1447335 - Crash in CompositorBridgeParent::RecvAdoptChild() during GeckoView e10s tests

Status: RESOLVED DUPLICATE of bug 1447157

(Core :: Graphics, defect)

Description

[James Willcox (:snorp) ([e-mail]) (he/him)]

I encounter the following crash when trying to run the GeckoView tests under e10s:

* thread #16, name = 'Thread-5', stop reason = signal SIGSEGV: invalid address (fault address: 0x14c)
  * frame #0: 0xcb7a9489 libxul.so`mozilla::layers::CompositorBridgeParent::RecvAdoptChild(unsigned long long const&) [inlined] RefPtr<mozilla::layers::APZSampler>::operator=(this=0xbb4013f8, aRhs=0x0000014c) at RefPtr.h:176
    frame #1: 0xcb7a9486 libxul.so`mozilla::layers::CompositorBridgeParent::RecvAdoptChild(this=<unavailable>, child=<unavailable>) at CompositorBridgeParent.cpp:1691
    frame #2: 0xcb3dde76 libxul.so`mozilla::layers::PCompositorBridgeParent::OnMessageReceived(this=<unavailable>, msg__=<unavailable>) at PCompositorBridgeParent.cpp:766
    frame #3: 0xcb3e215a libxul.so`mozilla::layers::PCompositorManagerParent::OnMessageReceived(this=<unavailable>, msg__=0xba1634cc) at PCompositorManagerParent.cpp:121
    frame #4: 0xcb160e9c libxul.so`mozilla::ipc::MessageChannel::DispatchAsyncMessage(this=0xd10a74e8, aMsg=<unavailable>) at MessageChannel.cpp:2135
    frame #5: 0xcb16025e libxul.so`mozilla::ipc::MessageChannel::DispatchMessage(this=0xd10a74e8, aMsg=<unavailable>) at MessageChannel.cpp:2065
    frame #6: 0xcb160727 libxul.so`mozilla::ipc::MessageChannel::RunMessage(this=<unavailable>, aTask=<unavailable>) at MessageChannel.cpp:1911
    frame #7: 0xcb160a7c libxul.so`mozilla::ipc::MessageChannel::MessageTask::Run(this=0xba1634a0) at MessageChannel.cpp:1944
    frame #8: 0xcb115027 libxul.so`MessageLoop::RunTask(this=0xbb401838, aTask=(mRawPtr = 0x00000000)) at message_loop.cc:452
    frame #9: 0xcb1152e1 libxul.so`MessageLoop::DeferOrRunPendingTask(this=<unavailable>, pending_task=<unavailable>) at message_loop.cc:460
    frame #10: 0xcb115400 libxul.so`MessageLoop::DoWork(this=0xbb401838) at message_loop.cc:535
    frame #11: 0xcb115d4e libxul.so`base::MessagePumpDefault::Run(this=<unavailable>, delegate=0xbb401838) at message_pump_default.cc:36
    frame #12: 0xcb114f1b libxul.so`MessageLoop::Run() [inlined] MessageLoop::RunInternal() at message_loop.cc:326
    frame #13: 0xcb114f0f libxul.so`MessageLoop::Run() [inlined] MessageLoop::RunHandler() at message_loop.cc:319
    frame #14: 0xcb114f0f libxul.so`MessageLoop::Run(this=<unavailable>) at message_loop.cc:299
    frame #15: 0xcb12143d libxul.so`base::Thread::ThreadMain(this=0xbb906420) at thread.cc:181
    frame #16: 0xcb117a02 libxul.so`ThreadFunc(closure=0xbb906420) at platform_thread_posix.cc:38
    frame #17: 0xed53d446 libc.so`__pthread_start(void*) + 54
    frame #18: 0xed4ec5dc libc.so`__start_thread + 76
    frame #19: 0xed4eac17 libc.so`__bionic_clone + 71

Comment 1

[James Willcox (:snorp) ([e-mail]) (he/him)]

Attachment: Bug 1447335 - random guess at a fix

Review commit: https://reviewboard.mozilla.org/r/229456/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/229456/

Comment 2

[Kartikaya Gupta (email:[e-mail])]

I have a patch for this already