Closed
Bug 1770464
Opened 2 years ago
Closed 2 years ago
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/BaseRect.h:210:30 in UnionRect
Categories
(Core :: Graphics: ImageLib, defect)
Core
Graphics: ImageLib
Tracking
()
RESOLVED
FIXED
102 Branch
| Tracking | Status | |
|---|---|---|
| firefox-esr91 | --- | unaffected |
| firefox100 | --- | unaffected |
| firefox101 | --- | unaffected |
| firefox102 | + | fixed |
People
(Reporter: intermittent-bug-filer, Assigned: tnikkel)
References
(Regression)
Details
(Keywords: csectype-race, intermittent-failure, sec-moderate)
Attachments
(1 file)
Filed by: abutkovits [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=378799557&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/AGWRWlFGS2qKlTksofaYzw/runs/0/artifacts/public/logs/live_backing.log
Reftest URL: https://hg.mozilla.org/mozilla-central/raw-file/tip/layout/tools/reftest/reftest-analyzer.xhtml#logurl=https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/AGWRWlFGS2qKlTksofaYzw/runs/0/artifacts/public/logs/live_backing.log&only_show_unexpected=1
[task 2022-05-20T16:22:45.942Z] 16:22:45 INFO - Thread T17 'TaskCon~ller #0' (tid=2690, running) created by main thread at:
[task 2022-05-20T16:22:45.943Z] 16:22:45 INFO - #0 pthread_create /builds/worker/fetches/llvm-project/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:1022:3 (firefox+0x5dfdd) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
[task 2022-05-20T16:22:45.944Z] 16:22:45 INFO - #1 _PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:458:14 (libnspr4.so+0x3cfb5) (BuildId: 41f54c8558946277ef23d47b768a79e38d0ae9ee)
[task 2022-05-20T16:22:45.945Z] 16:22:45 INFO - #2 PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:533:12 (libnspr4.so+0x320a5) (BuildId: 41f54c8558946277ef23d47b768a79e38d0ae9ee)
[task 2022-05-20T16:22:45.946Z] 16:22:45 INFO - #3 mozilla::TaskController::InitializeThreadPool() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:163:10 (libxul.so+0x11ad61d) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.951Z] 16:22:45 INFO - #4 mozilla::TaskController::AddTask(already_AddRefed<mozilla::Task>&&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:330:7 (libxul.so+0x11ae13f) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.952Z] 16:22:45 INFO - #5 DispatchOffThreadTask(JS::DispatchReason) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCJSContext.cpp:1182:26 (libxul.so+0x1f7082c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.952Z] 16:22:45 INFO - #6 dispatch /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:1622:5 (libxul.so+0x87b29c3) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.953Z] 16:22:45 INFO - #7 js::GlobalHelperThreadState::submitTask(js::GCParallelTask*, js::AutoLockHelperThreadState const&) /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:2197:3 (libxul.so+0x87b29c3)
[task 2022-05-20T16:22:45.958Z] 16:22:45 INFO - #8 startWithLockHeld /builds/worker/checkouts/gecko/js/src/gc/GCParallelTask.cpp:40:23 (libxul.so+0x8d938ff) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.959Z] 16:22:45 INFO - #9 js::GCParallelTask::startOrRunIfIdle(js::AutoLockHelperThreadState&) /builds/worker/checkouts/gecko/js/src/gc/GCParallelTask.cpp:68:3 (libxul.so+0x8d938ff)
[task 2022-05-20T16:22:45.959Z] 16:22:45 INFO - #10 js::gc::GCRuntime::startBackgroundFree() /builds/worker/checkouts/gecko/js/src/gc/Sweeping.cpp:434:12 (libxul.so+0x8dcfea1) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.960Z] 16:22:45 INFO - #11 startBackgroundFreeAfterMinorGC /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:4181:3 (libxul.so+0x8d7cce5) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.961Z] 16:22:45 INFO - #12 js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:4164:3 (libxul.so+0x8d7cce5)
[task 2022-05-20T16:22:45.962Z] 16:22:45 INFO - #13 js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:4127:3 (libxul.so+0x8d806ff) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.963Z] 16:22:45 INFO - #14 JS::RunIdleTimeGCTask(JSRuntime*) /builds/worker/checkouts/gecko/js/src/jsapi.cpp:1298:8 (libxul.so+0x8a8eb76) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.964Z] 16:22:45 INFO - #15 RunIdleTimeGCTask /builds/worker/workspace/obj-build/dist/include/mozilla/CycleCollectedJSRuntime.h:371:7 (libxul.so+0x10b24ac) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.965Z] 16:22:45 INFO - #16 mozilla::CycleCollectedJSContext::IsIdleGCTaskNeeded() const::IdleTimeGCTaskRunnable::Run() /builds/worker/checkouts/gecko/xpcom/base/CycleCollectedJSContext.cpp:507:15 (libxul.so+0x10b24ac)
[task 2022-05-20T16:22:45.965Z] 16:22:45 INFO - #17 mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:475:16 (libxul.so+0x11d7667) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.966Z] 16:22:45 INFO - #18 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:788:26 (libxul.so+0x11b03bd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.967Z] 16:22:45 INFO - #19 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:662:15 (libxul.so+0x11ae9f8) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.968Z] 16:22:45 INFO - #20 mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:398:36 (libxul.so+0x11aeb34) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.969Z] 16:22:45 INFO - #21 operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:124:37 (libxul.so+0x11db327) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.971Z] 16:22:45 INFO - #22 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:531:5 (libxul.so+0x11db327)
[task 2022-05-20T16:22:45.972Z] 16:22:45 INFO - #23 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1180:16 (libxul.so+0x11c48d2) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.973Z] 16:22:45 INFO - #24 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10 (libxul.so+0x11cafa5) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.974Z] 16:22:45 INFO - #25 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x1e1c2eb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.975Z] 16:22:45 INFO - #26 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:268:30 (libxul.so+0x1e1ce1b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.976Z] 16:22:45 INFO - #27 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10 (libxul.so+0x1d3ca1c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.977Z] 16:22:45 INFO - #28 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3 (libxul.so+0x1d3ca1c)
[task 2022-05-20T16:22:45.979Z] 16:22:45 INFO - #29 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3 (libxul.so+0x1d3ca1c)
[task 2022-05-20T16:22:45.979Z] 16:22:45 INFO - #30 nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:137:27 (libxul.so+0x5a61db6) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.979Z] 16:22:45 INFO - #31 XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:874:20 (libxul.so+0x84e02b9) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.981Z] 16:22:45 INFO - #32 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:235:9 (libxul.so+0x1e1cdcd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.981Z] 16:22:45 INFO - #33 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10 (libxul.so+0x1d3ca1c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.981Z] 16:22:45 INFO - #34 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3 (libxul.so+0x1d3ca1c)
[task 2022-05-20T16:22:45.982Z] 16:22:45 INFO - #35 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3 (libxul.so+0x1d3ca1c)
[task 2022-05-20T16:22:45.985Z] 16:22:45 INFO - #36 XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:733:34 (libxul.so+0x84dfa5e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.985Z] 16:22:45 INFO - #37 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:67:12 (libxul.so+0x84e8992) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
[task 2022-05-20T16:22:45.986Z] 16:22:45 INFO - #38 content_process_main /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28 (firefox+0xdef83) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
[task 2022-05-20T16:22:45.987Z] 16:22:45 INFO - #39 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:329:18 (firefox+0xdef83)
[task 2022-05-20T16:22:45.988Z] 16:22:45 INFO - SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/BaseRect.h:210:30 in UnionRect
[task 2022-05-20T16:22:45.989Z] 16:22:45 INFO - ==================
[task 2022-05-20T16:22:45.989Z] 16:22:45 ERROR - A content process crashed and MOZ_CRASHREPORTER_SHUTDOWN is set, shutting down
[task 2022-05-20T16:22:46.534Z] 16:22:46 INFO - 1653063766533 Marionette TRACE Received observer notification quit-application
[task 2022-05-20T16:22:46.537Z] 16:22:46 INFO - 1653063766536 Marionette INFO Stopped listening on port 2828
[task 2022-05-20T16:22:46.538Z] 16:22:46 INFO - 1653063766537 Marionette DEBUG Marionette stopped listening
[task 2022-05-20T16:22:46.933Z] 16:22:46 INFO - !!! error running onStopped callback: TypeError: callback is not a function
[task 2022-05-20T16:22:54.334Z] 16:22:54 ERROR - TEST-UNEXPECTED-FAIL | layout/reftests/image-element/invalidate-1.html | application terminated with exit code 245
[task 2022-05-20T16:22:54.355Z] 16:22:54 INFO - REFTEST INFO | Process mode: e10s
[task 2022-05-20T16:22:54.355Z] 16:22:54 WARNING - leakcheck | refcount logging is off, so leaks can't be detected!
[task 2022-05-20T16:22:54.356Z] 16:22:54 INFO - REFTEST INFO | Running tests in file:///builds/worker/workspace/build/tests/reftest/tests/dom/media/test/reftest/color_quads/reftest.list
[task 2022-05-20T16:22:54.386Z] 16:22:54 INFO - REFTEST INFO | Running with e10s: True
[task 2022-05-20T16:22:54.387Z] 16:22:54 INFO - REFTEST INFO | Running with fission: True
[task 2022-05-20T16:22:54.388Z] 16:22:54 INFO - REFTEST INFO | INFO | runtests.py | TSan using symbolizer at /builds/worker/workspace/build/application/firefox/llvm-symbolizer
[task 2022-05-20T16:22:54.389Z] 16:22:54 INFO - REFTEST INFO | Application command: /builds/worker/workspace/build/application/firefox/firefox -marionette -profile /tmp/tmpz74fg457.mozrunner
[task 2022-05-20T16:22:57.961Z] 16:22:57 INFO - 1653063777960 Marionette INFO Marionette enabled
[task 2022-05-20T16:22:57.972Z] 16:22:57 INFO - 1653063777971 Marionette TRACE Received observer notification final-ui-startup
[task 2022-05-20T16:22:57.982Z] 16:22:57 INFO - 1653063777981 Marionette INFO Listening on port 2828
[task 2022-05-20T16:22:57.984Z] 16:22:57 INFO - 1653063777982 Marionette DEBUG Marionette is listening
[task 2022-05-20T16:22:58.741Z] 16:22:58 INFO - 1653063778740 Marionette DEBUG Accepted connection 0 from 127.0.0.1:33988
[task 2022-05-20T16:22:59.003Z] 16:22:59 INFO - 1653063779002 Marionette DEBUG Closed connection 0
[task 2022-05-20T16:22:59.016Z] 16:22:59 INFO - 1653063779015 Marionette DEBUG Accepted connection 1 from 127.0.0.1:33990
[task 2022-05-20T16:22:59.219Z] 16:22:59 INFO - 1653063779218 Marionette DEBUG Accepted connection 2 from 127.0.0.1:33992
[task 2022-05-20T16:22:59.222Z] 16:22:59 INFO - 1653063779221 Marionette DEBUG Closed connection 1
[task 2022-05-20T16:23:00.679Z] 16:23:00 INFO - 1653063780677 Marionette DEBUG 2 -> [0,1,"WebDriver:NewSession",{"strictFileInteractability":true}]
[task 2022-05-20T16:23:00.705Z] 16:23:00 INFO - 1653063780704 Marionette DEBUG Waiting for initial application window
[task 2022-05-20T16:23:05.510Z] 16:23:05 INFO - console.warn: SearchSettings: "get: No settings file exists, new profile?" (new NotFoundError("Could not open the file at /tmp/tmpz74fg457.mozrunner/search.json.mozlz4", (void 0)))
[task 2022-05-20T16:23:12.695Z] 16:23:12 INFO - 1653063792693 Marionette TRACE Received observer notification browser-idle-startup-tasks-finished
[task 2022-05-20T16:23:12.778Z] 16:23:12 INFO - 1653063792776 RemoteAgent TRACE [24] Document already finished loading: about:blank
[task 2022-05-20T16:23:12.861Z] 16:23:12 INFO - 1653063792859 Marionette DEBUG 2 <- [1,1,null,{"sessionId":"f054e74d-8b28-485f-b24e-cb9286280461","capabilities":{"browserName":"firefox","browserVersion":"102.0 ... wnTimeout":360000,"moz:useNonSpecCompliantPointerOrigin":false,"moz:webdriverClick":true,"moz:windowless":false,"proxy":{}}}]
[task 2022-05-20T16:23:12.931Z] 16:23:12 INFO - 1653063792930 Marionette DEBUG 2 -> [0,2,"Addon:Install",{"path":"/builds/worker/workspace/build/tests/reftest/specialpowers","temporary":true}]
[task 2022-05-20T16:23:13.085Z] 16:23:13 INFO - 1653063793084 Marionette DEBUG 2 <- [1,2,null,{"value":"special-powers@mozilla.org"}]
[task 2022-05-20T16:23:13.141Z] 16:23:13 INFO - 1653063793139 Marionette DEBUG 2 -> [0,3,"Addon:Install",{"path":"/builds/worker/workspace/build/tests/reftest/reftest","temporary":true}]
[task 2022-05-20T16:23:13.409Z] 16:23:13 INFO - 1653063793407 Marionette TRACE Received observer notification domwindowopened
[task 2022-05-20T16:23:13.438Z] 16:23:13 INFO - 1653063793437 Marionette DEBUG 2 <- [1,3,null,{"value":"reftest@mozilla.org"}]
[task 2022-05-20T16:23:13.490Z] 16:23:13 INFO - 1653063793489 Marionette DEBUG 2 -> [0,4,"WebDriver:DeleteSession",{}]
[task 2022-05-20T16:23:13.530Z] 16:23:13 INFO - 1653063793528 Marionette DEBUG 2 <- [1,4,null,{"value":null}]
[task 2022-05-20T16:23:13.546Z] 16:23:13 INFO - 1653063793545 Marionette DEBUG Closed connection 2
[task 2022-05-20T16:23:15.771Z] 16:23:15 INFO - REFTEST TEST-START | dom/media/test/reftest/color_quads/720p.png.bt709.bt709.tv.yuv420p.av1.webm == dom/media/test/reftest/color_quads/720p.png
|
||
Comment 1•2 years ago
|
||
RasterImage::HasDecodedPixels() was just introduced.
Component: Layout: Images, Video, and HTML Frames → ImageLib
Flags: needinfo?(tnikkel)
|
Assignee | |
Comment 2•2 years ago
|
||
The mDecoded field is annotated as needing the monitor, not sure why something didn't catch this sooner.
Flags: needinfo?(tnikkel)
Regressed by: 1769195
|
|
Assignee | |
Comment 3•2 years ago
|
||
|
||
Updated•2 years ago
|
Assignee: nobody → tnikkel
Status: NEW → ASSIGNED
|
||
Comment 4•2 years ago
|
||
Set release status flags based on info from the regressing bug 1769195
status-firefox100:
--- → unaffected
status-firefox101:
--- → unaffected
status-firefox102:
--- → affected
status-firefox-esr91:
--- → unaffected
|
||
Comment 5•2 years ago
|
||
Preserving more complete log of the race
==================
WARNING: ThreadSanitizer: data race (pid=2584)
Write of size 8 at 0x7b3400026868 by thread T17 (mutexes: write M0, write M1):
#0 UnionRect /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/BaseRect.h:210:30 (libxul.so+0x2894feb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#1 mozilla::image::imgFrame::ImageUpdatedInternal(mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&) /builds/worker/checkouts/gecko/image/imgFrame.cpp:514:12 (libxul.so+0x2894feb)
#2 mozilla::image::imgFrame::ImageUpdated(mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&) /builds/worker/checkouts/gecko/image/imgFrame.cpp:501:10 (libxul.so+0x2894ddb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#3 mozilla::image::Decoder::PostInvalidation(mozilla::gfx::IntRectTyped<mozilla::OrientedPixel> const&, mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::OrientedPixel> > const&) /builds/worker/checkouts/gecko/image/Decoder.cpp:531:20 (libxul.so+0x28543db) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#4 PostInvalidationIfNeeded /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:755:3 (libxul.so+0x28f344e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#5 mozilla::image::nsPNGDecoder::WriteRow(unsigned char*) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:855:3 (libxul.so+0x28f344e)
#6 mozilla::image::nsPNGDecoder::row_callback(png_struct_def*, unsigned char*, unsigned int, int) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp (libxul.so+0x28f0d4b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#7 MOZ_PNG_push_have_row /builds/worker/checkouts/gecko/media/libpng/pngpread.c:1209:7 (libxul.so+0x6a39192) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#8 MOZ_PNG_push_proc_row /builds/worker/checkouts/gecko/media/libpng/pngpread.c:1120:7 (libxul.so+0x6a39192)
#9 MOZ_PNG_proc_IDAT_data /builds/worker/checkouts/gecko/media/libpng/pngpread.c:879:13 (libxul.so+0x6a38af6) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#10 MOZ_PNG_push_read_IDAT /builds/worker/checkouts/gecko/media/libpng/pngpread.c:755:7 (libxul.so+0x6a34b55) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#11 MOZ_PNG_proc_some_data /builds/worker/checkouts/gecko/media/libpng/pngpread.c:115:10 (libxul.so+0x6a329f7) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#12 MOZ_PNG_process_data /builds/worker/checkouts/gecko/media/libpng/pngpread.c:46:7 (libxul.so+0x6a329f7)
#13 mozilla::image::nsPNGDecoder::ReadPNGData(char const*, unsigned long) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:392:3 (libxul.so+0x28f2b70) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#14 operator() /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:363:34 (libxul.so+0x292ee5c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#15 mozilla::Maybe<mozilla::Variant<mozilla::image::TerminalState, mozilla::image::Yield> > mozilla::image::StreamingLexer<mozilla::image::nsPNGDecoder::State, 16ul>::ContinueUnbufferedRead<mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*)::$_12>(char const*, unsigned long, unsigned long, mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*)::$_12) /builds/worker/checkouts/gecko/image/StreamingLexer.h:555:9 (libxul.so+0x292ee5c)
#16 UnbufferedRead<(lambda at /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:360:21)> /builds/worker/checkouts/gecko/image/StreamingLexer.h:501:12 (libxul.so+0x28f18ca) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#17 Lex<(lambda at /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:360:21)> /builds/worker/checkouts/gecko/image/StreamingLexer.h:469:26 (libxul.so+0x28f18ca)
#18 mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:359:17 (libxul.so+0x28f18ca)
#19 mozilla::image::Decoder::Decode(mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/Decoder.cpp:177:19 (libxul.so+0x28488a0) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#20 mozilla::image::DecodedSurfaceProvider::Run() /builds/worker/checkouts/gecko/image/DecodedSurfaceProvider.cpp:125:34 (libxul.so+0x285169a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#21 non-virtual thunk to mozilla::image::DecodedSurfaceProvider::Run() /builds/worker/checkouts/gecko/image/DecodedSurfaceProvider.cpp (libxul.so+0x2851d49) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#22 mozilla::image::DecodingTask::Run() /builds/worker/checkouts/gecko/image/DecodePool.cpp:146:12 (libxul.so+0x2861c2b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#23 mozilla::TaskController::RunPoolThread() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:264:33 (libxul.so+0x11ad02f) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#24 mozilla::ThreadFuncPoolThread(void*) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:116:26 (libxul.so+0x11ac90e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#25 _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5 (libnspr4.so+0x45f5d) (BuildId: 41f54c8558946277ef23d47b768a79e38d0ae9ee)
Previous read of size 4 at 0x7b3400026868 by main thread:
#0 IsEmpty /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/BaseRect.h:62:66 (libxul.so+0x2873952) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#1 mozilla::image::RasterImage::HasDecodedPixels() /builds/worker/checkouts/gecko/image/RasterImage.cpp:1041:46 (libxul.so+0x2873952)
#2 mozilla::nsImageRenderer::PrepareImage() /builds/worker/checkouts/gecko/layout/painting/nsImageRenderer.cpp:127:20 (libxul.so+0x62f6e4e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#3 nsCSSRendering::PrepareImageLayer(nsPresContext*, nsIFrame*, unsigned int, nsRect const&, nsRect const&, nsStyleImageLayers::Layer const&, bool*) /builds/worker/checkouts/gecko/layout/painting/nsCSSRendering.cpp:2985:29 (libxul.so+0x628745d) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#4 nsCSSRendering::GetBackgroundLayerRect(nsPresContext*, nsIFrame*, nsRect const&, nsRect const&, nsStyleImageLayers::Layer const&, unsigned int) /builds/worker/checkouts/gecko/layout/painting/nsCSSRendering.cpp:3125:34 (libxul.so+0x6288abb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#5 mozilla::nsDisplayBackgroundImage::GetBoundsInternal(mozilla::nsDisplayListBuilder*, nsIFrame*) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:3642:10 (libxul.so+0x62b0fad) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#6 mozilla::nsDisplayBackgroundImage::nsDisplayBackgroundImage(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayBackgroundImage::InitData const&, nsIFrame*) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:2927:13 (libxul.so+0x62b0bc3) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#7 MakeDisplayItemWithIndex<mozilla::nsDisplayBackgroundImage, nsIFrame, const mozilla::nsDisplayBackgroundImage::InitData &> /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.h:1991:28 (libxul.so+0x62b5301) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#8 mozilla::CreateBackgroundImage(mozilla::nsDisplayListBuilder*, nsIFrame*, nsIFrame*, mozilla::nsDisplayBackgroundImage::InitData const&) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:3057:10 (libxul.so+0x62b5301)
#9 mozilla::nsDisplayBackgroundImage::AppendBackgroundItemsToTop(mozilla::nsDisplayListBuilder*, nsIFrame*, nsRect const&, mozilla::nsDisplayList*, bool, mozilla::ComputedStyle*, nsRect const&, nsIFrame*, mozilla::Maybe<mozilla::nsDisplayListBuilder::AutoBuildingDisplayList>*) /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:3305:42 (libxul.so+0x62b343c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#10 nsIFrame::DisplayBackgroundUnconditional(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&, bool) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:2589:14 (libxul.so+0x5ff3392) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#11 nsIFrame::DisplayBorderBackgroundOutline(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&, bool) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:2616:7 (libxul.so+0x5f5adb3) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#12 nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsBlockFrame.cpp:7008:3 (libxul.so+0x5f331b7) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#13 nsIFrame::BuildDisplayListForSimpleChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:3969:11 (libxul.so+0x5ffa78e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#14 nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:4086:5 (libxul.so+0x5f5c05a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#15 DisplayLine(mozilla::nsDisplayListBuilder*, nsLineList_iterator&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&) /builds/worker/checkouts/gecko/layout/generic/nsBlockFrame.cpp:6969:13 (libxul.so+0x5f35433) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#16 nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsBlockFrame.cpp:7124:9 (libxul.so+0x5f33d1f) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#17 nsIFrame::BuildDisplayListForSimpleChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:3969:11 (libxul.so+0x5ffa78e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#18 nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:4086:5 (libxul.so+0x5f5c05a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#19 DisplayLine(mozilla::nsDisplayListBuilder*, nsLineList_iterator&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&) /builds/worker/checkouts/gecko/layout/generic/nsBlockFrame.cpp:6969:13 (libxul.so+0x5f35433) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#20 nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsBlockFrame.cpp:7124:9 (libxul.so+0x5f33d1f) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#21 nsIFrame::BuildDisplayListForSimpleChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:3969:11 (libxul.so+0x5ffa78e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#22 nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:4086:5 (libxul.so+0x5f5c05a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#23 nsCanvasFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsCanvasFrame.cpp:614:5 (libxul.so+0x5f3b163) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#24 nsIFrame::BuildDisplayListForSimpleChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:3969:11 (libxul.so+0x5ffa78e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#25 nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:4086:5 (libxul.so+0x5f5c05a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#26 mozilla::ScrollFrameHelper::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsGfxScrollFrame.cpp:4055:15 (libxul.so+0x5fa8505) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#27 nsHTMLScrollFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsGfxScrollFrame.h:863:13 (libxul.so+0x60275ac) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#28 nsIFrame::BuildDisplayListForSimpleChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:3969:11 (libxul.so+0x5ffa78e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#29 nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:4086:5 (libxul.so+0x5f5c05a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#30 mozilla::ViewportFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) /builds/worker/checkouts/gecko/layout/generic/ViewportFrame.cpp:66:3 (libxul.so+0x5f0d344) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#31 nsIFrame::BuildDisplayListForStackingContext(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayList*, bool*) /builds/worker/checkouts/gecko/layout/generic/nsIFrame.cpp:3410:5 (libxul.so+0x5ff5c36) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#32 mozilla::RetainedDisplayListBuilder::AttemptPartialUpdate(unsigned int) /builds/worker/checkouts/gecko/layout/painting/RetainedDisplayListBuilder.cpp:1713:25 (libxul.so+0x6273ac6) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#33 nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, mozilla::nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags) /builds/worker/checkouts/gecko/layout/base/nsLayoutUtils.cpp:3337:40 (libxul.so+0x5ea466c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#34 mozilla::PresShell::PaintInternal(nsView*, mozilla::PaintInternalFlags) /builds/worker/checkouts/gecko/layout/base/PresShell.cpp:6440:5 (libxul.so+0x5e1c9d9) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#35 mozilla::PresShell::PaintAndRequestComposite(nsView*, mozilla::PaintFlags) /builds/worker/checkouts/gecko/layout/base/PresShell.cpp:6311:3 (libxul.so+0x5e1c314) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#36 nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*) /builds/worker/checkouts/gecko/view/nsViewManager.cpp:440:18 (libxul.so+0x59ecc31) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#37 nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) /builds/worker/checkouts/gecko/view/nsViewManager.cpp:375:22 (libxul.so+0x59ec6eb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#38 nsViewManager::ProcessPendingUpdates() /builds/worker/checkouts/gecko/view/nsViewManager.cpp:948:5 (libxul.so+0x59ee3a8) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#39 nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:2700:11 (libxul.so+0x5dcd232) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#40 TickDriver /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:368:13 (libxul.so+0x5dd634e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#41 mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:346:7 (libxul.so+0x5dd634e)
#42 mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:362:5 (libxul.so+0x5dd6166) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#43 mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:884:5 (libxul.so+0x5dd5d1e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#44 mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:797:5 (libxul.so+0x5dd5657) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#45 mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:724:5 (libxul.so+0x5dd5152) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#46 mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread() /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:587:14 (libxul.so+0x5dd4c88) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#47 mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:544:9 (libxul.so+0x5dd4a0a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#48 mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&) /builds/worker/checkouts/gecko/dom/ipc/VsyncMainChild.cpp:68:15 (libxul.so+0x52b4cb8) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#49 mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PVsyncChild.cpp:220:78 (libxul.so+0x54cdb94) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#50 mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PBackgroundChild.cpp:6088:32 (libxul.so+0x1e71939) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#51 mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1781:25 (libxul.so+0x1e181eb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#52 mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1706:9 (libxul.so+0x1e16599) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#53 mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1506:3 (libxul.so+0x1e16c3e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#54 mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1604:14 (libxul.so+0x1e177fe) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#55 mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:475:16 (libxul.so+0x11d7667) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#56 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:788:26 (libxul.so+0x11b03bd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#57 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:620:15 (libxul.so+0x11ae856) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#58 mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:398:36 (libxul.so+0x11aeb34) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#59 operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:124:37 (libxul.so+0x11db327) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#60 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:531:5 (libxul.so+0x11db327)
#61 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1180:16 (libxul.so+0x11c48d2) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#62 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10 (libxul.so+0x11cafa5) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#63 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x1e1c2eb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#64 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:268:30 (libxul.so+0x1e1ce1b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#65 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10 (libxul.so+0x1d3ca1c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#66 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3 (libxul.so+0x1d3ca1c)
#67 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3 (libxul.so+0x1d3ca1c)
#68 nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:137:27 (libxul.so+0x5a61db6) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#69 XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:874:20 (libxul.so+0x84e02b9) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#70 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:235:9 (libxul.so+0x1e1cdcd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#71 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10 (libxul.so+0x1d3ca1c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#72 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3 (libxul.so+0x1d3ca1c)
#73 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3 (libxul.so+0x1d3ca1c)
#74 XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:733:34 (libxul.so+0x84dfa5e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#75 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:67:12 (libxul.so+0x84e8992) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#76 content_process_main /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28 (firefox+0xdef83) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#77 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:329:18 (firefox+0xdef83)
Location is heap block of size 200 at 0x7b34000267e0 allocated by thread T17:
#0 malloc /builds/worker/fetches/llvm-project/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:667:5 (firefox+0x5c821) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#1 moz_xmalloc /builds/worker/checkouts/gecko/memory/mozalloc/mozalloc.cpp:52:15 (firefox+0xe0f5b) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#2 operator new /builds/worker/workspace/obj-build/dist/include/mozilla/cxxalloc.h:33:10 (libxul.so+0x2853ab5) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#3 MakeNotNull<RefPtr<mozilla::image::imgFrame> > /builds/worker/workspace/obj-build/dist/include/mozilla/NotNull.h:378:21 (libxul.so+0x2853ab5)
#4 mozilla::image::Decoder::AllocateFrameInternal(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::SurfaceFormat, mozilla::Maybe<mozilla::image::AnimationParams> const&, mozilla::image::RawAccessFrameRef&&) /builds/worker/checkouts/gecko/image/Decoder.cpp:396:18 (libxul.so+0x2853ab5)
#5 mozilla::image::Decoder::AllocateFrame(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::SurfaceFormat, mozilla::Maybe<mozilla::image::AnimationParams> const&) /builds/worker/checkouts/gecko/image/Decoder.cpp:300:19 (libxul.so+0x28534bf) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#6 mozilla::image::SurfaceSink::Configure(mozilla::image::SurfaceConfig const&) /builds/worker/checkouts/gecko/image/SurfacePipe.cpp:68:35 (libxul.so+0x287f33d) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#7 Configure<mozilla::image::SurfaceConfig> /builds/worker/checkouts/gecko/image/SurfaceFilters.h:65:25 (libxul.so+0x29031d5) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#8 mozilla::Maybe<mozilla::image::SurfacePipe> mozilla::image::SurfacePipeFactory::MakePipe<mozilla::image::SwizzleConfig, mozilla::image::SurfaceConfig>(mozilla::image::SwizzleConfig const&, mozilla::image::SurfaceConfig const&) /builds/worker/checkouts/gecko/image/SurfacePipeFactory.h:665:25 (libxul.so+0x29031d5)
#9 mozilla::image::SurfacePipeFactory::CreateSurfacePipe(mozilla::image::Decoder*, mozilla::gfx::IntSizeTyped<mozilla::OrientedPixel> const&, mozilla::gfx::IntSizeTyped<mozilla::OrientedPixel> const&, mozilla::gfx::IntRectTyped<mozilla::OrientedPixel> const&, mozilla::gfx::SurfaceFormat, mozilla::gfx::SurfaceFormat, mozilla::Maybe<mozilla::image::AnimationParams> const&, _qcms_transform*, mozilla::image::SurfacePipeFlags) /builds/worker/checkouts/gecko/image/SurfacePipeFactory.h (libxul.so+0x28d75a8) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#10 mozilla::image::nsPNGDecoder::CreateFrame(mozilla::image::nsPNGDecoder::FrameInfo const&) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:234:29 (libxul.so+0x28efbbd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#11 mozilla::image::nsPNGDecoder::info_callback(png_struct_def*, png_info_def*) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:714:28 (libxul.so+0x28f0961) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#12 MOZ_PNG_push_have_info /builds/worker/checkouts/gecko/media/libpng/pngpread.c:1195:7 (libxul.so+0x6a345e6) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#13 MOZ_PNG_push_read_chunk /builds/worker/checkouts/gecko/media/libpng/pngpread.c:352:7 (libxul.so+0x6a345e6)
#14 MOZ_PNG_proc_some_data /builds/worker/checkouts/gecko/media/libpng/pngpread.c:109:10 (libxul.so+0x6a329ba) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#15 MOZ_PNG_process_data /builds/worker/checkouts/gecko/media/libpng/pngpread.c:46:7 (libxul.so+0x6a329ba)
#16 mozilla::image::nsPNGDecoder::ReadPNGData(char const*, unsigned long) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:392:3 (libxul.so+0x28f2b70) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#17 operator() /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:363:34 (libxul.so+0x292ee5c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#18 mozilla::Maybe<mozilla::Variant<mozilla::image::TerminalState, mozilla::image::Yield> > mozilla::image::StreamingLexer<mozilla::image::nsPNGDecoder::State, 16ul>::ContinueUnbufferedRead<mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*)::$_12>(char const*, unsigned long, unsigned long, mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*)::$_12) /builds/worker/checkouts/gecko/image/StreamingLexer.h:555:9 (libxul.so+0x292ee5c)
#19 UnbufferedRead<(lambda at /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:360:21)> /builds/worker/checkouts/gecko/image/StreamingLexer.h:501:12 (libxul.so+0x28f18ca) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#20 Lex<(lambda at /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:360:21)> /builds/worker/checkouts/gecko/image/StreamingLexer.h:469:26 (libxul.so+0x28f18ca)
#21 mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:359:17 (libxul.so+0x28f18ca)
#22 mozilla::image::Decoder::Decode(mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/Decoder.cpp:177:19 (libxul.so+0x28488a0) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#23 mozilla::image::DecodedSurfaceProvider::Run() /builds/worker/checkouts/gecko/image/DecodedSurfaceProvider.cpp:125:34 (libxul.so+0x285169a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#24 non-virtual thunk to mozilla::image::DecodedSurfaceProvider::Run() /builds/worker/checkouts/gecko/image/DecodedSurfaceProvider.cpp (libxul.so+0x2851d49) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#25 mozilla::image::DecodingTask::Run() /builds/worker/checkouts/gecko/image/DecodePool.cpp:146:12 (libxul.so+0x2861c2b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#26 mozilla::TaskController::RunPoolThread() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:264:33 (libxul.so+0x11ad02f) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#27 mozilla::ThreadFuncPoolThread(void*) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:116:26 (libxul.so+0x11ac90e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#28 _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5 (libnspr4.so+0x45f5d) (BuildId: 41f54c8558946277ef23d47b768a79e38d0ae9ee)
Mutex M0 (0x7b4400010ae0) created at:
#0 pthread_mutex_init /builds/worker/fetches/llvm-project/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:1316:3 (firefox+0x5f7df) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#1 mozilla::detail::MutexImpl::MutexImpl() /builds/worker/checkouts/gecko/mozglue/misc/Mutex_posix.cpp:78:3 (firefox+0x145c42) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#2 OffTheBooksMutex /builds/worker/workspace/obj-build/dist/include/mozilla/Mutex.h:46:12 (libxul.so+0x2854b40) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#3 Mutex /builds/worker/workspace/obj-build/dist/include/mozilla/Mutex.h:125:39 (libxul.so+0x2854b40)
#4 DecodedSurfaceProvider /builds/worker/checkouts/gecko/image/DecodedSurfaceProvider.cpp:26:7 (libxul.so+0x2854b40)
#5 MakeNotNull<RefPtr<mozilla::image::DecodedSurfaceProvider>, mozilla::NotNull<mozilla::image::RasterImage *> &, mozilla::image::SurfaceKey &, mozilla::NotNull<RefPtr<mozilla::image::Decoder> > > /builds/worker/workspace/obj-build/dist/include/mozilla/NotNull.h:378:25 (libxul.so+0x2854b40)
#6 mozilla::image::DecoderFactory::CreateDecoder(mozilla::image::DecoderType, mozilla::NotNull<mozilla::image::RasterImage*>, mozilla::NotNull<mozilla::image::SourceBuffer*>, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::image::DecoderFlags, mozilla::image::SurfaceFlags, mozilla::image::IDecodingTask**) /builds/worker/checkouts/gecko/image/DecoderFactory.cpp:186:19 (libxul.so+0x2854b40)
#7 mozilla::image::RasterImage::Decode(mozilla::gfx::IntSizeTyped<mozilla::OrientedPixel> const&, unsigned int, mozilla::image::PlaybackType, bool&, bool&) /builds/worker/checkouts/gecko/image/RasterImage.cpp:1194:10 (libxul.so+0x2870063) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#8 mozilla::image::RasterImage::LookupFrame(mozilla::gfx::IntSizeTyped<mozilla::OrientedPixel> const&, unsigned int, mozilla::image::PlaybackType, bool) /builds/worker/checkouts/gecko/image/RasterImage.cpp:364:5 (libxul.so+0x286f11f) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#9 RequestDecodeForSizeInternal /builds/worker/checkouts/gecko/image/RasterImage.cpp:1108:10 (libxul.so+0x287558b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#10 mozilla::image::RasterImage::NotifyDecodeComplete(mozilla::image::DecoderFinalStatus const&, mozilla::image::ImageMetadata const&, mozilla::image::DecoderTelemetry const&, unsigned int, mozilla::gfx::IntRectTyped<mozilla::OrientedPixel> const&, mozilla::Maybe<unsigned int> const&, mozilla::image::DecoderFlags, mozilla::image::SurfaceFlags) /builds/worker/checkouts/gecko/image/RasterImage.cpp:1697:7 (libxul.so+0x287558b)
#11 operator() /builds/worker/checkouts/gecko/image/IDecodingTask.cpp:131:39 (libxul.so+0x2862141) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#12 mozilla::detail::RunnableFunction<mozilla::image::IDecodingTask::NotifyDecodeComplete(mozilla::NotNull<mozilla::image::RasterImage*>, mozilla::NotNull<mozilla::image::Decoder*>)::$_10>::Run() /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.h:531:5 (libxul.so+0x2862141)
#13 mozilla::PrioritizableRunnable::Run() /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:130:21 (libxul.so+0x11d1e35) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#14 mozilla::SchedulerGroup::Runnable::Run() /builds/worker/checkouts/gecko/xpcom/threads/SchedulerGroup.cpp:140:20 (libxul.so+0x11a5dff) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#15 mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:475:16 (libxul.so+0x11d7667) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#16 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:788:26 (libxul.so+0x11b03bd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#17 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:620:15 (libxul.so+0x11ae856) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#18 mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:398:36 (libxul.so+0x11aeb34) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#19 operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:124:37 (libxul.so+0x11db327) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#20 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:531:5 (libxul.so+0x11db327)
#21 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1180:16 (libxul.so+0x11c48d2) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#22 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10 (libxul.so+0x11cafa5) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#23 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x1e1c2eb) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#24 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:268:30 (libxul.so+0x1e1ce1b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#25 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10 (libxul.so+0x1d3ca1c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#26 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3 (libxul.so+0x1d3ca1c)
#27 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3 (libxul.so+0x1d3ca1c)
#28 nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:137:27 (libxul.so+0x5a61db6) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#29 XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:874:20 (libxul.so+0x84e02b9) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#30 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:235:9 (libxul.so+0x1e1cdcd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#31 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:380:10 (libxul.so+0x1d3ca1c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#32 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:373:3 (libxul.so+0x1d3ca1c)
#33 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:355:3 (libxul.so+0x1d3ca1c)
#34 XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:733:34 (libxul.so+0x84dfa5e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#35 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:67:12 (libxul.so+0x84e8992) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#36 content_process_main /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28 (firefox+0xdef83) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#37 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:329:18 (firefox+0xdef83)
Mutex M1 (0x7b34000267e8) created at:
#0 pthread_mutex_init /builds/worker/fetches/llvm-project/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:1316:3 (firefox+0x5f7df) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#1 mozilla::detail::MutexImpl::MutexImpl() /builds/worker/checkouts/gecko/mozglue/misc/Mutex_posix.cpp:78:3 (firefox+0x145c42) (BuildId: d7389ad6b6c8e65ace7da9aabf11f8db2bb61d2b)
#2 OffTheBooksMutex /builds/worker/workspace/obj-build/dist/include/mozilla/Mutex.h:46:12 (libxul.so+0x289223c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#3 Mutex /builds/worker/workspace/obj-build/dist/include/mozilla/Mutex.h:125:39 (libxul.so+0x289223c)
#4 Monitor /builds/worker/workspace/obj-build/dist/include/mozilla/Monitor.h:27:9 (libxul.so+0x289223c)
#5 mozilla::image::imgFrame::imgFrame() /builds/worker/checkouts/gecko/image/imgFrame.cpp:126:7 (libxul.so+0x289223c)
#6 MakeNotNull<RefPtr<mozilla::image::imgFrame> > /builds/worker/workspace/obj-build/dist/include/mozilla/NotNull.h:378:25 (libxul.so+0x2853ac0) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#7 mozilla::image::Decoder::AllocateFrameInternal(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::SurfaceFormat, mozilla::Maybe<mozilla::image::AnimationParams> const&, mozilla::image::RawAccessFrameRef&&) /builds/worker/checkouts/gecko/image/Decoder.cpp:396:18 (libxul.so+0x2853ac0)
#8 mozilla::image::Decoder::AllocateFrame(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::SurfaceFormat, mozilla::Maybe<mozilla::image::AnimationParams> const&) /builds/worker/checkouts/gecko/image/Decoder.cpp:300:19 (libxul.so+0x28534bf) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#9 mozilla::image::SurfaceSink::Configure(mozilla::image::SurfaceConfig const&) /builds/worker/checkouts/gecko/image/SurfacePipe.cpp:68:35 (libxul.so+0x287f33d) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#10 Configure<mozilla::image::SurfaceConfig> /builds/worker/checkouts/gecko/image/SurfaceFilters.h:65:25 (libxul.so+0x29031d5) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#11 mozilla::Maybe<mozilla::image::SurfacePipe> mozilla::image::SurfacePipeFactory::MakePipe<mozilla::image::SwizzleConfig, mozilla::image::SurfaceConfig>(mozilla::image::SwizzleConfig const&, mozilla::image::SurfaceConfig const&) /builds/worker/checkouts/gecko/image/SurfacePipeFactory.h:665:25 (libxul.so+0x29031d5)
#12 mozilla::image::SurfacePipeFactory::CreateSurfacePipe(mozilla::image::Decoder*, mozilla::gfx::IntSizeTyped<mozilla::OrientedPixel> const&, mozilla::gfx::IntSizeTyped<mozilla::OrientedPixel> const&, mozilla::gfx::IntRectTyped<mozilla::OrientedPixel> const&, mozilla::gfx::SurfaceFormat, mozilla::gfx::SurfaceFormat, mozilla::Maybe<mozilla::image::AnimationParams> const&, _qcms_transform*, mozilla::image::SurfacePipeFlags) /builds/worker/checkouts/gecko/image/SurfacePipeFactory.h (libxul.so+0x28d75a8) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#13 mozilla::image::nsPNGDecoder::CreateFrame(mozilla::image::nsPNGDecoder::FrameInfo const&) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:234:29 (libxul.so+0x28efbbd) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#14 mozilla::image::nsPNGDecoder::info_callback(png_struct_def*, png_info_def*) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:714:28 (libxul.so+0x28f0961) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#15 MOZ_PNG_push_have_info /builds/worker/checkouts/gecko/media/libpng/pngpread.c:1195:7 (libxul.so+0x6a345e6) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#16 MOZ_PNG_push_read_chunk /builds/worker/checkouts/gecko/media/libpng/pngpread.c:352:7 (libxul.so+0x6a345e6)
#17 MOZ_PNG_proc_some_data /builds/worker/checkouts/gecko/media/libpng/pngpread.c:109:10 (libxul.so+0x6a329ba) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#18 MOZ_PNG_process_data /builds/worker/checkouts/gecko/media/libpng/pngpread.c:46:7 (libxul.so+0x6a329ba)
#19 mozilla::image::nsPNGDecoder::ReadPNGData(char const*, unsigned long) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:392:3 (libxul.so+0x28f2b70) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#20 operator() /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:363:34 (libxul.so+0x292ee5c) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#21 mozilla::Maybe<mozilla::Variant<mozilla::image::TerminalState, mozilla::image::Yield> > mozilla::image::StreamingLexer<mozilla::image::nsPNGDecoder::State, 16ul>::ContinueUnbufferedRead<mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*)::$_12>(char const*, unsigned long, unsigned long, mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*)::$_12) /builds/worker/checkouts/gecko/image/StreamingLexer.h:555:9 (libxul.so+0x292ee5c)
#22 UnbufferedRead<(lambda at /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:360:21)> /builds/worker/checkouts/gecko/image/StreamingLexer.h:501:12 (libxul.so+0x28f18ca) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#23 Lex<(lambda at /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:360:21)> /builds/worker/checkouts/gecko/image/StreamingLexer.h:469:26 (libxul.so+0x28f18ca)
#24 mozilla::image::nsPNGDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/decoders/nsPNGDecoder.cpp:359:17 (libxul.so+0x28f18ca)
#25 mozilla::image::Decoder::Decode(mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/Decoder.cpp:177:19 (libxul.so+0x28488a0) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#26 mozilla::image::DecodedSurfaceProvider::Run() /builds/worker/checkouts/gecko/image/DecodedSurfaceProvider.cpp:125:34 (libxul.so+0x285169a) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#27 non-virtual thunk to mozilla::image::DecodedSurfaceProvider::Run() /builds/worker/checkouts/gecko/image/DecodedSurfaceProvider.cpp (libxul.so+0x2851d49) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#28 mozilla::image::DecodingTask::Run() /builds/worker/checkouts/gecko/image/DecodePool.cpp:146:12 (libxul.so+0x2861c2b) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#29 mozilla::TaskController::RunPoolThread() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:264:33 (libxul.so+0x11ad02f) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#30 mozilla::ThreadFuncPoolThread(void*) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:116:26 (libxul.so+0x11ac90e) (BuildId: c5b432ce505accdba673974729dbdda2b1fdae28)
#31 _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5 (libnspr4.so+0x45f5d) (BuildId: 41f54c8558946277ef23d47b768a79e38d0ae9ee)
Thread T17 'TaskCon~ller #0' (tid=2690, running) created by main thread at:
...
See comment 0 for the T17 stack.
Group: core-security → gfx-core-security
Keywords: csectype-race
|
|
||
Updated•2 years ago
|
Has Regression Range: --- → yes
|
||
Comment 8•2 years ago
|
||
[Tracking Requested - why for this release]: fairly frequently occurring regression. Probably not particularly exploitable, but still.
tracking-firefox102:
--- → ?
|
|
||
Comment 9•2 years ago
|
||
I'll just mark this sec-moderate. I don't think pointers are involved in this data structure, so hopefully if it gets garbled not much bad can happen.
Keywords: sec-moderate
|
||
Updated•2 years ago
|
|
||
Comment 10•2 years ago
|
||
Correctly guard access to imgFrame::mDecoded with monitor. r=aosmond
https://hg.mozilla.org/integration/autoland/rev/cfdd8c03b13f3bea7c166fbeea8d0cb164236f60
https://hg.mozilla.org/mozilla-central/rev/cfdd8c03b13f
Group: gfx-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 102 Branch
|
||
Updated•2 years ago
|
QA Whiteboard: [post-critsmash-triage]
Flags: qe-verify-
|
|
||
Updated•1 year ago
|
Group: core-security-release
You need to log in
before you can comment on or make changes to this bug.
Description
•