Crash in 8 bitdepth file
Crash with ASM enabled when the following link is visited: https://demo.bitmovin.com/public/firefox/av1/
#0 0x00007f66834bb570 in __GI___nanosleep (requested_time=requested_time@entry=0x7f664c5d7ea0, remaining=remaining@entry=0x7f664c5d7ea0)
at ../sysdeps/unix/sysv/linux/nanosleep.c:27
#1 0x00007f66834bb47a in __sleep (seconds=0) at ../sysdeps/posix/sleep.c:55
#2 0x00007f667236377a in ah_crap_handler(int) (signum=11) at /home/achronop/myrepos/mozilla/firefox/toolkit/xre/nsSigHandlers.cpp:102
#3 0x00007f6672363879 in child_ah_crap_handler(int) (signum=11) at /home/achronop/myrepos/mozilla/firefox/toolkit/xre/nsSigHandlers.cpp:114
#4 0x00007f6672b742ab in js::UnixExceptionHandler(int, siginfo_t*, void*) (signum=11, info=0x7f664c5d8130, context=0x7f664c5d8000)
at /home/achronop/myrepos/mozilla/firefox/js/src/ds/MemoryProtectionExceptionHandler.cpp:292
#5 0x00007f66734e5977 in WasmTrapHandler(int, siginfo_t*, void*) (signum=11, info=0x7f664c5d8130, context=0x7f664c5d8000)
at /home/achronop/myrepos/mozilla/firefox/js/src/wasm/WasmSignalHandlers.cpp:780
#6 0x00007f66842ae1c0 in <signal handler called> () at /lib64/libpthread.so.0
#7 0x00007f667080c562 in dav1d_lpf_h_sb_y_avx2.loop () at /home/achronop/myrepos/mozilla/firefox/obj-x86_64-pc-linux-gnu/dist/include/mozilla/RefPtr.h:307
#8 0x00007f664c5d8898 in ()
#9 0x00007f664c5d88a0 in ()
#10 0x00007f6683000088 in ()
#11 0x00007f664c5d8858 in ()
#12 0x00007f66518016d0 in ()
#13 0x00007f66518016d0 in ()
#14 0x00007f664c5d85f0 in ()
#15 0x00007f665ae01148 in ()
#16 0x00007f664c5d8600 in ()
#17 0x00005611f8c9f5cc in RedBlackTreeNode<arena_chunk_map_t>::SetRight(arena_chunk_map_t*) (this=0x1, aValue=0x7f6652207ab0)
at /home/achronop/myrepos/mozilla/firefox/memory/build/rb.h:101
#18 0x00007f66707e5918 in dav1d_loopfilter_sbrow_8bpc (f=0x7f6652207ab0, p=0x7f665220d488, lflvl=0x7f66518ce000, sby=0, start_of_tile_row=0)
at /home/achronop/myrepos/mozilla/firefox/obj-x86_64-pc-linux-gnu/media/libdav1d/8bd_lf_apply_tmpl.c:270
#19 0x00007f66707f7fa0 in dav1d_filter_sbrow_8bpc (f=0x7f6652207ab0, sby=0)
at /home/achronop/myrepos/mozilla/firefox/obj-x86_64-pc-linux-gnu/media/libdav1d/8bd_recon_tmpl.c:1464
#20 0x00007f6670789188 in dav1d_decode_frame (f=0x7f6652207ab0) at /home/achronop/myrepos/mozilla/firefox/third_party/dav1d/src/decode.c:2673
#21 0x00007f66707aa2f4 in dav1d_frame_task (data=0x7f6652207ab0) at /home/achronop/myrepos/mozilla/firefox/third_party/dav1d/src/thread_task.c:44
#22 0x00007f66842a350b in start_thread (arg=0x7f664c5d9700) at pthread_create.c:465
#23 0x00007f66834ed38f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95