7614928 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#50 0x7f70f7614928 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 63ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned long, mozilla::RawBuffer<unsigned char> const&) const, &(mozilla::HostWebGLContext::BufferSubData(unsigned int, unsigned long, mozilla::RawBuffer<unsigned char> const&) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#51 0x7f70f7614005 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#52 0x7f70f7614005 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 61ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int, unsigned long, unsigned long, unsigned long) const, &(mozilla::HostWebGLContext::CopyBufferSubData(unsigned int, unsigned int, unsigned long, unsigned long, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#53 0x7f70f7613404 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#54 0x7f70f7613404 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#55 0x7f70f7613404 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 58ul, void (mozilla::HostWebGLContext::*)(int, int, int, int) const, &(mozilla::HostWebGLContext::Viewport(int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#56 0x7f70f76129a7 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#57 0x7f70f76129a7 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#58 0x7f70f76129a7 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 55ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int, int, unsigned int) const, &(mozilla::HostWebGLContext::StencilFuncSeparate(unsigned int, unsigned int, int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#59 0x7f70f7611eae in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#60 0x7f70f7611eae in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 53ul, void (mozilla::HostWebGLContext::*)(int, int, int, int) const, &(mozilla::HostWebGLContext::Scissor(int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#61 0x7f70f761052f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#62 0x7f70f761052f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#63 0x7f70f761052f in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 50ul, void (mozilla::HostWebGLContext::*)(float, float) const, &(mozilla::HostWebGLContext::PolygonOffset(float, float) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#64 0x7f70f760fb7c in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#65 0x7f70f760fb7c in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#66 0x7f70f760fb7c in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 47ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned int) const, &(mozilla::HostWebGLContext::Hint(unsigned int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#67 0x7f70f760f3b3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#68 0x7f70f760f3b3 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#69 0x7f70f760f3b3 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 44ul, void (mozilla::HostWebGLContext::*)() const, &(mozilla::HostWebGLContext::Flush() const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#70 0x7f70f760e8ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#71 0x7f70f760e8ff in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#72 0x7f70f760e8ff in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 41ul, void (mozilla::HostWebGLContext::*)(bool) const, &(mozilla::HostWebGLContext::DepthMask(bool) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#73 0x7f70f760dda4 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#74 0x7f70f760dda4 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#75 0x7f70f760dda4 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 38ul, void (mozilla::HostWebGLContext::*)(unsigned long) const, &(mozilla::HostWebGLContext::CompileShader(unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#76 0x7f70f760ca42 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#77 0x7f70f760ca42 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#78 0x7f70f760ca42 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 35ul, void (mozilla::HostWebGLContext::*)(float) const, &(mozilla::HostWebGLContext::ClearDepth(float) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#79 0x7f70f760bf9a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#80 0x7f70f760bf9a in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#81 0x7f70f760bf9a in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 32ul, void (mozilla::HostWebGLContext::*)(mozilla::Maybe<unsigned int>, unsigned int, unsigned int, unsigned int, unsigned int) const, &(mozilla::HostWebGLContext::BlendFuncSeparate(mozilla::Maybe<unsigned int>, unsigned int, unsigned int, unsigned int, unsigned int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#82 0x7f70f760aa77 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#83 0x7f70f760aa77 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#84 0x7f70f760aa77 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 29ul, void (mozilla::HostWebGLContext::*)(unsigned int, unsigned long) const, &(mozilla::HostWebGLContext::BindFramebuffer(unsigned int, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#85 0x7f70f760a3dc in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#86 0x7f70f760a3dc in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 27ul, void (mozilla::HostWebGLContext::*)(unsigned long, unsigned long) const, &(mozilla::HostWebGLContext::AttachShader(unsigned long, unsigned long) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#87 0x7f70f7608865 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#88 0x7f70f7608865 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#89 0x7f70f7608865 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 24ul, void (mozilla::HostWebGLContext::*)(mozilla::avec2<unsigned int> const&), &(mozilla::HostWebGLContext::Resize(mozilla::avec2<unsigned int> const&))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#90 0x7f70f760740f in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#91 0x7f70f760740f in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 22ul, void (mozilla::HostWebGLContext::*)(unsigned int, mozilla::Maybe<unsigned int>, bool) const, &(mozilla::HostWebGLContext::SetEnabled(unsigned int, mozilla::Maybe<unsigned int>, bool) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#92 0x7f70f7606b96 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#93 0x7f70f7606b96 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#94 0x7f70f7606b96 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 19ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::DeleteTexture(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#95 0x7f70f7606346 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#96 0x7f70f7606346 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#97 0x7f70f7606346 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 16ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::DeleteSampler(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#98 0x7f70f7605af6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#99 0x7f70f7605af6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#100 0x7f70f7605af6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 13ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::DeleteProgram(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#101 0x7f70f76052a6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#102 0x7f70f76052a6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#103 0x7f70f76052a6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 10ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateVertexArray(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#104 0x7f70f76041b6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#105 0x7f70f76041b6 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#106 0x7f70f76041b6 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 7ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateSync(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#107 0x7f70f7603970 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#108 0x7f70f7603970 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#109 0x7f70f7603970 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 4ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateRenderbuffer(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#110 0x7f70f7603116 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#111 0x7f70f7603116 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#112 0x7f70f7603116 in bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 1ul, void (mozilla::HostWebGLContext::*)(unsigned long), &(mozilla::HostWebGLContext::CreateFramebuffer(unsigned long))>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&) /dom/canvas/WebGLCommandQueue.h:251:12
#113 0x7f70f75ef3c7 in DispatchCommand<mozilla::HostWebGLContext> /dom/canvas/WebGLCommandQueue.h:251:12
#114 0x7f70f75ef3c7 in mozilla::dom::WebGLParent::RecvDispatchCommands(mozilla::ipc::Shmem&&, unsigned long) /dom/canvas/WebGLParent.cpp:64:21
#115 0x7f70f768f302 in mozilla::dom::PWebGLParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PWebGLParent.cpp:241:55
#116 0x7f70f5952cfe in mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCanvasManagerParent.cpp:214:32
#117 0x7f70f50132d1 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /ipc/glue/MessageChannel.cpp:1776:25
#118 0x7f70f5010166 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message&&) /ipc/glue/MessageChannel.cpp:1701:9
#119 0x7f70f5010c69 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /ipc/glue/MessageChannel.cpp:1505:3
#120 0x7f70f5011ba4 in mozilla::ipc::MessageChannel::MessageTask::Run() /ipc/glue/MessageChannel.cpp:1583:14
#121 0x7f70f4462b67 in nsThread::ProcessNextEvent(bool, bool*) /xpcom/threads/nsThread.cpp:1174:16
#122 0x7f70f446909d in NS_ProcessNextEvent(nsIThread*, bool) /xpcom/threads/nsThreadUtils.cpp:465:10
#123 0x7f70f5019ea4 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /ipc/glue/MessagePump.cpp:330:5
#124 0x7f70f4f34bc7 in MessageLoop::RunInternal() /ipc/chromium/src/base/message_loop.cc:380:10
#125 0x7f70f4f34ad2 in RunHandler /ipc/chromium/src/base/message_loop.cc:373:3
#126 0x7f70f4f34ad2 in MessageLoop::Run() /ipc/chromium/src/base/message_loop.cc:355:3
#127 0x7f70f445e056 in nsThread::ThreadFunc(void*) /xpcom/threads/nsThread.cpp:378:10
#128 0x7f710afd32e7 in _pt_root /nsprpub/pr/src/pthreads/ptthread.c:201:5
#129 0x7f710bd45608 in start_thread /build/glibc-sMfBJT/glibc-2.31/nptl/pthread_create.c:477:8
#130 0x7f710b90c162 in __clone /build/glibc-sMfBJT/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
UndefinedBehaviorSanitizer can not provide additional info.
SUMMARY: UndefinedBehaviorSanitizer: SEGV /gfx/2d/Logging.h:755:9 in mozilla::gfx::Log<1, mozilla::gfx::CriticalLogger>::WriteLog(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
==834344==ABORTING
Reporter | ||
Comment 1•2 years ago
|
||
Comment 2•2 years ago
|
||
Bugmon Analysis
Verified bug as reproducible on mozilla-central 20220506095052-fe0b18ac5fe1.
Unable to bisect testcase (Testcase reproduces on start build!):
Start: 1a24ffb3930b812fe08797f65cbfcea172fcc31f (20210507095221)
End: fe0b18ac5fe152cad89a780b5e48c2b325fea839 (20220506095052)
BuildFlags: BuildFlags(asan=False, tsan=False, debug=True, fuzzing=True, coverage=False, valgrind=False, no_opt=False, fuzzilli=False)
Comment 3•2 years ago
|
||
A Pernosco session is available here: https://pernos.co/debug/Y2mjG_umzolvLF2dvXlJ1Q/index.html
Comment 4•2 years ago
|
||
This is a frequent crash and I'm fairly sure it's related to another crash that is also frequent while fuzzing.
We also see this crash on Linux ASan with the following stack.
==62393==ERROR: AddressSanitizer: ABRT on unknown address 0x03e80000f3b9 (pc 0x7f5a7c02a00b bp 0x7f5a2fe75308 sp 0x7f5a2fe750a0 T39)
#0 0x7f5a7c02a00b in raise /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
#1 0x7f5a7c009858 in abort /build/glibc-SzIz7B/glibc-2.31/stdlib/abort.c:79:7
#2 0x7f5a453c8208 in llvm::report_fatal_error(llvm::Twine const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34208) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#3 0x7f5a453c8226 in llvm::report_fatal_error(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34226) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#4 0x7f5a45b5d86b in llvm::SelectionDAGISel::CannotYetSelect(llvm::SDNode*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c986b) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#5 0x7f5a45b5cfbc in llvm::SelectionDAGISel::SelectCodeCommon(llvm::SDNode*, unsigned char const*, unsigned int) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c8fbc) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#6 0x7f5a4767034d (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2ddc34d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#7 0x7f5a45b5612e in llvm::SelectionDAGISel::DoInstructionSelection() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c212e) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#8 0x7f5a45b5584f in llvm::SelectionDAGISel::CodeGenAndEmitDAG() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c184f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#9 0x7f5a45b54bd9 in llvm::SelectionDAGISel::SelectAllBasicBlocks(llvm::Function const&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c0bd9) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#10 0x7f5a45b52915 in llvm::SelectionDAGISel::runOnMachineFunction(llvm::MachineFunction&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12be915) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#11 0x7f5a47662884 (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2dce884) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#12 0x7f5a45776e2d in llvm::MachineFunctionPass::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xee2e2d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#13 0x7f5a4559436c in llvm::FPPassManager::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd0036c) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#14 0x7f5a45599d52 in llvm::FPPassManager::runOnModule(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd05d52) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#15 0x7f5a455949be in llvm::legacy::PassManagerImpl::run(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd009be) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#16 0x7f5a469f48e7 in llvm::MCJIT::emitObject(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x21608e7) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#17 0x7f5a469f4bc0 in llvm::MCJIT::generateCodeForModule(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2160bc0) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#18 0x7f5a469f554d in llvm::MCJIT::finalizeObject() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x216154d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#19 0x7f5a469b270f in LLVMGetPointerToGlobal (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x211e70f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805)
#20 0x7f5a4a92083f (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8d683f) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
#21 0x7f5a4a912437 (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8c8437) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
#22 0x7f5a4a8f89cf (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8ae9cf) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
#23 0x7f5a4a356862 (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x30c862) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a)
#24 0x7f5a5865b44c in mozilla::gl::GLContext::raw_fDrawArrays(unsigned int, int, int) /builds/worker/workspace/obj-build/dist/include/GLContext.h:1076:5
#25 0x7f5a5b8140c8 in mozilla::gl::GLContext::fDrawArrays(unsigned int, int, int) /builds/worker/checkouts/gecko/gfx/gl/GLContext.h:1090:5
#26 0x7f5a5b81321d in mozilla::WebGLContext::DrawArraysInstanced(unsigned int, int, int, int) /builds/worker/checkouts/gecko/dom/canvas/WebGLContextDraw.cpp:719:13
#27 0x7f5a5b8f5e8b in DrawArraysInstanced /builds/worker/checkouts/gecko/dom/canvas/HostWebGLContext.h:743:15
#28 0x7f5a5b8f5e8b in auto bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 99ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, int, int) const, &(mozilla::HostWebGLContext::DrawArraysInstanced(unsigned int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&)::'lambda'(auto&...)::operator()<unsigned int, int, int, int>(auto&...) const /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:246:13
#29 0x7f5a5b89dfb5 in apply<(lambda at /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1671:14
#30 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:237:14
#31 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#32 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#33 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#34 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#35 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#36 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#37 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#38 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#39 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#40 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#41 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#42 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#43 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#44 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#45 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#46 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#47 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#48 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#49 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#50 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#51 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#52 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#53 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#54 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#55 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#56 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#57 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#58 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#59 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#60 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#61 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#62 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#63 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#64 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#65 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#66 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#67 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#68 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#69 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#70 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#71 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#72 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#73 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#74 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#75 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#76 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#77 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#78 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#79 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#80 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#81 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#82 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#83 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#84 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#85 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#86 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#87 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#88 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#89 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#90 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#91 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#92 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#93 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#94 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#95 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#96 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#97 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#98 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#99 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#100 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#101 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#102 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#103 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#104 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#105 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#106 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#107 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#108 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#109 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#110 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#111 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#112 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#113 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#114 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#115 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#116 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#117 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#118 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#119 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#120 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#121 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#122 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#123 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#124 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#125 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#126 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#127 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#128 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#129 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12
#130 0x7f5a5b89dfb5 in mozilla::dom::WebGLParent::RecvDispatchCommands(mozilla::ipc::Shmem&&, unsigned long) /builds/worker/checkouts/gecko/dom/canvas/WebGLParent.cpp:64:21
#131 0x7f5a5b9d6b70 in mozilla::dom::PWebGLParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PWebGLParent.cpp:242:79
#132 0x7f5a58e067cc in mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCanvasManagerParent.cpp:214:32
#133 0x7f5a57bcfb09 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1781:25
#134 0x7f5a57bccb77 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1706:9
#135 0x7f5a57bcd7c4 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1506:3
#136 0x7f5a57bcea52 in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1604:14
#137 0x7f5a564a56ee in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1174:16
#138 0x7f5a564af02c in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10
#139 0x7f5a57bd8b71 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:330:5
#140 0x7f5a57a4d611 in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10
#141 0x7f5a57a4d611 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3
#142 0x7f5a57a4d611 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3
#143 0x7f5a5649d2bb in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:378:10
#144 0x7f5a7b8d857e in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5
#145 0x7f5a7c53f608 in start_thread /build/glibc-SzIz7B/glibc-2.31/nptl/pthread_create.c:477:8
#146 0x7f5a7c106132 in __clone /build/glibc-SzIz7B/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: ABRT /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1 in raise
Thread T39 (Compositor) created by T0 here:
#0 0x562b683e2a6c in __interceptor_pthread_create /builds/worker/fetches/llvm-project/compiler-rt/lib/asan/asan_interceptors.cpp:208:3
#1 0x7f5a7b8c862c in _PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:458:14
#2 0x7f5a7b8b99ce in PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:533:12
#3 0x7f5a564a0565 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:604:18
#4 0x7f5a564acd0f in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadManager.cpp:534:12
#5 0x7f5a564b8ae1 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:161:57
#6 0x7f5a58a0be72 in NS_NewNamedThread<11UL> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:74:10
#7 0x7f5a58a0be72 in mozilla::layers::CompositorThreadHolder::CreateCompositorThread() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:66:17
#8 0x7f5a58a0c261 in CompositorThreadHolder /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:40:25
#9 0x7f5a58a0c261 in mozilla::layers::CompositorThreadHolder::Start() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:109:33
#10 0x7f5a58c63a6b in gfxPlatform::Init() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:956:3
#11 0x7f5a58c673d6 in GetPlatform /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:466:5
#12 0x7f5a58c673d6 in gfxPlatform::InitializeCMS() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:2089:9
#13 0x7f5a5e9de024 in EnsureCMSInitialized /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:982:7
#14 0x7f5a5e9de024 in gfxPlatform::GetCMSMode() /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:526:5
#15 0x7f5a5e9dd88d in nsXPLookAndFeel::GetColorValue(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins, unsigned int&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:879:9
#16 0x7f5a5e9e19ee in mozilla::LookAndFeel::GetColor(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1279:47
#17 0x7f5a5e94c25c in Color /builds/worker/workspace/obj-build/dist/include/mozilla/LookAndFeel.h:444:12
#18 0x7f5a5e94c25c in ThemedAccentColor /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:88:37
#19 0x7f5a5e94c25c in mozilla::widget::ThemeColors::RecomputeAccentColors() /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:197:20
#20 0x7f5a5e94bea5 in mozilla::widget::Theme::LookAndFeelChanged() /builds/worker/checkouts/gecko/widget/Theme.cpp:180:3
#21 0x7f5a5e9dbc66 in nsXPLookAndFeel::GetInstance() /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:361:3
#22 0x7f5a5e9e238d in mozilla::LookAndFeel::GetThemeInfo(nsTSubstring<char>&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1392:3
#23 0x7f5a562fe64a in nsSystemInfo::Init() /builds/worker/checkouts/gecko/xpcom/base/nsSystemInfo.cpp:1047:5
#24 0x7f5a5641979a in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:10236:7
#25 0x7f5a56451880 in CreateInstance /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:185:46
#26 0x7f5a56451880 in nsComponentManagerImpl::GetServiceLocked(mozilla::Maybe<mozilla::detail::BaseMonitorAutoLock<mozilla::Monitor> >&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1290:17
#27 0x7f5a56452328 in nsComponentManagerImpl::GetService(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1380:10
#28 0x7f5a56427aad in mozilla::xpcom::GetServiceHelper::operator()(nsID const&, void**) const /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:12236:50
#29 0x7f5a562b5d01 in nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&, nsID const&) /builds/worker/checkouts/gecko/xpcom/base/nsCOMPtr.cpp:109:7
#30 0x7f5a57efa03f in nsCOMPtr /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:999:5
#31 0x7f5a57efa03f in GetServiceImpl /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:83:32
#32 0x7f5a57efa03f in GetService /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:130:8
#33 0x7f5a57efa03f in xpc::Services_Resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*) /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:153:25
#34 0x7f5a63eaafb7 in CallResolveOp /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:640:8
#35 0x7f5a63eaafb7 in NativeLookupOwnPropertyInline<js::CanGC, js::LookupResolveMode::CheckResolve> /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:760:14
#36 0x7f5a63eaafb7 in NativeGetPropertyInline<js::CanGC> /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2136:10
#37 0x7f5a63eaafb7 in js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2184:10
#38 0x7f5a63bc5699 in GetProperty /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:120:10
#39 0x7f5a63bc5699 in js::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, js::PropertyName*, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:127:10
#40 0x7f5a6559cadb in js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:4668:10
#41 0x7f5a655753e4 in GetPropertyOperation /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:203:10
#42 0x7f5a655753e4 in Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:2984:12
#43 0x7f5a65567781 in js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:389:13
#44 0x7f5a65595a4f in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:539:13
#45 0x7f5a655975da in InternalCall /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:574:10
#46 0x7f5a655975da in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:605:8
#47 0x7f5a63cc9e8c in JS_CallFunctionValue(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/CallAndConstruct.cpp:53:10
#48 0x7f5a57f3fc35 in nsXPCWrappedJS::CallMethod(unsigned short, nsXPTMethodInfo const*, nsXPTCMiniVariant*) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedJSClass.cpp:981:17
#49 0x7f5a564f59c2 in PrepareAndDispatch /builds/worker/checkouts/gecko/xpcom/reflect/xptcall/md/unix/xptcstubs_x86_64_linux.cpp:115:37
#50 0x7f5a564f471a in SharedStub xptcstubs_x86_64_linux.cpp
#51 0x7f5a56447ddd in NS_CreateServicesFromCategory(char const*, nsISupports*, char const*, char16_t const*) /builds/worker/checkouts/gecko/xpcom/components/nsCategoryManager.cpp:687:19
#52 0x7f5a63891a29 in nsXREDirProvider::DoStartup() /builds/worker/checkouts/gecko/toolkit/xre/nsXREDirProvider.cpp:936:11
#53 0x7f5a6386eda0 in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5483:18
#54 0x7f5a63871655 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5925:8
#55 0x7f5a63872393 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5992:21
#56 0x562b684376cd in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:225:22
#57 0x562b684376cd in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:397:16
#58 0x7f5a7c00b082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
Comment 5•2 years ago
|
||
The severity field is not set for this bug.
:jgilbert, could you have a look please?
For more information, please visit auto_nag documentation.
Comment 6•2 years ago
|
||
This issue is one of our most frequent fuzzing crashes, marking as a fuzzblocker.
Please prioritize it appropriately, thank you.
Updated•2 years ago
|
Assignee | ||
Updated•2 years ago
|
Assignee | ||
Comment 7•2 years ago
|
||
(In reply to Tyson Smith [:tsmith] from comment #4)
This is a frequent crash and I'm fairly sure it's related to another crash that is also frequent while fuzzing.
We also see this crash on Linux ASan with the following stack.
==62393==ERROR: AddressSanitizer: ABRT on unknown address 0x03e80000f3b9 (pc 0x7f5a7c02a00b bp 0x7f5a2fe75308 sp 0x7f5a2fe750a0 T39) #0 0x7f5a7c02a00b in raise /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1 #1 0x7f5a7c009858 in abort /build/glibc-SzIz7B/glibc-2.31/stdlib/abort.c:79:7 #2 0x7f5a453c8208 in llvm::report_fatal_error(llvm::Twine const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34208) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #3 0x7f5a453c8226 in llvm::report_fatal_error(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xb34226) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #4 0x7f5a45b5d86b in llvm::SelectionDAGISel::CannotYetSelect(llvm::SDNode*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c986b) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #5 0x7f5a45b5cfbc in llvm::SelectionDAGISel::SelectCodeCommon(llvm::SDNode*, unsigned char const*, unsigned int) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c8fbc) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #6 0x7f5a4767034d (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2ddc34d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #7 0x7f5a45b5612e in llvm::SelectionDAGISel::DoInstructionSelection() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c212e) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #8 0x7f5a45b5584f in llvm::SelectionDAGISel::CodeGenAndEmitDAG() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c184f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #9 0x7f5a45b54bd9 in llvm::SelectionDAGISel::SelectAllBasicBlocks(llvm::Function const&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12c0bd9) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #10 0x7f5a45b52915 in llvm::SelectionDAGISel::runOnMachineFunction(llvm::MachineFunction&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x12be915) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #11 0x7f5a47662884 (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2dce884) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #12 0x7f5a45776e2d in llvm::MachineFunctionPass::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xee2e2d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #13 0x7f5a4559436c in llvm::FPPassManager::runOnFunction(llvm::Function&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd0036c) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #14 0x7f5a45599d52 in llvm::FPPassManager::runOnModule(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd05d52) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #15 0x7f5a455949be in llvm::legacy::PassManagerImpl::run(llvm::Module&) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0xd009be) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #16 0x7f5a469f48e7 in llvm::MCJIT::emitObject(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x21608e7) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #17 0x7f5a469f4bc0 in llvm::MCJIT::generateCodeForModule(llvm::Module*) (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x2160bc0) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #18 0x7f5a469f554d in llvm::MCJIT::finalizeObject() (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x216154d) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #19 0x7f5a469b270f in LLVMGetPointerToGlobal (/lib/x86_64-linux-gnu/libLLVM-12.so.1+0x211e70f) (BuildId: 79e1e33c0cb9415733304595f9de1f1acff54805) #20 0x7f5a4a92083f (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8d683f) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a) #21 0x7f5a4a912437 (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8c8437) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a) #22 0x7f5a4a8f89cf (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x8ae9cf) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a) #23 0x7f5a4a356862 (/usr/lib/x86_64-linux-gnu/dri/swrast_dri.so+0x30c862) (BuildId: b039ce5906ba27ad1c42458be9817d66a3f9060a) #24 0x7f5a5865b44c in mozilla::gl::GLContext::raw_fDrawArrays(unsigned int, int, int) /builds/worker/workspace/obj-build/dist/include/GLContext.h:1076:5 #25 0x7f5a5b8140c8 in mozilla::gl::GLContext::fDrawArrays(unsigned int, int, int) /builds/worker/checkouts/gecko/gfx/gl/GLContext.h:1090:5 #26 0x7f5a5b81321d in mozilla::WebGLContext::DrawArraysInstanced(unsigned int, int, int, int) /builds/worker/checkouts/gecko/dom/canvas/WebGLContextDraw.cpp:719:13 #27 0x7f5a5b8f5e8b in DrawArraysInstanced /builds/worker/checkouts/gecko/dom/canvas/HostWebGLContext.h:743:15 #28 0x7f5a5b8f5e8b in auto bool mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher, 99ul, void (mozilla::HostWebGLContext::*)(unsigned int, int, int, int) const, &(mozilla::HostWebGLContext::DrawArraysInstanced(unsigned int, int, int, int) const)>::DispatchCommand<mozilla::HostWebGLContext>(mozilla::HostWebGLContext&, unsigned long, mozilla::webgl::RangeConsumerView&)::'lambda'(auto&...)::operator()<unsigned int, int, int, int>(auto&...) const /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:246:13 #29 0x7f5a5b89dfb5 in apply<(lambda at /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:238:11), std::tuple<unsigned int, int, int, int> &> /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/tuple:1671:14 #30 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:237:14 #31 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #32 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #33 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #34 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #35 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #36 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #37 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #38 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #39 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #40 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #41 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #42 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #43 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #44 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #45 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #46 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #47 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #48 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #49 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #50 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #51 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #52 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #53 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #54 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #55 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #56 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #57 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #58 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #59 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #60 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #61 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #62 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #63 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #64 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #65 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #66 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #67 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #68 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #69 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #70 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #71 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #72 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #73 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #74 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #75 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #76 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #77 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #78 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #79 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #80 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #81 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #82 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #83 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #84 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #85 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #86 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #87 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #88 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #89 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #90 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #91 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #92 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #93 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #94 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #95 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #96 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #97 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #98 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #99 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #100 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #101 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #102 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #103 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #104 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #105 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #106 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #107 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #108 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #109 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #110 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #111 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #112 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #113 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #114 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #115 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #116 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #117 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #118 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #119 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #120 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #121 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #122 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #123 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #124 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #125 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #126 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #127 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #128 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #129 0x7f5a5b89dfb5 in DispatchCommand<mozilla::HostWebGLContext> /builds/worker/checkouts/gecko/dom/canvas/WebGLCommandQueue.h:251:12 #130 0x7f5a5b89dfb5 in mozilla::dom::WebGLParent::RecvDispatchCommands(mozilla::ipc::Shmem&&, unsigned long) /builds/worker/checkouts/gecko/dom/canvas/WebGLParent.cpp:64:21 #131 0x7f5a5b9d6b70 in mozilla::dom::PWebGLParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PWebGLParent.cpp:242:79 #132 0x7f5a58e067cc in mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCanvasManagerParent.cpp:214:32 #133 0x7f5a57bcfb09 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1781:25 #134 0x7f5a57bccb77 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1706:9 #135 0x7f5a57bcd7c4 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1506:3 #136 0x7f5a57bcea52 in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1604:14 #137 0x7f5a564a56ee in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1174:16 #138 0x7f5a564af02c in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10 #139 0x7f5a57bd8b71 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:330:5 #140 0x7f5a57a4d611 in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10 #141 0x7f5a57a4d611 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3 #142 0x7f5a57a4d611 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3 #143 0x7f5a5649d2bb in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:378:10 #144 0x7f5a7b8d857e in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5 #145 0x7f5a7c53f608 in start_thread /build/glibc-SzIz7B/glibc-2.31/nptl/pthread_create.c:477:8 #146 0x7f5a7c106132 in __clone /build/glibc-SzIz7B/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95 AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: ABRT /build/glibc-SzIz7B/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1 in raise Thread T39 (Compositor) created by T0 here: #0 0x562b683e2a6c in __interceptor_pthread_create /builds/worker/fetches/llvm-project/compiler-rt/lib/asan/asan_interceptors.cpp:208:3 #1 0x7f5a7b8c862c in _PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:458:14 #2 0x7f5a7b8b99ce in PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:533:12 #3 0x7f5a564a0565 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:604:18 #4 0x7f5a564acd0f in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadManager.cpp:534:12 #5 0x7f5a564b8ae1 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:161:57 #6 0x7f5a58a0be72 in NS_NewNamedThread<11UL> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:74:10 #7 0x7f5a58a0be72 in mozilla::layers::CompositorThreadHolder::CreateCompositorThread() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:66:17 #8 0x7f5a58a0c261 in CompositorThreadHolder /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:40:25 #9 0x7f5a58a0c261 in mozilla::layers::CompositorThreadHolder::Start() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:109:33 #10 0x7f5a58c63a6b in gfxPlatform::Init() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:956:3 #11 0x7f5a58c673d6 in GetPlatform /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:466:5 #12 0x7f5a58c673d6 in gfxPlatform::InitializeCMS() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:2089:9 #13 0x7f5a5e9de024 in EnsureCMSInitialized /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:982:7 #14 0x7f5a5e9de024 in gfxPlatform::GetCMSMode() /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:526:5 #15 0x7f5a5e9dd88d in nsXPLookAndFeel::GetColorValue(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins, unsigned int&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:879:9 #16 0x7f5a5e9e19ee in mozilla::LookAndFeel::GetColor(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1279:47 #17 0x7f5a5e94c25c in Color /builds/worker/workspace/obj-build/dist/include/mozilla/LookAndFeel.h:444:12 #18 0x7f5a5e94c25c in ThemedAccentColor /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:88:37 #19 0x7f5a5e94c25c in mozilla::widget::ThemeColors::RecomputeAccentColors() /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:197:20 #20 0x7f5a5e94bea5 in mozilla::widget::Theme::LookAndFeelChanged() /builds/worker/checkouts/gecko/widget/Theme.cpp:180:3 #21 0x7f5a5e9dbc66 in nsXPLookAndFeel::GetInstance() /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:361:3 #22 0x7f5a5e9e238d in mozilla::LookAndFeel::GetThemeInfo(nsTSubstring<char>&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1392:3 #23 0x7f5a562fe64a in nsSystemInfo::Init() /builds/worker/checkouts/gecko/xpcom/base/nsSystemInfo.cpp:1047:5 #24 0x7f5a5641979a in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:10236:7 #25 0x7f5a56451880 in CreateInstance /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:185:46 #26 0x7f5a56451880 in nsComponentManagerImpl::GetServiceLocked(mozilla::Maybe<mozilla::detail::BaseMonitorAutoLock<mozilla::Monitor> >&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1290:17 #27 0x7f5a56452328 in nsComponentManagerImpl::GetService(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1380:10 #28 0x7f5a56427aad in mozilla::xpcom::GetServiceHelper::operator()(nsID const&, void**) const /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:12236:50 #29 0x7f5a562b5d01 in nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&, nsID const&) /builds/worker/checkouts/gecko/xpcom/base/nsCOMPtr.cpp:109:7 #30 0x7f5a57efa03f in nsCOMPtr /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:999:5 #31 0x7f5a57efa03f in GetServiceImpl /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:83:32 #32 0x7f5a57efa03f in GetService /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:130:8 #33 0x7f5a57efa03f in xpc::Services_Resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*) /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:153:25 #34 0x7f5a63eaafb7 in CallResolveOp /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:640:8 #35 0x7f5a63eaafb7 in NativeLookupOwnPropertyInline<js::CanGC, js::LookupResolveMode::CheckResolve> /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:760:14 #36 0x7f5a63eaafb7 in NativeGetPropertyInline<js::CanGC> /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2136:10 #37 0x7f5a63eaafb7 in js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2184:10 #38 0x7f5a63bc5699 in GetProperty /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:120:10 #39 0x7f5a63bc5699 in js::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, js::PropertyName*, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:127:10 #40 0x7f5a6559cadb in js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:4668:10 #41 0x7f5a655753e4 in GetPropertyOperation /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:203:10 #42 0x7f5a655753e4 in Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:2984:12 #43 0x7f5a65567781 in js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:389:13 #44 0x7f5a65595a4f in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:539:13 #45 0x7f5a655975da in InternalCall /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:574:10 #46 0x7f5a655975da in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:605:8 #47 0x7f5a63cc9e8c in JS_CallFunctionValue(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/CallAndConstruct.cpp:53:10 #48 0x7f5a57f3fc35 in nsXPCWrappedJS::CallMethod(unsigned short, nsXPTMethodInfo const*, nsXPTCMiniVariant*) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedJSClass.cpp:981:17 #49 0x7f5a564f59c2 in PrepareAndDispatch /builds/worker/checkouts/gecko/xpcom/reflect/xptcall/md/unix/xptcstubs_x86_64_linux.cpp:115:37 #50 0x7f5a564f471a in SharedStub xptcstubs_x86_64_linux.cpp #51 0x7f5a56447ddd in NS_CreateServicesFromCategory(char const*, nsISupports*, char const*, char16_t const*) /builds/worker/checkouts/gecko/xpcom/components/nsCategoryManager.cpp:687:19 #52 0x7f5a63891a29 in nsXREDirProvider::DoStartup() /builds/worker/checkouts/gecko/toolkit/xre/nsXREDirProvider.cpp:936:11 #53 0x7f5a6386eda0 in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5483:18 #54 0x7f5a63871655 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5925:8 #55 0x7f5a63872393 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5992:21 #56 0x562b684376cd in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:225:22 #57 0x562b684376cd in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:397:16 #58 0x7f5a7c00b082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
This looks like a driver bug :(
Assignee | ||
Comment 8•2 years ago
|
||
It looks like there's no buffer bound, but that should be fine, and use generic vertex attribs as inputs?
Assignee | ||
Updated•2 years ago
|
Comment 9•2 years ago
|
||
This bug prevents fuzzing from making progress; however, it has low severity. It is important for fuzz blocker bugs to be addressed in a timely manner (see here why?).
:jgilbert, could you increase the severity?
For more information, please visit auto_nag documentation.
Assignee | ||
Comment 10•2 years ago
|
||
[KHR_debug: 0x23110931e00] ID 1282: SOURCE_API, TYPE_ERROR, SEVERITY_HIGH:
Two textures of different types use the same sampler location.
[gl:0000023110931E00] raw_fDrawArrays: Generated unexpected GL_INVALID_OPERATION error.
Assignee | ||
Comment 11•2 years ago
|
||
We validate this, but only if there's a texture bound to the tex unit.
E.g. if there's no texture bound at all to TEXTURE0, but we have both a sampler2D and a samplerCube set to 0, we don't validate this. (but we should, unfortunately)
Assignee | ||
Comment 12•2 years ago
|
||
Previously, we checked this but only if there was a texture bound to the
tex unit. However technically we're supposed to check regardless. ANGLE
and Mesa both do, which causes this error.
Updated•2 years ago
|
Comment 13•2 years ago
|
||
Pushed by jgilbert@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/63f3dba2a24f Forbid same tex unit different sampler types even if unbound. r=gfx-reviewers,lsalzman
Comment 14•2 years ago
|
||
bugherder |
Comment 15•2 years ago
|
||
Since nightly and release are affected, beta will likely be affected too.
For more information, please visit auto_nag documentation.
Comment 16•2 years ago
|
||
The patch landed in nightly and beta is affected.
:jgilbert, is this bug important enough to require an uplift?
- If yes, please nominate the patch for beta approval.
- If no, please set
status-firefox104
towontfix
.
For more information, please visit auto_nag documentation.
Updated•2 years ago
|
Comment 17•2 years ago
|
||
Bugmon Analysis
Verified bug as fixed on rev mozilla-central 20220802094116-020fc676eb89.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.
Assignee | ||
Updated•2 years ago
|
Updated•2 years ago
|
Comment 19•1 year ago
|
||
Please nominate this for ESR102 approval. It grafts cleanly.
Assignee | ||
Comment 20•1 year ago
|
||
Comment on attachment 9288028 [details]
Bug 1768190 - Forbid same tex unit different sampler types even if unbound.
ESR Uplift Approval Request
- If this is not a sec:{high,crit} bug, please state case for ESR consideration: This might prevent sec and correctness issues already fixed on Release.
- User impact if declined: Sec and correctness issues already fixed on Release might still happen on Esr102
- Fix Landed on Version: 105
- Risk to taking this patch: Low
- Why is the change risky/not risky? (and alternatives if risky): We have a lot of tests that should catch this, including a test to ensure that it's fixed.
Comment 22•1 year ago
|
||
Comment on attachment 9288028 [details]
Bug 1768190 - Forbid same tex unit different sampler types even if unbound.
Approved for 102.6esr.
Comment 23•1 year ago
|
||
bugherder uplift |
Updated•1 year ago
|
Description
•