Closed Bug 752257 Opened 12 years ago Closed 8 years ago

OOM crash in mozilla::layers::BasicTiledLayerBuffer::PaintThebes

Categories

(Core :: Graphics: Layers, defect)

15 Branch
ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, Whiteboard: [native-crash][WFM?])

Crash Data

There are 5 crashes from the same user.

Signature 	TouchBadMemory | mozalloc_abort | moz_xmalloc | nsTArray_base<nsTArrayDefaultAllocator>::EnsureCapacity | mozilla::layers::TiledLayerBuffer<mozilla::layers::BasicTiledLayerBuffer, mozilla::layers::BasicTiledLayerTile>::Update More Reports Search
UUID	bd4c7966-982f-44a1-8a9c-a065d2120505
Date Processed	2012-05-05 14:03:38
Uptime	213
Last Crash	17.7 minutes before submission
Install Age	1.2 hours since version was first installed.
Install Time	2012-05-05 12:51:26
Product	FennecAndroid
Version	15.0a1
Build ID	20120505030510
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 3.0.8-gda6252b #1 SMP PREEMPT Fri Apr 13 11:35:09 PDT 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
AdapterVendorID: tuna, AdapterDeviceID: Galaxy Nexus.
AdapterDescription: 'Model: 'Galaxy Nexus', Product: 'yakju', Manufacturer: 'samsung', Hardware: 'tuna''.
samsung Galaxy Nexus
google/yakju/maguro:4.0.4/IMM76I/330937:user/release-keys
EMCheckCompatibility	True	
OOMAllocationSize	293408

Frame 	Module 	Signature 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	libmozalloc.so 	moz_xmalloc 	memory/mozalloc/mozalloc.cpp:89
3 	libxul.so 	nsTArray_base<nsTArrayDefaultAllocator>::EnsureCapacity 	nsTArray.h:88
4 	libxul.so 	mozilla::layers::TiledLayerBuffer<mozilla::layers::BasicTiledLayerBuffer, mozill 	nsTArray.h:752
5 	libxul.so 	mozilla::layers::BasicTiledLayerBuffer::PaintThebes 	gfx/layers/basic/BasicTiledThebesLayer.cpp:118
6 	libxul.so 	mozilla::layers::BasicTiledThebesLayer::PaintThebes 	gfx/layers/basic/BasicTiledThebesLayer.cpp:237
7 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:2034
8 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:2049
9 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:2049
10 	libxul.so 	mozilla::layers::BasicLayerManager::EndTransactionInternal 	gfx/layers/basic/BasicLayers.cpp:1699
11 	libxul.so 	mozilla::layers::BasicShadowLayerManager::EndTransaction 	gfx/layers/basic/BasicLayers.cpp:1646
12 	libxul.so 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:656
13 	libxul.so 	nsDisplayList::PaintRoot 	layout/base/nsDisplayList.cpp:561
14 	libxul.so 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1822
15 	libxul.so 	PresShell::Paint 	layout/base/nsPresShell.cpp:5312
16 	libxul.so 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:377
17 	libxul.so 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:806
18 	libxul.so 	HandleEvent 	view/src/nsView.cpp:158
19 	libxul.so 	nsWindow::DispatchEvent 	widget/android/nsWindow.cpp:673
20 	libxul.so 	nsWindow::DrawTo 	widget/android/nsWindow.cpp:1034
21 	libxul.so 	nsWindow::DrawTo 	widget/android/nsWindow.cpp:1082
22 	libxul.so 	nsWindow::OnDraw 	widget/android/nsWindow.cpp:1130
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=TouchBadMemory+|+mozalloc_abort+|+moz_xmalloc+|+nsTArray_base%3CnsTArrayDefaultAllocator%3E%3A%3AEnsureCapacity+|+mozilla%3A%3Alayers%3A%3ATiledLayerBuffer%3Cmozilla%3A%3Alayers%3A%3ABasicTiledLayerBuffer%2C+mozilla%3A%3Alayers%3A%3ABasicTiledLayerTile%3E%3A%3AUpdate
Same as bp-f784cbef-eabe-4f96-ad3b-144992131230 ??

mozalloc_abort(char const*) | mozalloc_handle_oom(unsigned int) | moz_xmalloc | mozilla::layers::BasicTiledLayerTile::OpenDescriptor(mozilla::layers::ISurfaceAllocator*, mozilla::layers::TileDescriptor const&) 

It's the most common OOM of past 4 weeks and the stack doesn't match.
Even if it's the same crash, the above signature is only 4 occurrences, so worth pursing without a testcase??
Whiteboard: [native-crash] → [native-crash][WFM?]
Crash Signature: [@ TouchBadMemory | mozalloc_abort | moz_xmalloc | nsTArray_base<nsTArrayDefaultAllocator>::EnsureCapacity | mozilla::layers::TiledLayerBuffer<mozilla::layers::BasicTiledLayerBuffer, mozilla::layers::BasicTiledLayerTile>::Update] → [@ TouchBadMemory | mozalloc_abort | moz_xmalloc | nsTArray_base<nsTArrayDefaultAllocator>::EnsureCapacity | mozilla::layers::TiledLayerBuffer<mozilla::layers::BasicTiledLayerBuffer, mozilla::layers::BasicTiledLayerTile>::Update] [@ TouchBadMemory | moza…
Mass resolving WFM: signature(s) hasn't(/haven't) reported in past 28 days.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.