659217 - HW accelerated video crashing with OGL layerss enabled

Status: RESOLVED FIXED

(Core :: Graphics, defect)

Description

[Oleg Romashin (:romaxa)]

Attempt to play HTML5 video in IPC fenne c with OGL rendering enabled crashes in Edit::TOpPaintImage:

inline SurfaceDescriptor::SurfaceDescriptor(const SurfaceDescriptor& aOther)
{
    (aOther).AssertSanity();
    switch ((aOther).type()) {
    case TShmem:
        {
            new (ptr_Shmem()) Shmem((aOther).get_Shmem());
            break;
        }
    case TSurfaceDescriptorX11:
        {
            new (ptr_SurfaceDescriptorX11()) SurfaceDescriptorX11((aOther).get_SurfaceDescriptorX11());
            break;
        }
    case T__None:
        {
            break;
        }
    default:
        {
            NS_RUNTIMEABORT("unreached");
            return;
        }
    }
    mType = (aOther).type();
}


#5  0x3ab10e64 in mozalloc_abort (msg=<value optimized out>)
    at memory/mozalloc/mozalloc_abort.cpp:76
#6  0x3bc9459c in Abort (aSeverity=1034931200, aStr=0x0, aExpr=<value optimized out>, aFile=<value optimized out>, aLine=6150)
    at xpcom/base/nsDebugImpl.cpp:388
#7  NS_DebugBreak_P (aSeverity=1034931200, aStr=0x0, aExpr=<value optimized out>, aFile=<value optimized out>, aLine=6150)
    at xpcom/base/nsDebugImpl.cpp:345
#8  0x3bd97ffc in SurfaceDescriptor (this=0x42ee1670, cset=..., reply=<value optimized out>) at ../../ipc/ipdl/_ipdlheaders/mozilla/layers/PLayers.h:6150
#9  mozilla::layers::ShadowLayersParent::RecvUpdate (this=0x42ee1670, cset=..., reply=<value optimized out>)
    at gfx/layers/ipc/ShadowLayersParent.cpp:438
#10 0x3bbb8a44 in mozilla::layers::PLayersParent::OnMessageReceived (this=0x42ee1670, __msg=<value optimized out>, __reply=@0xae9db464)
    at obj-build/ipc/ipdl/PLayersParent.cpp:223
#11 0x3bba5528 in mozilla::dom::PContentParent::OnMessageReceived (this=0x40244ae0, __msg=<value optimized out>, __reply=@0xae9db464)
    at obj-build/ipc/ipdl/PContentParent.cpp:1348
---Type <return> to continue, or q <return> to quit---
#12 0x3bb78c38 in mozilla::ipc::SyncChannel::OnDispatchMessage (this=0x40244ae8, msg=...)
    at ipc/glue/SyncChannel.cpp:169
#13 0x3bb728b8 in mozilla::ipc::RPCChannel::OnMaybeDequeueOne (this=0x40244ae8)
    at ipc/glue/RPCChannel.cpp:431
#14 0x3bb767f0 in DispatchToMethod<mozilla::ipc::RPCChannel, bool (mozilla::ipc::RPCChannel::*)()> (this=<value optimized out>)
    at ipc/chromium/src/base/tuple.h:383
#15 RunnableMethod<mozilla::ipc::RPCChannel, bool (mozilla::ipc::RPCChannel::*)(), Tuple0>::Run (this=<value optimized out>)
    at ipc/chromium/src/base/task.h:307
#16 0x3bb76758 in Run (this=<value optimized out>) at ../../dist/include/mozilla/ipc/RPCChannel.h:464
#17 mozilla::ipc::RPCChannel::DequeueTask::Run (this=<value optimized out>) at ../../dist/include/mozilla/ipc/RPCChannel.h:487
#18 0x3bcd07f8 in MessageLoop::RunTask (this=0x3ff7e280, task=0x1116)
    at ipc/chromium/src/base/message_loop.cc:342
#19 0x3bcd21c8 in MessageLoop::DeferOrRunPendingTask (this=0x3ff7e280, pending_task=<value optimized out>)
    at ipc/chromium/src/base/message_loop.cc:350
#20 0x3bcd2498 in MessageLoop::DoWork (this=0x3ff7e280)
    at ipc/chromium/src/base/message_loop.cc:450
#21 0x3bb6fdbc in mozilla::ipc::DoWorkRunnable::Run (this=<value optimized out>)
    at ipc/glue/MessagePump.cpp:70
#22 0x3bc8a9d4 in nsThread::ProcessNextEvent (this=0x3ff0d0b0, mayWait=<value optimized out>, result=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at xpcom/threads/nsThread.cpp:618
#23 0x3bc42540 in NS_ProcessNextEvent_P (thread=0x0, mayWait=4374)
    at obj-build/xpcom/build/nsThreadUtils.cpp:250
#24 0x3bb6fc38 in mozilla::ipc::MessagePump::Run (this=0x3ff9a1f0, aDelegate=0x3ff7e280)
    at ipc/glue/MessagePump.cpp:134
#25 0x3bcd0698 in MessageLoop::RunInternal (this=0x1116)
    at ipc/chromium/src/base/message_loop.cc:218
#26 0x3bcd0754 in RunHandler (this=0x3bcd0754) at ipc/chromium/src/base/message_loop.cc:202
#27 MessageLoop::Run (this=0x3bcd0754) at ipc/chromium/src/base/message_loop.cc:176
#28 0x3ba7c840 in nsBaseAppShell::Run (this=0x4173b338)
    at widget/src/xpwidgets/nsBaseAppShell.cpp:189
#29 0x3b8dcf90 in nsAppStartup::Run (this=0x4173c880)
    at toolkit/components/startup/nsAppStartup.cpp:224
#30 0x3addcc00 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>)
    at toolkit/xre/nsAppRunner.cpp:3706
#31 0x00009570 in main (argc=2, argv=0xae9dbc24) at mobile/app/nsBrowserApp.cpp:155
(gdb)

Comment 1

[Oleg Romashin (:romaxa)]

Attachment: Crash fix

Comment 2

[Dão Gottwald [:dao]]

http://hg.mozilla.org/mozilla-central/rev/3447a520f996