segfault of firefox-72.0.2[lto] with gcc-9.2.0-r3

lto-segfault (text/plain), 10.72 KB, created by tt_1 on 2020-01-31 20:57:58 UTC

Thread 1 "firefox" received signal SIGSEGV, Segmentation fault.
0x00007ffff35bfacc in mozilla::gfx::InlineTranslator::MemReader::read (n=16, 
    s=0x7fffffffb538 "xS\346\350\377\177", this=0x7fffffffb9f0)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/2d/InlineTranslator.cpp:30
30	/var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/2d/InlineTranslator.cpp: Datei oder Verzeichnis nicht gefunden.
(gdb)  bt
#0  0x00007ffff35bfacc in mozilla::gfx::InlineTranslator::MemReader::read
    (n=16, s=0x7fffffffb538 "xS\346\350\377\177", this=0x7fffffffb9f0)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/2d/InlineTranslator.cpp:30
#1  0x00007ffff35bfacc in mozilla::gfx::ElementStreamFormat<mozilla::gfx::InlineTranslator::TranslateRecording(char*, size_t)::MemReader, mozilla::gfx::ColorPatternStorage>::Read (aElement=..., aStream=...)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/gfx/RecordingTypes.h:24
#2  0x00007ffff35bfacc in mozilla::gfx::ReadElement<mozilla::gfx::InlineTranslator::TranslateRecording(char*, size_t)::MemReader, mozilla::gfx::ColorPatternStorage> (aElement=..., aStream=...)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/gfx/RecordingTypes.h:46
#3  0x00007ffff35bfacc in mozilla::gfx::RecordedEvent::ReadPatternData<mozilla::gfx::InlineTranslator::TranslateRecording(char*, unsigned long)::MemReader>(mozilla::gfx::InlineTranslator::TranslateRecording(char*, unsigned long)::MemReader&, mozilla::gfx::PatternStorage&) const [clone .isra.0] [clone .lto_priv.0]
    (aStream=..., aPattern=..., this=<optimized out>)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/2d/RecordedEventImpl.h:1556
#4  0x00007ffff09827e8 in mozilla::gfx::RecordedFillRect::RecordedFillRect<mozilla::gfx::InlineTranslator::TranslateRecording(char*, size_t)::MemReader>
--Type <RET> for more, q to quit, c to continue without paging--
    (aStream=..., this=0x7fffffffb4f0)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/2d/RecordedEventImpl.h:2151
#5  0x00007ffff09827e8 in mozilla::gfx::RecordedEvent::DoWithEvent<mozilla::gfx::InlineTranslator::TranslateRecording(char*, unsigned long)::MemReader>(mozilla::gfx::InlineTranslator::TranslateRecording(char*, unsigned long)::MemReader&, mozilla::gfx::RecordedEvent::EventType, std::function<bool (mozilla::gfx::RecordedEvent*)> const&) [clone .constprop.0]
    (aStream=..., aType=aType@entry=mozilla::gfx::RecordedEvent::FILLRECT, aAction=...)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/2d/RecordedEventImpl.h:3586
#6  0x00007ffff35c30da in mozilla::gfx::InlineTranslator::TranslateRecording(char*, unsigned long)
    (this=0x7fffffffbb30, aData=<optimized out>, aLen=<optimized out>)
    at /usr/lib/gcc/x86_64-pc-linux-gnu/9.2.0/include/g++-v9/new:174
#7  0x00007ffff3304d3d in mozilla::gfx::CrossProcessPaint::ResolveInternal(mozilla::dom::IdType<mozilla::dom::BrowserParent>, nsRefPtrHashtable<nsUint64HashKey, mozilla::gfx::SourceSurface>*)
    (this=this@entry=0x7fffc4afcf00, aTabId=..., aResolved=aResolved@entry=0x7fffffffbd30)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/ipc/CrossProcessPaint.cpp:396
--Type <RET> for more, q to quit, c to continue without paging--
#8  0x00007ffff332c6d1 in mozilla::gfx::CrossProcessPaint::MaybeResolve()
    (this=0x7fffc4afcf00)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/RefPtr.h:281
#9  0x00007ffff332c6d1 in mozilla::gfx::CrossProcessPaint::ReceiveFragment(mozilla::dom::WindowGlobalParent*, mozilla::gfx::PaintFragment&&)
    (this=0x7fffc4afcf00, aWGP=<optimized out>, aFragment=...)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/gfx/ipc/CrossProcessPaint.cpp:284
#10 0x00007ffff3770ef3 in mozilla::dom::WindowGlobalParent::<lambda(mozilla::dom::PWindowGlobalParent::PaintFragment&&)>::operator()
    (aFragment=..., __closure=0x7fffc59e2d88)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/RefPtr.h:305
#11 0x00007ffff3770ef3 in mozilla::MozPromise<mozilla::gfx::PaintFragment, mozilla::ipc::ResponseRejectReason, true>::InvokeMethod<mozilla::dom::WindowGlobalParent::DrawSnapshotInternal(mozilla::gfx::CrossProcessPaint*, const mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> >&, float, nscolor, uint32_t)::<lambda(mozilla::dom::PWindowGlobalParent::PaintFragment&&)>, void (mozilla::dom::WindowGlobalParent::DrawSnapshotInternal(mozilla::gfx::CrossProcessPaint*, const mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> >&, float, nscolor, uint32_t)::<lambda(mozilla::dom::PWindowGlobalParent::PaintFragment&&)>::*)(mozilla::gfx::PaintFragment&&) const, mozilla::gfx::PaintFragmen--Type <RET> for more, q to quit, c to continue without paging--
t> (aValue=..., aMethod=<optimized out>, aThisVal=0x7fffc59e2d88)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/MozPromise.h:512
#12 0x00007ffff3770ef3 in mozilla::MozPromise<mozilla::gfx::PaintFragment, mozilla::ipc::ResponseRejectReason, true>::InvokeCallbackMethod<false, mozilla::dom::WindowGlobalParent::DrawSnapshotInternal(mozilla::gfx::CrossProcessPaint*, const mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> >&, float, nscolor, uint32_t)::<lambda(mozilla::dom::PWindowGlobalParent::PaintFragment&&)>, void (mozilla::dom::WindowGlobalParent::DrawSnapshotInternal(mozilla::gfx::CrossProcessPaint*, const mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> >&, float, nscolor, uint32_t)::<lambda(mozilla::dom::PWindowGlobalParent::PaintFragment&&)>::*)(mozilla::gfx::PaintFragment&&) const, mozilla::gfx::PaintFragment, RefPtr<mozilla::MozPromise<mozilla::gfx::PaintFragment, mozilla::ipc::ResponseRejectReason, true>::Private> >
    (aCompletionPromise=..., aValue=..., aMethod=<optimized out>, aThisVal=0x7fffc59e2d88)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/MozPromise.h:544
#13 0x00007ffff3770ef3 in mozilla::MozPromise<mozilla::gfx::PaintFragment, mozilla::ipc::ResponseRejectReason, true>::ThenValue<mozilla::dom::WindowGlobalParent::DrawSnapshotInternal(mozilla::gfx::CrossProcessPaint*, const mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> >&, float, nscolor, uint32_t)::<lambda(mozilla::dom::PWindowGlobalParent::PaintFragment&&)>, mozilla::dom::--Type <RET> for more, q to quit, c to continue without paging--
WindowGlobalParent::DrawSnapshotInternal(mozilla::gfx::CrossProcessPaint*, const mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> >&, float, nscolor, uint32_t)::<lambda(mozilla::dom::PWindowGlobalParent::ResponseRejectReason&&)> >::DoResolveOrRejectInternal (aValue=..., this=0x7fffc59e2d60)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/MozPromise.h:726
#14 0x00007ffff3770ef3 in mozilla::MozPromise<mozilla::gfx::PaintFragment, mozilla::ipc::ResponseRejectReason, true>::ThenValueBase::DoResolveOrReject(mozilla::MozPromise<mozilla::gfx::PaintFragment, mozilla::ipc::ResponseRejectReason, true>::ResolveOrRejectValue&) (aValue=..., this=0x7fffc59e2d60)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/MozPromise.h:489
#15 0x00007ffff3770ef3 in mozilla::MozPromise<mozilla::gfx::PaintFragment, mozilla::ipc::ResponseRejectReason, true>::ThenValueBase::ResolveOrRejectRunnable::Run() (this=0x7fffc4fd3070)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/MozPromise.h:402
#16 0x00007ffff3c95f0b in nsThread::ProcessNextEvent(bool, bool*)
    (aResult=0x7fffffffbf97, aMayWait=<optimized out>, this=0x7ffff7768820)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/xpcom/threads/nsThread.cpp:1250
#17 0x00007ffff3c95f0b in nsThread::ProcessNextEvent(bool, bool*)
    (this=0x7ffff7768820, aMayWait=<optimized out>, aResult=0x7fffffffbf97)
--Type <RET> for more, q to quit, c to continue without paging--
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/xpcom/threads/nsThread.cpp:1081
#18 0x00007ffff3bb6368 in NS_ProcessNextEvent(nsIThread*, bool)
    (aThread=<optimized out>, aMayWait=<optimized out>)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/xpcom/threads/nsThreadUtils.cpp:486
#19 0x00007ffff38e8d72 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) (this=0x7fffecf33c40, aDelegate=0x7fffecf59040)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ipc/glue/MessagePump.cpp:88
#20 0x00007ffff39884f5 in MessageLoop::RunInternal() (this=<optimized out>)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/RefPtr.h:305
#21 0x00007ffff39884f5 in MessageLoop::RunHandler() (this=<optimized out>)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ipc/chromium/src/base/message_loop.cc:308
#22 0x00007ffff39884f5 in MessageLoop::Run() (this=<optimized out>)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ipc/chromium/src/base/message_loop.cc:290
#23 0x00007ffff1e08ab8 in nsBaseAppShell::Run() (this=0x7fffecfd5940)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/widget/nsBaseAppShell.cpp:137
#24 0x00007ffff149038f in nsAppStartup::Run() (this=0x7fffe8d4d510)
--Type <RET> for more, q to quit, c to continue without paging--
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/nsCOMPtr.h:841
#25 0x00007ffff13d8980 in XREMain::XRE_mainRun()
    (this=this@entry=0x7fffffffc500)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/nsCOMPtr.h:841
#26 0x00007ffff13e1a3f in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&)
    (aConfig=..., argv=<optimized out>, argc=<optimized out>, this=0x7fffffffc500)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/toolkit/xre/nsAppRunner.cpp:4751
#27 0x00007ffff13e1a3f in XRE_main(int, char**, mozilla::BootstrapConfig const&) (argc=<optimized out>, argv=<optimized out>, aConfig=...)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/toolkit/xre/nsAppRunner.cpp:4832
#28 0x00005555555c3d4b in do_main(int, char**, char**)
    (argc=1, argv=<optimized out>, envp=<optimized out>)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/ff/dist/include/mozilla/UniquePtr.h:308
#29 0x0000555555562c31 in main(int, char**, char**)
    (argc=1, argv=0x7fffffffe018, envp=0x7fffffffe028)
    at /var/tmp/portage/www-client/firefox-72.0.2/work/firefox-72.0.2/browser/ap--Type <RET> for more, q to quit, c to continue without paging--
p/nsBrowserApp.cpp:308