Closed Bug 1532870 Opened 5 years ago Closed 3 years ago

Intermittent dom/canvas/crashtests/780392-1.html | application crashed [@ mozilla::gfx::Factory::CreateWrappingDataSourceSurface(unsigned char *,int,mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const &,mozilla::gfx::SurfaceFormat,void (*)(void *

Categories

(Core :: Graphics: Layers, defect, P3)

Product:
Core
Component:
Graphics: Layers
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: intermittent-bug-filer, Unassigned)

References

(Regression)

Details

(Keywords: crash, intermittent-failure, regression)

Crash Data

#[markdown(off)]
Filed by: nbeleuzu [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=232060301&repo=mozilla-beta

https://queue.taskcluster.net/v1/task/ChT9OIv5SEyMpfwK0qXSkQ/runs/0/artifacts/public/logs/live_backing.log

https://hg.mozilla.org/mozilla-central/raw-file/tip/layout/tools/reftest/reftest-analyzer.xhtml#logurl=https://queue.taskcluster.net/v1/task/ChT9OIv5SEyMpfwK0qXSkQ/runs/0/artifacts/public/logs/live_backing.log&only_show_unexpected=1

04:00:55 INFO - Exiting due to channel error.
04:00:56 ERROR - TEST-UNEXPECTED-FAIL | file:///Z:/task_1551840581/build/tests/reftest/tests/dom/canvas/crashtests/780392-1.html | application terminated with exit code 1
04:00:56 INFO - REFTEST INFO | Copy/paste: Z:\task_1551840581\build\win32-minidump_stackwalk.exe c:\users\task_1551840581\appdata\local\temp\tmp5pqkid.mozrunner\minidumps\a0b8292e-fdf0-4aa9-a240-b007e90d769d.dmp Z:\task_1551840581\build\symbols
04:01:16 INFO - REFTEST INFO | Saved minidump as Z:\task_1551840581\build\blobber_upload_dir\a0b8292e-fdf0-4aa9-a240-b007e90d769d.dmp
04:01:16 INFO - REFTEST INFO | Saved app info as Z:\task_1551840581\build\blobber_upload_dir\a0b8292e-fdf0-4aa9-a240-b007e90d769d.extra
04:01:16 INFO - REFTEST PROCESS-CRASH | file:///Z:/task_1551840581/build/tests/reftest/tests/dom/canvas/crashtests/780392-1.html | application crashed [@ mozilla::gfx::Factory::CreateWrappingDataSourceSurface(unsigned char *,int,mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const &,mozilla::gfx::SurfaceFormat,void (*)(void *),void *)]
04:01:16 INFO - Crash dump filename: c:\users\task_1551840581\appdata\local\temp\tmp5pqkid.mozrunner\minidumps\a0b8292e-fdf0-4aa9-a240-b007e90d769d.dmp
04:01:16 INFO - Operating system: Windows NT
04:01:16 INFO - 6.1.7601 Service Pack 1
04:01:16 INFO - CPU: x86
04:01:16 INFO - GenuineIntel family 6 model 63 stepping 2
04:01:16 INFO - 8 CPUs
04:01:16 INFO -
04:01:16 INFO - GPU: UNKNOWN
04:01:16 INFO -
04:01:16 INFO - Crash reason: EXCEPTION_BREAKPOINT
04:01:16 INFO - Crash address: 0x54df650f
04:01:16 INFO - Process uptime: 65 seconds
04:01:16 INFO -
04:01:16 INFO - Thread 29 (crashed)
04:01:16 INFO - 0 xul.dll!mozilla::gfx::Factory::CreateWrappingDataSourceSurface(unsigned char *,int,mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const &,mozilla::gfx::SurfaceFormat,void (*)(void *),void *) [Factory.cpp:9b08cd8e30587526c6d9cda23b6b4902ac0ae9d2 : 1000 + 0x0]
04:01:16 INFO - eip = 0x54df650f esp = 0x1037f57c ebp = 0x1037f5a0 ebx = 0x1e4a6b64
04:01:16 INFO - esi = 0x1037f5c8 edi = 0x00009c40 eax = 0x7401d6a4 ecx = 0x000003e8
04:01:16 INFO - edx = 0x00000049 efl = 0x00000202
04:01:16 INFO - Found by: given as instruction pointer in context

Moving these bugs (intermittent test failures with crashes) out of P5.

Priority: P5 → --

It looks like it is failing to create a ShmemTextureHost (i.e. critical note "Failed to create a valid ShmTextureHost), then trying to use Factory::CreateWrappingDataSourceSurface() on that null buffer inside BufferTextureHost::EnsureWrappingTextureSource(), which triggers a debug assert because of that null buffer.

It seems this critical error was introduced in bug 1208226, then later changed to just a critical note, exposing us to the downstream debug assert (which happened in bug 1252237).

Component: Canvas: 2D → Graphics: Layers
Priority: -- → P3
Regressed by: 1208226, 1252237

According to the crash stats, there is no crash with this signature in the last 6 months.
Closing this as Resolved WFM, but please do re-open it if this crash will appear on the latest version of Firefox.

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.