1880699 - Crash in [@ mozilla::layers::ShmemTextureData::Deallocate]

Status: NEW

(Core :: Graphics, defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/5110ecca-217f-4900-a17f-05eb50240210

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  mozilla::layers::ShmemTextureData::Deallocate  gfx/layers/BufferTexture.cpp:531
1  xul.dll  mozilla::layers::TextureClient::Destroy  gfx/layers/client/TextureClient.cpp:592
2  xul.dll  mozilla::layers::TextureClient::~TextureClient  gfx/layers/client/TextureClient.cpp:874
3  xul.dll  mozilla::layers::TextureClient::~TextureClient  gfx/layers/client/TextureClient.cpp:869
4  xul.dll  mozilla::AtomicRefCountedWithFinalize<mozilla::layers::TextureClient>::Release  gfx/layers/AtomicRefCountedWithFinalize.h:152
5  xul.dll  mozilla::RefPtrTraits<mozilla::layers::TextureClient>::Release  mfbt/RefPtr.h:49
5  xul.dll  RefPtr<mozilla::layers::TextureClient>::ConstRemovingRefPtrTraits<mozilla::layers::TextureClient>::Release  mfbt/RefPtr.h:409
5  xul.dll  RefPtr<mozilla::layers::TextureClient>::~RefPtr  mfbt/RefPtr.h:80
5  xul.dll  mozilla::layers::TextureClientHolder::~TextureClientHolder  gfx/layers/client/TextureClientRecycleAllocator.cpp:20
5  xul.dll  mozilla::layers::TextureClientHolder::Release  gfx/layers/client/TextureClientRecycleAllocator.cpp:23

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2023-12-18
• Process type: RDD
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - all crashes happened on null or near null memory address

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Graphics' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:bhood, could you have a look please?

For more information, please visit BugBot documentation.