1888176 - Assertion failure: false (MOZ_ASSERT_UNREACHABLE: unexpected to be called), at /builds/worker/checkouts/gecko/dom/webgpu/ipc/WebGPUParent.cpp:1535

Status: RESOLVED WORKSFORME

(Core :: Graphics: WebGPU, defect, P1)

Description

[Tyson Smith [:tsmith]]

Found while fuzzing m-c 20240322-5d6efea5e0bb (--enable-debug --enable-fuzzing)

This issue is being reported frequently but is not reliably reproducible. A reduced test case is unavailable at this time.

Assertion failure: false (MOZ_ASSERT_UNREACHABLE: unexpected to be called), at /builds/worker/checkouts/gecko/dom/webgpu/ipc/WebGPUParent.cpp:1535

8|0|xul.dll|mozilla::webgpu::WebGPUParent::CreateExternalTexture(unsigned long long, unsigned long long, unsigned int, unsigned int, const WGPUTextureFormat, unsigned int)|hg:hg.mozilla.org/mozilla-central:dom/webgpu/ipc/WebGPUParent.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1535|0x243
8|1|xul.dll|mozilla::webgpu::WebGPUParent::EnsureExternalTextureForSwapChain(WGPUSwapChainId, unsigned long long, unsigned long long, unsigned int, unsigned int, WGPUTextureFormat, unsigned int)|hg:hg.mozilla.org/mozilla-central:dom/webgpu/ipc/WebGPUParent.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1517|0x322
8|2|xul.dll|wgpu_server_ensure_external_texture_for_swap_chain(void*, WGPUSwapChainId, unsigned long long, unsigned long long, unsigned int, unsigned int, WGPUTextureFormat, unsigned int)|hg:hg.mozilla.org/mozilla-central:dom/webgpu/ipc/WebGPUParent.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|48|0x60
8|3|xul.dll|wgpu_bindings::server::Global::device_action<wgpu_hal::dx12::Api>(wgpu_core::id::Id<enum2$<wgpu_core::id::markers::Device> >, enum2$<wgpu_bindings::DeviceAction>, wgpu_bindings::error::ErrorBuffer)|hg:hg.mozilla.org/mozilla-central:gfx/wgpu_bindings/src/server.rs:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|701|0x17c
8|4|xul.dll|wgpu_bindings::server::wgpu_server_device_action(wgpu_bindings::server::Global*, wgpu_core::id::Id<enum2$<wgpu_core::id::markers::Device> >, wgpu_bindings::ByteBuf*, wgpu_bindings::error::ErrorBuffer)|hg:hg.mozilla.org/mozilla-central:gfx/wgpu_bindings/src/server.rs:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1045|0xca
8|5|xul.dll|mozilla::webgpu::WebGPUParent::RecvDeviceAction(unsigned long long, mozilla::ipc::ByteBuf const&)|hg:hg.mozilla.org/mozilla-central:dom/webgpu/ipc/WebGPUParent.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1329|0x74
8|6|xul.dll|mozilla::webgpu::PWebGPUParent::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:dad563062cc56bd06529de8e625f2407c2d44a4de15d39c2cefe4c26741f50ac3d6b033483114bc8433b9928906e44c20f5a5dc989a6cf7a87382b10bdbc51a5/ipc/ipdl/PWebGPUParent.cpp:|293|0x2a0
8|7|xul.dll|mozilla::gfx::PCanvasManagerParent::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:5a4b09002b5cf7362325229981d1a4a71a4d0ab335fb7c03244c5c83fc211722ae6baca6f3546787c00dcaf8658cfa78c39a64b71b38f718c38b6d651f6a3155/ipc/ipdl/PCanvasManagerParent.cpp:|290|0x35e
8|8|xul.dll|mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1818|0x14e
8|9|xul.dll|mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message,mozilla::DefaultDelete<IPC::Message> >)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1737|0x2a7
8|10|xul.dll|mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1530|0x193
8|11|xul.dll|mozilla::ipc::MessageChannel::MessageTask::Run()|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1628|0xdd
8|12|xul.dll|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|1193|0xa68
8|13|xul.dll|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|480|0x44
8|14|xul.dll|mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|330|0x124
8|15|xul.dll|MessageLoop::RunHandler()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|363|0x4f
8|16|xul.dll|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|345|0x6e
8|17|xul.dll|nsThread::ThreadFunc(void*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|370|0x15a
8|18|nss3.dll|_PR_NativeRunThread(void*)|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/threads/combined/pruthr.c:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|399|0x120
8|19|nss3.dll|pr_root(void*)|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/md/windows/w95thred.c:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|139|0x10
8|20|ucrtbase.dll||||
8|21|KERNELBASE.dll||||
8|22|mozglue.dll|patched_BaseThreadInitThunk(int, void*, void*)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/dllservices/mozglue/WindowsDllBlocklist.cpp:5d6efea5e0bbc9c3cb2231d09450c2c7dd045122|558|0x74
8|23|ntdll.dll||||
8|24|KERNELBASE.dll||||

Comment 1

[Sotaro Ikeda [:sotaro]]

The assert failure could happen when allocating size is too large or system does not have enough gpu memory. Then it seems better to remove the assert. And ExternalTextureD3D11.cpp already has enough error logs.

Comment 2

[Sotaro Ikeda [:sotaro]]

Created Bug 1888341 for comment 1.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

This bug prevents fuzzing from making progress; however, it has low severity. It is important for fuzz blocker bugs to be addressed in a timely manner (see here why?).
:jimb, could you consider increasing the severity?

For more information, please visit BugBot documentation.

Comment 4

[Erich Gubler [:ErichDonGubler]]

S3 is appropriate, because WebGPU isn't shipped yet. This may, however, be indicative of needing a higher priority than before.

Comment 5

[Sotaro Ikeda [:sotaro]]

The assert was removed by bug 1888341 .