Closed Bug 1882416 Opened 1 year ago Closed 1 year ago

Crash in [@ euclid::size::Size2D<T>::cast] on assertion failed: !size.is_empty()

Categories

(Core :: Graphics: WebRender, defect)

Unspecified
Windows 11
defect

Tracking

()

RESOLVED FIXED
125 Branch
Tracking Status
firefox-esr115 --- unaffected
firefox123 --- unaffected
firefox124 --- unaffected
firefox125 + fixed

People

(Reporter: mccr8, Assigned: nical)

References

(Regression)

Details

(Keywords: crash, regression, topcrash)

Crash Data

Crash report: https://crash-stats.mozilla.org/report/index/7c39d8fd-0a53-4ad9-851e-445990240227

MOZ_CRASH Reason: assertion failed: !size.is_empty()

Top 10 frames of crashing thread:

0  xul.dll  MOZ_Crash  mfbt/Assertions.h:301
0  xul.dll  RustMozCrash  mozglue/static/rust/wrappers.cpp:17
1  xul.dll  mozglue_static::panic_hook  mozglue/static/rust/lib.rs:96
2  xul.dll  core::ops::function::Fn::call<void   /rustc/07dca489ac2d933c78d3c5158e3f43beefeb02ce/library/core/src/ops/function.rs:250
3  xul.dll  alloc::boxed::impl$49::call  library/alloc/src/boxed.rs:2029
3  xul.dll  std::panicking::rust_panic_with_hook  library/std/src/panicking.rs:783
4  xul.dll  std::panicking::begin_panic_handler::closure$0  library/std/src/panicking.rs:649
5  xul.dll  std::sys_common::backtrace::__rust_end_short_backtrace<std::panicking::begin_panic_handler::closure_env$0, never$>  library/std/src/sys_common/backtrace.rs:171
6  xul.dll  std::panicking::begin_panic_handler  library/std/src/panicking.rs:645
7  xul.dll  core::panicking::panic_fmt  library/core/src/panicking.rs:72

[Tracking Requested - why for this release]: big crash regression

This looks like a huge crash spike on the 20240227095754 Nightly build. Here is the set of changes in that Nightly.

Bug 1882044 added a new assert!(!size.is_empty()); and it is in the regression range. I can't tell if that's the one the crash is hitting, though. nical, does that make sense? Maybe this is a signature change from some other crash? Thanks.

Flags: needinfo?(nical.bugzilla)
See Also: → 1882367
Summary: Crash in [@ euclid::size::Size2D<T>::cast] → Crash in [@ euclid::size::Size2D<T>::cast] on assertion failed: !size.is_empty()

Ah, it looks like there are at least 3 new signatures with this assertion.

FWIW I don't see any more signatures besides these 3 with this assertion. (aside from a single instance of an empty minidump)

The bug is linked to a topcrash signature, which matches the following criterion:

  • Top 10 desktop browser crashes on nightly

For more information, please visit BugBot documentation.

Keywords: topcrash
Duplicate of this bug: 1882321
Duplicate of this bug: 1882367
See Also: 1882367

Fixed by backout.

Assignee: nobody → nical.bugzilla
Status: NEW → RESOLVED
Closed: 1 year ago
Flags: needinfo?(nical.bugzilla)
Resolution: --- → FIXED
Target Milestone: --- → 125 Branch

Copying crash signatures from duplicate bugs.

Crash Signature: [@ euclid::size::Size2D<T>::cast] → [@ euclid::size::Size2D<T>::cast] [@ webrender::render_task::RenderTask::new_dynamic]

Copying crash signatures from duplicate bugs.

Crash Signature: [@ euclid::size::Size2D<T>::cast] [@ webrender::render_task::RenderTask::new_dynamic] → [@ euclid::size::Size2D<T>::cast] [@ webrender::render_task::RenderTask::new_dynamic] [@ webrender::render_task::RenderTaskKind::new_mask]
Duplicate of this bug: 1882816
You need to log in before you can comment on or make changes to this bug.