Bug 50014 – Crash in d3d9!CD3DDDIDX8::DrawIndexedPrimitiveUP after ctrl-t in r72493

• Component: WebKit Misc.
• Status: RESOLVED WONTFIX

[Jyrki Wahlstedt]

Created attachment 74740 [details]
crash dump from r72493 after ctrl-t

What happened, was that I pressed ctrl-t requesting a new tab, after which the URL field was cleared (still showing the current site's favico), no new tab was created before the crash.

Crash dump attached...

[Jyrki Wahlstedt]

Created attachment 74906 [details]
crash dump 2 from r72493 after ctrl-t

[Jyrki Wahlstedt]

This seems to happen, not always, which is good, just occasionally, which is sad, hard to reproduce

Two extensions: AdBlock, ClickToFlash

[Adam Roben (:aroben)]

What is your "New tabs open with" setting in Safari's preferences?

The crash is inside Direct3D. Here's the backtrace of the crashing thread:


.  0  Id: 17b0.1f70 Suspend: -1 Teb: 7ffdd000 Unfrozen
 # ChildEBP RetAddr  
00 0013a0c8 4fe6388f d3d9!CD3DDDIDX8::DrawIndexedPrimitiveUP+0x34b
01 0013a0e4 4fe58db4 d3d9!CD3DHal::DrawIndexedPrimitiveUPI+0x2f
02 0013a12c 02eb8584 d3d9!CD3DBase::DrawIndexedPrimitiveUP+0x1e4
03 0013a160 02ec5342 QuartzCore!CA::OGL::DX9Context::draw_elements+0x94
04 0013a180 02ec543c QuartzCore!CA::OGL::Context::draw_elements+0x32
05 0013a1a4 02ec52bd QuartzCore!CA::OGL::Context::array_flush+0x2c
06 0013a1b8 02ec7fe5 QuartzCore!CA::OGL::Context::ClippedArray::next_rect+0xdd
07 0013a24c 02ec9fa1 QuartzCore!CA::OGL::emit_one_part_rect+0x105
08 0013a2ac 02ecabd4 QuartzCore!CA::OGL::fill_rect+0x71
09 0013a300 02ebf6c7 QuartzCore!CA::OGL::fill_round_rect+0x74
0a 0013a3bc 02ebf756 QuartzCore!CA::OGL::render_solid_background+0x4d7
0b 0013a3ec 02ec15c5 QuartzCore!CA::OGL::render_background+0x46
0c 0013a530 02ebcb2f QuartzCore!CA::OGL::render_contents_background+0x4c5
0d 0013a550 02ebc45e QuartzCore!CA::OGL::LayerNode::apply+0x4f
0e 0013a634 02ebc45e QuartzCore!CA::OGL::ImagingNode::set_roi+0x13e
0f 0013a6cc 02ec3453 QuartzCore!CA::OGL::ImagingNode::set_roi+0x13e
10 0013a6ec 02eb5c0c QuartzCore!CA::OGL::prepare_layers+0x23
11 0013e3a0 02eabea0 QuartzCore!CA::OGL::Context::render+0x23c
12 0013e3a8 02eabea0 QuartzCore!CARenderOGLRender+0x10
13 0013e424 7c911483 QuartzCore!CARenderOGLRender+0x10
14 0013e4d8 02bb6c95 ntdll!RtlpFreeDebugInfo+0x77
15 0013eac4 02c8891f CoreGraphics!argb32_image+0xb55
16 0013ead4 02c884c2 CoreGraphics!ripl_Mark+0x1f
17 0013ecc8 02c7d851 CoreGraphics!ripl_BltImage+0x322
18 0013ee68 012da888 CoreGraphics!ripc_DrawImage+0x291
19 0013eea8 7c9100b8 CoreFoundation!CFEqual+0xc6
1a 0013ef78 7c910041 ntdll!RtlpFreeToHeapLookaside+0x22
1b 0013f044 003d07d8 ntdll!RtlFreeHeap+0x1e9
WARNING: Frame IP not in any known module. Following frames may be wrong.
1c 0013f0d4 012a6d2f 0x3d07d8
1d 0013f1f4 02c32612 CoreFoundation!__CFBasicHashDrain+0x2b1
1e 0013f248 03a843b9 CoreGraphics!x_thread_self+0x12
1f 0013f258 7c9100b8 SafariTheme!STPaintSegmentedControlImage+0x69
20 0013f298 7c910041 ntdll!RtlpFreeToHeapLookaside+0x22
21 0013f364 00000000 ntdll!RtlFreeHeap+0x1e9

[Jyrki Wahlstedt]

(In reply to comment #3)
> What is your "New tabs open with" setting in Safari's preferences?
> 
> The crash is inside Direct3D. Here's the backtrace of the crashing thread:
> 
<snip>

I open new tabs with "Top Sites"

[Jyrki Wahlstedt]

This hasn't been a problem for a while, so by me it's ok

[Jyrki Wahlstedt]

I've changed from WinXP to Win7 (broken disk, change not necessarily to better, but anyhow), so I am not able to provide any status checks anymore. Generally, however, I saw no repeatable crashes before the (disk & OS) change, so I'd say by me it's ok.

[Adam Roben (:aroben)]

Thanks for the update, Jyrki!

We're still seeing this crash in Windows Error Reporter data, so we should keep this bug open.

<rdar://problem/8079945>

[Ahmad Saleem]

@Fuji - I think this was related to AppleWin port - at least from crash logs mentioning `QuartzCore` while win-cairo uses `Cairo`, do you think this is still applicable?

[Fujii Hironori]

Yup. We can close.