Closed Bug 967075 Opened 10 years ago Closed 9 years ago

crash in GrDrawTarget::getClip() const

Categories

(Core :: Graphics, defect)

28 Branch
All
Android
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: nhirata, Unassigned)

References

()

Details

(Keywords: crash, topcrash-b2g, Whiteboard: [b2g-crash])

Crash Data

This bug was filed from the Socorro interface and is 
report bp-7cbadcea-db26-4de3-bfff-e30a52140129.
=============================================================
Crashing Thread
Frame 	Module 	Signature 	Source
0 	libxul.so 	GrDrawTarget::getClip() const 	gfx/skia/src/gpu/GrDrawTarget.cpp
1 	libxul.so 	mozilla::RtspMediaResource::Suspend(bool) 	content/media/RtspMediaResource.cpp
2 	libxul.so 	mozilla::MediaDecoder::Suspend() 	content/media/MediaDecoder.cpp
3 	libxul.so 	mozilla::dom::HTMLMediaElement::SuspendOrResumeElement(bool, bool) 	content/html/content/src/HTMLMediaElement.cpp
4 	libxul.so 	mozilla::dom::HTMLMediaElement::NotifyOwnerDocumentActivityChanged() 	content/html/content/src/HTMLMediaElement.cpp
5 	libxul.so 	mozilla::dom::HTMLVideoElement::NotifyOwnerDocumentActivityChanged() 	content/html/content/src/HTMLVideoElement.cpp
6 	libxul.so 	NotifyActivityChanged 	content/base/src/nsDocument.cpp
7 	libxul.so 	EnumerateFreezables 	content/base/src/nsDocument.cpp
8 	libxul.so 	nsTHashtable<nsPtrHashKey<nsIContent> >::s_EnumStub(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*) 	/builds/slave/b2g_m-aurora_ham_ntly-00000000/build/objdir-gecko/content/base/src/../../../dist/include/nsTHashtable.h
9 	libxul.so 	PL_DHashTableEnumerate 	xpcom/glue/pldhash.cpp
10 	libxul.so 	nsIDocument::EnumerateFreezableElements(void (*)(nsIContent*, void*), void*) 	/builds/slave/b2g_m-aurora_ham_ntly-00000000/build/objdir-gecko/content/base/src/../../../dist/include/nsTHashtable.h
11 	libxul.so 	nsDocument::UpdateVisibilityState() 	content/base/src/nsDocument.cpp
12 	libxul.so 	nsDocument::OnPageHide(bool, mozilla::dom::EventTarget*) 	content/base/src/nsDocument.cpp
13 	libxul.so 	nsDocumentViewer::PageHide(bool) 	layout/base/nsDocumentViewer.cpp
14 	libxul.so 	nsDocShell::FirePageHideNotification(bool) 	docshell/base/nsDocShell.cpp
15 	libxul.so 	nsDocShell::CreateContentViewer(char const*, nsIRequest*, nsIStreamListener**) 	docshell/base/nsDocShell.cpp
16 	libxul.so 	nsDSURIContentListener::DoContent(char const*, bool, nsIRequest*, nsIStreamListener**, bool*) 	docshell/base/nsDSURIContentListener.cpp
17 	libxul.so 	nsDocumentOpenInfo::TryContentListener(nsIURIContentListener*, nsIChannel*) 	uriloader/base/nsURILoader.cpp
18 	libxul.so 	nsDocumentOpenInfo::DispatchContent(nsIRequest*, nsISupports*) 	uriloader/base/nsURILoader.cpp
19 	libxul.so 	nsDocumentOpenInfo::OnStartRequest(nsIRequest*, nsISupports*) 	uriloader/base/nsURILoader.cpp
20 	libxul.so 	mozilla::net::HttpChannelChild::OnStartRequest(nsHttpResponseHead const&, bool const&, nsHttpHeaderArray const&, bool const&, bool const&, unsigned int const&, nsCString const&, nsCString const&, mozilla::net::NetAddr const&, mozilla::net::NetAddr const&) 	netwerk/protocol/http/HttpChannelChild.cpp
21 	libxul.so 	mozilla::net::HttpChannelChild::RecvOnStartRequest(nsHttpResponseHead const&, bool const&, nsHttpHeaderArray const&, bool const&, bool const&, unsigned int const&, nsCString const&, nsCString const&, mozilla::net::NetAddr const&, mozilla::net::NetAddr const&) 	netwerk/protocol/http/HttpChannelChild.cpp
22 	libxul.so 	mozilla::net::PHttpChannelChild::OnMessageReceived(IPC::Message const&) 	/builds/slave/b2g_m-aurora_ham_ntly-00000000/build/objdir-gecko/ipc/ipdl/PHttpChannelChild.cpp
23 	libxul.so 	mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) 	/builds/slave/b2g_m-aurora_ham_ntly-00000000/build/objdir-gecko/ipc/ipdl/PContentChild.cpp
24 	libxul.so 	mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&) 	ipc/glue/MessageChannel.cpp
25 	libxul.so 	mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message const&) 	ipc/glue/MessageChannel.cpp
26 	libxul.so 	mozilla::ipc::MessageChannel::OnMaybeDequeueOne() 	ipc/glue/MessageChannel.cpp
27 	libxul.so 	RunnableMethod<WebCore::ReverbConvolver, void (WebCore::ReverbConvolver::*)(), Tuple0>::Run() 	ipc/chromium/src/base/tuple.h
28 	libxul.so 	mozilla::ipc::MessageChannel::DequeueTask::Run() 	/builds/slave/b2g_m-aurora_ham_ntly-00000000/build/objdir-gecko/ipc/glue/../../dist/include/mozilla/ipc/MessageChannel.h
29 	libxul.so 	MessageLoop::RunTask(Task*) 	ipc/chromium/src/base/message_loop.cc
30 	libxul.so 	MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) 	ipc/chromium/src/base/message_loop.cc
31 	libxul.so 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
32 	libxul.so 	mozilla::ipc::DoWorkRunnable::Run() 	ipc/glue/MessagePump.cpp
33 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
34 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/glue/nsThreadUtils.cpp
35 	libxul.so 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
36 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
37 	libxul.so 	MessageLoop::RunInternal() 	ipc/chromium/src/base/message_loop.cc
38 	libxul.so 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
39 	libxul.so 	nsBaseAppShell::Run() 	widget/xpwidgets/nsBaseAppShell.cpp
40 	libxul.so 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp
41 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
42 	libxul.so 	MessageLoop::RunInternal() 	ipc/chromium/src/base/message_loop.cc
43 	libxul.so 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
44 	libxul.so 	XRE_InitChildProcess 	toolkit/xre/nsEmbedFunctions.cpp
45 	plugin-container 	main 	ipc/app/MozillaRuntimeMain.cpp
46 	libc.so 	__libc_init 	bionic/libc/bionic/libc_init_dynamic.c
47 		@0xb00045a9

More reports:
https://crash-stats.mozilla.com/report/list?product=B2G&signature=GrDrawTarget%3A%3AgetClip%28%29+const#tab-reports
Keywords: topcrash-b2g
Whiteboard: [b2g-crash]
George, how do we now end up in getClip() from media code?  Also, is RTSP video still on B2G?
I would say this stack is bogus.
v1.3 and v1.4 support audio RTSP.
v2.0+ supports both audio and video RTSP.

Today, same crash happened on v1.4 while I tested Dolphin device.
- https://crash-stats.mozilla.com/report/index/fc863408-b9df-482d-8e3b-b4f782140702

* Build information:
 - Gaia      bf5ad311b6a14383924d6a3898c650ffa4525840
 - Gecko     https://hg.mozilla.org/releases/mozilla-b2g30_v1_4/rev/6817b6858ccf
 - BuildID   20140701160201
 - Version   30.0
This crash does not show up at all anymore. Resolving as incomplete.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.