989347 - crash in mozilla::WebGLTexture::DoDeferredImageInitialization(unsigned int, int)

Status: RESOLVED WORKSFORME

(Core :: Graphics: CanvasWebGL, defect)

Description

[Robert Kaiser]

This bug was filed from the Socorro interface and is 
report bp-a384bd7c-8856-4fd3-b4f8-32e882140328.
=============================================================

This crash sounds like it was a 27 regression, and being #38 in overall 28 crashes doesn't sound high, but for a WebGL-specific crash it might be a bit surprising to show up in the top 50 crashes at all. :)

Top stack frames always seem to be:

0 	xul.dll 	mozilla::WebGLTexture::DoDeferredImageInitialization(unsigned int,int) 	content/canvas/src/WebGLTexture.cpp
1 	xul.dll 	mozilla::WebGLContext::TexSubImage2D_base(unsigned int,int,int,int,int,int,int,unsigned int,unsigned int,void *,unsigned int,int,mozilla::WebGLTexelFormat,bool) 	content/canvas/src/WebGLContextGL.cpp
2 	xul.dll 	mozilla::WebGLContext::TexSubImage2D(unsigned int,int,int,int,int,int,unsigned int,unsigned int,mozilla::dom::Nullable<mozilla::dom::TypedArray_base<unsigned char,&JS_GetObjectAsArrayBufferView(JSObject *,unsigned int *,unsigned char * *)> > const &,mozilla::ErrorResult &) 	content/canvas/src/WebGLContextGL.cpp
3 	xul.dll 	mozilla::dom::WebGLRenderingContextBinding::texSubImage2D 	obj-firefox/dom/bindings/WebGLRenderingContextBinding.cpp
4 	xul.dll 	mozilla::dom::WebGLRenderingContextBinding::genericMethod 	obj-firefox/dom/bindings/WebGLRenderingContextBinding.cpp

Frame 5 and higher are random-looking addresses at least a few frames deep, indicating they are in (Baseline) JIT code - I also saw stacks where the stack is incomplete from there, we probably were in Ion frames that we can't walk reasonably at this time.

This signature seems to happen on all Windows versions somewhat, but the vast majority is Windows 7/8/8.1 crashes.

Top URLs speak a clear story:
132 	https://www.google.com/maps/preview
22 	https://www.google.com/maps/preview?source=newuser-ws
20 	https://www.google.com/maps/preview?hl=en
20 	https://www.google.de/maps/preview
13 	https://www.google.com/maps/@37.0625,-95.677068,4z
11 	https://www.google.pl/maps/preview
10 	https://plus.google.com/u/0/_/notifications/frame?<long query redacted>
9 	https://www.google.com.mx/maps/preview
9 	https://www.google.ru/maps/preview
9 	https://www.google.co.jp/maps/preview
8 	https://www.google.fr/maps/preview
8 	https://www.google.de/maps/preview?hl=de
7 	https://www.google.co.uk/maps/preview?hl=en
7 	https://www.google.com.au/maps/preview
7 	https://www.khronos.org/registry/webgl/sdk/tests/conformance/extensions/webgl-depth-texture.html?webglVersion=1
7 	https://www.google.co.uk/maps/preview

I stopped at 7 hits to have at least one non-Google URL included, but the whole list is Google Maps Preview with very few others in between.

Find more crashes and stats at https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3AWebGLTexture%3A%3ADoDeferredImageInitialization%28unsigned%20int%2C%20int%29

Comment 1

[Kelsey Gilbert [:jgilbert]]

Ouch, thanks for the report.

Comment 2

[David G King]

I've been getting this crash a bit (v29beta). It seems to have coincided with Google moving me to the new Google Maps layout by default (used to be preview and optional).

Comment 5

[alex_mayorga]

bp-6cd24699-32ac-4bc7-a344-83e2a2140814	14/08/2014	02:05 p.m.

Comment 6

[Tracy Walker [:tracy]]

Our testers reported google maps and youtube at the same time is causing this for them.  But it is far down the crash list at #180.

Comment 7

[Milan Sreckovic [:milan] (needinfo for best results)]

Nothing newer than 35 that I can see - Anthony, you're better in finding things, does that sound right?

Comment 8

[u279076]

(In reply to Milan Sreckovic [:milan] from comment #7)
> Nothing newer than 35 that I can see - Anthony, you're better in finding
> things, does that sound right?

Yeah, even looking at the last year's worth of data this doesn't show up beyond Firefox 35.0.1.