New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 707445 link

Starred by 4 users

Issue metadata

Status: WontFix
Owner:
OOO until 2019-01-24
Closed: Sep 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug



Sign in to add a comment

WebGL crash likely caused by call to copyTexImage2D

Project Member Reported by evan....@gmail.com, Mar 31 2017

Issue description

Chrome Version: 57.0.2987.133 (Official Build) (64-bit)
OS: macOS Sierra Version 10.12.4
Hardware: MacBook Pro (Retina, 13-inch, Early 2015)
Processor: 3.1 GHz Intel Core i7
Memory: 16 GB 1867 MHz DDR3
Graphics: Intel Iris Graphics 6100 1536 MB

What steps will reproduce the problem?
Open the attached playback.html file.

What is the expected result?
A large light rectangle with a small dark square inside it.

What happens instead?
WebGL crashes.

Please use labels and text to provide additional information.
The attached files contain a reduced test case from https://www.figma.com/ captured using https://github.com/evanw/webgl-recorder. This was crashing on one of our user's machines and we were fortunate to get the chance to observe the bug directly on their machine. We reduced it to this test case and recorded the trace. We also turned on Chrome's crash reporting and logged a bunch of crashes. One of those is 926f27a0-3a8c-48b7-bb54-56813f7f2c6f, which is also attached. I suspect this was caused by copyTexImage2D because I replaced that with an equivalent call to copyTexSubImage2D and the problem went away (WebGL stopped crashing and started rendering correctly).

For graphics-related bugs, please copy/paste the contents of the about:gpu
page at the end of this report.

Graphics Feature Status

Canvas: Hardware accelerated
Flash: Hardware accelerated
Flash Stage3D: Hardware accelerated
Flash Stage3D Baseline profile: Hardware accelerated
Compositing: Hardware accelerated
Multiple Raster Threads: Enabled
Native GpuMemoryBuffers: Hardware accelerated
Rasterization: Hardware accelerated
Video Decode: Hardware accelerated
Video Encode: Hardware accelerated
VPx Video Decode: Hardware accelerated
WebGL: Hardware accelerated
WebGL2: Hardware accelerated

Driver Bug Workarounds

add_and_true_to_loop_condition
adjust_src_dst_region_for_blitframebuffer
decode_encode_srgb_for_generatemipmap
disable_framebuffer_cmaa
disable_multimonitor_multisampling
disable_webgl_rgb_multisampling_usage
emulate_abs_int_function
get_frag_data_info_bug
init_two_cube_map_levels_before_copyteximage
msaa_is_slow
pack_parameters_workaround_with_pack_buffer
rebind_transform_feedback_before_resume
regenerate_struct_names
remove_invariant_and_centroid_for_essl3
reset_base_mipmap_level_before_texstorage
rewrite_texelfetchoffset_to_texelfetch
scalarize_vec_and_mat_constructor_args
set_zero_level_before_generating_mipmap
unfold_short_circuit_as_ternary_operation
unpack_alignment_workaround_with_unpack_buffer
unpack_image_height_workaround_with_unpack_buffer
use_intermediary_for_copy_texture_image
use_unused_standard_shared_blocks

Problems Detected

Multisampling is buggy on OSX when multiple monitors are connected: 237931
Applied Workarounds: disable_multimonitor_multisampling
Unfold short circuit on Mac OS X: 307751
Applied Workarounds: unfold_short_circuit_as_ternary_operation
Always rewrite vec/mat constructors to be consistent: 398694
Applied Workarounds: scalarize_vec_and_mat_constructor_args
Mac drivers handle struct scopes incorrectly: 403957
Applied Workarounds: regenerate_struct_names
On Intel GPUs MSAA performance is not acceptable for GPU rasterization: 527565
Applied Workarounds: msaa_is_slow
glGenerateMipmap fails if the zero texture level is not set on some Mac drivers: 560499
Applied Workarounds: set_zero_level_before_generating_mipmap
Pack parameters work incorrectly with pack buffer bound: 563714
Applied Workarounds: pack_parameters_workaround_with_pack_buffer
Alignment works incorrectly with unpack buffer bound: 563714
Applied Workarounds: unpack_alignment_workaround_with_unpack_buffer
copyTexImage2D fails when reading from IOSurface on multiple GPU types.: 581777
Applied Workarounds: use_intermediary_for_copy_texture_image
Multisample renderbuffers with format GL_RGB8 have performance issues on Intel GPUs.: 607130
Applied Workarounds: disable_webgl_rgb_multisampling_usage
Limited enabling of Chromium GL_INTEL_framebuffer_CMAA: 535198
Applied Workarounds: disable_framebuffer_cmaa
glGetFragData{Location|Index} works incorrectly on Max: 638340
Applied Workarounds: get_frag_data_info_bug
glResumeTransformFeedback works incorrectly on Intel GPUs: 638514
Applied Workarounds: rebind_transform_feedback_before_resume
glTexStorage* are buggy when base mipmap level is not 0: 640506
Applied Workarounds: reset_base_mipmap_level_before_texstorage
Result of abs(i) where i is an integer in vertex shader is wrong: 642227
Applied Workarounds: emulate_abs_int_function
Rewrite texelFetchOffset to texelFetch for Intel Mac: 642605
Applied Workarounds: rewrite_texelfetchoffset_to_texelfetch
Rewrite condition in for and while loops for Intel Mac: 644669
Applied Workarounds: add_and_true_to_loop_condition
Decode and encode before generateMipmap for srgb format textures on macosx: 634519
Applied Workarounds: decode_encode_srgb_for_generatemipmap
Init first two levels before CopyTexImage2D for cube map texture on Intel Mac 10.12: 648197
Applied Workarounds: init_two_cube_map_levels_before_copyteximage
Insert statements to reference all members in unused std140/shared blocks on Mac: 618464
Applied Workarounds: use_unused_standard_shared_blocks
Tex(Sub)Image3D performs incorrectly when uploading from unpack buffer with GL_UNPACK_IMAGE_HEIGHT greater than zero on Intel Macs: 654258
Applied Workarounds: unpack_image_height_workaround_with_unpack_buffer
adjust src/dst region if blitting pixels outside read framebuffer on Mac: 644740
Applied Workarounds: adjust_src_dst_region_for_blitframebuffer
Mac driver GL 4.1 requires invariant and centroid to match between shaders: 639760, 641129
Applied Workarounds: remove_invariant_and_centroid_for_essl3
Disable KHR_blend_equation_advanced until cc shaders are updated: 661715

Version Information

Data exported 3/31/2017, 2:56:43 PM
Chrome version  Chrome/57.0.2987.133
Operating system  Mac OS X 10.12.4
Software rendering list version 0
Driver bug list version 9.29
ANGLE commit id c1a5d16e964a
2D graphics backend Skia/57 ae9cc5d3588d52f4b371b55845704b25d88cf06d
Command Line Args Chrome.app/Contents/MacOS/Google Chrome --flag-switches-begin --ignore-gpu-blacklist --flag-switches-end

Driver Information

Initialization time 30
In-process GPU  false
Passthrough Command Decoder false
Sandboxed true
GPU0  VENDOR = 0x8086, DEVICE= 0x162b *ACTIVE*
Optimus false
AMD switchable  false
Driver vendor
Driver version  10.24.45
Driver date
Pixel shader version  4.10
Vertex shader version 4.10
Max. MSAA samples 8
Machine model name  MacBookPro
Machine model version 12.1
GL_VENDOR Intel Inc.
GL_RENDERER Intel(R) Iris(TM) Graphics 6100
GL_VERSION  4.1 INTEL-10.24.45
GL_EXTENSIONS GL_ARB_blend_func_extended GL_ARB_draw_buffers_blend GL_ARB_draw_indirect GL_ARB_ES2_compatibility GL_ARB_explicit_attrib_location GL_ARB_gpu_shader_fp64 GL_ARB_gpu_shader5 GL_ARB_instanced_arrays GL_ARB_internalformat_query GL_ARB_occlusion_query2 GL_ARB_sample_shading GL_ARB_sampler_objects GL_ARB_separate_shader_objects GL_ARB_shader_bit_encoding GL_ARB_shader_subroutine GL_ARB_shading_language_include GL_ARB_tessellation_shader GL_ARB_texture_buffer_object_rgb32 GL_ARB_texture_cube_map_array GL_ARB_texture_gather GL_ARB_texture_query_lod GL_ARB_texture_rgb10_a2ui GL_ARB_texture_storage GL_ARB_texture_swizzle GL_ARB_timer_query GL_ARB_transform_feedback2 GL_ARB_transform_feedback3 GL_ARB_vertex_attrib_64bit GL_ARB_vertex_type_2_10_10_10_rev GL_ARB_viewport_array GL_EXT_debug_label GL_EXT_debug_marker GL_EXT_framebuffer_multisample_blit_scaled GL_EXT_texture_compression_s3tc GL_EXT_texture_filter_anisotropic GL_EXT_texture_sRGB_decode GL_APPLE_client_storage GL_APPLE_container_object_shareable GL_APPLE_flush_render GL_APPLE_object_purgeable GL_APPLE_rgb_422 GL_APPLE_row_bytes GL_APPLE_texture_range GL_ATI_texture_mirror_once GL_NV_texture_barrier
Disabled Extensions GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent
Window system binding vendor
Window system binding version
Window system binding extensions
Direct rendering  Yes
Reset notification strategy 0x0000
GPU process crash count 1

Compositor Information

Tile Update Mode  Zero-copy
Partial Raster  Enabled

GpuMemoryBuffers Status

ATC Software only
ATCIA Software only
DXT1  Software only
DXT5  Software only
ETC1  Software only
R_8 GPU_READ_CPU_READ_WRITE, GPU_READ_CPU_READ_WRITE_PERSISTENT
RG_88 Software only
BGR_565 Software only
RGBA_4444 Software only
RGBX_8888 Software only
RGBA_8888 GPU_READ, SCANOUT
BGRX_8888 GPU_READ, SCANOUT
BGRA_8888 GPU_READ, SCANOUT, GPU_READ_CPU_READ_WRITE, GPU_READ_CPU_READ_WRITE_PERSISTENT
YVU_420 Software only
YUV_420_BIPLANAR  GPU_READ_CPU_READ_WRITE, GPU_READ_CPU_READ_WRITE_PERSISTENT
UYVY_422  GPU_READ_CPU_READ_WRITE, GPU_READ_CPU_READ_WRITE_PERSISTENT

Log Messages

GpuProcessHostUIShim: The GPU process crashed!
[2761:775:0331/145544.710589:ERROR:gles2_cmd_decoder.cc(17287)] : [.DisplayCompositor-0x7fe96a065600]GL ERROR :GL_INVALID_OPERATION : glCreateAndConsumeTextureCHROMIUM: invalid mailbox name
[2761:775:0331/145544.712086:ERROR:gles2_cmd_decoder.cc(11881)] : [.DisplayCompositor-0x7fe96a065600]GL ERROR :GL_INVALID_VALUE : glScheduleCALayerCHROMIUM: unsupported texture format

 
926f27a0-3a8c-48b7-bb54-56813f7f2c6f.dmp
152 KB Download
playback.html
324 bytes View Download
trace.js
199 KB View Download
playback.log
6.1 KB View Download
Components: Blink>WebGL
Cc: kbr@chromium.org

Comment 3 by kbr@chromium.org, Mar 31 2017

Labels: -Pri-3 GPU-Intel Pri-2
Owner: kbr@chromium.org
Status: Assigned (was: Untriaged)
Thanks very much for the report and test case. We'll try to reproduce in house. It's GPU specific, or at least, doesn't happen on the NVIDIA GPU in my laptop.

Kai, could you triage this?

Owner: kainino@chromium.org
I spent a minute on this and symbolized the minidump. According to the stack trace the crash is inside the Apple Intel driver. Will continue looking at this Monday.
Status: Started (was: Assigned)
Able to reproduce. This seems to be a regression in macOS 10.12.4 (and exists in the beta version I have installed (16E192b)); it works in 10.12.3. The crash persists in Canary.

I'll be filing a bug with Apple about this.

For future reference, here's info from my reproduced crash:
crash/a8e69baee0000000

0x00007fffa5a60178	(IOAccelerator + 0x00003178 )	IOAccelContextAddResource
0x000000010d831937	(AppleIntelBDWGraphicsGLDriver + 0x00497937 )	
0x000000010d82ebf2	(AppleIntelBDWGraphicsGLDriver + 0x00494bf2 )	
0x000000010d84ce4c	(AppleIntelBDWGraphicsGLDriver + 0x004b2e4c )	
0x000000010d26cb88	(GLEngine + 0x000b7b88 )	glDrawArrays_GL3Exec
0x0000000107417ac1	(Google Chrome Framework -gles2_cmd_decoder.cc:10117 )	gpu::gles2::GLES2DecoderImpl::DoDrawArrays(char const*, bool, unsigned int, int, int, int)
0x00000001073e84b7	(Google Chrome Framework -gles2_cmd_decoder.cc:10143 )	gpu::gles2::GLES2DecoderImpl::HandleDrawArrays(unsigned int, void const volatile*)
0x000000010740a32f	(Google Chrome Framework -gles2_cmd_decoder.cc:5242 )	gpu::error::Error gpu::gles2::GLES2DecoderImpl::DoCommandsImpl<false>(unsigned int, void const volatile*, int, int*)
0x00000001073c5f64	(Google Chrome Framework -cmd_parser.cc:53 )	<name omitted>
Reduced test case (will be turned into a conformance test).

For the record: doesn't repro in Firefox (but we already know it should be a macOS regression).
crbug-707445.html
1.7 KB View Download
Status: ExternalDependency (was: Started)
Conformance test landed:
https://www.khronos.org/registry/webgl/sdk/tests/conformance/textures/misc/copy-tex-image-crash.html

Filed radar 31418060.
Cc: kainino@chromium.org
Owner: ----
Unassigning myself for bookkeeping.
Owner: kbr@chromium.org
Status: Assigned (was: ExternalDependency)
We've been asked to verify whether this issue still exists in 10.13 GM. kbr, if we have a 10.13 intel machine in the office, could you verify?

Comment 11 by kbr@chromium.org, Sep 26 2017

Status: WontFix (was: Assigned)
Just verified as fixed and closed the Radar. Closing this bug as WontFix -- no longer reproducible.

Sign in to add a comment