Open Bug 1949739 Opened 4 days ago Updated 2 days ago

Crash in [@ mozilla::widget::WaylandSurface::BufferFreeCallbackHandler]

Categories

(Core :: Graphics: WebRender, defect, P3)

Firefox 137
x86_64
Linux
defect

Tracking

()

UNCONFIRMED

People

(Reporter: greyxor, Unassigned)

References

(Blocks 1 open bug, Regression)

Details

(Keywords: regression)

Crash report: https://crash-stats.mozilla.org/report/index/3c9ce91e-6402-49fd-ba5f-117e30250221

MOZ_CRASH Reason:

MOZ_DIAGNOSTIC_ASSERT(aWaylandBuffer && !aWlBuffer) (Wayland compositor detach call after wl_buffer delete?)

Top 10 frames:

0  libxul.so  MOZ_CrashSequence(void*, long)  mfbt/Assertions.h:267
0  libxul.so  mozilla::widget::WaylandSurface::BufferFreeCallbackHandler(mozilla::widget::W...  widget/gtk/WaylandSurface.cpp:1176
1  libxul.so  mozilla::widget::BufferDetachedCallbackHandler(void*, wl_buffer*)  widget/gtk/WaylandSurface.cpp:1190
2  libffi.so.8  ffi_call_unix64  /usr/src/debug/libffi/libffi-3.4.7/src/x86/unix64.S:104
3  libffi.so.8  ffi_call_int  /usr/src/debug/libffi/libffi-3.4.7/src/x86/ffi64.c:676
4  libffi.so.8  ffi_call  /usr/src/debug/libffi/libffi-3.4.7/src/x86/ffi64.c:713
5  libwayland-client.so.0  wl_closure_invoke  /usr/src/debug/wayland/wayland-1.23.1/src/connection.c:1228
6  libwayland-client.so.0  dispatch_event  /usr/src/debug/wayland/wayland-1.23.1/src/wayland-client.c:1674
7  libwayland-client.so.0  dispatch_queue  /usr/src/debug/wayland/wayland-1.23.1/src/wayland-client.c:1820
7  libwayland-client.so.0  wl_display_dispatch_queue_pending  /usr/src/debug/wayland/wayland-1.23.1/src/wayland-client.c:2062
Keywords: regression
OS: Unspecified → Linux
Regressed by: 1938033
Hardware: Unspecified → x86_64

happened when I clicked on a <select> tag

:stransky, since you are the author of the regressor, bug 1938033, could you take a look?

For more information, please visit BugBot documentation.

Flags: needinfo?(stransky)

Maybe it's related and would be fixed with https://bugzilla.mozilla.org/show_bug.cgi?id=1949726

Do you have a reproduce for it? Can you run on terminal with MOZ_LOG="WidgetWayland:5" env variable and attach the log here?
Thanks.

Flags: needinfo?(stransky) → needinfo?(greyxor)
Priority: -- → P3

I don't know how to reproduce, was very random during my web navigation

crash : https://crash-stats.mozilla.org/report/index/33fd8873-988f-4485-b82c-7af550250224
log :

[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bfb00]: WaylandSurface::GetScale() parent scale 2.000000
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bfb00]: WaylandSurface::SetSizeLocked(): Size [1024 x 512] unscaled size [512 x 256]
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bfb00]: WaylandSurface::AttachLocked() WaylandBuffer [7fb6be64ee40] size [1024 x 512] fractional scale 2.000000
[Parent 56369: Renderer]: D/WidgetWayland WaylandBuffer::BorrowBuffer() [7fb6be64ee40] WaylandSurface [0] wl_buffer [0]
[Parent 56369: Renderer]: D/WidgetWayland WaylandBufferDMABUF::CreateWlBuffer() [7fb6be64ee40] UID 10826
[Parent 56369: Renderer]: D/WidgetWayland WaylandBuffer::BorrowBuffer() [7fb6be64ee40] WaylandSurface [7fb6be6bfb00] wl_buffer [7fb6b9cfa220]
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bfb00]: WaylandSurface::Commit() needs commit 1, force commit 0 flush 0
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc900]: WaylandSurface::MoveLocked() [1024,54]
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc900]: WaylandSurface::SetViewPortDestLocked(): Size [439 x 20]
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc900]: WaylandSurface::SetViewPortSourceRectLocked(): [0.000000, 108.000000] -> [878.000000 x 40.000000]
[Parent 56369: Renderer]: V/WidgetWayland [7fb6e6d81f00]: WaylandSurface::GetScale() fractional scale 2.000000
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bc900]: WaylandSurface::GetScale() parent scale 2.000000
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bc900]: WaylandSurface::SetSizeLocked(): Size [1024 x 512] unscaled size [512 x 256]
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc900]: WaylandSurface::AttachLocked() WaylandBuffer [7fb6bd63ba00] size [1024 x 512] fractional scale 2.000000
[Parent 56369: Renderer]: D/WidgetWayland WaylandBuffer::BorrowBuffer() [7fb6bd63ba00] WaylandSurface [0] wl_buffer [0]
[Parent 56369: Renderer]: D/WidgetWayland WaylandBufferDMABUF::CreateWlBuffer() [7fb6bd63ba00] UID 10825
[Parent 56369: Renderer]: D/WidgetWayland WaylandBuffer::BorrowBuffer() [7fb6bd63ba00] WaylandSurface [7fb6be6bc900] wl_buffer [7fb6b9cfae20]
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bc900]: WaylandSurface::Commit() needs commit 1, force commit 0 flush 0
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc100]: WaylandSurface::MoveLocked() [329,54]
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc100]: WaylandSurface::SetViewPortDestLocked(): Size [183 x 20]
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc100]: WaylandSurface::SetViewPortSourceRectLocked(): [658.000000, 108.000000] -> [366.000000 x 40.000000]
[Parent 56369: Renderer]: V/WidgetWayland [7fb6e6d81f00]: WaylandSurface::GetScale() fractional scale 2.000000
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bc100]: WaylandSurface::GetScale() parent scale 2.000000
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bc100]: WaylandSurface::SetSizeLocked(): Size [1024 x 512] unscaled size [512 x 256]
[Parent 56369: Renderer]: D/WidgetWayland [7fb6be6bc100]: WaylandSurface::AttachLocked() WaylandBuffer [7fb6d88fd3c0] size [1024 x 512] fractional scale 2.000000
[Parent 56369: Renderer]: D/WidgetWayland WaylandBuffer::BorrowBuffer() [7fb6d88fd3c0] WaylandSurface [0] wl_buffer [0]
[Parent 56369: Renderer]: D/WidgetWayland WaylandBufferDMABUF::CreateWlBuffer() [7fb6d88fd3c0] UID 10745
[Parent 56369: Renderer]: D/WidgetWayland WaylandBuffer::BorrowBuffer() [7fb6d88fd3c0] WaylandSurface [7fb6be6bc100] wl_buffer [7fb6afcc1280]
[Parent 56369: Renderer]: V/WidgetWayland [7fb6be6bc100]: WaylandSurface::Commit() needs commit 1, force commit 0 flush 0
[Parent 56369: Renderer]: V/WidgetWayland [7fb6e6d81f00]: WaylandSurface::Commit() needs commit 0, force commit 1 flush 0
ExceptionHandler::GenerateDump cloned child 72165
ExceptionHandler::WaitForContinueSignal waiting for continue signal...
ExceptionHandler::SendContinueSignalToChild sent continue signal to child
ExceptionHandler::GenerateDump minidump generation succeeded
Flags: needinfo?(greyxor)
You need to log in before you can comment on or make changes to this bug.