Bug#661387: iceweasel: crash inside nouveau_dri.so from canvas3d on html5boilerplate
Zack Weinberg
zackw at panix.com
Sun Feb 26 20:54:04 UTC 2012
Package: iceweasel
Version: 10.0.2-1
Severity: normal
Pages on html5boilerplate.com intermittently cause Iceweasel to crash deep
inside nouveau_dri.so. I can reliably reproduce the effect by opening a
whole bunch of tabs with different pages on that site.
Program received signal SIGSEGV, Segmentation fault.
0x00007fffc4b0a49c in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
(gdb) bt
#0 0x00007fffc4b0a49c in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
#1 0x00007fffc4acc52b in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
#2 0x00007fffc46c67fc in nouveau_pushbuf_flush (chan=0x7fffd01e3000, min=0) at ../../nouveau/nouveau_pushbuf.c:277
#3 0x00007fffc4b0eaeb in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
#4 0x00007fffc4a8b304 in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
#5 0x00007fffc4a87926 in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
#6 0x00007fffc5ec1fcd in glXMakeCurrentReadSGI () from /usr/lib/x86_64-linux-gnu/libGL.so.1
#7 0x00007ffff563a72f in xMakeCurrent (context=<optimized out>, drawable=<optimized out>, display=<optimized out>,
this=0x7ffff6148860) at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:438
#8 MakeCurrentImpl (this=0x7fffcfe76800, aForce=<optimized out>)
at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:799
#9 mozilla::gl::GLContextGLX::MakeCurrentImpl (this=0x7fffcfe76800, aForce=<optimized out>)
at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:788
#10 0x00007ffff563b4b9 in MakeCurrent (aForce=false, this=0x7fffcfe76800) at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContext.h:594
#11 Init (this=0x7fffcfe76800) at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:779
#12 mozilla::gl::GLContextGLX::CreateGLContext (format=..., display=0x7ffff6da0000, drawable=37765078, cfg=0x7fffd0280360,
vinfo=<optimized out>, shareContext=0x7fffd10b6800, deleteDrawable=true, pixmap=0x7fffd0bfd740)
at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:732
#13 0x00007ffff563bab6 in mozilla::gl::CreateOffscreenPixmapContext (aFormat=..., aShare=true, aSize=...)
at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:1281
#14 0x00007ffff563bc41 in CreateOffscreenPixmapContext (aShare=true, aFormat=..., aSize=...)
at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:1173
#15 mozilla::gl::GLContextProviderGLX::CreateOffscreen (aSize=..., aFormat=...)
at /tmp/buildd/iceweasel-10.0.2/gfx/thebes/GLContextProviderGLX.cpp:1292
#16 0x00007ffff4f83aa3 in SetDimensions (height=150, width=300, this=0x7fffd26f4c00)
at /tmp/buildd/iceweasel-10.0.2/content/canvas/src/WebGLContext.cpp:681
#17 mozilla::WebGLContext::SetDimensions (this=0x7fffd26f4c00, width=<optimized out>, height=<optimized out>)
at /tmp/buildd/iceweasel-10.0.2/content/canvas/src/WebGLContext.cpp:520
#18 0x00007ffff4fd5ff5 in nsHTMLCanvasElement::UpdateContext (this=<optimized out>, aNewContextOptions=0x0)
at /tmp/buildd/iceweasel-10.0.2/content/html/content/src/nsHTMLCanvasElement.cpp:622
#19 0x00007ffff4fd6510 in nsHTMLCanvasElement::GetContext (this=0x7fffd020f880, aContextId=..., aContextOptions=...,
aContext=0x7fffffff85e0) at /tmp/buildd/iceweasel-10.0.2/content/html/content/src/nsHTMLCanvasElement.cpp:540
#20 0x00007ffff53238b9 in nsIDOMHTMLCanvasElement_GetContext (cx=0x7fffd17984e0, argc=<optimized out>, vp=0x7fffe21d02f0)
at /tmp/buildd/iceweasel-10.0.2/build-xulrunner/js/xpconnect/src/dom_quickstubs.cpp:18716
[etc]
I have not yet tried this with anything newer, but will shortly, and will file
an upstream bug report if I can make it happen with development trunk. I'm
not sure whether to blame this on Nouveau or Firefox at this point.
All plugins are disabled.
about:support graphics section:
Adapter Description nouveau -- Gallium 0.4 on NV94
Driver Version 2.1 Mesa 7.11.2
WebGL Renderer nouveau -- Gallium 0.4 on NV94 -- 2.1 Mesa 7.11.2
GPU Accelerated Windows 0/1
-- Package-specific info:
-- Addons package information
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (501, 'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages iceweasel depends on:
ii debianutils 4.2.1
ii fontconfig 2.8.0-3.1
ii libc6 2.13-26
ii libgdk-pixbuf2.0-0 2.24.1-1
ii libglib2.0-0 2.30.2-6
ii libgtk2.0-0 2.24.10-1
ii libnspr4-0d 4.9-1
ii libstdc++6 4.6.2-15
ii procps 1:3.3.2-3
ii xulrunner-10.0 10.0.2-1
iceweasel recommends no packages.
Versions of packages iceweasel suggests:
ii libgssapi-krb5-2 1.10+dfsg~beta1-2
ii mathematica-fonts [ttf-mathematica4.1] 13
ii mozplugger <none>
ii ttf-lyx 2.0.2-1
ii xfonts-mathml 4
Versions of packages xulrunner-10.0 depends on:
ii libasound2 1.0.25-2
ii libatk1.0-0 2.2.0-2
ii libbz2-1.0 1.0.6-1
ii libc6 2.13-26
ii libcairo2 1.10.2-6.2
ii libdbus-1-3 1.4.18-1
ii libdbus-glib-1-2 0.98-1
ii libevent-2.0-5 2.0.17-stable-1
ii libfontconfig1 2.8.0-3.1
ii libfreetype6 2.4.8-1
ii libgcc1 1:4.6.2-15
ii libgdk-pixbuf2.0-0 2.24.1-1
ii libglib2.0-0 2.30.2-6
ii libgtk2.0-0 2.24.10-1
ii libhunspell-1.3-0 1.3.2-4
ii libjpeg8 8d-1
ii libmozjs10d 10.0.2-1
ii libnotify4 0.7.4-1
ii libnspr4-0d 4.9-1
ii libnss3-1d 3.13.3-1
ii libpango1.0-0 1.29.4-2
ii libpixman-1-0 0.24.4-1
ii libreadline6 6.2-8
ii libsqlite3-0 3.7.10-1
ii libstartup-notification0 0.12-1
ii libstdc++6 4.6.2-15
ii libvpx1 1.0.0-2
ii libx11-6 2:1.4.4-4
ii libxext6 2:1.3.0-3
ii libxrender1 1:0.9.6-2
ii libxt6 1:1.1.1-2
ii zlib1g 1:1.2.6.dfsg-2
Versions of packages xulrunner-10.0 suggests:
ii libcanberra0 0.28-3
ii libgnomeui-0 2.24.5-2
-- no debconf information
More information about the pkg-mozilla-maintainers
mailing list