Closed Bug 1718499 Opened 3 years ago Closed 3 years ago

Crash at nsDMABufDevice::~nsDMABufDevice()

Categories

(Core :: Widget: Gtk, defect, P2)

defect

Tracking

()

RESOLVED FIXED
91 Branch
Tracking Status
firefox-esr78 --- unaffected
firefox89 --- unaffected
firefox90 --- unaffected
firefox91 --- fixed

People

(Reporter: stransky, Assigned: stransky)

References

(Blocks 1 open bug)

Details

(Keywords: crash)

Crash Data

Attachments

(1 file)

This may be caused by gtk_display_close() added to XRE_Main destructor, we have wl_display connection released.

nsDMABufDevice is a static class so the destructor is called from exit().

bt:

#0 0x00007f6911a1db35 in __GI___clock_nanosleep (clock_id=clock_id@entry=0, flags=flags@entry=0, req=req@entry=0x7ffe66c0b3d0, rem=rem@entry=0x7ffe66c0b3d0)
at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:43
#1 0x00007f6911a22d57 in __GI___nanosleep (req=req@entry=0x7ffe66c0b3d0, rem=rem@entry=0x7ffe66c0b3d0) at ../sysdeps/unix/sysv/linux/nanosleep.c:25
#2 0x00007f6911a22c8e in __sleep (seconds=0) at ../sysdeps/posix/sleep.c:55
#3 0x00007f690c17f835 in common_crap_handler(int, void const*) (signum=11, aFirstFramePC=<optimized out>) at /raid/src3/toolkit/xre/nsSigHandlers.cpp:96
#4 0x00007f690c17f915 in ah_crap_handler(int) (signum=0) at /raid/src3/toolkit/xre/nsSigHandlers.cpp:104
#5 0x00007f690c160a9a in nsProfileLock::FatalSignalHandler(int, siginfo_t*, void*) (signo=11, info=0x7ffe66c0b630, context=0x7ffe66c0b500)
at /raid/src3/toolkit/profile/nsProfileLock.cpp:183
#6 <signal handler called> () at ../sysdeps/unix/sysv/linux/sigaction.c
#7 0x00007f690ff7da11 in wl_proxy_destroy () at /lib64/libwayland-client.so.0
#8 0x00007f690aea5543 in wl_registry_destroy(wl_registry*) (wl_registry=0x7f690ff812f7) at /usr/include/wayland-client-protocol.h:1151
#9 mozilla::widget::nsDMABufDevice::~nsDMABufDevice() (this=0x7f690ed9da18 <mozilla::widget::GetDMABufDevice()::dmaBufDevice>) at /raid/src3/widget/gtk/DMABufLibWrapper.cpp:190
#10 0x00007f6911995af7 in __run_exit_handlers (status=0, listp=0x7f6911b19598 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true, run_dtors=run_dtors@entry=true) at exit.c:108
#11 0x00007f6911995ca0 in __GI_exit (status=<optimized out>) at exit.c:139
#12 0x00007f691197db7c in __libc_start_main (main=
0x55a0732b65c5 <main(int, char**, char**)>, argc=3, argv=0x7ffe66c0bc88, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe66c0bc78)
at ../csu/libc-start.c:366
#13 0x000055a0732b646e in _start ()

Assignee: nobody → stransky
Status: NEW → ASSIGNED
Pushed by stransky@redhat.com: https://hg.mozilla.org/integration/autoland/rev/3a31f4b4b154 [Linux] Release wl_registry right after we use it, r=rmader
Crash Signature: [@ wl_proxy_destroy | mozilla::widget::nsDMABufDevice::~nsDMABufDevice ]
Keywords: crash
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → 91 Branch

Added related signatures.

Crash Signature: [@ wl_proxy_destroy | mozilla::widget::nsDMABufDevice::~nsDMABufDevice ] → [@ wl_proxy_destroy | mozilla::widget::nsDMABufDevice::~nsDMABufDevice] [@ wl_map_insert_at] [@ libwayland-client.so.0@0xad5e] [@ libwayland-client.so.0@0xaf22]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: