Closed Bug 673027 Opened 11 years ago Closed 6 years ago

crash [@ nsCSSRendering::PaintBackground ]

Categories

(Core :: Layout, defect)

All
Linux
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: nhirata, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-b30011ea-fda3-47d8-8155-d79f62110720 .
============================================================= 
Frame 	Module 	Signature [Expand] 	Source
0 	libGLESv2_POWERVR_SGX540_120.so 	libGLESv2_POWERVR_SGX540_120.so@0x10ba8 	
1 	libGLESv2_POWERVR_SGX540_120.so 	libGLESv2_POWERVR_SGX540_120.so@0x20f43 	
2 	libGLESv2_POWERVR_SGX540_120.so 	libGLESv2_POWERVR_SGX540_120.so@0x23a1f 	
3 	libGLESv2_POWERVR_SGX540_120.so 	libGLESv2_POWERVR_SGX540_120.so@0x47e8f 	
4 	libGLESv2_POWERVR_SGX540_120.so 	libGLESv2_POWERVR_SGX540_120.so@0x47e8f 	
5 	libGLESv2_POWERVR_SGX540_120.so 	libGLESv2_POWERVR_SGX540_120.so@0x47e8f 	
6 	dalvik-heap (deleted) 	dalvik-heap @0x75055f 	
7 	libc.so 	libc.so@0x1c700 	
8 	libGLESv2_POWERVR_SGX540_120.so 	libGLESv2_POWERVR_SGX540_120.so@0x52445 	
9 	libsrv_um.so 	libsrv_um.so@0x316b 	
10 	libxul.so 	nsCSSRendering::PaintBackground 	layout/base/nsCSSRendering.cpp:1465
11 		@0x4522a633 	
12 	dalvik-heap (deleted) 	dalvik-heap @0x75055f 	
13 	libmozalloc.so 	moz_free 	memory/mozalloc/mozalloc.cpp:96
14 	libxul.so 	nsTArray_base<nsTArrayDefaultAllocator>::ShiftData 	nsTArray-inl.h:143
15 	libxul.so 	mozilla::FrameLayerBuilder::DrawThebesLayer 	nsTArray.h:374
16 	libxul.so 	mozilla::layers::ThebesLayerOGL::RenderLayer 	nsRegion.h:107
17 	libxul.so 	mozilla::layers::ContainerLayerOGL::RenderLayer 	nsAutoPtr.h:1098
18 	libxul.so 	mozilla::layers::ContainerLayerOGL::RenderLayer 	nsAutoPtr.h:1098
19 	libxul.so 	mozilla::layers::LayerManagerOGL::Render 	gfx/layers/opengl/LayerManagerOGL.cpp:798
20 	libxul.so 	mozilla::layers::LayerManagerOGL::EndTransaction 	gfx/layers/opengl/LayerManagerOGL.cpp:425
21 	libxul.so 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:631
22 	libxul.so 	nsDisplayList::PaintRoot 	layout/base/nsDisplayList.cpp:542
23 	libxul.so 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1643
24 	libxul.so 	PresShell::Paint 	layout/base/nsPresShell.cpp:6188
25 	libxul.so 	nsViewManager::RenderViews 	view/src/nsViewManager.cpp:441
26 	libxul.so 	nsViewManager::Refresh 	view/src/nsViewManager.h:239
27 	libxul.so 	nsViewManager::DispatchEvent 	nsCOMPtr.h:492
28 	libxul.so 	HandleEvent 	nsCOMPtr.h:492
29 	libxul.so 	nsWindow::DispatchEvent 	widget/src/android/nsWindow.cpp:635
30 	libxul.so 	nsWindow::DrawTo 	nsRegion.h:107
31 	libxul.so 	nsWindow::DrawTo 	widget/src/android/nsWindow.cpp:943
32 	libxul.so 	nsWindow::OnDraw 	widget/src/android/nsWindow.cpp:1056
33 	libxul.so 	nsWindow::OnGlobalAndroidEvent 	widget/src/android/nsWindow.cpp:830
34 	libxul.so 	nsAppShell::ProcessNextNativeEvent 	widget/src/android/nsAppShell.cpp:389
35 	libxul.so 	nsBaseAppShell::DoProcessNextNativeEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:172
36 	libxul.so 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:324
37 	libxul.so 	mozilla::dom::ContentParent::OnProcessNextEvent 	dom/ipc/ContentParent.cpp:999
38 	libxul.so 	nsThread::ProcessNextEvent 	nsTArray.h:140
39 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
40 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:111
41 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
42 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:511
43 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:191
44 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:223
45 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3572
46 	libxul.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	toolkit/xre/nsAndroidStartup.cpp:132
47 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	other-licenses/android/APKOpen.cpp:234
48 	libdvm.so 	libdvm.so@0x17e37 	
49 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e82c3 	
50 	dalvik-heap (deleted) 	dalvik-heap @0x689fdf 	
51 	libdvm.so 	libdvm.so@0x496e2 	
52 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex@0x10145 	
53 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	other-licenses/android/APKOpen.cpp:234
54 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e82c3 	
55 	libdvm.so 	libdvm.so@0x4969c 	
56 	dalvik-heap (deleted) 	dalvik-heap @0x689fdf 	
57 	libdvm.so 	libdvm.so@0x4ee64 	
58 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e82c3 	
59 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex@0x9ead 	
60 	dalvik-heap (deleted) 	dalvik-heap @0x689fdf 	
61 	libdvm.so 	libdvm.so@0x17fff 	
62 	libdvm.so 	libdvm.so@0x1d037 	
63 	libdvm.so 	libdvm.so@0xa5367 	
64 	libdvm.so 	libdvm.so@0x220e7 	
65 	libdvm.so 	libdvm.so@0x22057 	
66 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e97a7 	
67 	libdvm.so 	libdvm.so@0x20fdf 	
68 	core.odex 	core.odex@0xb5969 	
69 	dalvik-heap (deleted) 	dalvik-heap @0x75134f 	
70 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e866b 	
71 	dalvik-heap (deleted) 	dalvik-heap @0x18fff6f 	
72 	libdvm.so 	libdvm.so@0xa9b07 	
73 	libdvm.so 	libdvm.so@0x1cd17 	
74 	libdvm.so 	libdvm.so@0x1cd8f 	
75 	libdvm.so 	libdvm.so@0x1cc37 	
76 	libdvm.so 	libdvm.so@0x1cc5f 	
77 	libdvm.so 	libdvm.so@0x1cc8f 	
78 	libdvm.so 	libdvm.so@0x1ccb3 	
79 	libdvm.so 	libdvm.so@0x7f638 	
80 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex@0x62c7 	
81 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex 	data@app@org.mozilla.fennec_aurora-1.apk@classes.dex@0x62c7 	
82 	core.odex 	core.odex@0x17da2f
crasher related to layout code?  cc'ing roc.  should we move this to layout component?
I guess so. Let's just move it for now.

I'm wondering if these kinds of crashes could be also happening because something similar like bug 672787, comment 18?
Component: General → Layout
Product: Fennec → Core
QA Contact: general → layout
Zero crashes for this particular signature.  There are however lots of other
libGLESv2_POWERVR_SGX540_120.so@... crashes, but I'm guessing that's bug 1288446.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.