713569 - crash @ gralloc.tegra.so@0x1... on LGE 'Optimus 2X' and LGE 'LG-P99.'

Status: RESOLVED FIXED

(Firefox for Android Graveyard :: General, defect, P1)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

From Soccoro:
https://crash-stats.mozilla.com/report/index/0e31d6f0-639e-4d76-b58c-963932111224

Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	gralloc.tegra.so 	gralloc.tegra.so@0x1b88 	
1 	libnvwsi.so 	NvWsiGetDispMgrBackend 	
2 	libEGL_tegra.so 	libEGL_tegra.so@0x6e81 	
3 	libEGL_tegra.so 	libEGL_tegra.so@0xf732 	
4 	libEGL_tegra.so 	libEGL_tegra.so@0x7733 	
5 	libEGL.so 	libEGL.so@0x8cb6 	
6 	dalvik-heap (deleted) 	dalvik-heap @0x574e56 	
7 	libEGL.so 	libEGL.so@0x3827 	
8 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x18f2de 	
9 	libandroid_runtime.so 	libandroid_runtime.so@0x351cb 	
10 	libdvm.so 	libdvm.so@0x11eb6 	
11 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x53d86 	
12 	libdvm.so 	libdvm.so@0x4355d 	
13 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x4fe69e 	
14 	libandroid_runtime.so 	libandroid_runtime.so@0x35183 	
15 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x25a506 	
16 	dalvik-heap (deleted) 	dalvik-heap @0x21926 	
17 	libdvm.so 	libdvm.so@0x1207e 	
18 	libdvm.so 	libdvm.so@0x170ca 	
19 	libdvm.so 	libdvm.so@0x1c086 	
20 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1f8dc2 	
21 	libdvm.so 	libdvm.so@0x1c112 	
22 	libdvm.so 	libdvm.so@0x1affa 	
23 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x15cf4e 	
24 	dalvik-heap (deleted) 	dalvik-heap @0x8547fe 	
25 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1f917e 	
26 	dalvik-heap (deleted) 	dalvik-heap @0x18fff6e 	
27 	libdvm.so 	libdvm.so@0xa3b06 	
28 	libdvm.so 	libdvm.so@0x16daa 	
29 	libdvm.so 	libdvm.so@0x16e22 	
30 	libdvm.so 	libdvm.so@0x16cca 	
31 	libdvm.so 	libdvm.so@0x16cf2 	
32 	libdvm.so 	libdvm.so@0x16d22 	
33 	libdvm.so 	libdvm.so@0x16d46 	
34 	libdvm.so 	libdvm.so@0x7940b 	
35 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x16c28a 	
36 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x16c28a 	
37 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x15cf4e 	


Note:  All of the crash logs for this particular crash show 2 devices.
1. AdapterDescription: 'Android, Model: 'Optimus 2X', Product: 'lge_star', Manufacturer: 'LGE', Hardware: 'p990''.
LGE Optimus 2X
lge/lge_star/p990/p990:2.2.2/FRG83G/lgp990-V10b.2ED2ADCFFC:user/release-keys


2. AdapterDescription: 'Android, Model: 'LG-P999', Product: 'lge_lge_star', Manufacturer: 'LGE', Hardware: 'tegra''.
LGE LG-P999
lge/lge_lge_star/p999:2.3.3/GRI40/lgp999-V21e.41fdc8a2:user/release-keys

Comment 1

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Not sure if this is the same crash signature or not:
From socorro : https://crash-stats.mozilla.com/report/index/f313168c-ba48-4090-97b5-867942120107

0 	gralloc.tegra.so 	gralloc.tegra.so@0x1b88 	
1 	libnvwsi.so 	NvWsiGetDispMgrBackend 	
2 	libEGL_ORG_CF3D.so 	libEGL_ORG_CF3D.so@0x6e85 	
3 	libEGL_ORG_CF3D.so 	libEGL_ORG_CF3D.so@0xf732 	
4 	libEGL_ORG_CF3D.so 	libEGL_ORG_CF3D.so@0x7737 	
5 	libEGL.so 	libEGL.so@0x8cb6 	
6 	libEGL_tegra.so 	libEGL_tegra.so@0x43bf 	
7 	libEGL_tegra.so 	libEGL_tegra.so@0x439b 	
8 	dalvik-heap (deleted) 	dalvik-heap @0x567a9e 	
9 	libEGL.so 	libEGL.so@0x3827 	
10 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x18f926 	
11 	libandroid_runtime.so 	libandroid_runtime.so@0x35553 	
12 	libdvm.so 	libdvm.so@0x11eb6 	
13 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x53e06 	
14 	libdvm.so 	libdvm.so@0x4355d 	
15 	system@[e-mail]@classes.dex 	system@[e-mail]@classes.dex@0x50453d 	
16 	libandroid_runtime.so 	libandroid_runtime.so@0x3550b 	
17 	libandroid_runtime.so 	libandroid_runtime.so@0x3550b 	
18 	dalvik-jit-code-cache (deleted) 	dalvik-jit-code-cache @0x726 	
19 	libdvm.so 	libdvm.so@0x1c086 	
20 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x1fee3a 	
21 	libdvm.so 	libdvm.so@0x1c112 	
22 	libdvm.so 	libdvm.so@0x1affa 	
23 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0x829d6 	
24 	dalvik-heap (deleted) 	dalvik-heap @0x3b6ffe 	
25 	dalvik-LinearAlloc (deleted) 	dalvik-LinearAlloc @0x200196 	
26 	dalvik-heap (deleted) 	dalvik-heap @0x18fff6e 	
27 	libdvm.so 	libdvm.so@0xa3b06 	
28 	libdvm.so 	libdvm.so@0x16daa 	
29 	libdvm.so 	libdvm.so@0x16e22 	
30 	libdvm.so 	libdvm.so@0x16cca 	
31 	libdvm.so 	libdvm.so@0x16cf2 	
32 	libdvm.so 	libdvm.so@0x16d22 	
33 	libdvm.so 	libdvm.so@0x16d46 	
34 	libdvm.so 	libdvm.so@0x7940b 	
35 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0x8373e 	
36 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0x8370a 	
37 	data@[e-mail]@classes.dex 	data@[e-mail]@classes.dex@0x829d6

Comment 3

[Scoobidiver (away)]

There's a third device:
3.AdapterDescription: 'Android, Model: 'LG-P990', Product: 'lge_star', Manufacturer: 'lge', Hardware: 'tegra''.

Comment 4

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

still occurring with yesterday's build : https://crash-stats.mozilla.com/query/query?product=FennecAndroid&version=FennecAndroid%3A12.0a1&range_value=1&range_unit=weeks&date=01%2F17%2F2012+13%3A52%3A41&query_search=signature&query_type=contains&query=gralloc.tegra.so&reason=&build_id=&process_type=any&hang_type=any&do_query=1

Comment 5

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

The last build seen on socorro is at least in buildid 20111222150239.  Most crashes happen in 1 minute or less.

Comment 6

[Scoobidiver (away)]

(In reply to Naoki Hirata :nhirata from comment #5)
> The last build seen on socorro is at least in buildid 20111222150239.
The last crashes happen in 12.0a1/20120117031056, e.g. bp-1a94b249-dd38-4101-8486-c51a22120117, so it's not fixed.

Comment 7

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

(In reply to Scoobidiver from comment #6)
> (In reply to Naoki Hirata :nhirata from comment #5)
> > The last build seen on socorro is at least in buildid 20111222150239.
> The last crashes happen in 12.0a1/20120117031056, e.g.
> bp-1a94b249-dd38-4101-8486-c51a22120117, so it's not fixed.

Sorry I meant "earliest seen crash" in comment 5, not "last build seen".  I did not mean to say it was fixed, I was commenting in terms of the start date for trying to find a regression range if steps to reproduce the issue are found.

Comment 8

[Scoobidiver (away)]

(In reply to Naoki Hirata :nhirata from comment #5)
> The last build seen on socorro is at least in buildid 20111222150239.
It first appeared a few hours sooner in 12.0a1/20111222040248.

(In reply to Naoki Hirata :nhirata from comment #7)
> I was commenting in terms of the start date for trying to find a regression
> range if steps to reproduce the issue are found.
The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=4e4878620bb5&tochange=d9e4c34ca1c6
bug 670930 belongs to the regression range.

Comment 9

[James Willcox (:snorp) ([e-mail]) (he/him)]

This device is not in the whitelist for gralloc now, so the crash is fixed (avoided). Bug 719233 has the whitelist.

Comment 10

[Cristian Nicolae (:xti)]

I was able to reproduce this issue on the latest Nightly build.
I enabled "direct-texture.force.enabled" = true from about:config and I browsed to planet.mozilla.org.

--
Mozilla/5.0 (Android;Linux armv7l;rv:12.0a1)Gecko/20120123
Firefox/12.0a1 Fennec/12.0a1
Device: LG P999 (G2x)
OS: Android 2.3.3

Comment 11

[James Willcox (:snorp) ([e-mail]) (he/him)]

(In reply to Cristian Nicolae (:xti) from comment #10)
> I was able to reproduce this issue on the latest Nightly build.
> I enabled "direct-texture.force.enabled" = true from about:config and I
> browsed to planet.mozilla.org.

Turning that pref on ignores the whitelist I added specifically to fix this bug, so yes, it's going to crash.