Closed
Bug 1713846
Opened 4 years ago
Closed 3 years ago
Hit MOZ_CRASH(called `Option::unwrap()` on a `None` value) at gfx/wr/webrender/src/batch.rs:1356
Categories
(Core :: Graphics: WebRender, defect)
Tracking
()
People
(Reporter: tsmith, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, crash, testcase)
Crash Data
Attachments
(1 file)
219 bytes,
text/html
|
Details |
Found while fuzzing m-c 20210430-8be68465a851 (--enable-debug --enable-fuzzing)
Hit MOZ_CRASH(called Option::unwrap()
on a None
value) at gfx/wr/webrender/src/batch.rs:1356
30|0|xul.dll|RustMozCrash(char const*, int, char const*)|hg:hg.mozilla.org/mozilla-central:mozglue/static/rust/wrappers.cpp:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|16|0x23
30|1|xul.dll|mozglue_static::panic_hook(core::panic::PanicInfo*)|hg:hg.mozilla.org/mozilla-central:mozglue/static/rust/lib.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|89|0x7
30|2|xul.dll|core::ops::function::Fn::call<fn(core::panic::PanicInfo*),tuple<core::panic::PanicInfo*>>(void (**)(core::panic::PanicInfo*), core::panic::PanicInfo*)|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974/library/core/src/ops/function.rs:88f19c6dab716c6281af7602e30f413e809c5974|70|0x12
30|3|xul.dll|std::panicking::rust_panic_with_hook()|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974//library/std/src/panicking.rs:88f19c6dab716c6281af7602e30f413e809c5974|595|0x6
30|4|xul.dll|std::panicking::begin_panic_handler::{{closure}}()|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974//library/std/src/panicking.rs:88f19c6dab716c6281af7602e30f413e809c5974|495|0x28
30|5|xul.dll|std::sys_common::backtrace::__rust_end_short_backtrace<closure-0,!>()|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974//library/std/src/sys_common/backtrace.rs:88f19c6dab716c6281af7602e30f413e809c5974|141|0x1b
30|6|xul.dll|std::panicking::begin_panic_handler()|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974//library/std/src/panicking.rs:88f19c6dab716c6281af7602e30f413e809c5974|493|0x19
30|7|xul.dll|core::panicking::panic_fmt()|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974//library/core/src/panicking.rs:88f19c6dab716c6281af7602e30f413e809c5974|92|0x5
30|8|xul.dll|core::panicking::panic()|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974//library/core/src/panicking.rs:88f19c6dab716c6281af7602e30f413e809c5974|50|0x8
30|9|xul.dll|webrender::batch::{{impl}}::add_prim_to_batch::{{closure}}(webrender::batch::{{impl}}::add_prim_to_batch::closure-0*, webrender::internal_types::TextureSource, webrender::glyph_rasterizer::GlyphFormat, slice<webrender::resource_cache::GlyphFetchResult>)|hg:hg.mozilla.org/mozilla-central:gfx/wr/webrender/src/batch.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|1356|0x18
30|10|xul.dll|webrender::batch::BatchBuilder::add_prim_to_batch(webrender::prim_store::PrimitiveInstance*, webrender::spatial_tree::SpatialNodeIndex, webrender::render_target::RenderTargetContext*, webrender::gpu_cache::GpuCache*, webrender::render_task_graph::RenderTaskGraph*, alloc::vec::Vec<webrender::prim_store::DeferredResolve, alloc::alloc::Global>*, webrender::gpu_types::PrimitiveHeaders*, webrender::gpu_types::TransformPalette*, webrender::spatial_tree::SpatialNodeIndex, webrender::spatial_tree::SpatialNodeIndex, webrender::gpu_types::ZBufferIdGenerator*, webrender::composite::CompositeState*)|hg:hg.mozilla.org/mozilla-central:gfx/wr/webrender/src/batch.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|1269|0x429
30|11|xul.dll|webrender::batch::BatchBuilder::add_pic_to_batch(webrender::picture::PicturePrimitive*, webrender::render_target::RenderTargetContext*, webrender::gpu_cache::GpuCache*, webrender::render_task_graph::RenderTaskGraph*, alloc::vec::Vec<webrender::prim_store::DeferredResolve, alloc::alloc::Global>*, webrender::gpu_types::PrimitiveHeaders*, webrender::gpu_types::TransformPalette*, webrender::spatial_tree::SpatialNodeIndex, webrender::spatial_tree::SpatialNodeIndex, webrender::gpu_types::ZBufferIdGenerator*, webrender::composite::CompositeState*)|hg:hg.mozilla.org/mozilla-central:gfx/wr/webrender/src/batch.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|874|0x36
30|12|xul.dll|webrender::frame_builder::FrameBuilder::build(webrender::scene::BuiltScene*, webrender::resource_cache::ResourceCache*, webrender::gpu_cache::GpuCache*, webrender::render_task_graph::RenderTaskGraphBuilder*, webrender::render_backend::FrameStamp, euclid::point::Point2D<i32, webrender_api::units::DevicePixel>, webrender::scene::SceneProperties*, webrender::render_backend::DataStores*, webrender::render_backend::ScratchBuffer*, webrender_api::DebugFlags, webrender::picture::TileCacheLogger*, std::collections::hash::map::HashMap<webrender::picture::SliceId, alloc::boxed::Box<webrender::picture::TileCacheInstance, alloc::alloc::Global>, core::hash::BuildHasherDefault<fxhash::FxHasher>>*, bool, webrender::profiler::TransactionProfile*)|hg:hg.mozilla.org/mozilla-central:gfx/wr/webrender/src/frame_builder.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|632|0x232d
30|13|xul.dll|webrender::render_backend::Document::build_frame(webrender::resource_cache::ResourceCache*, webrender::gpu_cache::GpuCache*, webrender_api::DebugFlags, webrender::picture::TileCacheLogger*, std::collections::hash::map::HashMap<webrender::picture::SliceId, alloc::boxed::Box<webrender::picture::TileCacheInstance, alloc::alloc::Global>, core::hash::BuildHasherDefault<fxhash::FxHasher>>*, core::option::Option<webrender::renderer::FullFrameStats>)|hg:hg.mozilla.org/mozilla-central:gfx/wr/webrender/src/render_backend.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|573|0x6e
30|14|xul.dll|webrender::render_backend::RenderBackend::update_document(webrender_api::DocumentId, alloc::vec::Vec<webrender::render_api::ResourceUpdate, alloc::alloc::Global>, alloc::vec::Vec<webrender::render_api::FrameMsg, alloc::alloc::Global>, alloc::vec::Vec<webrender_api::NotificationRequest, alloc::alloc::Global>, bool, core::option::Option<u64>, bool, unsigned int*, bool)|hg:hg.mozilla.org/mozilla-central:gfx/wr/webrender/src/render_backend.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|1473|0x2c
30|15|xul.dll|webrender::render_backend::RenderBackend::process_api_msg(webrender::render_api::ApiMsg, unsigned int*)|hg:hg.mozilla.org/mozilla-central:gfx/wr/webrender/src/render_backend.rs:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|1183|0x3cb
30|16|xul.dll|std::sys_common::backtrace::__rust_begin_short_backtrace<closure-5,tuple<>>(webrender::renderer::{{impl}}::new::closure-5)|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974/library/std/src/sys_common/backtrace.rs:88f19c6dab716c6281af7602e30f413e809c5974|125|0x60a
30|17|xul.dll|core::ops::function::FnOnce::call_once<closure-0,tuple<>>(std::thread::{{impl}}::spawn_unchecked::closure-0*)|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974/library/core/src/ops/function.rs:88f19c6dab716c6281af7602e30f413e809c5974|227|0x74
30|18|xul.dll|std::sys::windows::thread::{{impl}}::new::thread_start()|git:github.com/rust-lang/rust:../88f19c6dab716c6281af7602e30f413e809c5974//library/std/src/sys/windows/thread.rs:88f19c6dab716c6281af7602e30f413e809c5974|56|0x16
30|19|kernel32.dll|BaseThreadInitThunk|||0x14
30|20|mozglue.dll|patched_BaseThreadInitThunk(int, void*, void*)|hg:hg.mozilla.org/mozilla-central:mozglue/dllservices/WindowsDllBlocklist.cpp:9992f4bb88c46f06d52bdeefb3bd204372e9a1ad|588|0x29
30|21|ntdll.dll|static double Windows::Globalization::Calendars::CalendricalCalculations::SolarLongitude::Nutation(double)|||0x4d
Severity: -- → S2
Flags: in-testsuite?
Reporter | ||
Comment 1•4 years ago
|
||
Crash Signature: [@ webrender::batch::{{impl}}::add_prim_to_batch::{{closure}} ]
Reporter | ||
Updated•4 years ago
|
status-firefox92:
--- → affected
Reporter | ||
Updated•4 years ago
|
Crash Signature: [@ webrender::batch::{{impl}}::add_prim_to_batch::{{closure}} ] → [@ webrender::batch::{{impl}}::add_prim_to_batch::{{closure}} ][@ webrender::batch::impl$11::add_prim_to_batch::closure$0 ]
status-firefox93:
--- → wontfix
status-firefox94:
--- → affected
status-firefox95:
--- → affected
status-firefox-esr91:
--- → affected
Reporter | ||
Comment 3•3 years ago
|
||
The attached testcase is no longer reproducible. Let's see what bugmon says.
Keywords: bugmon
Comment 4•3 years ago
|
||
Bugmon can't process this testcase because we're only analyzing linux bugs at the moment.
Keywords: bugmon
Reporter | ||
Comment 5•3 years ago
|
||
Oh right. Ok then, fuzzers last saw this issue while running m-c 20220311-ad852565f2b3.
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
Updated•3 years ago
|
You need to log in
before you can comment on or make changes to this bug.
Description
•