595369 - Firefox 4.0b5 Crash spike [@ apply_nonzero_fill_rule_for_subrow ]

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[chris hofmann]

this has been around for a while, but spiked yesterday in 4.0b5 with 45 crashes and moved into the top 30.

20100906   ,
20100907   ,
20100908 1 3.6.8,1  ,
20100909 45  ,44 4.0b5,1 3.6.8,

stack looks like below with all b5 crash addresses at 0x4

http://crash-stats.mozilla.com/report/index/958c0242-0c33-4e4e-aee9-8dbf62100909


Frame  	Module  	Signature [Expand]  	Source
0 	xul.dll 	apply_nonzero_fill_rule_for_subrow 	gfx/cairo/cairo/src/cairo-tor-scan-converter.c:1425
1 	xul.dll 	glitter_scan_converter_render 	gfx/cairo/cairo/src/cairo-tor-scan-converter.c:1905
2 	xul.dll 	_cairo_tor_scan_converter_generate 	gfx/cairo/cairo/src/cairo-tor-scan-converter.c:2105
3 	xul.dll 	_cairo_surface_composite_polygon 	gfx/cairo/cairo/src/cairo-spans.c:73
4 	xul.dll 	_composite_spans_draw_func 	gfx/cairo/cairo/src/cairo-surface-fallback.c:890
5 	xul.dll 	_create_composite_mask_pattern 	gfx/cairo/cairo/src/cairo-surface-fallback.c:162
6 	xul.dll 	_clip_and_composite_with_mask 	gfx/cairo/cairo/src/cairo-surface-fallback.c:195
7 	xul.dll 	_clip_and_composite 	gfx/cairo/cairo/src/cairo-surface-fallback.c:451
8 	xul.dll 	_cairo_surface_fallback_fill 	gfx/cairo/cairo/src/cairo-surface-fallback.c:1394
9 	xul.dll 	_cairo_surface_fill 	gfx/cairo/cairo/src/cairo-surface.c:2225
10 	xul.dll 	_cairo_gstate_fill 	gfx/cairo/cairo/src/cairo-gstate.c:1184
11 	xul.dll 	_moz_cairo_fill_preserve 	gfx/cairo/cairo/src/cairo.c:2338
12 	xul.dll 	nsCSSBorderRenderer::FillSolidBorder 	layout/base/nsCSSRenderingBorders.cpp:532
13 	xul.dll 	nsCSSBorderRenderer::DrawBorderSides 	layout/base/nsCSSRenderingBorders.cpp:902
14 	xul.dll 	nsCSSBorderRenderer::DrawBorders 	layout/base/nsCSSRenderingBorders.cpp:1165
15 	xul.dll 	nsCSSRendering::PaintBorderWithStyleBorder 	layout/base/nsCSSRendering.cpp:707
16 	xul.dll 	nsCSSRendering::PaintBorder 	layout/base/nsCSSRendering.cpp:566
17 	xul.dll 	nsDisplayBorder::Paint 	layout/base/nsDisplayList.cpp:929
18 	xul.dll 	mozilla::FrameLayerBuilder::DrawThebesLayer 	layout/base/FrameLayerBuilder.cpp:1507
19 	xul.dll 	mozilla::layers::BasicThebesLayer::PaintBuffer 	gfx/layers/basic/BasicLayers.cpp:338
20 	xul.dll 	mozilla::layers::BasicThebesLayer::Paint 	gfx/layers/basic/BasicLayers.cpp:419
21 	xul.dll 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1069
22 	xul.dll 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1077
23 	xul.dll 	mozilla::layers::BasicLayerManager::EndTransaction 	gfx/layers/basic/BasicLayers.cpp:977
24 	xul.dll 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:410
25 	xul.dll 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1409
26 	xul.dll 	PresShell::Paint 	layout/base/nsPresShell.cpp:5934
27 	xul.dll 	nsViewManager::RenderViews 	view/src/nsViewManager.cpp:459
28 	xul.dll 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:425
29 	xul.dll 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:940
30 	xul.dll 	AttachedHandleEvent 	view/src/nsView.cpp:193
31 	xul.dll 	nsWindow::DispatchEvent 	widget/src/windows/nsWindow.cpp:3524
32 	xul.dll 	nsWindow::DispatchWindowEvent 	widget/src/windows/nsWindow.cpp:3555
33 	xul.dll 	nsWindow::OnPaint 	widget/src/windows/nsWindowGfx.cpp:603
34 	xul.dll 	nsWindow::ProcessMessage 	widget/src/windows/nsWindow.cpp:4734
35 	xul.dll 	nsWindow::WindowProcInternal 	widget/src/windows/nsWindow.cpp:4326
36 	xul.dll 	nsWindow::WindowProc 	widget/src/windows/nsWindow.cpp:4278
37 	user32.dll 	InternalCallWinProc 	
38 	user32.dll 	UserCallWinProcCheckWow 	
39 	user32.dll 	DispatchClientMessage 	
40 	user32.dll 	__fnDWORD 	
41 	ntdll.dll 	KiUserCallbackDispatcher 	
42 	xul.dll 	nsWindow::DealWithPopups 	widget/src/windows/nsWindow.cpp:8170
43 	user32.dll 	DispatchMessageW 	
44 	xul.dll 	nsAppShell::ProcessNextNativeEvent 	widget/src/windows/nsAppShell.cpp:286
45 	nspr4.dll 	PR_IntervalNow 	nsprpub/pr/src/misc/prinrval.c:77
46 	xul.dll 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:312
47 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:517
48 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
49 	xul.dll 	xul.dll@0xb94e03 	
50 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
51 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:202
52 	xul.dll 	_SEH_epilog4 	
53 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:176
54 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:175
55 	xul.dll 	nsAppShell::Run 	widget/src/windows/nsAppShell.cpp:243

more at

http://crash-stats.mozilla.com/report/list?signature=apply_nonzero_fill_rule_for_subrow

first few source files on the stack don't show anything changing specifically in b5, but a few changes a bit earlier

2010-07-23 10:22 +1200	Karl Tomlinson - b=562574 fixes for cairo_copy_clip_rectangle_list and empty cairo_clip_extents r=jrmuizel

2010-08-02 10:00 -0400    Jeff Muizelaar - Bug 518172. cairo: Disable the previous_scaled_font cache. r=karlt

happens near start up

Correlation to startup or time of session
45 total crashes for apply_nonzero_fill_rule_for_subrow on 20100909-crashdata.csv
43 startup crashes inside 30 sec.
45 startup crashes inside 3 min.

spike appears to be all winXP and might be dupes or mostly single user with the start url    http://fr.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official

should watch this to see if the volume continues.

Comment 1

[Bas Schouten (:bas.schouten)]

No recent crashes with this signature as far as I can see.