Problem could be reproduced with following graphic adapters:
01:00.0 VGA compatible controller: NVIDIA Corporation NV40 [GeForce 6800] (rev 
a1)
01:00.0 VGA compatible controller: NVIDIA Corporation NV31 [GeForce FX 5600XT] 
(rev a1)

(Firefox probably blacklisted the second card for webgl, to be able to 
investigate on the issue I had to enable manually.)
But the crash happens for the first card with default settings.

As far as I could observe, Firefox creates 3 contexts, then destroys the
last one but then still accesses the freed memory of the destroyed
context.

I believe this crash got fixed by this upstream commit:
http://cgit.freedesktop.org/mesa/mesa/commit/src/gallium/drivers/nouveau/nv30/nv30_context.c?id=c092c46b27c6f6a6674e8d67fb3afdb684811819
Unfortunately this commit got only into 10.2.2.

But as Trusty Tahr is a LTS release it probably will stay a long time with 
users using older graphics cards.
Therefore I ask if this little patch could be added.

------
Building package libgl1-mesa-dri like this makes the crash for me go away:
mkdir -p ~/ubuntu/mesa; cd ~/ubuntu/mesa
apt-get source libgl1-mesa-dri
cd mesa-10.1.3
wget wget 
http://cgit.freedesktop.org/mesa/mesa/patch/src/gallium/drivers/nouveau/nv30/nv30_context.c?id=c092c46b27c6f6a6674e8d67fb3afdb684811819
 -O debian/patches/999-nv30_avoid_dangling_references_to_deleted_contexts.patch
echo "999-nv30_avoid_dangling_references_to_deleted_contexts.patch" >> 
debian/patches/series
patch -p1 < 
debian/patches/999-nv30_avoid_dangling_references_to_deleted_contexts.patch
dpkg-buildpackage
cd ..
# sudo dpkg -i libgl1-mesa-dri_10.1.3-0ubuntu0.1_i386.deb
------

Other references where this bug seems to appear (just for reference):
https://bugzilla.redhat.com/show_bug.cgi?id=1125339
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661387
https://crash-stats.mozilla.com/report/list?signature=nouveau_dri.so%400x239b79


** Bug watch added: Red Hat Bugzilla #1125339
   https://bugzilla.redhat.com/show_bug.cgi?id=1125339

** Bug watch added: Debian Bug tracker #661387
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661387

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to mesa in Ubuntu.
https://bugs.launchpad.net/bugs/1364522

Title:
  Firefox crashes sometimes when using webgl with nouveau driver

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mesa/+bug/1364522/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to     : ubuntu-x-swat@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help   : https://help.launchpad.net/ListHelp

Reply via email to