1249530 - crash in mozilla::gfx::ConvertToB8G8R8A8_SIMD<T>

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect, P3)

Description

[Ludovic Hirlimann [:Usul]]

This bug was filed from the Socorro interface and is 
report bp-bb0120fe-9826-4e41-9c42-a2a222160219.
=============================================================
0 	libxul.so 	mozilla::gfx::ConvertToB8G8R8A8_SIMD<mozilla::gfx::simd::Scalaru8x16_t> 	gfx/2d/FilterProcessingSIMD-inl.h
1 	libxul.so 	mozilla::gfx::FilterProcessing::ConvertToB8G8R8A8 	gfx/2d/FilterProcessingScalar.cpp
2 	libxul.so 	mozilla::gfx::FilterNodeSoftware::GetInputDataSourceSurface 	gfx/2d/FilterNodeSoftware.cpp
3 	libxul.so 	mozilla::gfx::FilterNodeCompositeSoftware::Render 	gfx/2d/FilterNodeSoftware.cpp
4 	libxul.so 	mozilla::gfx::FilterNodeSoftware::GetOutput 	gfx/2d/FilterNodeSoftware.cpp
5 	libxul.so 	mozilla::gfx::FilterNodeSoftware::GetInputDataSourceSurface 	gfx/2d/FilterNodeSoftware.cpp
6 	libxul.so 	mozilla::gfx::FilterNodeCompositeSoftware::Render 	gfx/2d/FilterNodeSoftware.cpp
7 	libxul.so 	mozilla::gfx::FilterNodeSoftware::GetOutput 	gfx/2d/FilterNodeSoftware.cpp
8 	libxul.so 	mozilla::gfx::FilterNodeSoftware::GetInputDataSourceSurface 	gfx/2d/FilterNodeSoftware.cpp
9 	libxul.so 	mozilla::gfx::FilterNodeCropSoftware::Render 	gfx/2d/FilterNodeSoftware.cpp
10 	libxul.so 	mozilla::gfx::FilterNodeSoftware::GetOutput 	gfx/2d/FilterNodeSoftware.cpp
11 	libxul.so 	mozilla::gfx::FilterNodeSoftware::Draw 	gfx/2d/FilterNodeSoftware.cpp
12 	libxul.so 	mozilla::gfx::DrawTargetTiled::DrawFilter 	gfx/2d/DrawTargetTiled.cpp
13 	libxul.so 	mozilla::gfx::FilterSupport::RenderFilterDescription 	gfx/src/FilterSupport.cpp
14 	libxul.so 	nsFilterInstance::Render 	layout/svg/nsFilterInstance.cpp
15 	libxul.so 	nsFilterInstance::PaintFilteredFrame 	layout/svg/nsFilterInstance.cpp
16 	libxul.so 	nsSVGIntegrationUtils::PaintFramesWithEffects 	layout/svg/nsSVGIntegrationUtils.cpp
17 	libxul.so 	nsDisplaySVGEffects::PaintAsLayer 	layout/base/nsDisplayList.cpp
18 	libxul.so 	mozilla::FrameLayerBuilder::PaintItems 	layout/base/FrameLayerBuilder.cpp
19 	libxul.so 	mozilla::FrameLayerBuilder::DrawPaintedLayer 	layout/base/FrameLayerBuilder.cpp
20 	libxul.so 	mozilla::layers::ClientMultiTiledLayerBuffer::Update 	gfx/layers/client/TiledContentClient.cpp
21 	libxul.so 	mozilla::layers::ClientMultiTiledLayerBuffer::PaintThebes 	gfx/layers/client/TiledContentClient.cpp
22 	libxul.so 	mozilla::layers::ClientTiledPaintedLayer::RenderHighPrecision 	gfx/layers/client/ClientTiledPaintedLayer.cpp
23 	libxul.so 	mozilla::layers::ClientTiledPaintedLayer::RenderLayer 	gfx/layers/client/ClientTiledPaintedLayer.cpp
24 	libxul.so 	mozilla::layers::ClientContainerLayer::RenderLayer 	gfx/layers/client/ClientContainerLayer.h
25 	libxul.so 	mozilla::layers::ClientContainerLayer::RenderLayer 	gfx/layers/client/ClientContainerLayer.h
26 	libxul.so 	mozilla::layers::ClientContainerLayer::RenderLayer 	gfx/layers/client/ClientContainerLayer.h
27 	libxul.so 	mozilla::layers::ClientLayerManager::EndTransactionInternal 	gfx/layers/client/ClientLayerManager.cpp
28 	libxul.so 	mozilla::layers::ClientLayerManager::EndTransaction 	gfx/layers/client/ClientLayerManager.cpp
29 	libxul.so 	nsDisplayList::PaintRoot 	layout/base/nsDisplayList.cpp
30 	libxul.so 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp
31 	libxul.so 	PresShell::Paint 	layout/base/nsPresShell.cpp
32 	libxul.so 	nsViewManager::ProcessPendingUpdatesPaint 	view/nsViewManager.cpp
33 	libxul.so 	nsViewManager::ProcessPendingUpdatesForView 	view/nsViewManager.cpp
34 	libxul.so 	nsRefreshDriver::Tick 	layout/base/nsRefreshDriver.cpp
35 	libxul.so 	mozilla::RefreshDriverTimer::TickRefreshDrivers 	layout/base/nsRefreshDriver.cpp
36 	libxul.so 	mozilla::RefreshDriverTimer::Tick 	layout/base/nsRefreshDriver.cpp
37 	libxul.so 	mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver 	layout/base/nsRefreshDriver.cpp
38 	libxul.so 	nsRunnableMethodImpl<void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp), true, mozilla::TimeStamp>::Run 	xpcom/glue/nsThreadUtils.h
39 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp
40 	libxul.so 	NS_ProcessNextEvent 	xpcom/glue/nsThreadUtils.cpp
41 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp
42 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc
43 	libxul.so 	nsBaseAppShell::Run 	widget/nsBaseAppShell.cpp
44 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp
45 	libxul.so 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp
46 	libxul.so 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp
47 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp
48 	libxul.so 	GeckoStart 	toolkit/xre/nsAndroidStartup.cpp
49 	libmozglue.so 	Java_org_mozilla_gecko_mozglue_GeckoLoader_nativeRun 	mozglue/android/APKOpen.cpp
Ø 50 	libdvm.so 	libdvm.so@0x20a0e 	
Ø 51 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0x3f7a24 	
Ø 52 	dalvik-heap (deleted) 	dalvik-heap (deleted)@0x5b00e 	
Ø 53 	dalvik-heap (deleted) 	dalvik-heap (deleted)@0xa7f36 	
Ø 54 	libdvm.so 	libdvm.so@0x5764b 	
Ø 55 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0x3f7a22 	
56 	libmozglue.so 	Java_org_mozilla_gecko_mozglue_GeckoLoader_loadNSSLibsNative 	android-ndk/platforms/android-9/arch-arm/usr/include/jni.h
57 		@0x227fffff 	
58 	libmozglue.so 	Java_org_mozilla_gecko_mozglue_GeckoLoader_loadNSSLibsNative 	android-ndk/platforms/android-9/arch-arm/usr/include/jni.h

I a just loading a web page

Comment 1

[u279076]

Based on 6 months of data this is not exclusive to Android (87% on Fennec vs 13% on Firefox). It's also not a new issue with reports going back to 41.0 on Fennec and 29.0 on Firefox. The top URL, at 30%, is http://inkbunny.net/submissionview.php. Volume is not significant enough to show up in the top-300 crashes so not tracking.

Ludo, are you able to reproduce this at all?

Comment 2

[u279076]

Android correlations:
API:
1 	21 (REL) 	1091 	48.23 %
2 	22 (REL) 	619 	27.37 %
3 	19 (REL) 	466 	20.60 %

Models:
1 	SM-N910V 	193 	8.53 %
2 	SM-N910P 	137 	6.06 %
3 	SM-G900F 	125 	5.53 %
4 	SM-G900V 	123 	5.44 %
5 	SM-N910A 	112 	4.95 %

Hardware:
1 	qcom 	       1868 	82.58 %
2 	g3 	         91 	4.02 %
3 	universal5420 	 75 	3.32 %
4 	universal5433 	 37 	1.64 %
5 	bacon 	         26 	1.15 %

Comment 3

[Ludovic Hirlimann [:Usul]]

(In reply to Anthony Hughes, GFX QA Mentor (:ashughes) [afk until March 7, 2016] from comment #1)
> 
> Ludo, are you able to reproduce this at all?
I can't even remember what url made it crash. , so I'd say no.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'mozilla::gfx::ConvertToB8G8R8A8_SIMD<T>':
 - nightly (version 50): 0 crashes from 2016-06-06.
 - aurora  (version 49): 1 crash from 2016-06-07.
 - beta    (version 48): 25 crashes from 2016-06-06.
 - release (version 47): 116 crashes from 2016-05-31.
 - esr     (version 45): 11 crashes from 2016-04-07.

Crash volume on the last weeks:
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly       0       0       0       0       0       0       0
 - aurora        0       0       0       1       0       0       0
 - beta          6       3       6       2       0       3       4
 - release      15      11      19      11       6      23      20
 - esr           1       0       3       1       0       0       4

Affected platform: Windows

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.