Closed Bug 1042972 Opened 10 years ago Closed 10 years ago

Crash AssertActivityIsLegal () at xpcom/base/nsTraceRefcnt.cpp:139

Categories

(Core :: Graphics: Layers, defect)

Product:
Core
Component:
Graphics: Layers
Platform:
ARM
Gonk (Firefox OS)
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1041510

People

(Reporter: dougc, Unassigned)

Details

Running b2g, on the Flame or Nexus4-kk, the home screen crashes when attempting to move an app icon. Press and hold an app icon, the screen changes to allow movement, and after releasing the icon the home screen crashes. Looking at the backtrace it appears that the collector has hit a cycle.

#0  AssertActivityIsLegal () at src/xpcom/base/nsTraceRefcnt.cpp:139
#1  0xb42b2a0c in NS_LogAddRef (aPtr=0xac10f800, aRefcnt=43094, aClazz=0xb5cf0bf3 "AsyncPanZoomController", aClassSize=1240) at src/xpcom/base/nsTraceRefcnt.cpp:1006
#2  0xb4740c68 in mozilla::layers::AsyncPanZoomController::AddRef (this=<optimized out>) at dist/include/mozilla/layers/AsyncPanZoomController.h:68
#3  0xb47492aa in nsRefPtr<mozilla::layers::AsyncPanZoomController>::nsRefPtr (this=0xaa92b148, aRawPtr=<optimized out>) at dist/include/nsAutoPtr.h:885
#4  0xb474f86e in Construct<mozilla::layers::AsyncPanZoomController*> (aE=<optimized out>, aArg=<optimized out>) at dist/include/nsTArray.h:478
#5  implementation<mozilla::layers::AsyncPanZoomController*, nsRefPtr<mozilla::layers::AsyncPanZoomController>, unsigned int, unsigned int> (aValues=0xb024b044, aCount=1, aStart=<optimized out>, 
    aElements=<optimized out>) at dist/include/nsTArray.h:506
#6  AssignRange<mozilla::layers::AsyncPanZoomController*> (aValues=0xb024b044, aCount=1, aStart=<optimized out>, this=0xb0347844) at dist/include/nsTArray.h:1622
#7  AppendElements<mozilla::layers::AsyncPanZoomController*> (aArrayLen=1, aArray=0xb024b044, this=0xb0347844) at dist/include/nsTArray.h:1238
#8  AppendElement<mozilla::layers::AsyncPanZoomController*> (aItem=@0xb024b044, this=0xb0347844) at dist/include/nsTArray.h:1254
#9  mozilla::layers::Collect (aApzc=0xac10f800, aCollection=0xb0347844) at src/gfx/layers/apz/src/APZCTreeManager.cpp:90
#10 0xb474f88a in mozilla::layers::Collect (aApzc=0xac10f800, aCollection=0xb0347844) at src/gfx/layers/apz/src/APZCTreeManager.cpp:92
#11 0xb474f88a in mozilla::layers::Collect (aApzc=0xac10f800, aCollection=0xb0347844) at src/gfx/layers/apz/src/APZCTreeManager.cpp:92
#12 0xb474f88a in mozilla::layers::Collect (aApzc=0xac10f800, aCollection=0xb0347844) at src/gfx/layers/apz/src/APZCTreeManager.cpp:92
#13 0xb474f88a in mozilla::layers::Collect (aApzc=0xac10f800, aCollection=0xb0347844) at src/gfx/layers/apz/src/APZCTreeManager.cpp:92
#14 0xb474f88a in mozilla::layers::Collect (aApzc=0xac10f800, aCollection=0xb0347844) at src/gfx/layers/apz/src/APZCTreeManager.cpp:92
#15 0xb474f88a in mozilla::layers::Collect (aApzc=0xac10f800, aCollection=0xb0347844) at src/gfx/layers/apz/src/APZCTreeManager.cpp:92
Thanks for the STR; bug 1041510 is tracking this issue. There is a bad layer tree being created which results in an infinite loop in the APZ code.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.