Capturing image on camera api crashes [@ mozalloc_abort | __swrite | dexDataMapAlloc]

VERIFIED FIXED in Firefox 10

Status

Fennec Graveyard
General
--
critical
VERIFIED FIXED
6 years ago
5 years ago

People

(Reporter: tchung, Assigned: fabrice)

Tracking

Trunk
Firefox 10
ARM
Android

Details

(crash signature, URL)

Attachments

(2 attachments)

(Reporter)

Description

6 years ago
Crashed on Fennec nightly while trying to capture an image using the test URL.

See crash report: https://crash-stats.mozilla.com/report/index/bp-3da9e805-5342-47bc-9b09-ea7fd2111007

Repro:
1) install nightly on Android 2.3.3, Samsung Galaxy S 2: Nightly: Mozilla/5.0 (Android; Linux armv7l; rv:10.0a1) Gecko/201101007 Firefox/9.0a1 Fennec/9.0a1
2) visit the test URL for camera API
3)_ click capture, verify crash and crash reporter appears with java errors.  
4) i'll try and reproduce with a logcat now.

Expected:
- no Crashers

Actual: 
- crash on [@ mozalloc_abort | __swrite] camera capture


Frame 	Module 	Signature [Expand] 	Source
0 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:66
1 	libc.so 	__swrite 	
2 		@0x3e 	
3 	libdvm.so 	dexDataMapAlloc 	
4 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_reportJavaCrash 	other-licenses/android/APKOpen.cpp:241
5 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_reportJavaCrash 	other-licenses/android/APKOpen.cpp:241
6 	libdvm.so 	dvmPlatformInvoke 	
7 	libdvm.so 	dvmCallJNIMethod_general 	
8 	libdvm.so 	dvmResolveNativeMethod 	
9 	libdvm.so 	dvmAsmSisterStart 	
10 	libdvm.so 	dvmMterpStd 	
11 	libdvm.so 	dvmInterpret 	
12 	libdvm.so 	dvmInvokeMethod 	
13 	libdvm.so 	dvmFreeDexOrJar 	
14 	libdvm.so 	dvmAsmSisterStart 	
15 	libdvm.so 	dvmMterpStd 	
16 	libdvm.so 	dvmInterpret 	
17 	libdvm.so 	dvmCallMethodV 	
18 	libdvm.so 	JNI_CreateJavaVM 	
19 	libandroid_runtime.so 	_ZN7android14AndroidRuntime6onExitEi 	
20 	libandroid_runtime.so 	_ZN7android14AndroidRuntime5startEPKcb 	
21 	app_process 	app_process@0xccc 	
22 	app_process 	app_process@0x1027 	
23 	libandroid_runtime.so 	InitPassFilter 	
24 	app_process 	app_process@0xb33 	
25 	app_process 	app_process@0xb33 	
26 	libc.so 	__libc_init 	
27 		@0xffffffe3 	
28 	app_process 	app_process@0x33 	
29 	app_process 	app_process@0xb1f
(Reporter)

Comment 1

6 years ago
Created attachment 565674 [details]
logcat of crash
(Reporter)

Updated

6 years ago
Assignee: nobody → fabrice
(Reporter)

Updated

6 years ago
Version: Firefox 7 → Trunk
Blocks: 659188

Comment 2

6 years ago
Comment on attachment 565674 [details]
logcat of crash

Something wacky is going on in this log where exception stack traces start halfway through and don't show the exception that was thrown.
(Assignee)

Comment 3

6 years ago
Created attachment 565986 [details] [diff] [review]
fix

Protecting against frames send after we closed the camera.
Attachment #565986 - Flags: review?(blassey.bugs)
Attachment #565986 - Flags: review?(blassey.bugs) → review+
(Assignee)

Comment 4

6 years ago
pushed:
https://hg.mozilla.org/integration/mozilla-inbound/rev/6d2612f17530
Does this affect Firefox 9?  Should we request approval for Aurora?
https://hg.mozilla.org/mozilla-central/rev/6d2612f17530
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → Firefox 10

Updated

6 years ago
status-firefox10: --- → fixed
status-firefox9: --- → affected
(Assignee)

Comment 7

6 years ago
Comment on attachment 565986 [details] [diff] [review]
fix

No-risk crasher fix that gives us camera support on the Galaxy S2 for instance.
Attachment #565986 - Flags: approval-mozilla-aurora?

Updated

6 years ago
Attachment #565986 - Flags: approval-mozilla-aurora? → approval-mozilla-aurora+
(Reporter)

Comment 8

6 years ago
Verified fix on Nightly Fennec: Mozilla/5.0 (Android; Linux armv7l; rv:10.0a1) Gecko/201101013 Firefox/10.0a1 Fennec/10.0a1

No more crash.  Need verification on aurora landing.
Status: RESOLVED → VERIFIED

Updated

6 years ago
Whiteboard: [QA+]
(Assignee)

Comment 9

6 years ago
pushed to aurora:
https://hg.mozilla.org/releases/mozilla-aurora/rev/a6f988cf4111
This is not reproducible on the latest Aurora build(30/10)
Mozilla/5.0 (Android; Linux armv7l; rv:9.0a2) Gecko/20111030 Firefox/9.0a2 Fennec/9.0a2
Device: Samsung Galaxy S2
status-firefox9: affected → fixed
Whiteboard: [QA+]

Updated

5 years ago
Crash Signature: [@ mozalloc_abort | __swrite ] → [@ mozalloc_abort | __swrite] [@ mozalloc_abort | __swrite | dexDataMapAlloc]
Summary: Capturing image on camera api crashes [@ mozalloc_abort | __swrite ] → Capturing image on camera api crashes [@ mozalloc_abort | __swrite | dexDataMapAlloc]
You need to log in before you can comment on or make changes to this bug.