1153945 - crash in memmove | mozilla::gfx::SourceSurfaceRawData::GuaranteePersistance()

Status: RESOLVED DUPLICATE of bug 1153613

(Core :: Graphics, defect)

Description

[alex_mayorga]

This bug was filed from the Socorro interface and is 
report bp-3fa0f541-e52f-4009-aedb-408122150411.
=============================================================

This signature is #4 over at https://crash-stats.mozilla.com/topcrasher/products/Firefox/versions/40.0a1?days=7

Operating System 	Percentage 	Number Of Crashes
Windows 7 	62.89 %	183
Windows 8.1 	29.55 %	86
Windows Unknown 	6.19 %	18
Windows 8 	1.03 %	3
Windows 10 	0.34 %	1 

Crashing Thread
Frame 	Module 	Signature 	Source
0 	msvcr120.dll 	memmove 	f:\dd\vctools\crt\crtw32\string\amd64\memcpy.asm:362
1 	xul.dll 	mozilla::gfx::SourceSurfaceRawData::GuaranteePersistance() 	gfx/2d/SourceSurfaceRawData.cpp
2 	xul.dll 	mozilla::dom::TabParent::RecvInvokeDragSession(nsTArray<mozilla::dom::IPCDataTransfer>&&, unsigned int const&, nsCString const&, unsigned int const&, unsigned int const&, unsigned int const&, unsigned char const&, int const&, int const&) 	dom/ipc/TabParent.cpp
3 	xul.dll 	mozilla::dom::PBrowserParent::OnMessageReceived(IPC::Message const&) 	obj-firefox/ipc/ipdl/PBrowserParent.cpp
4 	xul.dll 	mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&) 	obj-firefox/ipc/ipdl/PContentParent.cpp
5 	xul.dll 	mozilla::ipc::MessageChannel::OnMaybeDequeueOne() 	ipc/glue/MessageChannel.cpp
6 	xul.dll 	RunnableMethod<mozilla::ipc::MessageChannel, bool ( mozilla::ipc::MessageChannel::*)(void), Tuple0>::Run() 	ipc/chromium/src/base/task.h
7 	xul.dll 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
8 	xul.dll 	mozilla::ipc::DoWorkRunnable::Run() 	ipc/glue/MessagePump.cpp
9 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
10 	xul.dll 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/glue/nsThreadUtils.cpp
11 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
12 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
13 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
14 	xul.dll 	nsBaseAppShell::Run() 	widget/nsBaseAppShell.cpp
15 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp
16 	xul.dll 	nsAppStartup::Run() 	toolkit/components/startup/nsAppStartup.cpp
17 	xul.dll 	XREMain::XRE_mainRun() 	toolkit/xre/nsAppRunner.cpp
18 	xul.dll 	XREMain::XRE_main(int, char** const, nsXREAppData const*) 	toolkit/xre/nsAppRunner.cpp
19 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp
20 	firefox.exe 	do_main 	browser/app/nsBrowserApp.cpp
21 	firefox.exe 	NS_internal_main(int, char**) 	browser/app/nsBrowserApp.cpp
22 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp
23 	firefox.exe 	__tmainCRTStartup 	f:/dd/vctools/crt/crtw32/startup/crt0.c:255
24 	kernel32.dll 	BaseThreadInitThunk 	
25 	firefox.exe 	fast_error_exit 	f:/dd/vctools/crt/crtw32/startup/crt0.c:322 

Comments

colapse all time, if follow i gone to chrome

Submitted: 2015-04-13T01:35:25+00:00

caused by dragging an image in e10s

Submitted: 2015-04-11T07:56:02+00:00

caused by dragging image in e10s

Submitted: 2015-04-11T07:57:29+00:00

caused by dragging link in e10s

Submitted: 2015-04-11T07:59:08+00:00

dragging link with e10s

Submitted: 2015-04-11T09:18:35+00:00

making order on ebay UK

Submitted: 2015-04-11T11:42:04+00:00

closed when ordering on ebay UK

Submitted: 2015-04-11T11:43:07+00:00

crashed when starting to drag image

Submitted: 2015-04-12T09:39:50+00:00

Comment 1

[(Away)]

Looks like this got filed yesterday outside of Socorro, so we didn't get the signature connected until recently. Sorry for the extra work; thanks for filing!