Crash in java.lang.NullPointerException: Attempt to invoke virtual method ''int java.lang.Integer.intValue()'' on a null object reference at org.mozilla.gecko.gfx.DynamicToolbarAnimator.bottomOfCssViewport(DynamicToolbarAnimator.java)

NEW
Unassigned

Status

()

Firefox for Android
General
--
critical
11 months ago
7 months ago

People

(Reporter: Usul, Unassigned)

Tracking

({crash})

Trunk
Unspecified
Android
crash
Points:
---

Firefox Tracking Flags

(firefox54 affected, firefox55 affected)

Details

(crash signature)

(Reporter)

Description

11 months ago
This bug was filed from the Socorro interface and is 
report bp-19e60ffd-9ef3-4ec3-a93e-7f8622170314.
=============================================================
0 	libxul.so 	mozilla::java::GeckoLayerClient::SyncFrameMetrics 	widget/android/jni/Accessors.h:59
1 	libxul.so 	mozilla::widget::AndroidCompositorWidget::SyncFrameMetrics 	widget/android/AndroidCompositorWidget.cpp:52
2 	libxul.so 	mozilla::layers::AsyncCompositionManager::ApplyAsyncContentTransformToTree(mozilla::layers::Layer*, bool*)::{lambda(mozilla::layers::Layer*)#2}::operator()(mozilla::layers::Layer*) const 	
3 	libxul.so 	mozilla::layers::ForEachNode<mozilla::layers::ForwardIterator, mozilla::layers::Layer*, mozilla::layers::AsyncCompositionManager::ApplyAsyncContentTransformToTree(mozilla::layers::Layer*, bool*)::<lambda(mozilla::layers::Layer*)>, mozilla::layers::AsyncCompositionManager::ApplyAsyncContentTransformToTree(mozilla::layers::Layer*, bool*)::<lambda(mozilla::layers::Layer*)> > 	gfx/layers/TreeTraversal.h:145
4 	libxul.so 	mozilla::layers::ForEachNode<mozilla::layers::ForwardIterator, mozilla::layers::Layer*, mozilla::layers::AsyncCompositionManager::ApplyAsyncContentTransformToTree(mozilla::layers::Layer*, bool*)::<lambda(mozilla::layers::Layer*)>, mozilla::layers::AsyncCompositionManager::ApplyAsyncContentTransformToTree(mozilla::layers::Layer*, bool*)::<lambda(mozilla::layers::Layer*)> > 	gfx/layers/TreeTraversal.h:142
5 	libxul.so 	mozilla::layers::AsyncCompositionManager::ApplyAsyncContentTransformToTree 	gfx/layers/composite/AsyncCompositionManager.cpp:1068
6 	libxul.so 	mozilla::layers::AsyncCompositionManager::TransformShadowTree 	gfx/layers/composite/AsyncCompositionManager.cpp:1373
7 	libxul.so 	mozilla::layers::CompositorBridgeParent::CompositeToTarget 	gfx/layers/ipc/CompositorBridgeParent.cpp:984
8 	libxul.so 	mozilla::layers::CompositorVsyncScheduler::Composite 	gfx/layers/ipc/CompositorVsyncScheduler.cpp:253
9 	libxul.so 	mozilla::detail::RunnableMethodImpl<SoftwareDisplay*, void (SoftwareDisplay::*)(mozilla::TimeStamp), true, true, mozilla::TimeStamp>::Run 	xpcom/threads/nsThreadUtils.h:855
10 	libxul.so 	MessageLoop::RunTask 	ipc/chromium/src/base/message_loop.cc:358
11 	libxul.so 	MessageLoop::DeferOrRunPendingTask 	ipc/chromium/src/base/message_loop.cc:366
12 	libxul.so 	MessageLoop::DoWork 	ipc/chromium/src/base/message_loop.cc:441
13 	libxul.so 	base::MessagePumpDefault::Run 	ipc/chromium/src/base/message_pump_default.cc:36
14 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:231
15 	libxul.so 	base::Thread::ThreadMain 	ipc/chromium/src/base/thread.cc:179
16 	libxul.so 	ThreadFunc 	ipc/chromium/src/base/platform_thread_posix.cc:38
Ø 17 	libc.so 	libc.so@0x470b3 	
Ø 18 	libc.so 	libc.so@0x19e3d 	
19 	libxul.so 	std::__ndk1::__sort<std::__ndk1::__less<int, int>&, int*> 	android-ndk/sources/cxx-stl/llvm-libc++/libcxx/include/algorithm:4011

Comment 1

10 months ago
>    private float bottomOfCssViewport(ImmutableViewportMetrics aMetrics) {
>        return (isResizing() ? mHeightDuringResize : aMetrics.getHeight())
>                + mMaxTranslation - mLayerViewTranslation;
>    }

It looks like mHeightDuringResize is null, and possibly caused by some byte-code optimization. mHeightDuringResize might be pulled before isResizing() and cause implicit type conversion.
status-firefox54: --- → affected
You need to log in before you can comment on or make changes to this bug.