1154272 - Segmentation fault in mozilla::HwcComposer2D::Render

Status: RESOLVED DUPLICATE of bug 1153976

(Core Graveyard :: Widget: Gonk, defect)

Description

[Thomas Zimmermann [:tzimmermann] [:tdz]]

On flame-kk I see the following segmentation fault during boot. Gecko branch is master at rev 238872:7f343964210b.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1428.1505]
0xb4f6424a in mozilla::HwcComposer2D::Render (this=0xb05765c0) at ../../../../hg.mozilla.org/mozilla-central/widget/gonk/HwcComposer2D.cpp:775
775             mList->flags = HWC_GEOMETRY_CHANGED;
(gdb) bt
#0  0xb4f6424a in mozilla::HwcComposer2D::Render (this=0xb05765c0) at ../../../../hg.mozilla.org/mozilla-central/widget/gonk/HwcComposer2D.cpp:775
#1  0xb4584972 in mozilla::layers::LayerManagerComposite::Render (this=this@entry=0xac7756a0)
    at ../../../../hg.mozilla.org/mozilla-central/gfx/layers/composite/LayerManagerComposite.cpp:765
#2  0xb4584c22 in EndTransaction (aFlags=<optimized out>, this=0xac7756a0, aCallback=<optimized out>, aCallbackData=<optimized out>)
    at ../../../../hg.mozilla.org/mozilla-central/gfx/layers/composite/LayerManagerComposite.cpp:308
#3  mozilla::layers::LayerManagerComposite::EndTransaction (this=0xac7756a0, aCallback=<optimized out>, aCallbackData=<optimized out>, aFlags=<optimized out>)
    at ../../../../hg.mozilla.org/mozilla-central/gfx/layers/composite/LayerManagerComposite.cpp:260
#4  0xb4584d06 in mozilla::layers::LayerManagerComposite::EndEmptyTransaction (this=0xac7756a0,
    aFlags=aFlags@entry=mozilla::layers::LayerManager::END_DEFAULT)
    at ../../../../hg.mozilla.org/mozilla-central/gfx/layers/composite/LayerManagerComposite.cpp:255
#5  0xb4587cfe in mozilla::layers::CompositorParent::CompositeToTarget (this=0xaf7c1800, this@entry=0x1411ac2e, aTarget=aTarget@entry=0x0,
    aRect=aRect@entry=0x0) at ../../../../hg.mozilla.org/mozilla-central/gfx/layers/ipc/CompositorParent.cpp:1023
#6  0xb4587ed6 in mozilla::layers::CompositorParent::CompositeCallback (this=0x1411ac2e, aScheduleTime=...)
    at ../../../../hg.mozilla.org/mozilla-central/gfx/layers/ipc/CompositorParent.cpp:935
#7  0xb4587f70 in mozilla::layers::CompositorVsyncObserver::Composite (this=0xac0a9200, aVsyncTimestamp=...)
    at ../../../../hg.mozilla.org/mozilla-central/gfx/layers/ipc/CompositorParent.cpp:338
#8  0xb45763d8 in DispatchToMethod<mozilla::layers::CompositorParent, void (mozilla::layers::CompositorParent::*)(mozilla::TimeStamp), mozilla::TimeStamp> (
    arg=..., method=
    (void (mozilla::layers::CompositorParent::*)(mozilla::layers::CompositorParent * const, mozilla::TimeStamp)) 0xb4587ed9 <mozilla::layers::CompositorVsyncObserver::Composite(mozilla::TimeStamp)>, obj=<optimized out>) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/tuple.h:393
#9  RunnableMethod<mozilla::layers::CompositorParent, void (mozilla::layers::CompositorParent::*)(mozilla::TimeStamp), Tuple1<mozilla::TimeStamp> >::Run (
    this=<optimized out>) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/task.h:310
#10 0xb420a420 in MessageLoop::RunTask (this=0xb02f4cc0, task=0xaf1d4fd0)
    at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_loop.cc:361
#11 0xb420d2e6 in MessageLoop::DeferOrRunPendingTask (this=<optimized out>, pending_task=...)
    at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_loop.cc:369
#12 0xb420f1ac in DoWork (this=<optimized out>) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_loop.cc:456
#13 MessageLoop::DoWork (this=0xb02f4cc0) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_loop.cc:435
#14 0xb420ad18 in base::MessagePumpDefault::Run (this=0xb0570040, delegate=0xb02f4cc0)
    at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_pump_default.cc:34
#15 0xb420ac94 in MessageLoop::RunInternal (this=this@entry=0xb02f4cc0)
    at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_loop.cc:233
#16 0xb420acae in RunHandler (this=0xb02f4cc0) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_loop.cc:226
#17 MessageLoop::Run (this=this@entry=0xb02f4cc0) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/message_loop.cc:200
#18 0xb4210e9c in base::Thread::ThreadMain (this=0xb052deb0) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/thread.cc:170
#19 0xb420f490 in ThreadFunc (closure=<optimized out>) at ../../../../hg.mozilla.org/mozilla-central/ipc/chromium/src/base/platform_thread_posix.cc:39
#20 0xb6e1c22c in __thread_entry (func=0xb420f489 <ThreadFunc(void*)>, arg=0xb052deb0, tls=0xb02f4dd0) at bionic/libc/bionic/pthread_create.cpp:105
#21 0xb6e1c3c4 in pthread_create (thread_out=0xb052deb8, attr=<optimized out>, start_routine=0xb420f489 <ThreadFunc(void*)>, arg=0x78)
    at bionic/libc/bionic/pthread_create.cpp:224
#22 0x00000000 in ?? ()

Comment 1

[Thomas Zimmermann [:tzimmermann] [:tdz]]

This bug report might get fixed when the backout of bug 1152135 reaches m-c.

Comment 2

[Sotaro Ikeda [:sotaro]]

(In reply to Thomas Zimmermann [:tzimmermann] [:tdz] from comment #1)
> This bug report might get fixed when the backout of bug 1152135 reaches m-c.

Thanks for reporting. It was already backed out from m-i. Waiting to be merged to m-c.

Comment 3

[Sotaro Ikeda [:sotaro]]

(In reply to Sotaro Ikeda [:sotaro] from comment #2)
> (In reply to Thomas Zimmermann [:tzimmermann] [:tdz] from comment #1)
> > This bug report might get fixed when the backout of bug 1152135 reaches m-c.
> 
> Thanks for reporting. It was already backed out from m-i. Waiting to be
> merged to m-c.

It is Bug 1152135 Comment 28.

Comment 4

[Sotaro Ikeda [:sotaro]]

This is dup of bug 1153976.