1913773 - Crash in [@ mozilla::ipc::SharedMemory::Size]

Status: RESOLVED FIXED

(Core :: Graphics: Canvas2D, defect)

Description

[Gabriele Svelto [:gsvelto]]

Crash report: https://crash-stats.mozilla.org/report/index/a9bb0b1f-66cc-4a72-a13a-0a1d00240817

Reason: SIGSEGV / SEGV_MAPERR

Top 10 frames:

0  libxul.so  mozilla::ipc::SharedMemory::Size() const  ipc/glue/SharedMemory.h:35
0  libxul.so  mozilla::layers::CanvasTranslator::CanvasShmem::Size()  gfx/layers/ipc/CanvasTranslator.h:447
0  libxul.so  mozilla::layers::CanvasTranslator::AddBuffer(mozilla::UniquePtr<int, mozilla:...  gfx/layers/ipc/CanvasTranslator.cpp:299
1  libxul.so  mozilla::layers::CanvasTranslator::HandleCanvasTranslatorEvents()  gfx/layers/ipc/CanvasTranslator.cpp:754
2  libxul.so  mozilla::detail::RunnableMethodArguments<>::apply<nsObserverService, void (ns...  xpcom/threads/nsThreadUtils.h:1085
2  libxul.so  std::__invoke_impl<void, mozilla::detail::RunnableMethodArguments<>::apply<ns...  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/invoke.h:60
2  libxul.so  std::__invoke<mozilla::detail::RunnableMethodArguments<>::apply<nsObserverSer...  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/invoke.h:95
2  libxul.so  _ZSt12__apply_implIZN7mozilla6detail23RunnableMethodArgumentsIJEE5applyI17nsO...  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/tuple:1678
2  libxul.so  std::apply<mozilla::detail::RunnableMethodArguments<>::apply<nsObserverServic...  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/tuple:1687
2  libxul.so  mozilla::detail::RunnableMethodArguments<>::apply<nsObserverService, void (ns...  xpcom/threads/nsThreadUtils.h:1083

Very low volume, but seems like a valid bug. It appears that shmem is null, I'm not sure how that happens, but all these crashes appear to happen on machines with Nvidia cards.

Comment 1

[Gabriele Svelto [:gsvelto]]

My bad, this also seems to happen on Android devices. On the latter this is a GPU crash though, on Linux it's a parent process crash.

Comment 2

[Lee Salzman [:lsalzman]]

Attachment: Bug 1913773 - Ensure mCurrentShmem is valid. r?aosmond

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/b62942faef2f
Ensure mCurrentShmem is valid. r=aosmond

Comment 4

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/b62942faef2f

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

The patch landed in nightly and beta is affected.
:lsalzman, is this bug important enough to require an uplift?

• If yes, please nominate the patch for beta approval.
• If no, please set status-firefox130 to wontfix.

For more information, please visit BugBot documentation.

Comment 6

[Lee Salzman [:lsalzman]]

This seems low volume enough that for now we will let this ride the trains unless crash reports suddenly spike.