685548 - crash [@ gfxFont::Draw]

Status: VERIFIED DUPLICATE of bug 686190

(Core :: Graphics, defect)

Description

[Martijn Wargers (dead)]

I'm seeing this crash on my LG Optimus Black, using trunk Fennec.
I guess this is a Cairo bug.
If wanted, I could perhaps get a testcase.

This bug was filed from the Socorro interface and is 
report bp-52f9aa3a-f1e5-4dab-a49e-46b9a2110907 .
============================================================= 
0 	libxul.so 	gfxFont::Draw 	gfx/thebes/gfxFont.cpp:1324
1 	org.mozilla.fennec-1.apk 	org.mozilla.fennec-1.apk@0x57178c 	
2 	org.mozilla.fennec-1.apk 	org.mozilla.fennec-1.apk@0x63efff 	
3 	org.mozilla.fennec-1.apk 	org.mozilla.fennec-1.apk@0x5718e5 	
4 	org.mozilla.fennec-1.apk 	org.mozilla.fennec-1.apk@0x63efff 	
5 	libmozutils.so 	arena_dalloc 	memory/jemalloc/jemalloc.c:4321
6 	libmozutils.so 	__wrap_free 	memory/jemalloc/jemalloc.c:6260
7 	libxul.so 	_cairo_pen_fini 	gfx/cairo/cairo/src/cairo-pen.c:113
8 	libxul.so 	_cairo_path_fixed_stroke_to_polygon 	gfx/cairo/cairo/src/cairo-path-stroke.c:1384
9 	libxul.so 	_cairo_image_surface_stroke 	gfx/cairo/cairo/src/cairo-image-surface.c:3684
10 	libxul.so 	_cairo_surface_stroke 	gfx/cairo/cairo/src/cairo-surface.c:2311
11 	libxul.so 	_cairo_gstate_stroke 	gfx/cairo/cairo/src/cairo-gstate.c:1178
12 	libxul.so 	gfxPattern::~gfxPattern 	gfx/thebes/gfxPattern.cpp:78
13 	libxul.so 	gfxPattern::Release 	gfxPattern.h:54
14 	libxul.so 	nsCSSRendering::PaintDecorationLine 	nsAutoPtr.h:907
15 	libxul.so 	nsTextFrame::DrawTextRunAndDecorations 	nsTArray.h:170
16 	libxul.so 	nsTextFrame::DrawText 	layout/generic/nsTextFrame.h:487
17 	libxul.so 	nsTextFrame::PaintText 	layout/generic/nsTextFrameThebes.cpp:5323
18 	libxul.so 	nsDisplayText::Paint 	gfxContext.h:832
19 	libxul.so 	mozilla::FrameLayerBuilder::DrawThebesLayer 	layout/base/FrameLayerBuilder.cpp:2143
20 	libxul.so 	mozilla::layers::BasicThebesLayer::PaintThebes 	nsRegion.h:107

Comment 1

[Jonathan Kew [:jfkthame]]

If you can come up with a testcase that consistently reproduces the crash, that'd be very helpful - thanks!

Comment 2

[Martijn Wargers (dead)]

Attachment: testcase

Comment 3

[Martijn Wargers (dead)]

The testcase crashes for me on reload in current Fennec trunk build on the LG Optimus Black.

Comment 4

[Jesse Ruderman]

Bug 686190 has a testcase that crashes similarly on Mac.

Comment 5

[Jonathan Kew [:jfkthame]]

I'm virtually certain this will prove to be the same as bug 686190, which just landed on mozilla-inbound.

Marking this as a duplicate; please reopen if I'm wrong and that fix doesn't resolve the crash here, once builds are available for testing.

Comment 6

[Martijn Wargers (dead)]

Testcase doesn't crash anymore on my LG Optimus Black.

Comment 7

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'gfxFont::Draw':
 - nightly(version 50):0 crashes from 2016-06-06.
 - aurora (version 49):4 crashes from 2016-06-07.
 - beta   (version 48):11 crashes from 2016-06-06.
 - release(version 47):29 crashes from 2016-05-31.
 - esr    (version 45):1 crash from 2016-04-07.

Crash volume on the last weeks:
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly       0       0       0       0       0       0       0
 - aurora        3       0       0       1       0       0       0
 - beta          1       2       1       1       2       2       2
 - release       5       0       3       4       4       5       8
 - esr           0       0       0       0       0       0       0

Affected platform: Windows