[Touch-packages] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver

2016-09-14 Thread Bernhard Übelacker
I was probably wrong last year.
- In [1] there are still many crash reports to Mozilla.
- These point very often too to the ~GLContextGLX destructor, similar to 
comment #0.
- Kernels are often Ubuntu kernels.
- Probably just on 14.04 LTS.
- Gallium 0.4 on NV46 or NV4B.

[1] https://crash-
stats.mozilla.com/search/?app_notes=~Mesa%2010.1.3&signature=~nouveau_dri.so&_sort=-date&_facets=signature&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform
#facet-signature

So probably the patch mentioned in comment #2 could still be worth to be
applied.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to mesa in Ubuntu.
https://bugs.launchpad.net/bugs/1364522

Title:
  Firefox crashes sometimes when using webgl with nouveau driver

Status in firefox package in Ubuntu:
  New
Status in mesa package in Ubuntu:
  New

Bug description:
  Visiting with Firefox e.g.
  https://developer.mozilla.org/de/demos/detail/orange-slice/launch
  makes firefox crash.

  Program received signal SIGSEGV, Segmentation fault.
  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  226if (screen->fence.current->state < NOUVEAU_FENCE_STATE_EMITTING)
  (gdb) bt
  #0  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  #1  0x9b5b7fc0 in nv30_context_kick_notify (push=0x9b8f62b0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:48
  #2  0xa0a0ea3e in pushbuf_submit (push=push@entry=0x9b8f62b0, chan=, chan=) at ../../nouveau/pushbuf.c:325
  #3  0xa0a0ed7a in pushbuf_flush (push=push@entry=0x9b8f62b0) at 
../../nouveau/pushbuf.c:402
  #4  0xa0a0faca in nouveau_pushbuf_kick (push=0x9b8f62b0, chan=0xa40c5420) at 
../../nouveau/pushbuf.c:774
  #5  0x9b5b811f in PUSH_KICK (push=) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_winsys.h:56
  #6  nv30_context_flush (pipe=0x9b986000, fence=0x0, flags=0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:83
  #7  0x9b4b4e1c in st_flush (st=st@entry=0x989e8000, fence=fence@entry=0x0, 
flags=flags@entry=0) at ../../../../src/mesa/state_tracker/st_cb_flush.c:87
  #8  0x9b4b4e82 in st_glFlush (ctx=0x98844000) at 
../../../../src/mesa/state_tracker/st_cb_flush.c:121
  #9  0x9b3b3065 in _mesa_flush (ctx=ctx@entry=0x98844000) at 
../../../../src/mesa/main/context.c:1691
  #10 0x9b3b3130 in _mesa_make_current (newCtx=newCtx@entry=0x0, 
drawBuffer=drawBuffer@entry=0x0, readBuffer=readBuffer@entry=0x0) at 
../../../../src/mesa/main/context.c:1503
  #11 0x9b4dee74 in st_api_make_current (stapi=0x9b779700 , 
stctxi=0x0, stdrawi=0x0, streadi=0x0) at 
../../../../src/mesa/state_tracker/st_manager.c:746
  #12 0x9b59d9ee in dri_unbind_context (cPriv=0x994e3120) at 
../../../../../../../src/gallium/state_trackers/dri/drm/dri_context.c:215
  #13 0x9b38db93 in driUnbindContext (pcp=0x994e3120) at 
../../../../../../../src/mesa/drivers/dri/common/dri_util.c:578
  #14 0x9b7df149 in dri2_unbind_context (context=0x9b9cbc20, new=0x0) at 
../../../../src/glx/dri2_glx.c:184
  #15 0x9b7b7985 in MakeContextCurrent (dpy=dpy@entry=0xb7191000, 
draw=draw@entry=0, read=read@entry=0, gc_user=gc_user@entry=0x0) at 
../../../../src/glx/glxcurrent.c:245
  #16 0x9b7b7a73 in glXMakeCurrent (dpy=0xb7191000, draw=0, gc=0x0) at 
../../../../src/glx/glxcurrent.c:293
  #17 0xb3d3916d in mozilla::gl::GLXLibrary::xMakeCurrent (this=0xb6e58470 
, display=0xb7191000, drawable=drawable@entry=0, 
context=context@entry=0x0) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:525
  #18 0xb3d39d92 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:836
  #19 0xb3d39e12 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:845
  #20 0xb3d38ea0 in 
mozilla::detail::GenericRefCounted<(mozilla::detail::RefCountAtomicity)0>::Release
 (this=0x988dc800) at ../../dist/include/mozilla/GenericRefCounted.h:95
  #21 0xb3ddc635 in nsRefPtr::assign_assuming_AddRef 
(this=this@entry=0x9b8eb84c, newPtr=newPtr@entry=0x0) at 
../../dist/include/nsAutoPtr.h:882
  #22 0xb4561170 in assign_with_AddRef (rawPtr=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:866
  #23 operator= (rhs=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:964
  #24 mozilla::WebGLContext::DestroyResourcesAndContext 
(this=this@entry=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:284
  #25 0xb45611bb in mozilla::WebGLContext::~WebGLContext (this=0x9b8eb800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:203
  #26 0xb455e330 in mozilla::WebGL1Context::~WebGL1Context (this=0x9b8eb800, 
__in_ch

[Touch-packages] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver

2015-07-11 Thread Bernhard Übelacker
For some reason the submission of new crashes at crash-stats.mozilla.com
was stopping at 2015-06-16.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to mesa in Ubuntu.
https://bugs.launchpad.net/bugs/1364522

Title:
  Firefox crashes sometimes when using webgl with nouveau driver

Status in firefox package in Ubuntu:
  New
Status in mesa package in Ubuntu:
  New

Bug description:
  Visiting with Firefox e.g.
  https://developer.mozilla.org/de/demos/detail/orange-slice/launch
  makes firefox crash.

  Program received signal SIGSEGV, Segmentation fault.
  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  226if (screen->fence.current->state < NOUVEAU_FENCE_STATE_EMITTING)
  (gdb) bt
  #0  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  #1  0x9b5b7fc0 in nv30_context_kick_notify (push=0x9b8f62b0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:48
  #2  0xa0a0ea3e in pushbuf_submit (push=push@entry=0x9b8f62b0, chan=, chan=) at ../../nouveau/pushbuf.c:325
  #3  0xa0a0ed7a in pushbuf_flush (push=push@entry=0x9b8f62b0) at 
../../nouveau/pushbuf.c:402
  #4  0xa0a0faca in nouveau_pushbuf_kick (push=0x9b8f62b0, chan=0xa40c5420) at 
../../nouveau/pushbuf.c:774
  #5  0x9b5b811f in PUSH_KICK (push=) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_winsys.h:56
  #6  nv30_context_flush (pipe=0x9b986000, fence=0x0, flags=0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:83
  #7  0x9b4b4e1c in st_flush (st=st@entry=0x989e8000, fence=fence@entry=0x0, 
flags=flags@entry=0) at ../../../../src/mesa/state_tracker/st_cb_flush.c:87
  #8  0x9b4b4e82 in st_glFlush (ctx=0x98844000) at 
../../../../src/mesa/state_tracker/st_cb_flush.c:121
  #9  0x9b3b3065 in _mesa_flush (ctx=ctx@entry=0x98844000) at 
../../../../src/mesa/main/context.c:1691
  #10 0x9b3b3130 in _mesa_make_current (newCtx=newCtx@entry=0x0, 
drawBuffer=drawBuffer@entry=0x0, readBuffer=readBuffer@entry=0x0) at 
../../../../src/mesa/main/context.c:1503
  #11 0x9b4dee74 in st_api_make_current (stapi=0x9b779700 , 
stctxi=0x0, stdrawi=0x0, streadi=0x0) at 
../../../../src/mesa/state_tracker/st_manager.c:746
  #12 0x9b59d9ee in dri_unbind_context (cPriv=0x994e3120) at 
../../../../../../../src/gallium/state_trackers/dri/drm/dri_context.c:215
  #13 0x9b38db93 in driUnbindContext (pcp=0x994e3120) at 
../../../../../../../src/mesa/drivers/dri/common/dri_util.c:578
  #14 0x9b7df149 in dri2_unbind_context (context=0x9b9cbc20, new=0x0) at 
../../../../src/glx/dri2_glx.c:184
  #15 0x9b7b7985 in MakeContextCurrent (dpy=dpy@entry=0xb7191000, 
draw=draw@entry=0, read=read@entry=0, gc_user=gc_user@entry=0x0) at 
../../../../src/glx/glxcurrent.c:245
  #16 0x9b7b7a73 in glXMakeCurrent (dpy=0xb7191000, draw=0, gc=0x0) at 
../../../../src/glx/glxcurrent.c:293
  #17 0xb3d3916d in mozilla::gl::GLXLibrary::xMakeCurrent (this=0xb6e58470 
, display=0xb7191000, drawable=drawable@entry=0, 
context=context@entry=0x0) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:525
  #18 0xb3d39d92 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:836
  #19 0xb3d39e12 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:845
  #20 0xb3d38ea0 in 
mozilla::detail::GenericRefCounted<(mozilla::detail::RefCountAtomicity)0>::Release
 (this=0x988dc800) at ../../dist/include/mozilla/GenericRefCounted.h:95
  #21 0xb3ddc635 in nsRefPtr::assign_assuming_AddRef 
(this=this@entry=0x9b8eb84c, newPtr=newPtr@entry=0x0) at 
../../dist/include/nsAutoPtr.h:882
  #22 0xb4561170 in assign_with_AddRef (rawPtr=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:866
  #23 operator= (rhs=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:964
  #24 mozilla::WebGLContext::DestroyResourcesAndContext 
(this=this@entry=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:284
  #25 0xb45611bb in mozilla::WebGLContext::~WebGLContext (this=0x9b8eb800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:203
  #26 0xb455e330 in mozilla::WebGL1Context::~WebGL1Context (this=0x9b8eb800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGL1Context.cpp:25
  #27 0xb455ebe9 in mozilla::WebGLContext::DeleteCycleCollectable 
(this=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:1397
  #28 0xb455ebbb in 
mozilla::WebGLContext::cycleCollection::DeleteCycleCollectable (this=0xb6e2b500 
, p=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.h:152
  #29 0xb3841504 in SnowWhiteKiller::~SnowWhiteKiller 
(thi

[Touch-packages] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver

2014-10-04 Thread Bernhard Übelacker
** Also affects: firefox (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to mesa in Ubuntu.
https://bugs.launchpad.net/bugs/1364522

Title:
  Firefox crashes sometimes when using webgl with nouveau driver

Status in “firefox” package in Ubuntu:
  New
Status in “mesa” package in Ubuntu:
  New

Bug description:
  Visiting with Firefox e.g.
  https://developer.mozilla.org/de/demos/detail/orange-slice/launch
  makes firefox crash.

  Program received signal SIGSEGV, Segmentation fault.
  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  226if (screen->fence.current->state < NOUVEAU_FENCE_STATE_EMITTING)
  (gdb) bt
  #0  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  #1  0x9b5b7fc0 in nv30_context_kick_notify (push=0x9b8f62b0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:48
  #2  0xa0a0ea3e in pushbuf_submit (push=push@entry=0x9b8f62b0, chan=, chan=) at ../../nouveau/pushbuf.c:325
  #3  0xa0a0ed7a in pushbuf_flush (push=push@entry=0x9b8f62b0) at 
../../nouveau/pushbuf.c:402
  #4  0xa0a0faca in nouveau_pushbuf_kick (push=0x9b8f62b0, chan=0xa40c5420) at 
../../nouveau/pushbuf.c:774
  #5  0x9b5b811f in PUSH_KICK (push=) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_winsys.h:56
  #6  nv30_context_flush (pipe=0x9b986000, fence=0x0, flags=0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:83
  #7  0x9b4b4e1c in st_flush (st=st@entry=0x989e8000, fence=fence@entry=0x0, 
flags=flags@entry=0) at ../../../../src/mesa/state_tracker/st_cb_flush.c:87
  #8  0x9b4b4e82 in st_glFlush (ctx=0x98844000) at 
../../../../src/mesa/state_tracker/st_cb_flush.c:121
  #9  0x9b3b3065 in _mesa_flush (ctx=ctx@entry=0x98844000) at 
../../../../src/mesa/main/context.c:1691
  #10 0x9b3b3130 in _mesa_make_current (newCtx=newCtx@entry=0x0, 
drawBuffer=drawBuffer@entry=0x0, readBuffer=readBuffer@entry=0x0) at 
../../../../src/mesa/main/context.c:1503
  #11 0x9b4dee74 in st_api_make_current (stapi=0x9b779700 , 
stctxi=0x0, stdrawi=0x0, streadi=0x0) at 
../../../../src/mesa/state_tracker/st_manager.c:746
  #12 0x9b59d9ee in dri_unbind_context (cPriv=0x994e3120) at 
../../../../../../../src/gallium/state_trackers/dri/drm/dri_context.c:215
  #13 0x9b38db93 in driUnbindContext (pcp=0x994e3120) at 
../../../../../../../src/mesa/drivers/dri/common/dri_util.c:578
  #14 0x9b7df149 in dri2_unbind_context (context=0x9b9cbc20, new=0x0) at 
../../../../src/glx/dri2_glx.c:184
  #15 0x9b7b7985 in MakeContextCurrent (dpy=dpy@entry=0xb7191000, 
draw=draw@entry=0, read=read@entry=0, gc_user=gc_user@entry=0x0) at 
../../../../src/glx/glxcurrent.c:245
  #16 0x9b7b7a73 in glXMakeCurrent (dpy=0xb7191000, draw=0, gc=0x0) at 
../../../../src/glx/glxcurrent.c:293
  #17 0xb3d3916d in mozilla::gl::GLXLibrary::xMakeCurrent (this=0xb6e58470 
, display=0xb7191000, drawable=drawable@entry=0, 
context=context@entry=0x0) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:525
  #18 0xb3d39d92 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:836
  #19 0xb3d39e12 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:845
  #20 0xb3d38ea0 in 
mozilla::detail::GenericRefCounted<(mozilla::detail::RefCountAtomicity)0>::Release
 (this=0x988dc800) at ../../dist/include/mozilla/GenericRefCounted.h:95
  #21 0xb3ddc635 in nsRefPtr::assign_assuming_AddRef 
(this=this@entry=0x9b8eb84c, newPtr=newPtr@entry=0x0) at 
../../dist/include/nsAutoPtr.h:882
  #22 0xb4561170 in assign_with_AddRef (rawPtr=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:866
  #23 operator= (rhs=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:964
  #24 mozilla::WebGLContext::DestroyResourcesAndContext 
(this=this@entry=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:284
  #25 0xb45611bb in mozilla::WebGLContext::~WebGLContext (this=0x9b8eb800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:203
  #26 0xb455e330 in mozilla::WebGL1Context::~WebGL1Context (this=0x9b8eb800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGL1Context.cpp:25
  #27 0xb455ebe9 in mozilla::WebGLContext::DeleteCycleCollectable 
(this=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:1397
  #28 0xb455ebbb in 
mozilla::WebGLContext::cycleCollection::DeleteCycleCollectable (this=0xb6e2b500 
, p=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.h:152
  #29 0xb3841504 in SnowWhiteKiller::~SnowWhiteKiller 
(this=this@entry=0xbfb4

[Touch-packages] [Bug 1364522] Re: Firefox crashes sometimes when using webgl with nouveau driver

2014-09-02 Thread Bernhard Übelacker
Problem could be reproduced with following graphic adapters:
01:00.0 VGA compatible controller: NVIDIA Corporation NV40 [GeForce 6800] (rev 
a1)
01:00.0 VGA compatible controller: NVIDIA Corporation NV31 [GeForce FX 5600XT] 
(rev a1)

(Firefox probably blacklisted the second card for webgl, to be able to 
investigate on the issue I had to enable manually.)
But the crash happens for the first card with default settings.

As far as I could observe, Firefox creates 3 contexts, then destroys the
last one but then still accesses the freed memory of the destroyed
context.

I believe this crash got fixed by this upstream commit:
http://cgit.freedesktop.org/mesa/mesa/commit/src/gallium/drivers/nouveau/nv30/nv30_context.c?id=c092c46b27c6f6a6674e8d67fb3afdb684811819
Unfortunately this commit got only into 10.2.2.

But as Trusty Tahr is a LTS release it probably will stay a long time with 
users using older graphics cards.
Therefore I ask if this little patch could be added.

--
Building package libgl1-mesa-dri like this makes the crash for me go away:
mkdir -p ~/ubuntu/mesa; cd ~/ubuntu/mesa
apt-get source libgl1-mesa-dri
cd mesa-10.1.3
wget wget 
http://cgit.freedesktop.org/mesa/mesa/patch/src/gallium/drivers/nouveau/nv30/nv30_context.c?id=c092c46b27c6f6a6674e8d67fb3afdb684811819
 -O debian/patches/999-nv30_avoid_dangling_references_to_deleted_contexts.patch
echo "999-nv30_avoid_dangling_references_to_deleted_contexts.patch" >> 
debian/patches/series
patch -p1 < 
debian/patches/999-nv30_avoid_dangling_references_to_deleted_contexts.patch
dpkg-buildpackage
cd ..
# sudo dpkg -i libgl1-mesa-dri_10.1.3-0ubuntu0.1_i386.deb
--

Other references where this bug seems to appear (just for reference):
https://bugzilla.redhat.com/show_bug.cgi?id=1125339
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661387
https://crash-stats.mozilla.com/report/list?signature=nouveau_dri.so%400x239b79


** Bug watch added: Red Hat Bugzilla #1125339
   https://bugzilla.redhat.com/show_bug.cgi?id=1125339

** Bug watch added: Debian Bug tracker #661387
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661387

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to mesa in Ubuntu.
https://bugs.launchpad.net/bugs/1364522

Title:
  Firefox crashes sometimes when using webgl with nouveau driver

Status in “mesa” package in Ubuntu:
  New

Bug description:
  Visiting with Firefox e.g.
  https://developer.mozilla.org/de/demos/detail/orange-slice/launch
  makes firefox crash.

  Program received signal SIGSEGV, Segmentation fault.
  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  226if (screen->fence.current->state < NOUVEAU_FENCE_STATE_EMITTING)
  (gdb) bt
  #0  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
  #1  0x9b5b7fc0 in nv30_context_kick_notify (push=0x9b8f62b0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:48
  #2  0xa0a0ea3e in pushbuf_submit (push=push@entry=0x9b8f62b0, chan=, chan=) at ../../nouveau/pushbuf.c:325
  #3  0xa0a0ed7a in pushbuf_flush (push=push@entry=0x9b8f62b0) at 
../../nouveau/pushbuf.c:402
  #4  0xa0a0faca in nouveau_pushbuf_kick (push=0x9b8f62b0, chan=0xa40c5420) at 
../../nouveau/pushbuf.c:774
  #5  0x9b5b811f in PUSH_KICK (push=) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_winsys.h:56
  #6  nv30_context_flush (pipe=0x9b986000, fence=0x0, flags=0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:83
  #7  0x9b4b4e1c in st_flush (st=st@entry=0x989e8000, fence=fence@entry=0x0, 
flags=flags@entry=0) at ../../../../src/mesa/state_tracker/st_cb_flush.c:87
  #8  0x9b4b4e82 in st_glFlush (ctx=0x98844000) at 
../../../../src/mesa/state_tracker/st_cb_flush.c:121
  #9  0x9b3b3065 in _mesa_flush (ctx=ctx@entry=0x98844000) at 
../../../../src/mesa/main/context.c:1691
  #10 0x9b3b3130 in _mesa_make_current (newCtx=newCtx@entry=0x0, 
drawBuffer=drawBuffer@entry=0x0, readBuffer=readBuffer@entry=0x0) at 
../../../../src/mesa/main/context.c:1503
  #11 0x9b4dee74 in st_api_make_current (stapi=0x9b779700 , 
stctxi=0x0, stdrawi=0x0, streadi=0x0) at 
../../../../src/mesa/state_tracker/st_manager.c:746
  #12 0x9b59d9ee in dri_unbind_context (cPriv=0x994e3120) at 
../../../../../../../src/gallium/state_trackers/dri/drm/dri_context.c:215
  #13 0x9b38db93 in driUnbindContext (pcp=0x994e3120) at 
../../../../../../../src/mesa/drivers/dri/common/dri_util.c:578
  #14 0x9b7df149 in dri2_unbind_context (context=0x9b9cbc20, new=0x0) at 
../../../../src/glx/dri2_glx.c:184
  #15 0x9b7b7985 in MakeContextCurrent (dpy=dpy@entry=0xb7191000, 
draw=draw@entry=0, read=read@entry=0, gc_user=gc_user@entry=0x0) at 
../../../../src/glx/glxcurrent.c:245
  #16 0x9b7b7a73 in glXMakeCurrent (dpy=0xb7191000, draw=0, gc=0x0) at 
../../../../src/glx/glxcurrent.c:293
  #17 0xb3d3916d 

[Touch-packages] [Bug 1364522] [NEW] Firefox crashes sometimes when using webgl with nouveau driver

2014-09-02 Thread Bernhard Übelacker
Public bug reported:

Visiting with Firefox e.g. https://developer.mozilla.org/de/demos/detail
/orange-slice/launch makes firefox crash.

Program received signal SIGSEGV, Segmentation fault.
nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
226if (screen->fence.current->state < NOUVEAU_FENCE_STATE_EMITTING)
(gdb) bt
#0  nouveau_fence_next (screen=screen@entry=0x5a5a5a5a) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_fence.c:226
#1  0x9b5b7fc0 in nv30_context_kick_notify (push=0x9b8f62b0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:48
#2  0xa0a0ea3e in pushbuf_submit (push=push@entry=0x9b8f62b0, chan=, chan=) at ../../nouveau/pushbuf.c:325
#3  0xa0a0ed7a in pushbuf_flush (push=push@entry=0x9b8f62b0) at 
../../nouveau/pushbuf.c:402
#4  0xa0a0faca in nouveau_pushbuf_kick (push=0x9b8f62b0, chan=0xa40c5420) at 
../../nouveau/pushbuf.c:774
#5  0x9b5b811f in PUSH_KICK (push=) at 
../../../../../../src/gallium/drivers/nouveau/nouveau_winsys.h:56
#6  nv30_context_flush (pipe=0x9b986000, fence=0x0, flags=0) at 
../../../../../../src/gallium/drivers/nouveau/nv30/nv30_context.c:83
#7  0x9b4b4e1c in st_flush (st=st@entry=0x989e8000, fence=fence@entry=0x0, 
flags=flags@entry=0) at ../../../../src/mesa/state_tracker/st_cb_flush.c:87
#8  0x9b4b4e82 in st_glFlush (ctx=0x98844000) at 
../../../../src/mesa/state_tracker/st_cb_flush.c:121
#9  0x9b3b3065 in _mesa_flush (ctx=ctx@entry=0x98844000) at 
../../../../src/mesa/main/context.c:1691
#10 0x9b3b3130 in _mesa_make_current (newCtx=newCtx@entry=0x0, 
drawBuffer=drawBuffer@entry=0x0, readBuffer=readBuffer@entry=0x0) at 
../../../../src/mesa/main/context.c:1503
#11 0x9b4dee74 in st_api_make_current (stapi=0x9b779700 , 
stctxi=0x0, stdrawi=0x0, streadi=0x0) at 
../../../../src/mesa/state_tracker/st_manager.c:746
#12 0x9b59d9ee in dri_unbind_context (cPriv=0x994e3120) at 
../../../../../../../src/gallium/state_trackers/dri/drm/dri_context.c:215
#13 0x9b38db93 in driUnbindContext (pcp=0x994e3120) at 
../../../../../../../src/mesa/drivers/dri/common/dri_util.c:578
#14 0x9b7df149 in dri2_unbind_context (context=0x9b9cbc20, new=0x0) at 
../../../../src/glx/dri2_glx.c:184
#15 0x9b7b7985 in MakeContextCurrent (dpy=dpy@entry=0xb7191000, 
draw=draw@entry=0, read=read@entry=0, gc_user=gc_user@entry=0x0) at 
../../../../src/glx/glxcurrent.c:245
#16 0x9b7b7a73 in glXMakeCurrent (dpy=0xb7191000, draw=0, gc=0x0) at 
../../../../src/glx/glxcurrent.c:293
#17 0xb3d3916d in mozilla::gl::GLXLibrary::xMakeCurrent (this=0xb6e58470 
, display=0xb7191000, drawable=drawable@entry=0, 
context=context@entry=0x0) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:525
#18 0xb3d39d92 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:836
#19 0xb3d39e12 in mozilla::gl::GLContextGLX::~GLContextGLX (this=0x988dc800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/gfx/gl/GLContextProviderGLX.cpp:845
#20 0xb3d38ea0 in 
mozilla::detail::GenericRefCounted<(mozilla::detail::RefCountAtomicity)0>::Release
 (this=0x988dc800) at ../../dist/include/mozilla/GenericRefCounted.h:95
#21 0xb3ddc635 in nsRefPtr::assign_assuming_AddRef 
(this=this@entry=0x9b8eb84c, newPtr=newPtr@entry=0x0) at 
../../dist/include/nsAutoPtr.h:882
#22 0xb4561170 in assign_with_AddRef (rawPtr=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:866
#23 operator= (rhs=0x0, this=0x9b8eb84c) at 
../../../dist/include/nsAutoPtr.h:964
#24 mozilla::WebGLContext::DestroyResourcesAndContext 
(this=this@entry=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:284
#25 0xb45611bb in mozilla::WebGLContext::~WebGLContext (this=0x9b8eb800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:203
#26 0xb455e330 in mozilla::WebGL1Context::~WebGL1Context (this=0x9b8eb800, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGL1Context.cpp:25
#27 0xb455ebe9 in mozilla::WebGLContext::DeleteCycleCollectable 
(this=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.cpp:1397
#28 0xb455ebbb in 
mozilla::WebGLContext::cycleCollection::DeleteCycleCollectable (this=0xb6e2b500 
, p=0x9b8eb800) at 
/build/buildd/firefox-31.0+build1/content/canvas/src/WebGLContext.h:152
#29 0xb3841504 in SnowWhiteKiller::~SnowWhiteKiller 
(this=this@entry=0xbfb4273c, __in_chrg=) at 
/build/buildd/firefox-31.0+build1/xpcom/base/nsCycleCollector.cpp:2403
#30 0xb3841d1b in ~RemoveSkippableVisitor (this=0xbfb4273c, 
__in_chrg=) at 
/build/buildd/firefox-31.0+build1/xpcom/base/nsCycleCollector.cpp:2495
#31 nsPurpleBuffer::RemoveSkippable (this=this@entry=0xb71e808c, 
aCollector=aCollector@entry=0xb71e8000, 
aRemoveChildlessNodes=aRemoveChildlessNodes@entry=false, 
aAsyncSnowWhiteFreeing=aAsyncSnowWhiteFreeing@entry=false,  aCb=0xb44dbe35 
) a