Crash in [@ mozilla::gfx::CrossProcessPaint::QueueDependencies]
Categories
(Core :: Graphics, defect)
Tracking
()
Tracking | Status | |
---|---|---|
firefox-esr78 | --- | unaffected |
firefox85 | --- | disabled |
firefox86 | --- | disabled |
firefox87 | --- | fixed |
People
(Reporter: emilghitta, Assigned: mattwoodrow)
References
(Blocks 1 open bug)
Details
(Keywords: crash, regressionwindow-wanted)
Crash Data
Attachments
(1 file)
Maybe Fission related. (DOMFissionEnabled=1)
Crash report: https://crash-stats.mozilla.org/report/index/aaf4c562-3b8b-436d-a095-3304f0201214
Reason: EXCEPTION_ACCESS_VIOLATION_READ
Top 10 frames of crashing thread:
0 xul.dll mozilla::gfx::CrossProcessPaint::QueueDependencies gfx/ipc/CrossProcessPaint.cpp:374
1 xul.dll static mozilla::gfx::CrossProcessPaint::Start gfx/ipc/CrossProcessPaint.cpp:308
2 xul.dll mozilla::layout::RemotePrintJobParent::RecvProcessPage layout/printing/ipc/RemotePrintJobParent.cpp:130
3 xul.dll mozilla::layout::PRemotePrintJobParent::OnMessageReceived ipc/ipdl/PRemotePrintJobParent.cpp:301
4 xul.dll mozilla::dom::PContentParent::OnMessageReceived ipc/ipdl/PContentParent.cpp:6710
5 xul.dll mozilla::ipc::MessageChannel::DispatchMessage ipc/glue/MessageChannel.cpp:2077
6 xul.dll mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal xpcom/threads/TaskController.cpp:739
7 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1200
8 xul.dll mozilla::ipc::MessagePump::Run ipc/glue/MessagePump.cpp:109
9 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:327
Affected Versions
- Firefox 85.0a1 (BuildId:20201214091023)
Affected Platforms
- Windows 10 64bit.
Unaffected Platforms
- macOS 10.13
- Ubuntu 20.04
Preconditions
- Have the following prefs enabled:
gfx.webrender.all
&fission.autostart
Steps to reproduce
- Launch Firefox
- Access the following link
- Hit CTRL + P in order to open the print preview.
- Select the "Save to PDF destination" (I don't think if the destination is relevant. I have managed to reproduce this with OneNote for Windows 10 as well).
- Click "Save" or "Print".
- Click on "Cancel" while the "Printing..." progress is displayed.
Expected results
- The print job is canceled successfully and Firefox is stable.
Actual result
- Firefox crashes.
Regression Range
- This seems to be a regression. I'll search for this asap.
Additional Notes
- [Suggested Severity] S2
Reporter | ||
Comment 1•3 years ago
•
|
||
Update:
This seems to occur only on my main browser profile (tried to reproduce this crash with fresh profiles but failed to do so) Anca just managed to reproduce this issue on a fresh profile. It seem that All print destinations are affected.
- This is reproducible with both
gfx.webrender.all
enabled
ordisabled
- This is reproducible only with
fission.autostart
enabled
about:support info (available only with mozilla accounts).
Updated•3 years ago
|
Comment 2•3 years ago
•
|
||
Core|Graphics seems like a better fit, given the crash location (gfx/ipc/CrossProcessPaint.cpp
). --> reclassifying
The crash address is 0x1a8
(a value near null), for this line
RefPtr<dom::WindowGlobalParent> wgp =
browser->GetBrowsingContext()->GetCurrentWindowGlobal();
It looks like there's a null-deref happening here, so maybe browser
might be null, or maybe browser->GetBrowsingContext()
is null.
mattwoodrow, maybe you could take a look? (searchfox blame shows that you did some refactoring in the neighborhood in bug 1662336 a couple months back.)
Updated•3 years ago
|
Updated•3 years ago
|
Assignee | ||
Comment 3•3 years ago
|
||
Updated•3 years ago
|
Assignee | ||
Updated•3 years ago
|
Pushed by mwoodrow@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/4d634fe78018 Null check BrowserParent since it can have gone away mid-screenshot. r=emilio
Comment 5•3 years ago
|
||
bugherder |
Comment 6•3 years ago
|
||
Since the status are different for nightly and release, what's the status for beta?
For more information, please visit auto_nag documentation.
Updated•3 years ago
|
Updated•3 years ago
|
Description
•