706774 - Crash in nsRefreshDriver::Notify at 0x0 on Google Maps

Status: RESOLVED DUPLICATE of bug 706283

(Core :: General, defect)

Description

[Scoobidiver (away)]

It first appeared in 11.0a1/20111130.
The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=bc48009a6bbb&tochange=cc94a16983b0

All comments talk about Google Maps and hovering satellite.

Signature	nsRefreshDriver::Notify(nsITimer*)
UUID	43db6286-726d-4e1d-a4ba-577912111130
Date Processed	2011-11-30 09:10:57.858869
Uptime	19
Last Crash	23 seconds before submission
Install Age	1.9 hours since version was first installed.
Install Time	2011-11-30 15:15:48
Product	Firefox
Version	11.0a1
Build ID	20111130031011
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	amd64
Build Architecture Info	family 6 model 42 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x0
User Comments	Maybe the MapsGL on google maps is the problem
App Notes 	AdapterVendorID: 8086, AdapterDeviceID: 0116, AdapterSubsysID: 04ca1028, AdapterDriverVersion: 8.15.10.2361
Has dual GPUs. GPU #2: AdapterVendorID2: 10de, AdapterDeviceID2: 0df5, AdapterSubsysID2: 04ca1028, AdapterDriverVersion2: 8.17.12.9036D2D? D2D+
DWrite? DWrite+
D3D10 Layers? D3D10 Layers+
WebGL? EGL? EGL+
GL Context? GL Context+
WebGL+
EMCheckCompatibility	True

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsRefreshDriver::Notify 	
1 	nspr4.dll 	MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:308
2 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
3 	nspr4.dll 	MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:308
4 	xul.dll 	nsAppShell::ProcessNextNativeEvent 	widget/src/windows/nsAppShell.cpp:361
5 	xul.dll 	TimerThread::UpdateFilter 	xpcom/threads/TimerThread.cpp:198
6 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:428
7 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:521
8 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:625
9 	nspr4.dll 	MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:308
10 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
11 	xul.dll 	XPCConvert::JSData2Native 	js/xpconnect/src/XPCConvert.cpp:550
12 	xul.dll 	XPTC__InvokebyIndex 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke_asm_x86_64.asm:129
13 	xul.dll 	XPC_WN_CallMethod 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1554

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsRefreshDriver%3A%3ANotify%28nsITimer*%29
https://crash-stats.mozilla.com/report/list?signature=nsRefreshDriver%3A%3ANotify

Comment 1

[Scoobidiver (away)]

Maybe a dupe of bug 706283.

Comment 2

[Marcia Knous [:marcia]]

STR on Mac trunk:

1. http://maps.google.com/
2. Click on the Want to try something new link and enable WebGL version.
3. Hover the satellite and crash.

https://crash-stats.mozilla.com/report/index/bp-197e5b29-b1d5-45fa-8fbe-d6d7e2111201

Comment 3

[Boris Zbarsky [:bzbarsky]]

Thanks for the steps to reproduce!

This is indeed a duplicate of bug 706283.  More interestingly, looks like they're actually using the event version of requestAnimationFrame; I'll get in touch with them about it.