[Bug 196667] www/firefox crashes often when loading multiple multimedia/gstreamer1 content once again (e.g. HTML 5 YouTube)

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196667

            Bug ID: 196667
           Summary: www/firefox crashes often when loading multiple
                    multimedia/gstreamer1 content once again (e.g. HTML 5
                    YouTube)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: jakub_lach at mailplus.pl
                CC: gecko at FreeBSD.org, multimedia at FreeBSD.org
                CC: gecko at FreeBSD.org, multimedia at FreeBSD.org

Created attachment 151519
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=151519&action=edit
Firefox backtrace

The crashes are somewhat random, however loading lots of videos at once are
surefire way to induce it (especially if restarting a previous session, and you
uncheck "Don't load tabs until selected").

I'm 99% sure gstreamer is at fault once again (see attached backtrace).

Console output:

<...>

++DOMWINDOW == 39 (0x8226a0e80) [pid = 69592] [serial = 57] [outer =
0x8227ba600]
++DOCSHELL 0x82421b200 == 17 [pid = 69592] [id = 23]
++DOMWINDOW == 40 (0x823927980) [pid = 69592] [serial = 58] [outer = 0x0]
++DOMWINDOW == 41 (0x823927d00) [pid = 69592] [serial = 59] [outer =
0x823927980]
++DOMWINDOW == 42 (0x8249c8080) [pid = 69592] [serial = 60] [outer =
0x823927980]
libva info: VA-API version 0.37.0
libva info: va_getDriverName() returns 0
libva info: Trying to open /usr/local/lib/va/i965_drv_video.so
libva info: Found init function __vaDriverInit_0_35
libva info: va_openDriver() returns 0
[69592] ###!!! ABORT: This Image should have already allocated data:
'mTextureClient', file
/usr/obj/usr/ports/www/firefox/work/mozilla-release/gfx/layers/ipc/SharedPlanarYCbCrIma
std::__1::__tree<std::__1::__value_type<ogg_packet*, long>,
std::__1::__map_value_compare<ogg_packet*, std::__1::__value_type<ogg_packet*,
long>, std::__1::less<ogg_packet*>, true
std::__1::__tree<std::__1::__value_type<ogg_packet*, long>,
std::__1::__map_value_compare<ogg_packet*, std::__1::__value_type<ogg_packet*,
long>, std::__1::less<ogg_packet*>, true
__float128+0x002C5056 [/usr/local/lib/firefox/libxul.so +0x026CF7F6]
__float128+0x002D0008 [/usr/local/lib/firefox/libxul.so +0x026DA7A8]
__float128+0x002CE613 [/usr/local/lib/firefox/libxul.so +0x026D8DB3]
__float128+0x002F7907 [/usr/local/lib/firefox/libxul.so +0x027020A7]
__float128+0x002E7E33 [/usr/local/lib/firefox/libxul.so +0x026F25D3]
XRE_AddJarManifestLocation+0x0000F460 [/usr/local/lib/firefox/libxul.so
+0x0094C690]
XRE_AddJarManifestLocation+0x0000F54D [/usr/local/lib/firefox/libxul.so
+0x0094C77D]
XRE_AddJarManifestLocation+0x0000C877 [/usr/local/lib/firefox/libxul.so
+0x00949AA7]
NS_InvokeByIndex+0x0001CDA3 [/usr/local/lib/firefox/libxul.so +0x00975553]
_ZNSt3__16vectorINS_4pairIiiEENS_9allocatorIS2_EEE21__push_back_slow_pathIS2_EEvOT_+0x0000ED1C
[/usr/local/lib/firefox/libxul.so +0x00CE039C]
std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char,
std::__1::char_traits<char>, std::__1::allocator<char> >,
std::__1::basic_string<char, std::__1::char_traits<c
XRE_AddJarManifestLocation+0x0000B36E [/usr/local/lib/firefox/libxul.so
+0x0094859E]
PR_GetThreadName+0x000001C9 [/usr/local/lib/libplds4.so.1 +0x0001AA19]
operator->+0x000007B5 [/lib/libthr.so.3 +0x00009585]
UNKNOWN 0x0
[69592] ###!!! ABORT: This Image should have already allocated data:
'mTextureClient', file
/usr/obj/usr/ports/www/firefox/work/mozilla-release/gfx/layers/ipc/SharedPlanarYCbCrIma
Hit MOZ_CRASH() at
/usr/obj/usr/ports/www/firefox/work/mozilla-release/memory/mozalloc/mozalloc_abort.cpp:30
Segmentation fault (core dumped)

--- Comment #1 from Bugzilla Automation <bugzilla at FreeBSD.org> ---
Maintainers CC'd

-- 
You are receiving this mail because:
You are on the CC list for the bug.