[Ubuntu-x-swat] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver
I was probably wrong last year. - In [1] there are still many crash reports to Mozilla. - These point very often too to the ~GLContextGLX destructor, similar to comment #0. - Kernels are often Ubuntu kernels. - Probably just on 14.04 LTS. - Gallium 0.4 on NV46 or NV4B. [1] https://crash- stats.mozilla.com/search/?app_notes=~Mesa%2010.1.3&signature=~nouveau_dri.so&_sort=-date&_facets=signature&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform #facet-signature So probably the patch mentioned in comment #2 could still be worth to be applied. -- You received this bug notification because you are a member of Ubuntu-X, which is subscribed to mesa in Ubuntu. https://bugs.launchpad.net/bugs/1364522 Title: Firefox crashes sometimes when using webgl with nouveau driver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1364522/+subscriptions ___ Mailing list: https://launchpad.net/~ubuntu-x-swat Post to : ubuntu-x-swat@lists.launchpad.net Unsubscribe : https://launchpad.net/~ubuntu-x-swat More help : https://help.launchpad.net/ListHelp
[Ubuntu-x-swat] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver
For some reason the submission of new crashes at crash-stats.mozilla.com was stopping at 2015-06-16. -- You received this bug notification because you are a member of Ubuntu-X, which is subscribed to mesa in Ubuntu. https://bugs.launchpad.net/bugs/1364522 Title: Firefox crashes sometimes when using webgl with nouveau driver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1364522/+subscriptions ___ Mailing list: https://launchpad.net/~ubuntu-x-swat Post to : ubuntu-x-swat@lists.launchpad.net Unsubscribe : https://launchpad.net/~ubuntu-x-swat More help : https://help.launchpad.net/ListHelp
[Ubuntu-x-swat] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver
** Also affects: firefox (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu-X, which is subscribed to mesa in Ubuntu. https://bugs.launchpad.net/bugs/1364522 Title: Firefox crashes sometimes when using webgl with nouveau driver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1364522/+subscriptions ___ Mailing list: https://launchpad.net/~ubuntu-x-swat Post to : ubuntu-x-swat@lists.launchpad.net Unsubscribe : https://launchpad.net/~ubuntu-x-swat More help : https://help.launchpad.net/ListHelp
[Ubuntu-x-swat] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver
Problem could be reproduced with following graphic adapters: 01:00.0 VGA compatible controller: NVIDIA Corporation NV40 [GeForce 6800] (rev a1) 01:00.0 VGA compatible controller: NVIDIA Corporation NV31 [GeForce FX 5600XT] (rev a1) (Firefox probably blacklisted the second card for webgl, to be able to investigate on the issue I had to enable manually.) But the crash happens for the first card with default settings. As far as I could observe, Firefox creates 3 contexts, then destroys the last one but then still accesses the freed memory of the destroyed context. I believe this crash got fixed by this upstream commit: http://cgit.freedesktop.org/mesa/mesa/commit/src/gallium/drivers/nouveau/nv30/nv30_context.c?id=c092c46b27c6f6a6674e8d67fb3afdb684811819 Unfortunately this commit got only into 10.2.2. But as Trusty Tahr is a LTS release it probably will stay a long time with users using older graphics cards. Therefore I ask if this little patch could be added. -- Building package libgl1-mesa-dri like this makes the crash for me go away: mkdir -p ~/ubuntu/mesa; cd ~/ubuntu/mesa apt-get source libgl1-mesa-dri cd mesa-10.1.3 wget wget http://cgit.freedesktop.org/mesa/mesa/patch/src/gallium/drivers/nouveau/nv30/nv30_context.c?id=c092c46b27c6f6a6674e8d67fb3afdb684811819 -O debian/patches/999-nv30_avoid_dangling_references_to_deleted_contexts.patch echo "999-nv30_avoid_dangling_references_to_deleted_contexts.patch" >> debian/patches/series patch -p1 < debian/patches/999-nv30_avoid_dangling_references_to_deleted_contexts.patch dpkg-buildpackage cd .. # sudo dpkg -i libgl1-mesa-dri_10.1.3-0ubuntu0.1_i386.deb -- Other references where this bug seems to appear (just for reference): https://bugzilla.redhat.com/show_bug.cgi?id=1125339 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661387 https://crash-stats.mozilla.com/report/list?signature=nouveau_dri.so%400x239b79 ** Bug watch added: Red Hat Bugzilla #1125339 https://bugzilla.redhat.com/show_bug.cgi?id=1125339 ** Bug watch added: Debian Bug tracker #661387 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661387 -- You received this bug notification because you are a member of Ubuntu-X, which is subscribed to mesa in Ubuntu. https://bugs.launchpad.net/bugs/1364522 Title: Firefox crashes sometimes when using webgl with nouveau driver To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mesa/+bug/1364522/+subscriptions ___ Mailing list: https://launchpad.net/~ubuntu-x-swat Post to : ubuntu-x-swat@lists.launchpad.net Unsubscribe : https://launchpad.net/~ubuntu-x-swat More help : https://help.launchpad.net/ListHelp
[Ubuntu-x-swat] [Bug 1364522] [NEW] Firefox crashes sometimes when using webgl with nouveau driver
Public bug reported: Visiting with Firefox e.g. https://developer.mozilla.org/de/demos/detail /orange-slice/launch makes firefox crash. Program received signal SIGSEGV, Segmentation fault. nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at ../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226 226if (screen->fence.current->state < NOUVEAU_FENCE_STATE_EMITTING) (gdb) bt #0 nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at ../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226 #1 0x9b5b7fc0 in nv30_context_kick_notify (push=0x9b8f62b0) at ../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:48 #2 0xa0a0ea3e in pushbuf_submit (push=push@entry=0x9b8f62b0, chan=, chan=) at ../../nouveau/pushbuf.c:325 #3 0xa0a0ed7a in pushbuf_flush (push=push@entry=0x9b8f62b0) at ../../nouveau/pushbuf.c:402 #4 0xa0a0faca in nouveau_pushbuf_kick (push=0x9b8f62b0, chan=0xa40c5420) at ../../nouveau/pushbuf.c:774 #5 0x9b5b811f in PUSH_KICK (push=) at ../../../../../../src/gallium/drivers/nouveau/nouveau_winsys.h:56 #6 nv30_context_flush (pipe=0x9b986000, fence=0x0, flags=0) at ../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:83 #7 0x9b4b4e1c in st_flush (st=st@entry=0x989e8000, fence=fence@entry=0x0, flags=flags@entry=0) at ../../../../src/mesa/state_tracker/st_cb_flush.c:87 #8 0x9b4b4e82 in st_glFlush (ctx=0x98844000) at ../../../../src/mesa/state_tracker/st_cb_flush.c:121 #9 0x9b3b3065 in _mesa_flush (ctx=ctx@entry=0x98844000) at ../../../../src/mesa/main/context.c:1691 #10 0x9b3b3130 in _mesa_make_current (newCtx=newCtx@entry=0x0, drawBuffer=drawBuffer@entry=0x0, readBuffer=readBuffer@entry=0x0) at ../../../../src/mesa/main/context.c:1503 #11 0x9b4dee74 in st_api_make_current (stapi=0x9b779700 , stctxi=0x0, stdrawi=0x0, streadi=0x0) at ../../../../src/mesa/state_tracker/st_manager.c:746 #12 0x9b59d9ee in dri_unbind_context (cPriv=0x994e3120) at ../../../../../../../src/gallium/state_trackers/dri/drm/dri_context.c:215 #13 0x9b38db93 in driUnbindContext (pcp=0x994e3120) at ../../../../../../../src/mesa/drivers/dri/common/dri_util.c:578 #14 0x9b7df149 in dri2_unbind_context (context=0x9b9cbc20, new=0x0) at ../../../../src/glx/dri2_glx.c:184 #15 0x9b7b7985 in MakeContextCurrent (dpy=dpy@entry=0xb7191000, draw=draw@entry=0, read=read@entry=0, gc_user=gc_user@entry=0x0) at ../../../../src/glx/glxcurrent.c:245 #16 0x9b7b7a73 in glXMakeCurrent (dpy=0xb7191000, draw=0, gc=0x0) at ../../../../src/glx/glxcurrent.c:293 #17 0xb3d3916d in mozilla::gl::GLXLibrary::xMakeCurrent (this=0xb6e58470 , display=0xb7191000, drawable=drawable@entry=0, context=context@entry=0x0) at /build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:525 #18 0xb3d39d92 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, __in_chrg=) at /build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:836 #19 0xb3d39e12 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, __in_chrg=) at /build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:845 #20 0xb3d38ea0 in mozilla::detail::GenericRefCounted<(mozilla::detail::RefCountAtomicity)0>::Release (this=0x988dc800) at ../../dist/include/mozilla/GenericRefCounted.h:95 #21 0xb3ddc635 in nsRefPtr::assign_assuming_AddRef (this=this@entry=0x9b8eb84c, newPtr=newPtr@entry=0x0) at ../../dist/include/nsAutoPtr.h:882 #22 0xb4561170 in assign_with_AddRef (rawPtr=0x0, this=0x9b8eb84c) at ../../../dist/include/nsAutoPtr.h:866 #23 operator= (rhs=0x0, this=0x9b8eb84c) at ../../../dist/include/nsAutoPtr.h:964 #24 mozilla::WebGLContext::DestroyResourcesAndContext (this=this@entry=0x9b8eb800) at /build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:284 #25 0xb45611bb in mozilla::WebGLContext::~WebGLContext (this=0x9b8eb800, __in_chrg=) at /build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:203 #26 0xb455e330 in mozilla::WebGL1Context::~WebGL1Context (this=0x9b8eb800, __in_chrg=) at /build/buildd/firefox-31.0+build1/content/canvas/src/WebGL1Context.cpp:25 #27 0xb455ebe9 in mozilla::WebGLContext::DeleteCycleCollectable (this=0x9b8eb800) at /build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:1397 #28 0xb455ebbb in mozilla::WebGLContext::cycleCollection::DeleteCycleCollectable (this=0xb6e2b500 , p=0x9b8eb800) at /build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.h:152 #29 0xb3841504 in SnowWhiteKiller::~SnowWhiteKiller (this=this@entry=0xbfb4273c, __in_chrg=) at /build/buildd/firefox-31.0+build1/xpcom/base/nsCycleCollector.cpp:2403 #30 0xb3841d1b in ~RemoveSkippableVisitor (this=0xbfb4273c, __in_chrg=) at /build/buildd/firefox-31.0+build1/xpcom/base/nsCycleCollector.cpp:2495 #31 nsPurpleBuffer::RemoveSkippable (this=this@entry=0xb71e808c, aCollector=aCollector@entry=0xb71e8000, aRemoveChildlessNodes=aRemoveChildlessNodes@entry=false, aAsyncSnowWhiteFreeing=aAsyncSnowWhiteFreeing@entry=false, aCb=0xb44dbe35 ) a
