1931459 - Crash in [@ webrender::frame_allocator::FrameAllocator::deallocate_impl]

Status: NEW

(Core :: Graphics: WebRender, defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/769f677a-2f97-436d-bd94-abac80240920

Reason: EXCEPTION_ACCESS_VIOLATION_WRITE

Top 10 frames of crashing thread:

0  xul.dll  core::sync::atomic::atomic_sub  /rustc/eeb90cda1969383f56a2637cbd3037bdf598841c/library/core/src/sync/atomic.rs:3363
0  xul.dll  core::sync::atomic::AtomicI32::fetch_sub  /rustc/eeb90cda1969383f56a2637cbd3037bdf598841c/library/core/src/sync/atomic.rs:2703
0  xul.dll  webrender::frame_allocator::FrameAllocator::deallocate_impl  gfx/wr/webrender/src/frame_allocator.rs:91
0  xul.dll  webrender::frame_allocator::impl$4::deallocate  gfx/wr/webrender/src/frame_allocator.rs:189
1  xul.dll  allocator_api2::stable::raw_vec::impl$10::drop  third_party/rust/allocator-api2/src/stable/raw_vec.rs:602
1  xul.dll  core::ptr::drop_in_place  /rustc/eeb90cda1969383f56a2637cbd3037bdf598841c/library/core/src/ptr/mod.rs:542
1  xul.dll  core::ptr::drop_in_place  /rustc/eeb90cda1969383f56a2637cbd3037bdf598841c/library/core/src/ptr/mod.rs:542
1  xul.dll  core::ptr::drop_in_place  /rustc/eeb90cda1969383f56a2637cbd3037bdf598841c/library/core/src/ptr/mod.rs:542
1  xul.dll  allocator_api2::stable::vec::Vec<webrender::render_task_graph::RenderPass, webrender::frame_allocator::FrameAllocator>::as_mut_ptr  /rustc/eeb90cda1969383f56a2637cbd3037bdf598841c/library/core/src/ptr/mod.rs:542
1  xul.dll  allocator_api2::stable::vec::impl$24::drop  third_party/rust/allocator-api2/src/stable/vec/mod.rs:2888

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2024-09-20
• Process type: Multiple distinct types
• Is startup crash: No
• Has user comments: No
• Is null crash: No

By analyzing the backtrace, the regression may have been introduced by a patch to fix Bug 1912019.

:nical, since you are the author of the potential regressor, could you please take a look?

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1912019

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:gw, could you have a look please?

For more information, please visit BugBot documentation.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 15 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit BugBot documentation.