Open Bug 1706498 Opened 3 years ago Updated 3 years ago

crash in [@ llvm_gcda_emit_arcs]

Categories

(Testing :: Code Coverage, defect, P3)

Product:
Testing
Component:
Code Coverage
Version:
Firefox 89
Type:
defect

Tracking

(Not tracked)

People

(Reporter: tsmith, Unassigned)

References

(Blocks 2 open bugs)

Details

Found while fuzzing m-c 20210418-78764895b2a6 (--enable-coverage --enable-fuzzing)

This is a random crash we are seeing while fuzzing with ccov builds.

==30631==ERROR: UndefinedBehaviorSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fe260e0337e bp 0x000000000010 sp 0x7ffd53050380 T30631)
==30631==The signal is caused by a READ memory access.
==30631==Hint: address points to the zero page.
    #0 0x7fe260e0337e in tcache_get /build/glibc-eX1tMB/glibc-2.31/malloc/malloc.c:2937:27
    #1 0x7fe260e0337e in malloc /build/glibc-eX1tMB/glibc-2.31/malloc/malloc.c:3051:14
    #2 0x560b23bf3338 in llvm_gcda_emit_arcs (/home/worker/builds/m-c-20210418213620-ccov-fuzzing-opt/firefox-bin+0x162338)
    #3 0x560b23aed1de in __llvm_gcov_writeout (/home/worker/builds/m-c-20210418213620-ccov-fuzzing-opt/firefox-bin+0x5c1de)
    #4 0x7fe24d467764 in __gcov_dump (/home/worker/builds/m-c-20210418213620-ccov-fuzzing-opt/libxul.so+0x171c1764)
    #5 0x7fe2446629ff in mozilla::CodeCoverageHandler::FlushCounters() src/tools/code-coverage/CodeCoverageHandler.cpp:46:3
    #6 0x7fe260dac20f  (/lib/x86_64-linux-gnu/libc.so.6+0x4620f)
    #7 0x7fe260e03387 in tcache_get /build/glibc-eX1tMB/glibc-2.31/malloc/malloc.c:2937:27
    #8 0x7fe260e03387 in malloc /build/glibc-eX1tMB/glibc-2.31/malloc/malloc.c:3051:14
    #9 0x560b23af1e48 in moz_xmalloc src/memory/mozalloc/mozalloc.cpp:52:15
    #10 0x7fe2435eeafb in operator new /builds/worker/workspace/obj-build/dist/include/mozilla/cxxalloc.h:33:10
    #11 0x7fe2435eeafb in allocate /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/ext/new_allocator.h:111:27
    #12 0x7fe2435eeafb in allocate /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/bits/alloc_traits.h:436:20
    #13 0x7fe2435eeafb in _M_allocate_node<const mozilla::DisplayItemClipChain *const &> /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/bits/hashtable_policy.h:2060:16
    #14 0x7fe2435eeafb in operator()<const mozilla::DisplayItemClipChain *const &> /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/bits/hashtable_policy.h:182:16
    #15 0x7fe2435eeafb in std::pair<std::__detail::_Node_iterator<mozilla::DisplayItemClipChain const*, true, true>, bool> std::_Hashtable<mozilla::DisplayItemClipChain const*, mozilla::DisplayItemClipChain const*, std::allocator<mozilla::DisplayItemClipChain const*>, std::__detail::_Identity, mozilla::DisplayItemClipChainEqualer, mozilla::DisplayItemClipChainHasher, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, true, true> >::_M_insert<mozilla::DisplayItemClipChain const* const&, std::__detail::_AllocNode<std::allocator<std::__detail::_Hash_node<mozilla::DisplayItemClipChain const*, true> > > >(mozilla::DisplayItemClipChain const* const&, std::__detail::_AllocNode<std::allocator<std::__detail::_Hash_node<mozilla::DisplayItemClipChain const*, true> > > const&, std::integral_constant<bool, true>) /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/bits/hashtable.h:1821:8
    #16 0x7fe2435a0592 in insert /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/bits/hashtable_policy.h:843:13
    #17 0x7fe2435a0592 in insert /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/bits/unordered_set.h:420:21
    #18 0x7fe2435a0592 in nsDisplayListBuilder::AllocateDisplayItemClipChain(mozilla::DisplayItemClip const&, mozilla::ActiveScrolledRoot const*, mozilla::DisplayItemClipChain const*) src/layout/painting/nsDisplayList.cpp:1416:35
    #19 0x7fe24353d2ba in nsDisplayListBuilder::CreateClipChainIntersection(mozilla::DisplayItemClipChain const*, mozilla::DisplayItemClipChain const*, mozilla::DisplayItemClipChain const*) src/layout/painting/nsDisplayList.cpp:1479:16
    #20 0x7fe2435a99db in GetCurrentCombinedClipChain src/layout/painting/DisplayListClipState.cpp:24:41
    #21 0x7fe2435a99db in nsDisplayItem::nsDisplayItem(nsDisplayListBuilder*, nsIFrame*, mozilla::ActiveScrolledRoot const*) src/layout/painting/nsDisplayList.cpp:2924:29
    #22 0x7fe243471501 in nsPaintedDisplayItem src/layout/painting/nsDisplayList.h:3265:9
    #23 0x7fe243471501 in nsPaintedDisplayItem src/layout/painting/nsDisplayList.h:3260:9
    #24 0x7fe243471501 in nsDisplayImageContainer src/layout/painting/nsDisplayList.h:3982:9
    #25 0x7fe243471501 in nsDisplayXULImage src/layout/xul/nsImageBoxFrame.h:155:9
    #26 0x7fe243471501 in MakeDisplayItemWithIndex<nsDisplayXULImage, nsImageBoxFrame> src/layout/painting/nsDisplayList.h:2116:28
    #27 0x7fe243471501 in void nsDisplayList::AppendNewToTopWithIndex<nsDisplayXULImage, nsImageBoxFrame>(nsDisplayListBuilder*, nsImageBoxFrame*, unsigned short) src/layout/painting/nsDisplayList.h:3402:27
    #28 0x7fe243454f92 in AppendNewToTop<nsDisplayXULImage, nsImageBoxFrame> src/layout/painting/nsDisplayList.h:3395:5
    #29 0x7fe243454f92 in nsImageBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsImageBoxFrame.cpp:329:8
    #30 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #31 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #32 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #33 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #34 0x7fe2432302b1 in nsIFrame::BuildDisplayListForStackingContext(nsDisplayListBuilder*, nsDisplayList*, bool*) src/layout/generic/nsIFrame.cpp:3410:5
    #35 0x7fe243179cf9 in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4206:12
    #36 0x7fe243221546 in nsGridContainerFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/generic/nsGridContainerFrame.cpp:9286:5
    #37 0x7fe243179ac9 in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4257:12
    #38 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #39 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #40 0x7fe2432302b1 in nsIFrame::BuildDisplayListForStackingContext(nsDisplayListBuilder*, nsDisplayList*, bool*) src/layout/generic/nsIFrame.cpp:3410:5
    #41 0x7fe243179cf9 in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4206:12
    #42 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #43 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #44 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #45 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #46 0x7fe2431e00b8 in mozilla::ScrollFrameHelper::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/generic/nsGfxScrollFrame.cpp:3951:15
    #47 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #48 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #49 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #50 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #51 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #52 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #53 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #54 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #55 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #56 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #57 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #58 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #59 0x7fe243179ac9 in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4257:12
    #60 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #61 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #62 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #63 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #64 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #65 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #66 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #67 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #68 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #69 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #70 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #71 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #72 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #73 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #74 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #75 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #76 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #77 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #78 0x7fe243179ac9 in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4257:12
    #79 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #80 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #81 0x7fe243179c23 in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4239:14
    #82 0x7fe2434504b3 in nsBoxFrame::BuildDisplayListForChildren(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:976:5
    #83 0x7fe24344face in nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/xul/nsBoxFrame.cpp:936:3
    #84 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #85 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #86 0x7fe24315308b in DisplayLine(nsDisplayListBuilder*, nsLineList_iterator&, bool, nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&) src/layout/generic/nsBlockFrame.cpp:6906:13
    #87 0x7fe2431521d3 in nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/generic/nsBlockFrame.cpp:7064:9
    #88 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #89 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #90 0x7fe24315dcf0 in nsCanvasFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/generic/nsCanvasFrame.cpp:641:5
    #91 0x7fe243234515 in nsIFrame::BuildDisplayListForSimpleChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&) src/layout/generic/nsIFrame.cpp:3941:11
    #92 0x7fe24317890d in nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>) src/layout/generic/nsIFrame.cpp:4030:5
    #93 0x7fe243130c88 in mozilla::ViewportFrame::BuildDisplayList(nsDisplayListBuilder*, nsDisplayListSet const&) src/layout/generic/ViewportFrame.cpp:66:3
    #94 0x7fe2432302b1 in nsIFrame::BuildDisplayListForStackingContext(nsDisplayListBuilder*, nsDisplayList*, bool*) src/layout/generic/nsIFrame.cpp:3410:5
    #95 0x7fe2430b2143 in nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags) src/layout/base/nsLayoutUtils.cpp:3404:17
    #96 0x7fe242ff4b18 in mozilla::PresShell::Paint(nsView*, nsRegion const&, mozilla::PaintFlags) src/layout/base/PresShell.cpp:6392:5
    #97 0x7fe242b3ecae in nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*) src/view/nsViewManager.cpp:459:18
    #98 0x7fe242b3e382 in nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) src/view/nsViewManager.cpp:394:22
    #99 0x7fe242b3fc55 in nsViewManager::ProcessPendingUpdates() src/view/nsViewManager.cpp:972:5
    #100 0x7fe242f9973d in nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:2364:11
    #101 0x7fe242fa14e0 in TickDriver src/layout/base/nsRefreshDriver.cpp:346:13
    #102 0x7fe242fa14e0 in mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) src/layout/base/nsRefreshDriver.cpp:324:7
    #103 0x7fe242fa122b in mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:340:5
    #104 0x7fe242fa06d1 in RunRefreshDrivers src/layout/base/nsRefreshDriver.cpp:773:5
    #105 0x7fe242fa06d1 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:702:16
    #106 0x7fe242fa00e4 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyParentProcessVsync() src/layout/base/nsRefreshDriver.cpp:615:7
    #107 0x7fe242f9e9fa in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run() src/layout/base/nsRefreshDriver.cpp:505:20
    #108 0x7fe23cd93e21 in mozilla::RunnableTask::Run() src/xpcom/threads/TaskController.cpp:473:16
    #109 0x7fe23cd6eb4a in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:757:26
    #110 0x7fe23cd6d390 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:612:15
    #111 0x7fe23cd6d5d8 in mozilla::TaskController::ProcessPendingMTTask(bool) src/xpcom/threads/TaskController.cpp:396:36
    #112 0x7fe23cd9829c in operator() src/xpcom/threads/TaskController.cpp:138:37
    #113 0x7fe23cd9829c in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_1>::Run() src/xpcom/threads/nsThreadUtils.h:534:5
    #114 0x7fe23cd81503 in nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1159:16
    #115 0x7fe23cd88d6c in NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:548:10
    #116 0x7fe23d9fb87c in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:109:5
    #117 0x7fe23d940b2f in RunInternal src/ipc/chromium/src/base/message_loop.cc:335:10
    #118 0x7fe23d940b2f in RunHandler src/ipc/chromium/src/base/message_loop.cc:328:3
    #119 0x7fe23d940b2f in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:310:3
    #120 0x7fe242bb5d00 in nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27
    #121 0x7fe244a72d48 in nsAppStartup::Run() src/toolkit/components/startup/nsAppStartup.cpp:273:30
    #122 0x7fe244c10350 in XREMain::XRE_mainRun() src/toolkit/xre/nsAppRunner.cpp:5348:22
    #123 0x7fe244c12a0f in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) src/toolkit/xre/nsAppRunner.cpp:5539:8
    #124 0x7fe244c1342a in XRE_main(int, char**, mozilla::BootstrapConfig const&) src/toolkit/xre/nsAppRunner.cpp:5598:21
    #125 0x560b23aebe8a in do_main src/browser/app/nsBrowserApp.cpp:220:22
    #126 0x560b23aebe8a in main src/browser/app/nsBrowserApp.cpp:347:16
    #127 0x7fe260d8d0b2 in __libc_start_main /build/glibc-eX1tMB/glibc-2.31/csu/../csu/libc-start.c:308:16
    #128 0x560b23ac8977 in _start (/home/worker/builds/m-c-20210418213620-ccov-fuzzing-opt/firefox-bin+0x37977)

We are seeing this with m-c 20210502-c4bd8fe7ee28.

Blocks: 1720345
Severity: -- → S3
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.