<html>
<head>
<base href="https://bugs.freedesktop.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - [regression] Firefox crashes on any WebGL usage with latest libdrm"
href="https://bugs.freedesktop.org/show_bug.cgi?id=107660">107660</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>[regression] Firefox crashes on any WebGL usage with latest libdrm
</td>
</tr>
<tr>
<th>Product</th>
<td>DRI
</td>
</tr>
<tr>
<th>Version</th>
<td>XOrg git
</td>
</tr>
<tr>
<th>Hardware</th>
<td>x86-64 (AMD64)
</td>
</tr>
<tr>
<th>OS</th>
<td>Linux (All)
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Keywords</th>
<td>regression
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>libdrm
</td>
</tr>
<tr>
<th>Assignee</th>
<td>dri-devel@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>kai@dev.carbon-project.org
</td>
</tr>
<tr>
<th>CC</th>
<td>emil.l.velikov@gmail.com
</td>
</tr></table>
<p>
<div>
<pre>I recently noticed, that tabs in Firefox (Debian package 61.0.1-1 and 61.0.2
from mozilla.org) started crashing on WebGL usage. The easiest trigger is to
just visit <a href="https://maps.gogle.com/">https://maps.gogle.com/</a>
Since I was pointed towards <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - random tab crashes in firefox nightly"
href="show_bug.cgi?id=107384#c6">bug 107384, comment #6</a> on IRC by Michel Dänzer and
I see the loader errors as he described on IRC, I'm assuming this is related. I
can't be 100 % sure, because I'm unable to get a proper backtrace from Firefox
(see below). It doesn't seem to be the same issue though, because using a
libdrm built from Git (f31fd57c60) doesn't fix the crashes for me.
I tried attaching GDB to the content process by launching firefox with:
$ MOZ_DEBUG_CHILD_PROCESS=1 firefox -safe-mode
and then running
# gdb /usr/lib/firefox/firefox $PID
where $PID is replaced by the actual PID of the tab process, which firefox
prints on the console when started with MOZ_DEBUG_CHILD_PROCESS=1. The
attaching seems to run fine, gdb is loading a bunch of debug information for
all the libraries and Firefox itself. But when I continue from the (gdb)
prompt, I immediately run into an endless stream of SIGSYS errors like
<span class="quote">> Thread 1 "Web Content" received signal SIGSYS, Bad system call.
> 0x00007f884b08b397 in __access (file=0x7f88370b3360 "/usr/share/gtk-3.0/settings.ini", type=type@entry=0) at ../sysdeps/unix/sysv/linux/access.c:27
> 27 ../sysdeps/unix/sysv/linux/access.c: No such file or directory.</span >
Probably the sandbox that prevents this? Sadly I haven't found a way around
that yet. (Any pointers welcome. Maybe it's possible to instrument
libdrm/radeonsi/… in a way, that helpful information can be dumped somewhere,
when the tab crashes.)
Without GDB the tab just crashes and offers to be closed or reloaded. In the
terminal window where I started Firefox (with a clean profile and in safe mode)
I get the following error:
<span class="quote">> libGL error: MESA-LOADER: failed to retrieve device information
> libGL error: unable to load driver: amdgpu_dri.so
> libGL error: driver pointer missing
> libGL error: failed to load driver: amdgpu
> libGL error: MESA-LOADER: failed to retrieve device information
> libGL error: unable to load driver: amdgpu_dri.so
> libGL error: driver pointer missing
> libGL error: failed to load driver: amdgpu
> [Parent 20860, Gecko_IOThread] WARNING: pipe error (47): Connection reset by peer: file /build/firefox-tG9MzV/firefox-61.0.1/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 353
> [Parent 20860, Gecko_IOThread] WARNING: pipe error: Broken pipe: file /build/firefox-tG9MzV/firefox-61.0.1/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 709
>
> ###!!! [Parent][MessageChannel] Error: (msgtype=0x160068,name=PBrowser::Msg_SynthMouseMoveEvent) Channel error: cannot send/recv
>
>
> ###!!! [Parent][MessageChannel] Error: (msgtype=0x16007F,name=PBrowser::Msg_Destroy) Channel error: cannot send/recv</span >
The graphics stack I used (fully updated Debian testing as a base) for testing
is:
GPU: Hawaii PRO [Radeon R9 290] (ChipID = 0x67b1)
Mesa: Git:master/5fab32ddad
libdrm: Git:master/f31fd57c60
LLVM: SVN:trunk/r340334 (8.0 devel)
X.Org: 2:1.20.0-3
Linux: 4.18.3
Firmware (firmware-amd-graphics): 20180518-1
libclc: Git:master/62a9191b60
DDX (xserver-xorg-video-amdgpu): 18.0.1-1+b1
Let me know, if you need anything else.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>