687908 - Crash [@ nsTextServicesDocument::DeleteSelection]

Status: RESOLVED WONTFIX

(Core :: General, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-72e7ee8c-40fc-499e-a791-645f32110917 .
============================================================= 
Frame 	Module 	Signature [Expand] 	Source
0 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:66
1 	libc.so 	pthread_mutex_unlock 	
2 	libxul.so 	nsTextServicesDocument::DeleteSelection 	editor/txtsvc/src/nsTextServicesDocument.cpp:1261
3 		@0x2f646c68 	
4 	libssl3.so 	ssl3_KeyAndMacDeriveBypass 	derive.c:131
5 		@0x428a8eff 	
6 	libmozutils.so 	__wrap_free 	memory/jemalloc/jemalloc.c:6260
7 	libmozalloc.so 	moz_free 	memory/mozalloc/mozalloc.cpp:98
8 	libxul.so 	gfxSharedImageSurface::~gfxSharedImageSurface 	gfx/thebes/gfxSharedImageSurface.cpp:65
9 	libxul.so 	gfxASurface::Release 	gfx/thebes/gfxASurface.cpp:137
10 	libxul.so 	mozilla::layers::ShadowLayerForwarder::AllocBuffer 	gfx/layers/ipc/ShadowLayers.cpp:446
11 		@0x4 	
12 	libxul.so 	mozilla::layers::BasicShadowableThebesLayer::CreateBuffer 	gfx/layers/basic/BasicLayers.cpp:2199
13 	libxul.so 	mozilla::layers::BasicThebesLayerBuffer::CreateBuffer 	gfx/layers/basic/BasicLayers.cpp:808
14 	libxul.so 	mozilla::layers::ThebesLayerBuffer::BeginPaint 	gfx/layers/ThebesLayerBuffer.cpp:273
15 	libxul.so 	mozilla::layers::BasicThebesLayer::PaintThebes 	nsRegion.h:388
16 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1889
17 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1902
18 	libxul.so 	mozilla::layers::BasicLayerManager::EndTransactionInternal 	gfx/layers/basic/BasicLayers.cpp:1616
19 	libxul.so 	mozilla::layers::BasicLayerManager::EndTransaction 	gfx/layers/basic/BasicLayers.cpp:1567
20 	libxul.so 	mozilla::layers::BasicShadowLayerManager::EndTransaction 	gfx/layers/basic/BasicLayers.cpp:3266
21 	libxul.so 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:628
22 	libxul.so 	nsDisplayList::PaintRoot 	layout/base/nsDisplayList.cpp:539
23 	libxul.so 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1701
24 	libxul.so 	PresShell::Paint 	layout/base/nsPresShell.cpp:5384
25 	libxul.so 	nsViewManager::RenderViews 	view/src/nsViewManager.cpp:417
26 	libxul.so 	nsViewManager::Refresh 	view/src/nsViewManager.h:238
27 	libxul.so 	nsViewManager::DispatchEvent 	nsCOMPtr.h:482
28 	libxul.so 	HandleEvent 	nsCOMPtr.h:482
29 	libxul.so 	mozilla::widget::PuppetWidget::DispatchEvent 	widget/src/xpwidgets/PuppetWidget.cpp:328
30 	libxul.so 	mozilla::widget::PuppetWidget::DispatchPaintEvent 	widget/src/xpwidgets/PuppetWidget.cpp:568
31 	libxul.so 	mozilla::widget::PuppetWidget::PaintTask::Run 	widget/src/xpwidgets/PuppetWidget.cpp:611
32 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
33 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
34 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:111
35 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:230
36 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:209
37 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:487
38 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:191
39 	libxul.so 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp:677
40 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:222
41 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:209
42 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:487
43 	libxul.so 	XRE_InitChildProcess 	nsAutoPtr.h:155
44 	libmozutils.so 	ChildProcessInit 	other-licenses/android/APKOpen.cpp:778
45 	plugin-container 	main 	ipc/app/MozillaRuntimeMainAndroid.cpp:69
46 	libc.so 	__libc_init 	
47 		@0xb0004592

More crashes : 
https://crash-stats.mozilla.com/report/list?range_value=7&range_unit=days&date=2011-09-19%2022%3A00%3A00&signature=mozalloc_abort%20%7C%20pthread_mutex_unlock&version=Fennec%3A9.0a1

Comment 1

[(no longer active)]

Looks like gfx to me with some corrupted stacks.

Comment 2

[Josh Matthews [:jdm]]

Every single stack I looked at was different, spanning Dalvik, gfx, and IPC. I'm not really sure this can be limited to single component based on any stack.

Comment 3

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

I came across a similar one to this that lead up to the ssl3 and had one more function and then crashed.  I suspect that there might be something wrong with having ssl3 in the background.

Yesterday I crashed while going to a ssl3 website in the background.  unfortunately, I did not get a crash signature due to bug 688062.  I am still trying to come up with exact STRs; the website I used was http://goo.gl/k511V

Comment 4

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Not sure if this is related:
https://crash-stats.mozilla.com/report/index/4a460de6-bb96-41a3-bc0f-eee192110922

Comment 5

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.

Comment 6

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.