Closed Bug 924282 Opened 11 years ago Closed 9 years ago

Intermittent tp5o | application crashed [@ imgStatusTracker::GetImageStatus() const]

Categories

(Core :: Graphics: ImageLib, defect)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: philor, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

Rev5 MacOSX Mountain Lion 10.8 mozilla-inbound talos tp5o on 2013-10-07 10:44:36 PDT for push 5dd68636da74
slave: talos-mtnlion-r5-021

10:51:43     INFO -  __FAILbrowser non-zero return code (256)__FAIL
10:51:43     INFO -  DEBUG : Terminating: firefox, plugin-container, crashreporter
10:51:43     INFO -  dyld: DYLD_ environment variables being ignored because main executable (/bin/ps) is setuid or setgid
10:51:43     INFO -  dyld: DYLD_ environment variables being ignored because main executable (/bin/ps) is setuid or setgid
10:51:43     INFO -  dyld: DYLD_ environment variables being ignored because main executable (/bin/ps) is setuid or setgid
10:51:43     INFO -  dyld: DYLD_ environment variables being ignored because main executable (/bin/ps) is setuid or setgid
10:51:43     INFO -  dyld: DYLD_ environment variables being ignored because main executable (/bin/ps) is setuid or setgid
10:51:43     INFO -  dyld: DYLD_ environment variables being ignored because main executable (/bin/ps) is setuid or setgid
10:51:43     INFO -  mozcrash INFO | Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64/1381165165/firefox-27.0a1.en-US.mac.crashreporter-symbols.zip
10:52:21     INFO -  	Screen width/height:1600/1200
10:52:21     INFO -  	colorDepth:24
10:52:21     INFO -  	Browser inner width/height: 1024/681
10:52:21     INFO -  browser_name:Firefox
10:52:21     INFO -  browser_version:27.0a1
10:52:21     INFO -  buildID:20131007095925
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  Error in collecting counter: Private Bytes
10:52:21     INFO -  Error in collecting counter: Main_RSS
10:52:21     INFO -  PROCESS-CRASH | tp5o | application crashed [@ imgStatusTracker::GetImageStatus() const]
10:52:21     INFO -  Crash dump filename: /var/folders/jd/xd6ldtt56nlfkbk3n8fl9sb400000w/T/tmprN2a6X/profile/minidumps/F9142B26-E536-4AEC-9AE1-BC2194DD28C6.dmp
10:52:21     INFO -  Operating system: Mac OS X
10:52:21     INFO -                    10.8.0 12A269
10:52:21     INFO -  CPU: amd64
10:52:21     INFO -       family 6 model 42 stepping 7
10:52:21     INFO -       8 CPUs
10:52:21     INFO -  Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
10:52:21     INFO -  Crash address: 0x5c
10:52:21     INFO -  Thread 0 (crashed)
10:52:21     INFO -   0  XUL!imgStatusTracker::GetImageStatus() const [imgStatusTracker.cpp:5dd68636da74 : 428 + 0x0]
10:52:21     INFO -      rbx = 0x0000000000000000   r12 = 0x00007fff5fbfa8b0
10:52:21     INFO -      r13 = 0x000000011c6509e8   r14 = 0x00007fff5fbfa604
10:52:21     INFO -      r15 = 0x00007fff5fbfa980   rip = 0x0000000101680a14
10:52:21     INFO -      rsp = 0x00007fff5fbfa5d0   rbp = 0x00007fff5fbfa5d0
10:52:21     INFO -      Found by: given as instruction pointer in context
10:52:21     INFO -   1  XUL!imgRequestProxy::GetImageStatus(unsigned int*) [imgRequestProxy.cpp:5dd68636da74 : 515 + 0x7]
10:52:21     INFO -      rbx = 0x0000000000000000   r12 = 0x00007fff5fbfa8b0
10:52:21     INFO -      r13 = 0x000000011c6509e8   r14 = 0x00007fff5fbfa604
10:52:21     INFO -      r15 = 0x00007fff5fbfa980   rip = 0x000000010167d2bf
10:52:21     INFO -      rsp = 0x00007fff5fbfa5e0   rbp = 0x00007fff5fbfa5f0
10:52:21     INFO -      Found by: call frame info
10:52:21     INFO -   2  XUL!nsStyleImage::IsComplete() const [nsStyleStruct.cpp:5dd68636da74 : 1816 + 0xd]
10:52:21     INFO -      rbx = 0x0000000137278f00   r12 = 0x00007fff5fbfa8b0
10:52:21     INFO -      r13 = 0x000000011c6509e8   r14 = 0x0000000000000000
10:52:21     INFO -      r15 = 0x00007fff5fbfa980   rip = 0x00000001018971e0
10:52:21     INFO -      rsp = 0x00007fff5fbfa600   rbp = 0x00007fff5fbfa610
10:52:21     INFO -      Found by: call frame info
10:52:21     INFO -   3  XUL!nsImageRenderer::PrepareImage() [nsCSSRendering.cpp:5dd68636da74 : 4412 + 0x4]
10:52:21     INFO -      rbx = 0x0000000137278f68   r12 = 0x00007fff5fbfa8b0
10:52:21     INFO -      r13 = 0x000000011c6509e8   r14 = 0x0000000000000000
10:52:21     INFO -      r15 = 0x00007fff5fbfa980   rip = 0x00000001016e48bb
10:52:21     INFO -      rsp = 0x00007fff5fbfa620   rbp = 0x00007fff5fbfa790
10:52:21     INFO -      Found by: call frame info
10:52:21     INFO -   4  XUL!nsCSSRendering::PrepareBackgroundLayer(nsPresContext*, nsIFrame*, unsigned int, nsRect const&, nsRect const&, nsStyleBackground const&, nsStyleBackground::Layer const&) [nsCSSRendering.cpp:5dd68636da74 : 3087 + 0x7]
10:52:21     INFO -      rbx = 0x0000000137278f68   r12 = 0x00007fff5fbfa8b0
10:52:21     INFO -      r13 = 0x000000011c6509e8   r14 = 0x0000000000000000
10:52:21     INFO -      r15 = 0x00007fff5fbfa980   rip = 0x00000001016e3d4c
10:52:21     INFO -      rsp = 0x00007fff5fbfa7a0   rbp = 0x00007fff5fbfa890
10:52:21     INFO -      Found by: call frame info
Version: 15 Branch → Trunk
Component: Graphics → ImageLib
See Also: → 976125
dmajor found that all those functions resolve to the same machine code and are folded together in the binary:

    xul!imgStatusTracker::GetImageStatus (void)
    xul!webrtc::GainControlImpl::compression_gain_db (void)
    xul!webrtc::I420VideoFrame::height (void)
    xul!nsCSSStyleSheet::GetOwningDocument (void) 

I'm adding them all to the signature field so that the cases in the wild get linked to this bug.
imgStatusTracker::GetImageStatus is the right signature judging from the frame above it.
Crash Signature: [@ imgStatusTracker::GetImageStatus() ] [@ webrtc::GainControlImpl::compression_gain_db() ] [@ webrtc::I420VideoFrame::height() ] [@ nsCSSStyleSheet::GetOwningDocument() ]
Inactive; closing (see bug 1180138).
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.