1094978 - large oom in nsACString_internal::Replace(unsigned int, unsigned int, nsACString_internal const&)

Status: RESOLVED DUPLICATE of bug 1095289

(Core :: Graphics: Layers, defect)

Description

[juan becerra [:juanb]]

This bug was filed from the Socorro interface and is 
report bp-7a1dfe17-a555-4f19-8f3b-e2b6f2141030.
=============================================================

This is showing in the list of top crashers for nightly fx36 as well as in the list of explosive reports. It started appearing on 10/15. It's all on Win7, 8.1 and 8. No comments in the reports, and no correlations.

More reports at: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=OOM+%7C+large+%7C+NS_ABORT_OOM%28unsigned+int%29+%7C+nsACString_internal%3A%3AReplace%28unsigned+int%2C+unsigned+int%2C+nsACString_internal+const%26%29

0 	xul.dll 	NS_ABORT_OOM(unsigned int) 	xpcom/base/nsDebugImpl.cpp
1 	xul.dll 	nsACString_internal::Replace(unsigned int, unsigned int, nsACString_internal const&) 	xpcom/string/nsTSubstring.h
2 	xul.dll 	CrashReporter::ReplaceChar 	toolkit/crashreporter/nsExceptionHandler.cpp
3 	xul.dll 	CrashReporter::EscapeAnnotation 	toolkit/crashreporter/nsExceptionHandler.cpp
4 	xul.dll 	CrashReporter::AnnotateCrashReport(nsACString_internal const&, nsACString_internal const&) 	toolkit/crashreporter/nsExceptionHandler.cpp
5 	xul.dll 	CrashReporter::AppendAppNotesToCrashReport(nsACString_internal const&) 	toolkit/crashreporter/nsExceptionHandler.cpp
6 	xul.dll 	CrashStatsLogForwarder::Log(std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) 	gfx/thebes/gfxPlatform.cpp
7 	xul.dll 	mozilla::gfx::Log<3, mozilla::gfx::CriticalLogger>::Flush() 	gfx/2d/Logging.h
8 	xul.dll 	mozilla::layers::TextureClientD3D11::AllocateForSurface(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits>, mozilla::layers::TextureAllocationFlags) 	gfx/layers/d3d11/TextureD3D11.cpp
9 	xul.dll 	mozilla::layers::TextureClient::CreateForDrawing(mozilla::layers::ISurfaceAllocator*, mozilla::gfx::SurfaceFormat, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits>, mozilla::gfx::BackendType, mozilla::layers::TextureFlags, mozilla::layers::TextureAllocationFlags) 	gfx/layers/client/TextureClient.cpp
10 	xul.dll 	mozilla::layers::CompositableClient::CreateTextureClientForDrawing(mozilla::gfx::SurfaceFormat, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits>, mozilla::gfx::BackendType, mozilla::layers::TextureFlags, mozilla::layers::TextureAllocationFlags) 	gfx/layers/client/CompositableClient.cpp
11 	xul.dll 	mozilla::layers::ContentClientRemoteBuffer::CreateBackBuffer(nsIntRect const&) 	gfx/layers/client/ContentClient.cpp
12 	xul.dll 	mozilla::layers::ContentClientRemoteBuffer::BuildTextureClients(mozilla::gfx::SurfaceFormat, nsIntRect const&, unsigned int) 	gfx/layers/client/ContentClient.cpp
13 	xul.dll 	mozilla::layers::ContentClientRemoteBuffer::CreateBuffer(gfxContentType, nsIntRect const&, unsigned int, mozilla::RefPtr<mozilla::gfx::DrawTarget>*, mozilla::RefPtr<mozilla::gfx::DrawTarget>*) 	gfx/layers/client/ContentClient.cpp
14 	xul.dll 	mozilla::layers::RotatedContentBuffer::BeginPaint(mozilla::layers::PaintedLayer*, unsigned int) 	gfx/layers/RotatedBuffer.cpp
15 	xul.dll 	mozilla::layers::ContentClientBasic::BeginPaintBuffer(mozilla::layers::PaintedLayer*, unsigned int) 	gfx/layers/client/ContentClient.h
16 	xul.dll 	mozilla::layers::ClientPaintedLayer::PaintThebes() 	gfx/layers/client/ClientPaintedLayer.cpp
17 	xul.dll 	mozilla::layers::ClientPaintedLayer::RenderLayerWithReadback(mozilla::layers::ReadbackProcessor*) 	gfx/layers/client/ClientPaintedLayer.cpp
18 	xul.dll 	mozilla::layers::ClientContainerLayer::RenderLayer() 	gfx/layers/client/ClientContainerLayer.h
19 	xul.dll 	mozilla::layers::ClientLayer::RenderLayerWithReadback(mozilla::layers::ReadbackProcessor*) 	gfx/layers/client/ClientLayerManager.h
20 	xul.dll 	mozilla::layers::ClientContainerLayer::RenderLayer() 	gfx/layers/client/ClientContainerLayer.h
21 	xul.dll 	mozilla::layers::ClientLayerManager::EndTransactionInternal(void (*)(mozilla::layers::PaintedLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) 	gfx/layers/client/ClientLayerManager.cpp
22 	xul.dll 	mozilla::layers::ClientLayerManager::EndTransaction(void (*)(mozilla::layers::PaintedLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) 	gfx/layers/client/ClientLayerManager.cpp
23 	xul.dll 	nsDisplayList::PaintForFrame(nsDisplayListBuilder*, nsRenderingContext*, nsIFrame*, unsigned int) 	layout/base/nsDisplayList.cpp
24 	xul.dll 	nsDisplayList::PaintRoot(nsDisplayListBuilder*, nsRenderingContext*, unsigned int) 	layout/base/nsDisplayList.cpp
25 	xul.dll 	nsLayoutUtils::PaintFrame(nsRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) 	layout/base/nsLayoutUtils.cpp
26 	xul.dll 	PresShell::Paint(nsView*, nsRegion const&, unsigned int) 	layout/base/nsPresShell.cpp
27 	xul.dll 	nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*) 	view/nsViewManager.cpp
28 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) 	view/nsViewManager.cpp
29 	xul.dll 	nsViewManager::ProcessPendingUpdates() 	view/nsViewManager.cpp
30 	xul.dll 	nsRefreshDriver::Tick(__int64, mozilla::TimeStamp) 	layout/base/nsRefreshDriver.cpp
31 	xul.dll 	mozilla::RefreshDriverTimer::Tick() 	layout/base/nsRefreshDriver.cpp
32 	xul.dll 	nsTimerImpl::Fire() 	xpcom/threads/nsTimerImpl.cpp
33 	xul.dll 	nsTimerEvent::Run() 	xpcom/threads/nsTimerImpl.cpp
34 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
35 	xul.dll 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/glue/nsThreadUtils.cpp
36 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
37 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
38 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
39 	xul.dll 	nsBaseAppShell::Run() 	widget/nsBaseAppShell.cpp
40 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp
41 	xul.dll 	nsAppStartup::Run() 	toolkit/components/startup/nsAppStartup.cpp
42 	xul.dll 	XREMain::XRE_mainRun() 	toolkit/xre/nsAppRunner.cpp
43 	xul.dll 	XREMain::XRE_main(int, char** const, nsXREAppData const*) 	toolkit/xre/nsAppRunner.cpp
44 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp
45 	firefox.exe 	do_main 	browser/app/nsBrowserApp.cpp
46 	firefox.exe 	NS_internal_main(int, char**) 	browser/app/nsBrowserApp.cpp
47 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp
48 	firefox.exe 	__tmainCRTStartup 	f:/dd/vctools/crt/crtw32/startup/crt0.c:255
49 	kernel32.dll 	BaseThreadInitThunk 	
50 	ntdll.dll 	__RtlUserThreadStart 	
51 	ntdll.dll 	_RtlUserThreadStart

Comment 1

[Milan Sreckovic [:milan] (needinfo for best results)]

Duplicate of bug 1095289?

Comment 2

[(Away)]

Yep