1794368 - Crash in [@ IOAccelResourceTestEvent]

Status: NEW

(Core :: Graphics, defect)

Description

[Gabriele Svelto [:gsvelto]]

Crash report: https://crash-stats.mozilla.org/report/index/2737ca7d-3dd0-4a82-b28f-12cea0221008

Reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS

Top 10 frames of crashing thread:

0 IOAccelerator IOAccelResourceTestEvent 
1 GLEngine gleGetFreeOrphanNode 
2 GLEngine gleAcquireBufferData 
3 GLEngine glBufferData_PackThread 
4 XUL mozilla::gl::GLContext::raw_fBufferData gfx/gl/GLContext.h:865
5 XUL mozilla::gl::GLContext::fBufferData gfx/gl/GLContext.h:874
5 XUL mozilla::WebGLBuffer::BufferData dom/canvas/WebGLBuffer.cpp:142
6 XUL mozilla::WebGLContext::BufferData const dom/canvas/WebGLContextBuffers.cpp:250
7 XUL mozilla::HostWebGLContext::BufferData const dom/canvas/HostWebGLContext.h:482
7 XUL mozilla::MethodDispatcher<mozilla::WebGLMethodDispatcher,  const dom/canvas/WebGLCommandQueue.h:246

This appears to be a NULL pointer access somewhere within Apple's GL libraries but the stack is sufficiently shallow that I suspect it's a problem we're causing ourselves. There's crashes happening on all versions of macOS but older versions show up more often. No ARM-based macs seem to be affected (or maybe they show up under a different signature?).

Lots of crashes happen on: https://globe.adsbexchange.com/
Lots of comments mention it too:

Firefox crashes every time I load www.adsbexchange.com

Here's a few more URLs that seem to trigger this issue:

• https://apps.facebook.com/ccsupernatural/?ref=bookmarks&count=0
• https://apps.facebook.com/cccityofromance/?ref=bookmarks&count=0

Comment 1

[Gabriele Svelto [:gsvelto]]

Attachment: Untitled.png

I tried reproducing this issue but it doesn't happen in a VM. However the map that can be displayed at globe.adbexchange.com doesn't get drawn at all in nightly. The same map works fine on Linux.

Comment 2

[Gabriele Svelto [:gsvelto]]

Disregard my previous comment, it was just being slow. The map was displayed correctly after a while.

Comment 3

[Steven Michaud [:smichaud] (Retired)]

Over the last three months, almost all of these are on macOS 10.15.7. So it does seem likely that these are an Apple bug.

https://crash-stats.mozilla.org/search/?signature=~IOAccelResourceTestEvent&platform=Mac%20OS%20X&date=%3E%3D2022-07-24T22%3A26%3A00.000Z&date=%3C2022-10-24T22%3A26%3A00.000Z&_facets=signature&_facets=platform_version&_facets=proto_signature&_sort=-date&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#facet-platform_version

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 15 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.