2059286 - Crash in [@ gl::PrivateState::getActiveSampler]

Status: NEW

(Core :: Graphics, defect)

Description

[BugBot [:suhaib / :marco]]

Crash report: https://crash-stats.mozilla.org/report/index/1ac0902a-17a7-4499-bd91-bd8830260715

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  libGLESv2.dll  gl::PrivateState::getActiveSampler const  gfx/angle/checkout/src/libANGLE/State.h:498
0  libGLESv2.dll  gl::State::getActiveSampler const  gfx/angle/checkout/src/libANGLE/State.h:1469
0  libGLESv2.dll  gl::State::getTargetTexture const  gfx/angle/checkout/src/libANGLE/State.h:914
0  libGLESv2.dll  egl::Stream::createConsumerGLTextureExternal  gfx/angle/checkout/src/libANGLE/Stream.cpp:135
1  libGLESv2.dll  egl::StreamConsumerGLTextureExternalAttribsNV  gfx/angle/checkout/src/libGLESv2/egl_ext_stubs.cpp:639
1  libGLESv2.dll  EGL_StreamConsumerGLTextureExternalAttribsNV  gfx/angle/checkout/src/libGLESv2/entry_points_egl_ext_autogen.cpp:2745
2  xul.dll  mozilla::gl::GLLibraryEGL::fStreamConsumerGLTextureExternalAttribsNV const  gfx/gl/GLLibraryEGL.h:499
2  xul.dll  mozilla::gl::EglDisplay::fStreamConsumerGLTextureExternalAttribsNV const  gfx/gl/GLLibraryEGL.h:942
2  xul.dll  mozilla::wr::RenderDXGITextureHost::EnsureLockable  gfx/webrender_bindings/RenderD3D11TextureHost.cpp:435
3  xul.dll  mozilla::wr::RenderDXGITextureHost::Lock  gfx/webrender_bindings/RenderD3D11TextureHost.cpp:503

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2026-07-15
• Process type: GPU
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - all crashes happened on null or near null memory address

By analyzing the backtrace, the regression may have been introduced by a patch [1] to fix Bug 1908744.

[1] https://hg.mozilla.org/mozilla-central/rev?node=16134e4ac77c

:ErichDonGubler, since you are the author of the potential regressor, could you please take a look?

Comment 1

[BugBot [:suhaib / :marco]]

Set release status flags based on info from the regressing bug 1908744

Comment 2

[Erich Gubler [:ErichDonGubler] (he/him)]

The couple of reports I see aggregated against this signature seem unrelated. They are both on Google Docs and YouTube, so the applications affected are definitely impactful. I think we should keep an eye on this, since it's only in Beta, but unless the volume increases, I'm not sure that we can justify a large investigation effort yet (given the general state of drowning the Graphics team is in 🫠).

Comment 3

[BugBot [:suhaib / :marco]]

Set release status flags based on info from the regressing bug 1908744