Closed Bug 1903932 Opened 1 year ago Closed 1 year ago

Crash in [@ _ZN3hwy6N_NEONL5LoadUINS0_4SimdIfLm4ELi0EEETnPNS_9EnableIfTIXeqmlsrT_13kPrivateLanesstNS5_1TELi16EEE4typeELPv0ETnPNS4_IXclsr3hwyE6IsSameINS_12RemoveConstTINS_15RemoveVolatileTINS_10RemoveRefTIS6_E4typeEE4typeEE4typeEfEEEE4typeELSA_0EEENS0_6...

Categories

(Core :: Graphics: ImageLib, defect)

Product:
Core
Component:
Graphics: ImageLib
Platform:
ARM64
macOS
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1901700
Tracking Flags:
Tracking Status
firefox-esr115 --- unaffected
firefox127 --- unaffected
firefox128 --- unaffected
firefox129 --- disabled

People

(Reporter: release-mgmt-account-bot, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash)

Crash Data

Crash report: https://crash-stats.mozilla.org/report/index/cd92e417-90ec-47b2-ac07-352b20240617

Reason: EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE

Top 10 frames of crashing thread:

0  XUL  _ZN3hwy6N_NEONL5LoadUINS0_4SimdIfLm4ELi0EEETnPNS_9EnableIfTIXeqmlsrT_13kPrivateLanesstNS5_1TELi16EEE4typeELPv0ETnPNS4_IXclsr3hwyE6IsSameINS_12RemoveConstTINS_15RemoveVolatileTINS_10RemoveRefTIS6_E4typeEE4typeEE4typeEfEEEE4typeELSA_0EEENS0_6Vec128IfLm4EEES5_PKf  third_party/highway/hwy/ops/arm_neon-inl.h:3388
0  XUL  jxl::N_NEON::GaborishStage::ProcessRow const  third_party/jpeg-xl/lib/jxl/render_pipeline/stage_gaborish.cc:71
1  XUL  jxl::LowMemoryRenderPipeline::RenderRect  third_party/jpeg-xl/lib/jxl/render_pipeline/low_memory_render_pipeline.cc:726
2  XUL  jxl::LowMemoryRenderPipeline::ProcessBuffers  third_party/jpeg-xl/lib/jxl/render_pipeline/low_memory_render_pipeline.cc:893
3  XUL  jxl::ModularFrameDecoder::FinalizeDecoding const  third_party/jpeg-xl/lib/jxl/dec_modular.cc:732
3  XUL  jxl::ThreadPool::RunCallState<jxl::ModularFrameDecoder::FinalizeDecoding  third_party/jpeg-xl/lib/jxl/base/data_parallel.h:94
4  XUL  jpegxl::ThreadParallelRunner::RunRange  third_party/jpeg-xl/lib/threads/thread_parallel_runner_internal.cc:145
5  XUL  jpegxl::ThreadParallelRunner::ThreadFunc  third_party/jpeg-xl/lib/threads/thread_parallel_runner_internal.cc:175
6  XUL  std::__1::__invoke[abi:un170006]<void   /builds/worker/fetches/MacOSX14.4.sdk/usr/include/c++/v1/__type_traits/invoke.h:340
6  XUL  std::__1::__thread_execute[abi:un170006]<std::__1::unique_ptr<std::__1::__thread_struct, std::__1::default_delete<std::__1::unique_ptr> >, void   /builds/worker/fetches/MacOSX14.4.sdk/usr/include/c++/v1/__thread/thread.h:227

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

  • First crash report: 2024-06-17
  • Process type: Content
  • Is startup crash: No
  • Has user comments: No
  • Is null crash: No
Group: gfx-core-security
Component: General → Graphics: ImageLib

I'm guessing this is another dupe of one of those weird JXL crashes.

status-firefox127: --- → unaffected
status-firefox128: --- → unaffected
status-firefox129: affected → disabled
status-firefox-esr115: --- → unaffected

N_NEON instead of N_AVX3 but yeah.

Status: NEW → RESOLVED
Closed: 1 year ago
Duplicate of bug: 1901700
Resolution: --- → DUPLICATE
Group: gfx-core-security
You need to log in before you can comment on or make changes to this bug.