1911016 - Crash in [@ linear_alloc_child] in Mesa called from raw_fDrawArrays

Status: RESOLVED WORKSFORME

(Core :: Graphics: CanvasWebGL, defect, P1)

Description

[BugBot [:suhaib / :marco]]

Crash report: https://crash-stats.mozilla.org/report/index/07c1858d-1649-41e8-b630-377b60240726

Reason: SIGSEGV / SEGV_MAPERR

Top 10 frames of crashing thread:

0  libgallium_drv_video.so  linear_alloc_child  /usr/src/debug/mesa/mesa-24.1.4/src/util/ralloc.c:1034
0  libgallium_drv_video.so  linear_zalloc_child  /usr/src/debug/mesa/mesa-24.1.4/src/util/ralloc.c:1131
1  libgallium_drv_video.so  make_array_type  /usr/src/debug/mesa/mesa-24.1.4/src/compiler/glsl_types.c:507
1  libgallium_drv_video.so  glsl_array_type  /usr/src/debug/mesa/mesa-24.1.4/src/compiler/glsl_types.c:1271
2  libgallium_drv_video.so  read_variable  /usr/src/debug/mesa/mesa-24.1.4/src/compiler/nir/nir_serialize.c:345
3  libgallium_drv_video.so  read_var_list  /usr/src/debug/mesa/mesa-24.1.4/src/compiler/nir/nir_serialize.c:427
3  libgallium_drv_video.so  nir_deserialize  /usr/src/debug/mesa/mesa-24.1.4/src/compiler/nir/nir_serialize.c:2063
4  libgallium_drv_video.so  r600_pipe_shader_create  /usr/src/debug/mesa/mesa-24.1.4/src/gallium/drivers/r600/r600_shader.c:149
5  libgallium_drv_video.so  r600_shader_select  /usr/src/debug/mesa/mesa-24.1.4/src/gallium/drivers/r600/r600_state_common.c:933
6  libgallium_drv_video.so  r600_update_derived_state  /usr/src/debug/mesa/mesa-24.1.4/src/gallium/drivers/r600/r600_state_common.c:1860

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2024-06-07
• Process type: RDD
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - all crashes happened on null or near null memory address

Comment 1

[Bob Hood [:bhood]]

Kelsey, could you please evaluate this when you get a chance?

Comment 2

[BugBot [:suhaib / :marco]]

Closing because no crashes reported for 12 weeks.