Closed Bug 1221567 Opened 9 years ago Closed 9 years ago

crash in mozilla::layers::ShmemTextureHost::DeallocateSharedData

Categories

(Core :: Graphics: Layers, defect)

44 Branch
Unspecified
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1219529

People

(Reporter: standard8, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-c191c3b7-405f-42af-b515-c63542151104.
=============================================================

These seem to be affecting 44 cycle. Currently top crashers for Mac. My crash (referenced above) was a crash on shutdown.

0 		@0x12ff5d858 	
1 	XUL 	mozilla::layers::ShmemTextureHost::DeallocateSharedData() 	gfx/layers/composite/TextureHost.cpp
2 	XUL 	mozilla::AtomicRefCountedWithFinalize<mozilla::layers::TextureHost>::Release() 	gfx/layers/composite/TextureHost.cpp
3 	XUL 	nsTArray_Impl<mozilla::layers::ImageHost::TimedImage, nsTArrayInfallibleAllocator>::RemoveElementsAt(unsigned long, unsigned long) 	mfbt/RefPtr.h
4 	XUL 	mozilla::layers::ImageHost::~ImageHost() 	xpcom/glue/nsTArray.h
5 	XUL 	mozilla::layers::ImageLayerProperties::~ImageLayerProperties() 	gfx/layers/composite/CompositableHost.h
6 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
7 	XUL 	mozilla::layers::LayerPropertiesBase::~LayerPropertiesBase() 	xpcom/glue/nsTArray.h
8 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
9 	XUL 	mozilla::layers::ContainerLayerProperties::~ContainerLayerProperties() 	xpcom/glue/nsTArray.h
10 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
11 	XUL 	mozilla::layers::ContainerLayerProperties::~ContainerLayerProperties() 	xpcom/glue/nsTArray.h
12 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
13 	XUL 	mozilla::layers::ContainerLayerProperties::~ContainerLayerProperties() 	xpcom/glue/nsTArray.h
14 	XUL 	mozilla::layers::LayerManagerComposite::Destroy() 	mfbt/UniquePtr.h
15 	XUL 	mozilla::layers::CompositorParent::RecvWillStop() 	gfx/layers/ipc/CompositorParent.cpp
16 	XUL 	mozilla::layers::PCompositorParent::OnMessageReceived(IPC::Message const&, IPC::Message*&) 	obj-firefox/x86_64/ipc/ipdl/PCompositorParent.cpp
17 	XUL 	mozilla::ipc::MessageChannel::DispatchSyncMessage(IPC::Message const&, IPC::Message*&) 	ipc/glue/MessageChannel.cpp
18 	XUL 	mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message const&) 	ipc/glue/MessageChannel.cpp
19 	XUL 	mozilla::ipc::MessageChannel::OnMaybeDequeueOne() 	ipc/glue/MessageChannel.cpp
20 	XUL 	MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) 	ipc/chromium/src/base/message_loop.cc
21 	XUL 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
22 	XUL 	base::MessagePumpDefault::Run(base::MessagePump::Delegate*) 	ipc/chromium/src/base/message_pump_default.cc
23 	XUL 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
24 	XUL 	base::Thread::ThreadMain() 	ipc/chromium/src/base/thread.cc
25 	XUL 	ThreadFunc 	ipc/chromium/src/base/platform_thread_posix.cc

https://crash-stats.mozilla.com/report/index/6b51690c-4f75-47ed-a2e4-c490f2151103

0 	XUL 	<name omitted> 	obj-firefox/x86_64/ipc/ipdl/PLayerTransactionParent.cpp
1 	XUL 	mozilla::layers::ShmemTextureHost::DeallocateSharedData() 	gfx/layers/composite/TextureHost.cpp
2 	XUL 	mozilla::AtomicRefCountedWithFinalize<mozilla::layers::TextureHost>::Release() 	gfx/layers/composite/TextureHost.cpp
3 	XUL 	nsTArray_Impl<mozilla::layers::ImageHost::TimedImage, nsTArrayInfallibleAllocator>::RemoveElementsAt(unsigned long, unsigned long) 	mfbt/RefPtr.h
4 	XUL 	mozilla::layers::ImageHost::~ImageHost() 	xpcom/glue/nsTArray.h
5 	XUL 	mozilla::layers::ImageLayerProperties::~ImageLayerProperties() 	gfx/layers/composite/CompositableHost.h
6 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
7 	XUL 	mozilla::layers::ContainerLayerProperties::~ContainerLayerProperties() 	xpcom/glue/nsTArray.h
8 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
9 	XUL 	mozilla::layers::ContainerLayerProperties::~ContainerLayerProperties() 	xpcom/glue/nsTArray.h
10 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
11 	XUL 	mozilla::layers::ContainerLayerProperties::~ContainerLayerProperties() 	xpcom/glue/nsTArray.h
12 	XUL 	nsTArray<mozilla::UniquePtr<mozilla::layers::LayerPropertiesBase, mozilla::DefaultDelete<mozilla::layers::LayerPropertiesBase> > >::~nsTArray() 	mfbt/UniquePtr.h
13 	XUL 	mozilla::layers::ContainerLayerProperties::~ContainerLayerProperties() 	xpcom/glue/nsTArray.h
14 	XUL 	mozilla::layers::LayerManagerComposite::Destroy() 	mfbt/UniquePtr.h
15 	XUL 	mozilla::layers::CompositorParent::RecvWillStop() 	gfx/layers/ipc/CompositorParent.cpp
16 	XUL 	mozilla::layers::PCompositorParent::OnMessageReceived(IPC::Message const&, IPC::Message*&) 	obj-firefox/x86_64/ipc/ipdl/PCompositorParent.cpp
17 	XUL 	mozilla::ipc::MessageChannel::DispatchSyncMessage(IPC::Message const&, IPC::Message*&) 	ipc/glue/MessageChannel.cpp
18 	XUL 	mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message const&) 	ipc/glue/MessageChannel.cpp
19 	XUL 	mozilla::ipc::MessageChannel::OnMaybeDequeueOne() 	ipc/glue/MessageChannel.cpp
20 	XUL 	MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) 	ipc/chromium/src/base/message_loop.cc
21 	XUL 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
22 	XUL 	base::MessagePumpDefault::Run(base::MessagePump::Delegate*) 	ipc/chromium/src/base/message_pump_default.cc
23 	XUL 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
24 	XUL 	base::Thread::ThreadMain() 	ipc/chromium/src/base/thread.cc
25 	XUL 	ThreadFunc 	ipc/chromium/src/base/platform_thread_posix.cc
Ø 26 	libsystem_pthread.dylib 	libsystem_pthread.dylib@0x39b0 	
Ø 27 	libsystem_pthread.dylib 	libsystem_pthread.dylib@0x392d 	
Ø 28 	libsystem_pthread.dylib 	libsystem_pthread.dylib@0x1384 	
29 	XUL 	XUL@0x3afe6f
I think that this is the same root cause as bug 1219529 for which I am working on a fix.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.