Closed Bug 1460087 Opened 7 years ago Closed 6 years ago

Crash in mozalloc_abort | abort | webrender::frame_builder::FrameBuilder::build

Categories

(Core :: Graphics: WebRender, defect, P3)

x86_64
Linux
defect

Tracking

()

RESOLVED WONTFIX
Tracking Status
firefox-esr52 --- unaffected
firefox-esr60 --- disabled
firefox60 --- disabled
firefox61 --- disabled
firefox62 --- disabled

People

(Reporter: jan, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: crash, nightly-community)

Crash Data

Seen on Socorro. bp-c30edafe-ed12-445e-91a4-b296b0180508 build 2018-05-08_100105 Linux > index out of bounds: the len is 95 but the index is 3857049061 ----- See Also: bug 1458926 mentions webrender::frame_builder::FrameBuilder::build. (Kartikaya Gupta (email:kats@mozilla.com) from bug 1424126 comment 2) > However, the value `3857049061` is 0xE5E5E5E5 which is jemalloc fills in for freed memory. so this is really a use-after-free instance which is bad news. > Hopefully it doesn't come back.
Crash Signature: [@ mozalloc_abort | abort | webrender::frame_builder::FrameBuilder::build ]
Priority: P2 → P3
Very low volume
Blocks: stage-wr-next
No longer blocks: stage-wr-trains
Closing because no crash reported since 12 weeks.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
Closing because no crash reported since 12 weeks.
You need to log in before you can comment on or make changes to this bug.