Closed Bug 695257 Opened 14 years ago Closed 13 years ago

crash in nsPluginInstanceOwner::UpdateWindowPositionAndClipRect @ nsPluginInstanceOwner::RemovePluginView

Categories

(Core Graveyard :: Plug-ins, defect)

10 Branch
ARM
Android
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: nhirata, Assigned: snorp)

References

Details

(Keywords: crash, Whiteboard: [mobile-crash])

Crash Data

This bug was filed from the Socorro interface and is report bp-193a7676-d277-4fa0-a7cf-f05c32111017 . ============================================================= Frame Module Signature [Expand] Source 0 libdvm.so dvmAbort 1 libdvm.so JNI_CreateJavaVM 2 libdvm.so JNI_CreateJavaVM 3 libxul.so nsPluginInstanceOwner::RemovePluginView jni.h:734 4 libxul.so nsPluginInstanceOwner::UpdateWindowPositionAndClipRect dom/plugins/base/nsPluginInstanceOwner.cpp:3591 5 libxul.so nsPluginInstanceOwner::UpdateWindowVisibility dom/plugins/base/nsPluginInstanceOwner.cpp:3609 6 libxul.so nsObjectFrame::ComputeWidgetGeometry layout/generic/nsObjectFrame.cpp:1077 7 libxul.so PluginHideEnumerator nsRegion.h:107 8 libxul.so nsTHashtable<nsPtrHashKey<nsObjectFrame> >::s_EnumStub nsTHashtable.h:429 9 libxul.so PL_DHashTableEnumerate obj-firefox/xpcom/build/pldhash.cpp:755 10 libxul.so nsRootPresContext::GetPluginGeometryUpdates nsTHashtable.h:325 11 libxul.so nsRootPresContext::UpdatePluginGeometry nsTArray.h:170 12 libxul.so PresShell::FlushPendingNotifications layout/base/nsPresShell.cpp:4076 13 libxul.so PresShell::HandlePostedReflowCallbacks layout/base/nsPresShell.cpp:3900 14 libxul.so PresShell::DidDoReflow layout/base/nsPresShell.cpp:7082 15 libxul.so PresShell::ProcessReflowCommands layout/base/nsPresShell.cpp:7374 16 libxul.so PresShell::FlushPendingNotifications layout/base/nsPresShell.cpp:4056 17 libxul.so nsDocument::FlushPendingNotifications nsCOMPtr.h:522 18 libxul.so nsFocusManager::CheckIfFocusable nsCOMPtr.h:850 19 libxul.so nsFocusManager::SetFocusInner dom/base/nsFocusManager.cpp:1134 20 libxul.so nsFocusManager::SetFocus nsCOMPtr.h:522 21 libxul.so nsXULElement::Focus content/xul/content/src/nsXULElement.cpp:2060 22 libxul.so nsIDOMXULElement_Focus obj-firefox/js/xpconnect/src/dom_quickstubs.cpp:27110 23 libxul.so js::Interpret js/src/jscntxtinlines.h:297 24 libxul.so js::RunScript js/src/jsinterp.cpp:584 25 libxul.so js::InvokeGetterOrSetter js/src/vm/Stack.h:984 26 libxul.so js_SetPropertyHelper js/src/jsscopeinlines.h:303 27 libxul.so js::Interpret js/src/jsinterp.cpp:3790 28 libxul.so js::RunScript js/src/jsinterp.cpp:584 29 libxul.so js::InvokeGetterOrSetter js/src/vm/Stack.h:984 30 libxul.so js_NativeSet js/src/jsscopeinlines.h:303 31 libxul.so js_SetPropertyHelper js/src/jsobj.cpp:6308 32 libxul.so js::Interpret js/src/jsinterp.cpp:3790 33 libxul.so js::RunScript js/src/jsinterp.cpp:584 34 libxul.so js::InvokeKernel js/src/vm/Stack.h:984 35 libxul.so js_fun_call js/src/jsfun.cpp:1831 36 libxul.so js::Interpret js/src/jscntxtinlines.h:297 37 libxul.so js::RunScript js/src/jsinterp.cpp:584 38 libxul.so js::Invoke js/src/vm/Stack.h:984 39 libxul.so JS_CallFunctionValue js/src/jscntxt.h:1243 40 libxul.so nsJSContext::CallEventHandler dom/base/nsJSEnvironment.cpp:1947 41 libxul.so nsJSEventListener::HandleEvent dom/src/events/nsJSEventListener.cpp:213 42 libxul.so nsXBLPrototypeHandler::ExecuteHandler nsCOMPtr.h:522 43 libxul.so nsXBLEventHandler::HandleEvent nsCOMPtr.h:522 44 libxul.so nsEventListenerManager::HandleEventSubType content/events/src/nsEventListenerManager.cpp:745 45 libxul.so nsEventListenerManager::HandleEventInternal content/events/src/nsEventListenerManager.cpp:795 46 libxul.so nsEventTargetChainItem::HandleEvent content/events/src/nsEventListenerManager.h:160 47 libxul.so nsEventTargetChainItem::HandleEventTargetChain content/events/src/nsEventDispatcher.cpp:369 48 libxul.so nsEventDispatcher::Dispatch content/events/src/nsEventDispatcher.cpp:674 49 libxul.so nsEventDispatcher::DispatchDOMEvent content/events/src/nsEventDispatcher.cpp:735 50 libxul.so nsINode::DispatchEvent content/base/src/nsGenericElement.cpp:1153 51 libxul.so nsIDOMEventTarget_DispatchEvent obj-firefox/js/xpconnect/src/dom_quickstubs.cpp:14255 52 libxul.so js::Interpret js/src/jscntxtinlines.h:297 53 libxul.so js::RunScript js/src/jsinterp.cpp:584 54 libxul.so js::Invoke js/src/vm/Stack.h:984 55 libxul.so JS_CallFunctionValue js/src/jscntxt.h:1243 56 libxul.so nsXPCWrappedJSClass::CallMethod js/xpconnect/src/XPCWrappedJSClass.cpp:1535 57 libxul.so nsXPCWrappedJS::CallMethod js/xpconnect/src/XPCWrappedJS.cpp:554 58 libxul.so PrepareAndDispatch xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp:133 59 libxul.so libxul.so@0x963d3c 60 libxul.so nsEventListenerManager::HandleEventSubType content/events/src/nsEventListenerManager.cpp:745 61 @0x4af3c397 62 libxul.so nsEventListenerManager::HandleEventInternal content/events/src/nsEventListenerManager.cpp:795 63 libxul.so nsEventTargetChainItem::HandleEvent content/events/src/nsEventListenerManager.h:160 64 libxul.so nsEventTargetChainItem::HandleEventTargetChain nsCOMPtr.h:830 65 libxul.so nsEventDispatcher::Dispatch content/events/src/nsEventDispatcher.cpp:674 66 libxul.so PresShell::HandleEventInternal layout/base/nsPresShell.cpp:6375 67 libxul.so PresShell::HandlePositionedEvent layout/base/nsPresShell.cpp:6161 68 libxul.so PresShell::HandleEvent layout/base/nsPresShell.cpp:5996 69 libxul.so nsViewManager::HandleEvent view/src/nsViewManager.cpp:1027 70 libxul.so nsViewManager::DispatchEvent view/src/nsViewManager.cpp:1002 71 libxul.so HandleEvent nsCOMPtr.h:522 72 libxul.so nsWindow::DispatchEvent widget/src/android/nsWindow.cpp:631 73 libxul.so nsWindow::OnMotionEvent widget/src/android/nsWindow.cpp:1246 74 libxul.so nsWindow::OnGlobalAndroidEvent widget/src/android/nsWindow.cpp:822 75 libxul.so nsAppShell::ProcessNextNativeEvent widget/src/android/nsAppShell.cpp:408 76 libxul.so nsBaseAppShell::DoProcessNextNativeEvent widget/src/xpwidgets/nsBaseAppShell.cpp:172 77 libxul.so nsBaseAppShell::OnProcessNextEvent widget/src/xpwidgets/nsBaseAppShell.cpp:312 78 libxul.so mozilla::dom::ContentParent::OnProcessNextEvent dom/ipc/ContentParent.cpp:1144 79 libxul.so nsThread::ProcessNextEvent nsTArray.h:170 80 libxul.so NS_ProcessNextEvent_P obj-firefox/xpcom/build/nsThreadUtils.cpp:245 81 libxul.so mozilla::ipc::MessagePump::Run ipc/glue/MessagePump.cpp:111 82 libxul.so MessageLoop::RunInternal ipc/chromium/src/base/message_loop.cc:209 83 libxul.so MessageLoop::Run ipc/chromium/src/base/message_loop.cc:487 84 libxul.so nsBaseAppShell::Run widget/src/xpwidgets/nsBaseAppShell.cpp:191 85 libxul.so nsAppStartup::Run toolkit/components/startup/nsAppStartup.cpp:229 86 libxul.so XRE_main toolkit/xre/nsAppRunner.cpp:3586 87 libxul.so Java_org_mozilla_gecko_GeckoAppShell_nativeRun toolkit/xre/nsAndroidStartup.cpp:132 88 libmozutils.so Java_org_mozilla_gecko_GeckoAppShell_nativeRun other-licenses/android/APKOpen.cpp:232 89 libdvm.so dvmPlatformInvoke 90 libdvm.so dvmCallJNIMethod_general 91 libdvm.so dvmResolveNativeMethod 92 libdvm.so dvmAsmSisterStart 93 libdvm.so dvmMterpStd 94 libdvm.so dvmInterpret 95 libdvm.so dvmCallMethodV 96 libdvm.so dvmCallMethod 97 libdvm.so dvmDetachCurrentThread 98 libc.so __thread_entry 99 libc.so pthread_create 6th top crasher of nightly between 2011-10-10 18:00:00 through 2011-10-17 18:00:00. More reports: https://crash-stats.mozilla.com/report/list?range_value=7&range_unit=days&date=2011-10-17%2018%3A00%3A00&signature=dvmAbort&version=Fennec%3A10.0a1
note : bug 695096 written for skiplist modification to socorro.
Severity: normal → critical
Assignee: nobody → snorp
Crash Signature: [@ nsPluginInstanceOwner::RemovePluginView] [@ dvmAbort] → [@ nsPluginInstanceOwner::RemovePluginView] [@ dvmAbort] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | nsPluginInstanceOwner::RemovePluginView ]
It's #2 top crasher in Fennec 10.0a2 and #18 in 11.0a1.
Depends on: 695096
Crash Signature: [@ nsPluginInstanceOwner::RemovePluginView] [@ dvmAbort] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | nsPluginInstanceOwner::RemovePluginView ] → [@ dvmAbort] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | nsPluginInstanceOwner::RemovePluginView ]
Summary: crash [@ nsPluginInstanceOwner::RemovePluginView] → crash in nsPluginInstanceOwner::UpdateWindowPositionAndClipRect @ nsPluginInstanceOwner::RemovePluginView
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Resolution: FIXED → WORKSFORME
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.