1845554 - Assertion failure: ok, at /builds/worker/checkouts/gecko/gfx/gl/GLContextProviderEGL.cpp:457

Status: NEW

(Core :: Graphics: CanvasWebGL, defect)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

Found while fuzzing m-c 20230726-8470bc21f160 (--enable-debug --enable-fuzzing)

To reproduce via Grizzly Replay:

$ pip install fuzzfetch grizzly-framework
$ python -m fuzzfetch -d --fuzzing -n firefox
$ python -m grizzly.replay ./firefox/firefox testcase.html

Note: the test case is from bug 1839264.

Assertion failure: ok, at /builds/worker/checkouts/gecko/gfx/gl/GLContextProviderEGL.cpp:457

8|0|xul.dll|mozilla::gl::GLContextEGL::OnMarkDestroyed()|hg:hg.mozilla.org/mozilla-central:gfx/gl/GLContextProviderEGL.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|390|0x53
8|1|xul.dll|mozilla::gl::GLContext::MarkDestroyed()|hg:hg.mozilla.org/mozilla-central:gfx/gl/GLContext.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|1916|0x2f
8|2|xul.dll|mozilla::WebGLContext::DestroyResourcesAndContext()|hg:hg.mozilla.org/mozilla-central:dom/canvas/WebGLContext.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|233|0x4b7
8|3|xul.dll|mozilla::WebGLContext::~WebGLContext()|hg:hg.mozilla.org/mozilla-central:dom/canvas/WebGLContext.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|163|0x1e
8|4|xul.dll|mozilla::WebGLContext::~WebGLContext()|hg:hg.mozilla.org/mozilla-central:dom/canvas/WebGLContext.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|163|0xf
8|5|xul.dll|mozilla::HostWebGLContext::~HostWebGLContext()|hg:hg.mozilla.org/mozilla-central:dom/canvas/HostWebGLContext.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|74|0x77f
8|6|xul.dll|mozilla::dom::WebGLParent::Recv__delete__()|hg:hg.mozilla.org/mozilla-central:dom/canvas/WebGLParent.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|93|0x21
8|7|xul.dll|mozilla::dom::PWebGLParent::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:2a248686e6e0592b8e6aeed598ab60f1e5d153bd90beb378a1562e772b556e4d8616c947012c792440631bb6a3dbad1d1e41fc97871d765fdf918ca9e7423973/ipc/ipdl/PWebGLParent.cpp:|173|0x203
8|8|xul.dll|mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:f6791f264875ee31de704005f3dbb0c82e497cfa447fbba9d259d8f7eb70227ef7e57bfc03642158a030baedd5ec025b42d4a74aa33034e3a461f2fcaef5e1f3/ipc/ipdl/PCanvasManagerParent.cpp:|214|0x3a5
8|9|xul.dll|mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|1811|0x14e
8|10|xul.dll|mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message,mozilla::DefaultDelete<IPC::Message> >)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|1736|0x2a7
8|11|xul.dll|mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|1536|0x193
8|12|xul.dll|mozilla::ipc::MessageChannel::MessageTask::Run()|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|1634|0xdd
8|13|xul.dll|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|1193|0xa4e
8|14|xul.dll|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|480|0x44
8|15|xul.dll|mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|330|0x124
8|16|xul.dll|MessageLoop::RunHandler()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:8470bc21f160f3c1fecb034308c203412e1fcb3c|363|0x4f
8|17|xul.dll|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:8470bc21f160f3c1fecb034308c203412e1fcb3c|345|0x6e
8|18|xul.dll|nsThread::ThreadFunc(void*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:8470bc21f160f3c1fecb034308c203412e1fcb3c|391|0x14c
8|19|nss3.dll|_PR_NativeRunThread(void*)|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/threads/combined/pruthr.c:8470bc21f160f3c1fecb034308c203412e1fcb3c|399|0x120
8|20|nss3.dll|pr_root(void*)|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/md/windows/w95thred.c:8470bc21f160f3c1fecb034308c203412e1fcb3c|139|0x10

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:jgilbert, could you have a look please?

For more information, please visit BugBot documentation.

Comment 2

[Kelsey Gilbert [:jgilbert]]

Debug-only assert -> S3