Closed Bug 704511 Opened 13 years ago Closed 12 years ago

Crash in nsIFrame::BuildDisplayListForChild occurred when switching tabs after letting the device screen saver start

Categories

(Core :: SVG, defect)

ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: nhirata, Unassigned)

References

Details

(Keywords: crash, reproducible, Whiteboard: [native-crash])

Crash Data

Attachments

(1 file)

Attached file logcat
1. open a tab to cnn.com
2. open a tab to about:home
3. open a tab to news.google.com
4. let the device sit until the screensaver comes up
5. switch between the tabs

Expected: no crash
Actual: crash

HTC Flyer; Android OS 2.3 ; 20111122 build.

https://crash-stats.mozilla.com/report/index/bp-63c7ad77-c7c2-41f7-b863-833692111122

Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:66
1 	libc.so 	__swrite 	
2 	libxul.so 	libxul.so@0xe5a6f5 	
3 	dalvik-heap (deleted) 	dalvik-heap @0x11f111f 	
4 	libxul.so 	nsSVGViewBox::SetBaseValueString 	content/svg/content/src/nsSVGViewBox.cpp:193
5 		@0x66206e63 	
6 	libxul.so 	nsHTMLEditor::RelativizeURIForNode 	editor/libeditor/html/nsHTMLDataTransfer.cpp:908
7 		@0x832 	
8 	libxul.so 	libxul.so@0x38b907 	
9 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1997
10 	libxul.so 	nsGfxScrollFrameInner::BuildDisplayList 	layout/generic/nsGfxScrollFrame.cpp:1958
11 	libxul.so 	nsHTMLScrollFrame::BuildDisplayList 	layout/generic/nsGfxScrollFrame.h:365
12 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:2038
13 	libxul.so 	DisplayLine 	layout/generic/nsBlockFrame.cpp:6134
14 	libxul.so 	nsBlockFrame::BuildDisplayList 	layout/generic/nsBlockFrame.cpp:6228
15 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:2038
16 	libxul.so 	DisplayLine 	layout/generic/nsBlockFrame.cpp:6134
17 	libxul.so 	nsBlockFrame::BuildDisplayList 	layout/generic/nsBlockFrame.cpp:6228
18 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
19 	libxul.so 	DisplayLine 	layout/generic/nsBlockFrame.cpp:6134
20 	libxul.so 	nsBlockFrame::BuildDisplayList 	layout/generic/nsBlockFrame.cpp:6228
21 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
22 	libxul.so 	DisplayLine 	layout/generic/nsBlockFrame.cpp:6134
23 	libxul.so 	nsBlockFrame::BuildDisplayList 	layout/generic/nsBlockFrame.cpp:6228
24 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
25 	libxul.so 	DisplayLine 	layout/generic/nsBlockFrame.cpp:6134
26 	libxul.so 	nsBlockFrame::BuildDisplayList 	layout/generic/nsBlockFrame.cpp:6228
27 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
28 	libxul.so 	DisplayLine 	layout/generic/nsBlockFrame.cpp:6134
29 	libxul.so 	nsBlockFrame::BuildDisplayList 	layout/generic/nsBlockFrame.cpp:6228
30 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
31 	libxul.so 	nsCanvasFrame::BuildDisplayList 	layout/generic/nsCanvasFrame.cpp:300
32 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
33 	libxul.so 	nsGfxScrollFrameInner::BuildDisplayList 	layout/generic/nsGfxScrollFrame.cpp:1973
34 	libxul.so 	nsHTMLScrollFrame::BuildDisplayList 	layout/generic/nsGfxScrollFrame.h:365
35 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
36 	libxul.so 	ViewportFrame::BuildDisplayList 	layout/generic/nsViewportFrame.cpp:101
37 	libxul.so 	nsIFrame::BuildDisplayListForStackingContext 	layout/generic/nsFrame.cpp:1720
38 	libxul.so 	nsSubDocumentFrame::BuildDisplayList 	layout/generic/nsSubDocumentFrame.cpp:359
39 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
40 	libxul.so 	nsDeckFrame::BuildDisplayListForChildren 	layout/xul/base/src/nsDeckFrame.cpp:194
41 	libxul.so 	nsBoxFrame::BuildDisplayList 	layout/xul/base/src/nsBoxFrame.cpp:1332
42 	libxul.so 	nsDeckFrame::BuildDisplayList 	layout/xul/base/src/nsDeckFrame.cpp:178
43 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
44 	libxul.so 	nsBoxFrame::BuildDisplayListForChildren 	layout/xul/base/src/nsBoxFrame.cpp:1370
45 	libxul.so 	nsBoxFrame::BuildDisplayList 	layout/xul/base/src/nsBoxFrame.cpp:1332
46 	libxul.so 	BuildDisplayListWithOverflowClip 	layout/generic/nsFrame.cpp:1537
47 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1993
48 	libxul.so 	nsBoxFrame::BuildDisplayListForChildren 	layout/xul/base/src/nsBoxFrame.cpp:1370
49 	libxul.so 	nsRootBoxFrame::BuildDisplayList 	layout/xul/base/src/nsRootBoxFrame.cpp:246
50 	libxul.so 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
51 	libxul.so 	ViewportFrame::BuildDisplayList 	layout/generic/nsViewportFrame.cpp:101
52 	libxul.so 	nsIFrame::BuildDisplayListForStackingContext 	layout/generic/nsFrame.cpp:1720
53 	libxul.so 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1580
54 	libxul.so 	PresShell::Paint 	layout/base/nsPresShell.cpp:5472
55 	libxul.so 	nsViewManager::RenderViews 	view/src/nsViewManager.cpp:415
56 	libxul.so 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:390
57 	libxul.so 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:887
58 	libxul.so 	HandleEvent 	view/src/nsView.cpp:159
59 	libxul.so 	nsWindow::DispatchEvent 	widget/src/android/nsWindow.cpp:700
60 	libxul.so 	nsWindow::DrawTo 	widget/src/android/nsWindow.cpp:1098
61 	libxul.so 	nsWindow::DrawTo 	widget/src/android/nsWindow.cpp:1145
62 	libxul.so 	nsWindow::OnDraw 	widget/src/android/nsWindow.cpp:1186
63 	libxul.so 	nsWindow::OnGlobalAndroidEvent 	widget/src/android/nsWindow.cpp:982
64 	libxul.so 	nsAppShell::ProcessNextNativeEvent 	widget/src/android/nsAppShell.cpp:425
65 	libxul.so 	nsBaseAppShell::DoProcessNextNativeEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:171
66 	libxul.so 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:324
67 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:595
68 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
69 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
70 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
71 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201
72 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:189
73 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:221
74 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3550
75 	libxul.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	toolkit/xre/nsAndroidStartup.cpp:139
76 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	other-licenses/android/APKOpen.cpp:250
77 	libdvm.so 	libdvm.so@0x181b6 	
78 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x21c4da 	
79 	dalvik-heap (deleted) 	dalvik-heap @0x584ac6 	
80 	libdvm.so 	libdvm.so@0x4a005 	
81 	data@app@org.mozilla.fennec-1.apk@classes.dex 	data@app@org.mozilla.fennec-1.apk@classes.dex@0x2fe50 	
82 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeInit 	other-licenses/android/APKOpen.cpp:249
83 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x21c4da 	
84 	libdvm.so 	libdvm.so@0x49fbf 	
85 	dalvik-heap (deleted) 	dalvik-heap @0x584ac6 	
86 	libdvm.so 	libdvm.so@0x4f807 	
87 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x21c4da 	
88 	data@app@org.mozilla.fennec-1.apk@classes.dex 	data@app@org.mozilla.fennec-1.apk@classes.dex@0x1b8e6 	
89 	dalvik-heap (deleted) 	dalvik-heap @0x584ac6 	
90 	libdvm.so 	libdvm.so@0x1837e 	
91 	libdvm.so 	libdvm.so@0x1d3b6 	
92 	libdvm.so 	libdvm.so@0xa73d2 	
93 	libdvm.so 	libdvm.so@0x228ae 	
94 	libdvm.so 	libdvm.so@0x2281e 	
95 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x228686 	
96 	libdvm.so 	libdvm.so@0x217a6 	
97 	core.odex 	core.odex@0xc4ade 	
98 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x21c9ba 	
99 	dalvik-heap (deleted) 	dalvik-heap @0x18ffe6e 	
100 	libdvm.so 	libdvm.so@0xabb96 	
101 	libdvm.so 	libdvm.so@0x1d096 	
102 	libdvm.so 	libdvm.so@0x1d10e 	
103 	libdvm.so 	libdvm.so@0x1cfb6 	
104 	libdvm.so 	libdvm.so@0x1cfde 	
105 	libdvm.so 	libdvm.so@0x1d00e 	
106 	libdvm.so 	libdvm.so@0x1d032 	
107 	libdvm.so 	libdvm.so@0x80d87 	
108 	core.odex 	core.odex@0xd4dda 	
109 	core.odex 	core.odex@0xd4dda 	
110 	core.odex 	core.odex@0xd4dee
Recent SVG related checkins to m-c?
Component: General → SVG
Product: Fennec Native → Core
QA Contact: general → general
Version: unspecified → Trunk
Dupe of bug 568487?
Depends on: 702657
Summary: Crash occurred when switching tabs after letting the device screen saver start; crash [@ nsSVGViewBox::SetBaseValueString ] → Crash in nsIFrame::BuildDisplayListForChild occurred when switching tabs after letting the device screen saver start
Cannot reproduce anymore.

Do not see anything in crash-stats; closing as WFM
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Whiteboard: [native-crash:P1] → [native-crash]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: