674565 - crash in mozilla::gl::GLContext::PushViewportRect @ libGLESv2_adreno200.so

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-5f12b712-a820-4a99-b1b8-f22042110721 .
============================================================= 
Frame 	Module 	Signature [Expand] 	Source
0 	libGLESv2_adreno200.so 	libGLESv2_adreno200.so@0x7a122 	
1 	libGLESv2_adreno200.so 	libGLESv2_adreno200.so@0x7a218 	
2 	libGLESv2_adreno200.so 	libGLESv2_adreno200.so@0x68354 	
3 	libGLESv2_adreno200.so 	libGLESv2_adreno200.so@0x682a0 	
4 	libGLESv2_adreno200.so 	libGLESv2_adreno200.so@0x5b5cc 	
5 	libxul.so 	mozilla::gl::GLContext::PushViewportRect 	gfx/thebes/GLContext.h:1291
6 	libxul.so 	mozilla::gl::GLContext::BlitTextureImage 	nsTArray.h:1194
7 	libxul.so 	mozilla::layers::BasicBufferOGL::BeginPaint 	gfx/layers/opengl/ThebesLayerOGL.cpp:528
8 	libxul.so 	mozilla::layers::ThebesLayerOGL::RenderLayer 	nsRegion.h:388
9 	libxul.so 	mozilla::layers::ContainerLayerOGL::RenderLayer 	nsAutoPtr.h:1098
10 	libxul.so 	mozilla::layers::ContainerLayerOGL::RenderLayer 	nsAutoPtr.h:1098
11 	libxul.so 	mozilla::layers::LayerManagerOGL::Render 	gfx/layers/opengl/LayerManagerOGL.cpp:798
12 	libxul.so 	mozilla::layers::LayerManagerOGL::EndTransaction 	gfx/layers/opengl/LayerManagerOGL.cpp:425
13 	libxul.so 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:631
14 	libxul.so 	nsDisplayList::PaintRoot 	layout/base/nsDisplayList.cpp:542
15 	libxul.so 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1643
16 	libxul.so 	PresShell::Paint 	layout/base/nsPresShell.cpp:6160
17 	libxul.so 	nsViewManager::RenderViews 	view/src/nsViewManager.cpp:441
18 	libxul.so 	nsViewManager::Refresh 	view/src/nsViewManager.h:239
19 	libxul.so 	nsViewManager::DispatchEvent 	nsCOMPtr.h:492
20 	libxul.so 	HandleEvent 	nsCOMPtr.h:492
21 	libxul.so 	nsWindow::DispatchEvent 	widget/src/android/nsWindow.cpp:635
22 	libxul.so 	nsWindow::DrawTo 	nsRegion.h:107
23 	libxul.so 	nsWindow::DrawTo 	widget/src/android/nsWindow.cpp:943
24 	libxul.so 	nsWindow::OnDraw 	widget/src/android/nsWindow.cpp:1056
25 	libxul.so 	nsWindow::OnGlobalAndroidEvent 	widget/src/android/nsWindow.cpp:830
26 	libxul.so 	nsAppShell::ProcessNextNativeEvent 	widget/src/android/nsAppShell.cpp:389
27 	libxul.so 	nsBaseAppShell::DoProcessNextNativeEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:172
28 	libxul.so 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:324
29 	libxul.so 	mozilla::dom::ContentParent::OnProcessNextEvent 	dom/ipc/ContentParent.cpp:999
30 	libxul.so 	nsThread::ProcessNextEvent 	nsTArray.h:140
31 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
32 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:111
33 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
34 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:511
35 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:191
36 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:225
37 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3572
38 	libxul.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	toolkit/xre/nsAndroidStartup.cpp:132
39 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	other-licenses/android/APKOpen.cpp:234
40 	libdvm.so 	libdvm.so@0x11e77 	
41 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e95ef 	
42 	dalvik-heap (deleted) 	dalvik-heap @0x605a9f 	
43 	libdvm.so 	libdvm.so@0x43722 	
44 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0x10f56 	
45 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	other-licenses/android/APKOpen.cpp:234
46 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e95ef 	
47 	libdvm.so 	libdvm.so@0x436dc 	
48 	dalvik-heap (deleted) 	dalvik-heap @0x605a9f 	
49 	libdvm.so 	libdvm.so@0x48ea0 	
50 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e95ef 	
51 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0xa94d 	
52 	dalvik-heap (deleted) 	dalvik-heap @0x605a9f 	
53 	libdvm.so 	libdvm.so@0x1203f 	
54 	libdvm.so 	libdvm.so@0x17077 	
55 	libdvm.so 	libdvm.so@0x9f367 	
56 	libdvm.so 	libdvm.so@0x1c127 	
57 	libdvm.so 	libdvm.so@0x1c097 	
58 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1eab07 	
59 	libdvm.so 	libdvm.so@0x1b01f 	
60 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x13f5e9 	
61 	dalvik-heap (deleted) 	dalvik-heap @0x71a02f 	
62 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1e99cb 	
63 	dalvik-heap (deleted) 	dalvik-heap @0x1b8da6f 	
64 	libdvm.so 	libdvm.so@0xa3b07 	
65 	libdvm.so 	libdvm.so@0x16d57 	
66 	libdvm.so 	libdvm.so@0x16dcf 	
67 	libdvm.so 	libdvm.so@0x16c77 	
68 	libdvm.so 	libdvm.so@0x16c9f 	
69 	libdvm.so 	libdvm.so@0x16ccf 	
70 	libdvm.so 	libdvm.so@0x16cf3 	
71 	libdvm.so 	libdvm.so@0x79658 	
72 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0xc3383 	
73 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0xc3383 	
74 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0xc33a1

More reports:
https://crash-stats.mozilla.com/report/list?range_value=7&range_unit=days&date=2011-07-27%2002%3A00%3A00&signature=libGLESv2_adreno200.so%400x7a122&version=Fennec%3A8.0a1

Comment 1

[Brad Lassey [:blassey] (use needinfo?)]

not tracking without STR

Comment 2

[Joe Drew (not getting mail)]

George is going to see if he can reproduce this.

Comment 3

[Benoit Girard (:BenWa)]

We've landed fixes for the adreno upload by not using glTexSubImage. There are no crash in the last 4 weeks.