Closed Bug 1029681 Opened 10 years ago Closed 6 years ago

crash in mozalloc_abort(char const*) | NS_DebugBreak | mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::PTextureChild*, IPC::Message*, bool)

Categories

(Core :: Graphics: Layers, defect)

30 Branch
ARM
Gonk (Firefox OS)
defect
Not set
critical

Tracking

()

RESOLVED WONTFIX
Tracking Status
b2g-v2.0 --- affected
b2g-v2.1 --- affected

People

(Reporter: nhirata, Unassigned)

References

()

Details

(Keywords: crash, Whiteboard: [b2g-crash])

Crash Data

This bug was filed from the Socorro interface and is report bp-fe32dbfc-c672-42ae-8b51-03f9e2140624. ============================================================= Frame Module Signature Source 0 libxul.so mozalloc_abort(char const*) /home/geeksphone/FOS/peak/gecko/memory/mozalloc/mozalloc_abort.cpp:30 1 libxul.so NS_DebugBreak /home/geeksphone/FOS/peak/gecko/xpcom/base/nsDebugImpl.cpp:421 2 libxul.so mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::PTextureChild*, IPC::Message*, bool) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:2276 3 libxul.so mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::TexturedTileDescriptor const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:4205 4 libxul.so mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::TileDescriptor const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:5015 5 libxul.so mozilla::layers::PLayerTransactionChild::Write(nsTArray<mozilla::layers::TileDescriptor> const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:3533 6 libxul.so mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::SurfaceDescriptorTiles const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:4801 7 libxul.so mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::OpUseTiledLayerBuffer const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:3753 8 libxul.so mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::CompositableOperation const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:5288 9 libxul.so mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::Edit const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:1695 10 libxul.so mozilla::layers::PLayerTransactionChild::Write(nsTArray<mozilla::layers::Edit> const&, IPC::Message*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:3781 11 libxul.so mozilla::layers::PLayerTransactionChild::SendUpdate(nsTArray<mozilla::layers::Edit> const&, mozilla::layers::TargetConfig const&, bool const&, bool const&, nsTArray<mozilla::layers::EditReply>*) /home/geeksphone/FOS/peak/objdir-gecko/ipc/ipdl/PLayerTransactionChild.cpp:289 12 libxul.so mozilla::layers::ShadowLayerForwarder::EndTransaction(nsTArray<mozilla::layers::EditReply>*, nsIntRegion const&, bool, bool*) /home/geeksphone/FOS/peak/gecko/gfx/layers/ipc/ShadowLayers.cpp:608 13 libxul.so mozilla::layers::ClientLayerManager::ForwardTransaction(bool) /home/geeksphone/FOS/peak/gecko/gfx/layers/client/ClientLayerManager.cpp:361 14 libxul.so mozilla::layers::ClientLayerManager::EndTransaction(void (*)(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) /home/geeksphone/FOS/peak/gecko/gfx/layers/client/ClientLayerManager.cpp:225 15 libxul.so nsDisplayList::PaintForFrame(nsDisplayListBuilder*, nsRenderingContext*, nsIFrame*, unsigned int) const /home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp:1380 16 libxul.so nsDisplayList::PaintRoot(nsDisplayListBuilder*, nsRenderingContext*, unsigned int) const /home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp:1221 17 libxul.so nsLayoutUtils::PaintFrame(nsRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) /home/geeksphone/FOS/peak/gecko/layout/base/nsLayoutUtils.cpp:2687 18 libxul.so PresShell::Paint(nsView*, nsRegion const&, unsigned int) /home/geeksphone/FOS/peak/gecko/layout/base/nsPresShell.cpp:5932 19 libxul.so nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*) /home/geeksphone/FOS/peak/gecko/view/src/nsViewManager.cpp:456 20 libxul.so nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) /home/geeksphone/FOS/peak/gecko/view/src/nsViewManager.cpp:397 21 libxul.so nsViewManager::ProcessPendingUpdates() /home/geeksphone/FOS/peak/gecko/view/src/nsViewManager.cpp:1088 22 libxul.so nsRefreshDriver::Tick(long long, mozilla::TimeStamp) /home/geeksphone/FOS/peak/gecko/layout/base/nsRefreshDriver.cpp:1207 23 libxul.so mozilla::RefreshDriverTimer::TimerTick(nsITimer*, void*) /home/geeksphone/FOS/peak/gecko/layout/base/nsRefreshDriver.cpp:168 24 libxul.so nsTimerImpl::Fire() /home/geeksphone/FOS/peak/gecko/xpcom/threads/nsTimerImpl.cpp:551 25 libxul.so nsTimerEvent::Run() /home/geeksphone/FOS/peak/gecko/xpcom/threads/nsTimerImpl.cpp:635 26 libxul.so nsThread::ProcessNextEvent(bool, bool*) /home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp:694 27 libxul.so NS_ProcessNextEvent(nsIThread*, bool) /home/geeksphone/FOS/peak/gecko/xpcom/glue/nsThreadUtils.cpp:263 28 libxul.so mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /home/geeksphone/FOS/peak/gecko/ipc/glue/MessagePump.cpp:95 29 libxul.so mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /home/geeksphone/FOS/peak/gecko/ipc/glue/MessagePump.cpp:283 30 libxul.so MessageLoop::RunInternal() /home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc:226 31 libxul.so MessageLoop::Run() /home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc:219 32 libxul.so nsBaseAppShell::Run() /home/geeksphone/FOS/peak/gecko/widget/xpwidgets/nsBaseAppShell.cpp:164 33 libxul.so XRE_RunAppShell /home/geeksphone/FOS/peak/gecko/toolkit/xre/nsEmbedFunctions.cpp:679 34 libxul.so mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /home/geeksphone/FOS/peak/gecko/ipc/glue/MessagePump.cpp:253 35 libxul.so MessageLoop::RunInternal() /home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc:226 36 libxul.so MessageLoop::Run() /home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc:219 37 libxul.so XRE_InitChildProcess /home/geeksphone/FOS/peak/gecko/toolkit/xre/nsEmbedFunctions.cpp:516 38 plugin-container main /home/geeksphone/FOS/peak/gecko/ipc/app/MozillaRuntimeMain.cpp:149 39 libc.so __libc_init /home/geeksphone/FOS/keon_nightly/bionic/libc/bionic/libc_init_dynamic.c:114 More reports: https://crash-stats.mozilla.com/report/list?product=B2G&signature=mozalloc_abort%28char+const%2A%29+%7C+NS_DebugBreak+%7C+mozilla%3A%3Alayers%3A%3APLayerTransactionChild%3A%3AWrite%28mozilla%3A%3Alayers%3A%3APTextureChild%2A%2C+IPC%3A%3AMessage%2A%2C+bool%29
Version: 29 Branch → 30 Branch
Hi Naoki, Is it the same problem as bug 1127405?
Flags: needinfo?(nhirata.bugzilla)
I'm not sure. I think it is at least related. This crash might be another way into the same root cause. The reason I state this is because this bug goes through : mozilla::layers::PLayerTransactionChild::SendUpdate where your bug goes through : mozilla::layers::PLayerTransactionChild::SendUpdateNoSwap
Flags: needinfo?(nhirata.bugzilla)
Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak | mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::PTextureChild*, IPC::Message*, bool)] → [@ mozalloc_abort(char const*) | NS_DebugBreak | mozilla::layers::PLayerTransactionChild::Write(mozilla::layers::PTextureChild*, IPC::Message*, bool)] [@ mozalloc_abort | NS_DebugBreak | mozilla::layers::PLayerTransactionChild::Write]
Closing because no crash reported since 12 weeks.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.