1071610 - crash in mozilla::gmp::GMPVideoEncodedFrameImpl::Buffer()

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Robert Kaiser]

This bug was filed from the Socorro interface and is 
report bp-3b120dd0-583d-48b6-9371-a7b0f2140917.
=============================================================

Top Frames:
0 	xul.dll 	mozilla::gmp::GMPVideoEncodedFrameImpl::Buffer() 	gfx/layers/protobuf/LayerScopePacket.pb.h
1 	xul.dll 	imgRequestProxy::GetImageStatus(unsigned int*) 	image/src/imgRequestProxy.cpp
2 	xul.dll 	SizeIsAvailable 	layout/generic/nsImageFrame.cpp
3 	xul.dll 	nsImageFrame::OnStartContainer(imgIRequest*, imgIContainer*) 	layout/generic/nsImageFrame.cpp
4 	xul.dll 	nsImageFrame::Notify(imgIRequest*, int, nsIntRect const*) 	layout/generic/nsImageFrame.cpp
5 	xul.dll 	nsImageListener::Notify(imgIRequest*, int, nsIntRect const*) 	layout/generic/nsImageFrame.cpp
6 	xul.dll 	nsImageLoadingContent::Notify(imgIRequest*, int, nsIntRect const*) 	content/base/src/nsImageLoadingContent.cpp
7 	xul.dll 	imgRequestProxy::OnStartContainer() 	image/src/imgRequestProxy.cpp
8 	xul.dll 	imgStatusTracker::SyncNotifyState(nsTObserverArray<mozilla::WeakPtr<imgRequestProxy> >&, bool, unsigned int, nsIntRect&, bool) 	image/src/imgStatusTracker.cpp
9 	xul.dll 	imgStatusTracker::SyncNotifyDifference(mozilla::image::ImageStatusDiff const&) 	image/src/imgStatusTracker.cpp
10 	xul.dll 	mozilla::image::RasterImage::FinishedSomeDecoding(mozilla::image::RasterImage::eShutdownIntent, mozilla::image::RasterImage::DecodeRequest*) 	image/src/RasterImage.cpp
[...]

This crash seems to only happen in 33.0b4, 33.0b5 and 34 Aurora so far, and at not very high volume (but I guess GMP code isn't used a lot at all yet so this might be important to look at).

Find more stats and reports for this at https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Agmp%3A%3AGMPVideoEncodedFrameImpl%3A%3ABuffer%28%29

Comment 1

[(Away)]

This is another incarnation of imgStatusTracker::GetImageStatus as seen in bug 924282 and possibly elsewhere.

Due to linker folding, all of these are just different names for the same function:
    xul!nsMathMLChar::GetStyleContext (void)
    xul!imgStatusTracker::GetImageStatus (void)
    xul!mozilla::dom::MediaSource::ActiveSourceBuffers (void)
    xul!mozilla::gmp::GMPVideoEncodedFrameImpl::Buffer (void)
    xul!mozilla::gmp::GMPVideoEncodedFrameImpl::Buffer (void)
    xul!mozilla::dom::indexedDB::IDBTransaction::GetError (void)
    xul!mozilla::layers::layerscope::TexturePacket::GetCachedSize (void)

Comment 2

[u279076]

Closing this bug as there have only been two crashes reported recently, both with Firefox 34 builds.