1002287 - crash in mozalloc_abort(char const* const) | NS_DebugBreak | nsDisplayBackgroundImage::AppendBackgroundItemsToTop(nsDisplayListBuilder*, nsIFrame*, nsDisplayList*)

Status: RESOLVED WORKSFORME

(Core :: Layout: Images, Video, and HTML Frames, defect)

Description

[alex_mayorga]

This bug was filed from the Socorro interface and is 
report bp-2f28b6ba-1f30-497b-8178-f9f582140427.
=============================================================

Comment 1

[Robert Kaiser]

More reports at https://crash-stats.mozilla.com/report/list?signature=mozalloc_abort%28char+const%2A+const%29+%7C+NS_DebugBreak+%7C+nsDisplayBackgroundImage%3A%3AAppendBackgroundItemsToTop%28nsDisplayListBuilder%2A%2C+nsIFrame%2A%2C+nsDisplayList%2A%29

This seems to be happening at least in Firefox 26 to 29, newer versions haven't hit a larger audience yet.

Sounds like those stacktraces don't look to nice to our stackwalker and it only show the top 3 frames in most cases (those in the signature), but I found one that looks slightly better (still some garbage frames but at least it has some more possibly-valid ones in between and goes back to the thread start) in bp-17474a35-6c1b-4a01-a6fe-3f0a32140424, its top frames are:

0 	mozalloc.dll 	mozalloc_abort(char const * const) 	memory/mozalloc/mozalloc_abort.cpp
1 	xul.dll 	NS_DebugBreak 	xpcom/base/nsDebugImpl.cpp
2 	xul.dll 	nsDisplayBackgroundImage::AppendBackgroundItemsToTop(nsDisplayListBuilder *,nsIFrame *,nsDisplayList *) 	layout/base/nsDisplayList.cpp
3 		@0x1ef018 	
4 	xul.dll 	XPCWrappedNative::AddRef() 	js/xpconnect/src/XPCWrappedNative.cpp
5 	xul.dll 	mozilla::AutoJSContext::Init(bool) 	js/xpconnect/src/nsCxPusher.cpp
6 		@0x343f84f0 	
7 	xul.dll 	nsViewManager::ProcessPendingUpdatesRecurse(nsView *,nsTArray<nsCOMPtr<nsIWidget> > &) 	view/src/nsViewManager.cpp
8 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView(nsView *,bool) 	view/src/nsViewManager.cpp
9 		@0x1 	
10 	xul.dll 	mozilla::RefreshDriverTimer::Tick() 	layout/base/nsRefreshDriver.cpp
11 	xul.dll 	nsTimerImpl::Fire() 	xpcom/threads/nsTimerImpl.cpp
12 	xul.dll 	nsTimerEvent::Run() 	xpcom/threads/nsTimerImpl.cpp
13 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
[...]

We are in layout obviously in frame 2, so I'll move the bug there.

Comment 2

[alex_mayorga]

Only 2 crashes at https://crash-stats.mozilla.com/signature/?signature=mozalloc_abort%20%7C%20NS_DebugBreak%20%7C%20nsDisplayBackgroundImage%3A%3AAppendBackgroundItemsToTop&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&_sort=-date&page=1 most recent on Firefox 28, resolving.