1128290 - Crash with a special SpiderMonkey demo if OMTC is disabled

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Helios]

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0
Build ID: 20150129200438

Steps to reproduce:

There is only one special demo on SpiderMonkey where FF 36.0 (Beta) is crashing by launching.

Here is the link to the demo:
https://developer.mozilla.org/en-US/demos/detail/multitouch-boids


Actual results:

If OMTC is disabled then Firefox is crashing. If OMTC is enabled then the demo is working normally.


Expected results:

Even if OMTC is disabled, the demo should not be crashing.

Comment 1

[Matthias Versen [:Matti]]

Please provide the crash id from about:crashes

Comment 2

[Helios]

Crash id: bp-33066ee6-fd44-4d86-9be6-e08d72150201

Comment 3

[Matthias Versen [:Matti]]

Your graphic card driver is crashing and this can be only fixed by Nvidia

Please post the graphic section from about:support, thanks

Comment 4

[Helios]

Grafik
ClearType-Parameter	Gamma: 2200 Pixel Structure: R ClearType Level: 100 Enhanced Contrast: 50
Direct2D aktiviert	true
DirectWrite aktiviert	true (6.3.9600.17415)
Geräte-ID	0x0126
Geräte-ID (GPU #2)	0x0dda
GPU #2 aktiv	false
GPU-beschleunigte Fenster	1/1 Direct3D 11 (OMTC)
Karten-Beschreibung	Intel(R) HD Graphics 3000
Karten-Beschreibung (GPU #2)	NVIDIA Quadro 2000M
Karten-RAM	Unknown
Karten-RAM (GPU #2)	2048
Karten-Treiber	igdumd64 igd10umd64 igd10umd64 igdumd32 igd10umd32 igd10umd32
Karten-Treiber (GPU #2)	nvd3dumx,nvwgf2umx,nvwgf2umx nvd3dum,nvwgf2um,nvwgf2um
Subsys-ID	21d117aa
Subsys-ID (GPU #2)	21d117aa
Treiber-Datum	3-20-2014
Treiber-Datum (GPU #2)	1-9-2015
Treiber-Version	9.17.10.3517
Treiber-Version (GPU #2)	9.18.13.4725
Vendor-ID	0x8086
Vendor-ID (GPU #2)	0x10de
WebGL-Renderer	Google Inc. -- ANGLE (Intel(R) HD Graphics 3000 Direct3D9Ex vs_3_0 ps_3_0)
windowLayerManagerRemote	true
AzureCanvasBackend	direct2d 1.1
AzureContentBackend	direct2d 1.1
AzureFallbackCanvasBackend	cairo
AzureSkiaAccelerated	0

Comment 5

[Patrick Storz]

In fact it doesn't seem to be exclusive to Nvidia. Same problem on my machine with an ATI card:

ClearType-Parameter: D [ Gamma: 2200 Pixel Structure: R ClearType Level: 100 Enhanced Contrast: 200 ] D [ Gamma: 2200 Pixel Structure: R ClearType Level: 100 Enhanced Contrast: 50 ]
Direct2D aktiviert: true
DirectWrite aktiviert: true (6.2.9200.16571)
Geräte-ID: 0x95c4
Geräte-ID (GPU #2): 0x2a42
GPU #2 aktiv: false
GPU-beschleunigte Fenster: 1/1 Direct3D 10
Karten-Beschreibung: ATI Mobility Radeon HD 3400 Series
Karten-Beschreibung (GPU #2): Mobile Intel(R) 4 Series Express Chipset Family
Karten-RAM: 256
Karten-RAM (GPU #2): Unknown
Karten-Treiber: aticfx64 aticfx64 aticfx32 aticfx32 atiumd64 atidxx64 atiumdag atidxx32 atiumdva atiumd6a atitmm64
Karten-Treiber (GPU #2): igdumd64 igd10umd64 igdumdx32 igd10umd32
Subsys-ID: 210f17aa
Subsys-ID (GPU #2): 211317aa
Treiber-Datum: 11-16-2012
Treiber-Datum (GPU #2): 5-4-2012
Treiber-Version: 8.970.100.7000
Treiber-Version (GPU #2): 8.792.5.2000
Vendor-ID: 0x1002
Vendor-ID (GPU #2): 0x8086
WebGL-Renderer: Google Inc. -- ANGLE (ATI Mobility Radeon HD 3400 Series Direct3D9Ex vs_3_0 ps_3_0)
windowLayerManagerRemote: false
AzureCanvasBackend: direct2d 1.1
AzureContentBackend: direct2d 1.1
AzureFallbackCanvasBackend: cairo
AzureSkiaAccelerated: 0


crash id: 9ea02fc4-381c-4d8c-8152-36b502150201

Comment 6

[Patrick Storz]

Update: Just updated to a newer version of the beta (built from https://hg.mozilla.org/releases/mozilla-beta/rev/4a36fd52ab9f).

The demo doesn't crash anymore but does not work either on my machine! (Just the header buttons and footer are shown; the buttons are somehow duplicated vertically)

Comment 7

[Matthias Versen [:Matti]]

The stack trace from Eduard points to bug 1099074 and it seems that the patch there will also fix this bug.

Comment 8

[Benoit Girard (:BenWa)]

Thanks for the report. Demo works fine for me in beta. Does the demo work with the latest beta?

What happens is when you disable OMTC we didn't disable other features (since flipping preference isn't supported) so you can get into a weird configuration we don't support.

Comment 9

[Patrick Storz]

Issue is indeed fixed in Firefox 36.0b6!

Comment 10

[[SV Manager] Florin Mezei, QA (:FlorinMezei)]

I got this crash on the latest Firefox 37 Aurora when loading http://mapy.google.cz (OMTC turned off), and navigating for a while. I could no longer reproduce it though after creating a new profile.

Comment 11

[Helios]

(In reply to Florin Mezei, QA (:FlorinMezei) from comment #10)
> I got this crash on the latest Firefox 37 Aurora when loading
> http://mapy.google.cz (OMTC turned off), and navigating for a while. I could
> no longer reproduce it though after creating a new profile.

Can confirm this crash on the latest Firefox version 36.0 beta 9 (OMTC turned off).

And in all Firefox versions, which means including betas, if OMTC is enabled the CPU load goes up markedly.

Comment 12

[[SV Manager] Florin Mezei, QA (:FlorinMezei)]

Though I cannot reproduce this consistently, it seems Helios keeps hitting it. Changing status to confirmed given the latest reports.

Comment 13

[Helios]

I'm able to reproduce it constantly. Open the link to the map (sometimes, Firefox already crashes in this case) and close the tap again. Firefox 36.0 Beta 9 will crash then.

Crash ID: bp-09dd0e69-9f2f-491f-bc4d-db2582150216

Comment 14

[Benoit Girard (:BenWa)]

This code doesn't exist. Can you try to reproduce in Nightly?

Comment 15

[Edwin Flores [inactive from 2016-12-01] [:eflores] [:edwin]]

Mass resolving WFM: signature(s) hasn't(/haven't) reported in past 28 days.