1105305 - [Settings] Segmentation fault in Bluetooth pane

Status: RESOLVED DUPLICATE of bug 1103106

(Core :: Layout, defect)

Description

[Thomas Zimmermann [:tzimmermann] [:tdz]]

Since today is see the Settings app crash with 

> F/MOZ_Assert( 1226): Assertion failure: !mWillChangeBudgetCalculated (Can't modify the budget once it's been used.), at ../../../../mozilla-central/layout/base/nsDisplayList.cpp:1224
> F/libc    ( 1226): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1), thread 1226 (Settings)

when opening the Bluetooth pane. Gecko is at rev 217489:ced1402861b8, Gaia is at rev e02facadb0bc3fe32227b52b31ca47822f7f4322. Full stack trace is shown below.

>>>

(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0xb55beb0e in nsDisplayListBuilder::AddToWillChangeBudget (this=this@entry=0xbec16728, aFrame=aFrame@entry=0xb1ca1190, aRect=...)
    at ../../../../mozilla-central/layout/base/nsDisplayList.cpp:1223
1223      MOZ_ASSERT(!mWillChangeBudgetCalculated,
(gdb) bt
#0  0xb55beb0e in nsDisplayListBuilder::AddToWillChangeBudget (this=this@entry=0xbec16728, aFrame=aFrame@entry=0xb1ca1190, aRect=...)
    at ../../../../mozilla-central/layout/base/nsDisplayList.cpp:1223
#1  0xb563b844 in mozilla::ScrollFrameHelper::BuildDisplayList (this=0xb1ca11e0, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsGfxScrollFrame.cpp:2937
#2  0xb563a308 in nsIFrame::BuildDisplayListForChild (this=this@entry=0xb1cfb2e0, aBuilder=aBuilder@entry=0xbec16728, aChild=aChild@entry=0xb1ca45a0,
    aDirtyRect=..., aLists=..., aFlags=aFlags@entry=4) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2460
#3  0xb56132c2 in DisplayLine (aBuilder=aBuilder@entry=0xbec16728, aLineArea=..., aDirtyRect=..., aLine=..., aDepth=aDepth@entry=0,
    aDrawnLines=@0xbec14518: 0, aLists=..., aFrame=aFrame@entry=0xb1cfb2e0, aTextOverflow=0x0)
    at ../../../../mozilla-central/layout/generic/nsBlockFrame.cpp:6244
#4  0xb561efe6 in nsBlockFrame::BuildDisplayList (this=0xb1cfb2e0, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsBlockFrame.cpp:6336
#5  0xb563a2aa in nsIFrame::BuildDisplayListForChild (this=0xb1cfafe0, aBuilder=aBuilder@entry=0xbec16728, aChild=<optimized out>, aDirtyRect=...,
    aLists=..., aFlags=aFlags@entry=0) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2441
#6  0xb563b9ac in mozilla::ScrollFrameHelper::BuildDisplayList (this=0xb1cfb030, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsGfxScrollFrame.cpp:3017
#7  0xb56397ca in nsIFrame::BuildDisplayListForStackingContext (this=this@entry=0xb1cfafe0, aBuilder=aBuilder@entry=0xbec16728, aDirtyRect=...,
    aList=aList@entry=0xbec14d90) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2052
#8  0xb563a1e6 in nsIFrame::BuildDisplayListForChild (this=this@entry=0xb14d4d40, aBuilder=aBuilder@entry=0xbec16728, aChild=aChild@entry=0xb1cfb340,
    aDirtyRect=..., aLists=..., aFlags=aFlags@entry=4) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2406
#9  0xb56132c2 in DisplayLine (aBuilder=aBuilder@entry=0xbec16728, aLineArea=..., aDirtyRect=..., aLine=..., aDepth=aDepth@entry=0,
    aDrawnLines=@0xbec15090: 1, aLists=..., aFrame=aFrame@entry=0xb14d4d40, aTextOverflow=0x0)
    at ../../../../mozilla-central/layout/generic/nsBlockFrame.cpp:6244
#10 0xb561efe6 in nsBlockFrame::BuildDisplayList (this=0xb14d4d40, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsBlockFrame.cpp:6336
#11 0xb563a2aa in nsIFrame::BuildDisplayListForChild (this=0xb14d4a78, aBuilder=aBuilder@entry=0xbec16728, aChild=<optimized out>, aDirtyRect=...,
    aLists=..., aFlags=aFlags@entry=0) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2441
#12 0xb563b9ac in mozilla::ScrollFrameHelper::BuildDisplayList (this=0xb14d4ac8, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsGfxScrollFrame.cpp:3017
#13 0xb563a2aa in nsIFrame::BuildDisplayListForChild (this=this@entry=0xb14d4288, aBuilder=aBuilder@entry=0xbec16728, aChild=aChild@entry=0xb14d4a78,
    aDirtyRect=..., aLists=..., aFlags=aFlags@entry=0) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2441
#14 0xb56132c2 in DisplayLine (aBuilder=aBuilder@entry=0xbec16728, aLineArea=..., aDirtyRect=..., aLine=..., aDepth=aDepth@entry=0,
    aDrawnLines=@0xbec159e8: -1229728832, aLists=..., aFrame=aFrame@entry=0xb14d4288, aTextOverflow=0x0)
    at ../../../../mozilla-central/layout/generic/nsBlockFrame.cpp:6244
#15 0xb561efe6 in nsBlockFrame::BuildDisplayList (this=0xb14d4288, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsBlockFrame.cpp:6336
#16 0xb563a2aa in nsIFrame::BuildDisplayListForChild (this=this@entry=0xb1c93800, aBuilder=aBuilder@entry=0xbec16728, aChild=aChild@entry=0xb14d4288,
    aDirtyRect=..., aLists=..., aFlags=aFlags@entry=0) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2441
#17 0xb5610f66 in nsCanvasFrame::BuildDisplayList (this=0xb1c93800, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsCanvasFrame.cpp:463
#18 0xb563a2aa in nsIFrame::BuildDisplayListForChild (this=0xb1c93a00, aBuilder=aBuilder@entry=0xbec16728, aChild=<optimized out>, aDirtyRect=...,
    aLists=..., aFlags=aFlags@entry=0) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2441
#19 0xb563b6d8 in mozilla::ScrollFrameHelper::BuildDisplayList (this=0xb1c93a50, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsGfxScrollFrame.cpp:2855
---Type <return> to continue, or q <return> to quit---
#20 0xb563a2aa in nsIFrame::BuildDisplayListForChild (this=this@entry=0xb1c932b8, aBuilder=aBuilder@entry=0xbec16728, aChild=<optimized out>, aDirtyRect=...,
    aLists=..., aFlags=aFlags@entry=0) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2441
#21 0xb5666c2e in ViewportFrame::BuildDisplayList (this=0xb1c932b8, aBuilder=0xbec16728, aDirtyRect=..., aLists=...)
    at ../../../../mozilla-central/layout/generic/nsViewportFrame.cpp:61
#22 0xb56397ca in nsIFrame::BuildDisplayListForStackingContext (this=this@entry=0xb1c932b8, aBuilder=aBuilder@entry=0xbec16728, aDirtyRect=...,
    aList=aList@entry=0xbec166dc) at ../../../../mozilla-central/layout/generic/nsFrame.cpp:2052
#23 0xb55e3906 in nsLayoutUtils::PaintFrame (aRenderingContext=aRenderingContext@entry=0x0, aFrame=aFrame@entry=0xb1c932b8, aDirtyRegion=...,
    aBackstop=aBackstop@entry=0, aFlags=772) at ../../../../mozilla-central/layout/base/nsLayoutUtils.cpp:2998
#24 0xb55f181e in PresShell::Paint (this=0xb2caee70, aViewToPaint=0xb1c8c1f0, aDirtyRegion=..., aFlags=1)
    at ../../../../mozilla-central/layout/base/nsPresShell.cpp:6343
#25 0xb5462a90 in nsViewManager::ProcessPendingUpdatesPaint (this=0xb1c0fee0, aWidget=aWidget@entry=0xb239e200)
    at ../../../mozilla-central/view/nsViewManager.cpp:443
#26 0xb5462de0 in nsViewManager::ProcessPendingUpdatesForView (this=this@entry=0xb2cd2260, aView=<optimized out>,
    aFlushDirtyRegion=aFlushDirtyRegion@entry=true) at ../../../mozilla-central/view/nsViewManager.cpp:384
#27 0xb5462e6e in nsViewManager::ProcessPendingUpdates (this=this@entry=0xb1c0fee0) at ../../../mozilla-central/view/nsViewManager.cpp:1075
#28 0xb558a53a in nsRefreshDriver::Tick (this=0xb2cd2260, this@entry=0xb238fc40, aNowEpoch=<optimized out>, aNowTime=...)
    at ../../../../mozilla-central/layout/base/nsRefreshDriver.cpp:1358
#29 0xb558ab5e in mozilla::RefreshDriverTimer::TickDriver (driver=0xb238fc40, jsnow=<optimized out>, now=..., now@entry=...)
    at ../../../../mozilla-central/layout/base/nsRefreshDriver.cpp:175
#30 0xb558ac7c in mozilla::RefreshDriverTimer::Tick (this=0xb238fc40) at ../../../../mozilla-central/layout/base/nsRefreshDriver.cpp:166
#31 0xb4692ffa in nsTimerImpl::Fire (this=0xb238e970) at ../../../../mozilla-central/xpcom/threads/nsTimerImpl.cpp:624
#32 0xb469317e in nsTimerEvent::Run (this=0xb1d0b0b0) at ../../../../mozilla-central/xpcom/threads/nsTimerImpl.cpp:717
#33 0xb46909d0 in nsThread::ProcessNextEvent (this=0xb384c230, aMayWait=<optimized out>, aResult=0xbec16f07)
    at ../../../../mozilla-central/xpcom/threads/nsThread.cpp:830
#34 0xb46a503c in NS_ProcessNextEvent (aThread=0xb384c230, aMayWait=aMayWait@entry=true)
    at /home/mozilla/Projects/mozilla/src/mozilla-central/xpcom/glue/nsThreadUtils.cpp:265
#35 0xb485a23e in mozilla::ipc::MessagePump::Run (this=0xb3801e20, aDelegate=0xbec17060) at ../../../../mozilla-central/ipc/glue/MessagePump.cpp:140
#36 0xb4846154 in MessageLoop::RunInternal (this=this@entry=0xbec17060) at ../../../../mozilla-central/ipc/chromium/src/base/message_loop.cc:233
#37 0xb484616e in RunHandler (this=0xbec17060) at ../../../../mozilla-central/ipc/chromium/src/base/message_loop.cc:226
#38 MessageLoop::Run (this=0xbec17060) at ../../../../mozilla-central/ipc/chromium/src/base/message_loop.cc:200
#39 0xb546606a in nsBaseAppShell::Run (this=0xb2c6c460) at ../../../mozilla-central/widget/nsBaseAppShell.cpp:164
#40 0xb58ada42 in XRE_RunAppShell () at ../../../../mozilla-central/toolkit/xre/nsEmbedFunctions.cpp:731
#41 0xb485a31a in mozilla::ipc::MessagePumpForChildProcess::Run (this=0xb3801e20, aDelegate=0xbec17060)
    at ../../../../mozilla-central/ipc/glue/MessagePump.cpp:272
#42 0xb4846154 in MessageLoop::RunInternal (this=this@entry=0xbec17060) at ../../../../mozilla-central/ipc/chromium/src/base/message_loop.cc:233
#43 0xb484616e in RunHandler (this=0xbec17060) at ../../../../mozilla-central/ipc/chromium/src/base/message_loop.cc:226
#44 MessageLoop::Run (this=this@entry=0xbec17060) at ../../../../mozilla-central/ipc/chromium/src/base/message_loop.cc:200
#45 0xb58ad9a2 in XRE_InitChildProcess (aArgc=<optimized out>, aArgv=<optimized out>, aGMPLoader=<optimized out>)
    at ../../../../mozilla-central/toolkit/xre/nsEmbedFunctions.cpp:568
#46 0x000092a8 in content_process_main (argc=6, argv=0xbec17b54) at ../../../../mozilla-central/ipc/app/../contentproc/plugin-container.cpp:216
#47 0xb6e704a4 in __libc_init (raw_args=0xbec17b50, onexit=<optimized out>, slingshot=0x9309 <main(int, char**)>, structors=<optimized out>)
    at bionic/libc/bionic/libc_init_dynamic.cpp:112
#48 0x00009188 in _start ()

Comment 1

[Thomas Zimmermann [:tzimmermann] [:tdz]]

STR is

  - build for Flame (flame, flame-kk) and flash image
  - open Settings app
  - tap 'Bluetooth'

Expected result:

  - Bluetooth dialog shows up

Actual result

  - the Settings app crashes