662584 - Firefox Crash [@ _cairo_hash_table_lookup_exact_key ]

Status: RESOLVED INCOMPLETE

(Core :: Graphics, defect)

Description

[Marcia Knous [:marcia]]

Seen while reviewing trunk crash stats, but seen across all versions. 68 trunk crashes in the last week. https://crash-stats.mozilla.com/report/list?signature=_cairo_hash_table_lookup_exact_key

https://crash-stats.mozilla.com/report/index/c7e21d8f-8d1b-469e-920b-157872110607

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	_cairo_hash_table_lookup_exact_key 	gfx/cairo/cairo/src/cairo-hash.c:450
1 	xul.dll 	cairo_hash_table_remove 	gfx/cairo/cairo/src/cairo-hash.c:488
2 	xul.dll 	_cairo_scaled_glyph_page_destroy 	gfx/cairo/cairo/src/cairo-scaled-font.c:449
3 	xul.dll 	cairo_cache_remove 	gfx/cairo/cairo/src/cairo-cache.c:296
4 	xul.dll 	cairo_scaled_font_reset_cache 	gfx/cairo/cairo/src/cairo-scaled-font.c:791
5 	xul.dll 	_cairo_scaled_font_fini_internal 	gfx/cairo/cairo/src/cairo-scaled-font.c:830
6 	xul.dll 	moz_cairo_scaled_font_destroy 	
7 	xul.dll 	gfxFont::~gfxFont 	gfx/thebes/gfxFont.cpp:1040
8 	xul.dll 	gfxDWriteFont::~gfxDWriteFont 	gfx/thebes/gfxDWriteFonts.cpp:165
9 	xul.dll 	gfxDWriteFont::`vector deleting destructor' 	
10 	xul.dll 	gfxFontCache::DestroyFont 	gfx/thebes/gfxFont.cpp:997
11 	xul.dll 	nsExpirationTracker<gfxFont,3>::AgeOneGeneration 	obj-firefox/dist/include/nsExpirationTracker.h:210
12 	xul.dll 	nsExpirationTracker<gfxTextRun,3>::AgeAllGenerations 	obj-firefox/dist/include/nsExpirationTracker.h:234
13 	xul.dll 	gfxFontCache::~gfxFontCache 	obj-firefox/dist/include/gfxFont.h:636
14 	xul.dll 	nsThreadPool::Shutdown 	xpcom/threads/nsThreadPool.cpp:299
15 	xul.dll 	gfxFontCache::`scalar deleting destructor' 	
16 	xul.dll 	gfxFontCache::Shutdown 	gfx/thebes/gfxFont.cpp:910
17 	xul.dll 	gfxPlatform::Shutdown 	gfx/thebes/gfxPlatform.cpp:341
18 	xul.dll 	ChangeTable 	obj-firefox/xpcom/build/pldhash.c:599
19 	xul.dll 	nsComponentManagerImpl::KnownModule::~KnownModule 	xpcom/components/nsComponentManager.h:204
20 	xul.dll 	nsTArray<nsAutoPtr<nsComponentManagerImpl::KnownModule>,nsTArrayDefaultAllocator>::DestructRange 	obj-firefox/dist/include/nsTArray.h:1107
21 	xul.dll 	nsTArray<nsAutoPtr<nsComponentManagerImpl::KnownModule>,nsTArrayDefaultAllocator>::RemoveElementsAt 	obj-firefox/dist/include/nsTArray.h:835
22 	xul.dll 	xul.dll@0x712b6f 	
23 	xul.dll 	xul.dll@0x712b6f 	
24 	xul.dll 	nsComponentManagerImpl::Shutdown 	xpcom/components/nsComponentManager.cpp:1001
25 	xul.dll 	mozilla::ShutdownXPCOM 	xpcom/build/nsXPComInit.cpp:694
26 	xul.dll 	ScopedXPCOMStartup::~ScopedXPCOMStartup 	toolkit/xre/nsAppRunner.cpp:1077
27 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3733
28 	kernel32.dll 	CloseHandleImplementation 	
29 	mozcrt19.dll 	arena_dalloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4045
30 	mozcrt19.dll 	arena_dalloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4045
31 	kernel32.dll 	RtlFillMemoryStub 	
32 	mozcrt19.dll 	arena_malloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:3675
33 	mozcrt19.dll 	arena_dalloc 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4174
34 	xul.dll 	nsAString_internal::Assign 	xpcom/string/src/nsTSubstring.cpp:336
35 	xul.dll 	nsAString_internal::Assign 	xpcom/string/src/nsTSubstring.cpp:396
36 	xul.dll 	nsLocalFile::InitWithPath 	xpcom/io/nsLocalFileWin.cpp:887
37 	xul.dll 	nsAnnotationService::GetStatement 	toolkit/components/places/nsAnnotationService.cpp:195
38 	xul.dll 	nsRefPtr<nsPresContext>::~nsRefPtr<nsPresContext> 	obj-firefox/dist/include/nsAutoPtr.h:969
39 	xul.dll 	XRE_CreateAppData 	toolkit/xre/nsAppData.cpp:140
40 	firefox.exe 	NS_internal_main 	browser/app/nsBrowserApp.cpp:158
41 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:106
42 	firefox.exe 	__tmainCRTStartup 	obj-firefox/memory/jemalloc/crtsrc/crtexe.c:569
43 	kernel32.dll 	BaseThreadInitThunk 	
44 	ntdll.dll 	RtlUserThreadStart 	
45 	kernel32.dll 	BasepReportFault 	
46 	kernel32.dll 	BasepReportFault

Comment 1

[Jeff Muizelaar [:jrmuizel]]

Looks like this could be a dup of 661658

Comment 2

[Benoit Girard (:BenWa)]

Still seeing some crashes on here. We should investigate some more.

Comment 3

[Wayne Mery (:wsmwk)]

(In reply to Jeff Muizelaar [:jrmuizel] from comment #1)
> Looks like this could be a dup of bug 661658

perhaps some where. but bug 661658 is fixed long ago and there are still crashes.  eg.
bp-9edc5d17-e9ef-4d9d-ad8f-db5d72130627 fx22
0	gkmedias.dll	_cairo_hash_table_lookup_exact_key	gfx/cairo/cairo/src/cairo-hash.c:451
1	gkmedias.dll	_cairo_hash_table_remove	gfx/cairo/cairo/src/cairo-hash.c:488
2	gkmedias.dll	_moz_cairo_scaled_font_destroy	gfx/cairo/cairo/src/cairo-scaled-font.c:1253
3	xul.dll	gfxGDIFont::~gfxGDIFont	gfx/thebes/gfxGDIFont.cpp:57
4	xul.dll	gfxGDIFont::`vector deleting destructor'	
5	xul.dll	gfxFontCache::DestroyFont	gfx/thebes/gfxFont.cpp:1325
6	xul.dll	gfxFontCache::NotifyExpired	gfx/thebes/gfxFont.cpp:1312 

bp-b50a4356-e7c0-4cbb-88a8-bb4872130629 fx23
0	gkmedias.dll	_cairo_hash_table_lookup_exact_key	gfx/cairo/cairo/src/cairo-hash.c:451
1	gkmedias.dll	_cairo_hash_table_remove	gfx/cairo/cairo/src/cairo-hash.c:488
2	gkmedias.dll	_cairo_scaled_glyph_page_destroy	gfx/cairo/cairo/src/cairo-scaled-font.c:449
3	gkmedias.dll	_cairo_cache_remove	gfx/cairo/cairo/src/cairo-cache.c:296
4	gkmedias.dll	_cairo_scaled_font_reset_cache	gfx/cairo/cairo/src/cairo-scaled-font.c:791
5	gkmedias.dll	_cairo_scaled_font_fini_internal	gfx/cairo/cairo/src/cairo-scaled-font.c:830
6	gkmedias.dll	_moz_cairo_scaled_font_destroy	gfx/cairo/cairo/src/cairo-scaled-font.c:1277
7	xul.dll	gfxGDIFont::~gfxGDIFont	gfx/thebes/gfxGDIFont.cpp:57

Comment 4

[u279076]

Closing this bug report as incomplete since this such low volume that we'd ever realistically address it. Please reopen this bug report if you can reproduce this crash.