MAPLE: crash [@ TouchBadMemory]

VERIFIED FIXED

Status

()

Firefox for Android
General
--
critical
VERIFIED FIXED
6 years ago
6 years ago

People

(Reporter: xti, Assigned: dougt)

Tracking

(Blocks: 1 bug, {crash})

Trunk
ARM
Android
crash
Points:
---

Firefox Tracking Flags

(firefox13 fixed, firefox14 fixed)

Details

(Whiteboard: MAPLE mwc-demo, crash signature)

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
This bug was filed from the Socorro interface and is 
report bp-c81cbccb-2b34-4664-905d-b16dd2120214 .
============================================================= 
Frame 	Module 	Signature [Expand] 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	dalvik-heap (deleted) 	dalvik-heap @0x7c711f 	
3 	dalvik-mark-stack (deleted) 	dalvik-mark-stack @0x3164f40 	
4 	dalvik-mark-stack (deleted) 	dalvik-mark-stack @0x2e4676c 	
5 	org.mozilla.fennec-1.apk 	org.mozilla.fennec-1.apk@0x75621e 	
6 	dalvik-heap (deleted) 	dalvik-heap @0xbbfb971 	
7 	app_process 	app_process@0x240e
(Reporter)

Updated

6 years ago
Whiteboard: MAPLE
GL Context? GL Context+
GL Layers? GL Layers+

xpcom_runtime_abort(###!!! ABORT: creating ThebesLayer 'back buffer' failed! width=2147483647
 height=2147483647
 type=1000: file /builds/slave/map-andrd-ntly/build/gfx/layers/basic/BasicLayers.cpp
 line 2417)

 "BuildID": "20120213040241"
 "Android_Model": "Galaxy Nexus"
 "ProductName": "Fennec"
 "URL": "about:blank"
 "ReleaseChannel": "nightly-maple"
Nicolae, do you have reproducible steps?

Comment 3

6 years ago
I also reproduced this.

HTC Desire HD, 02-14-2012 maple build
URL: http://paulrouget.com/mwc-demos/

Repro:
1) goto URL, and click the CSS3 hologram demo
2) rotate phone to landscape view
3) just tap around various points, swipe around, on the screen with your finger.   Eventually it crashes.

https://crash-stats.mozilla.com/report/index/bp-0ed01db1-ad9f-4379-ba89-b0a642120215

Updated

6 years ago
Depends on: 722044

Updated

6 years ago
Whiteboard: MAPLE → MAPLE mwc-demo
(In reply to Tony Chung [:tchung] from comment #3)
> I also reproduced this.
> 
> HTC Desire HD, 02-14-2012 maple build
> URL: http://paulrouget.com/mwc-demos/
> 
> Repro:
> 1) goto URL, and click the CSS3 hologram demo
> 2) rotate phone to landscape view
> 3) just tap around various points, swipe around, on the screen with your
> finger.   Eventually it crashes.
> 
> https://crash-stats.mozilla.com/report/index/bp-0ed01db1-ad9f-4379-ba89-
> b0a642120215

Tony, can you reproduce this on a Nexus S?

Comment 5

6 years ago
(In reply to Jeff Muizelaar [:jrmuizel] from comment #4)
> (In reply to Tony Chung [:tchung] from comment #3)
> > I also reproduced this.
> > 
> > HTC Desire HD, 02-14-2012 maple build
> > URL: http://paulrouget.com/mwc-demos/
> > 
> > Repro:
> > 1) goto URL, and click the CSS3 hologram demo
> > 2) rotate phone to landscape view
> > 3) just tap around various points, swipe around, on the screen with your
> > finger.   Eventually it crashes.
> > 
> > https://crash-stats.mozilla.com/report/index/bp-0ed01db1-ad9f-4379-ba89-
> > b0a642120215
> 
> Tony, can you reproduce this on a Nexus S?

i dont have a nexus S on me at the moment.  but i'll see if i can dig one up.

But I do have a SGS2, Galaxy Nexus and access to some LG and sony phones.  Did you want testing on those?
(Assignee)

Comment 6

6 years ago
width=2147483647, height=2147483647 sounds very wrong.

Comment 7

6 years ago
(In reply to Tony Chung [:tchung] from comment #3)
> I also reproduced this.
> 
> HTC Desire HD, 02-14-2012 maple build
> URL: http://paulrouget.com/mwc-demos/
> 
> Repro:
> 1) goto URL, and click the CSS3 hologram demo
> 2) rotate phone to landscape view
> 3) just tap around various points, swipe around, on the screen with your
> finger.   Eventually it crashes.
> 
> https://crash-stats.mozilla.com/report/index/bp-0ed01db1-ad9f-4379-ba89-
> b0a642120215

For reference, the hologram demo URL is: http://paulrouget.com/mwc-demos/hologram/.
Could not reproduce in the latest maple build 02/16/2012 on Nexus S:
http://paulrouget.com/mwc-demos/hologram/
(Assignee)

Updated

6 years ago
Blocks: 728249
https://crash-stats.mozilla.com/report/index/34d96724-49c6-4282-95c4-53f252120217
https://crash-stats.mozilla.com/report/index/5b9fb967-da56-473e-b6e1-a1dcc2120218
was able to reproduce this on Maple 2/17/2012 on Samsung Galaxy S II

1. opened a tab to about:home
2. opened a tab to Paulroget.com/mwc-demo
3. opened a tab to Hahlo.com
4. opened a tab to mozilla.org
5. kept switching tabs

Expected: no crash
Actual: crash due to touchbadmemory
This is the hologram field; we don't need to block mwc demos on this.
(Assignee)

Comment 11

6 years ago
Created attachment 598500 [details] [diff] [review]
patch v.1
Assignee: nobody → doug.turner
Attachment #598500 - Flags: review?(pwalton)
Comment on attachment 598500 [details] [diff] [review]
patch v.1

Review of attachment 598500 [details] [diff] [review]:
-----------------------------------------------------------------

Ok, but we should make sure that the viewport actually does get adjusted for background tabs when switching to them after a resize.
Attachment #598500 - Flags: review?(pwalton) → review+
Test case for patch : 
1. opened a tab to Paulroget.com/mwc-demo
2. opened a tab to mozilla.org
3. rotate phone
4. switch to tab 1 after current tab is loaded.
(Assignee)

Comment 14

6 years ago
so, if I rotate the screen then switch to a tab that was in the background, the view is what I would expect.  Not sure what else there is to do.

http://hg.mozilla.org/projects/maple/rev/70c7baef22df
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
(Assignee)

Updated

6 years ago
Duplicate of this bug: 728452

Updated

6 years ago
Duplicate of this bug: 726838
|Tabs.getInstance().getSelectedTab()| is Java code, not Javascript!
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
https://hg.mozilla.org/projects/maple/rev/eff263ee7c82
Status: REOPENED → RESOLVED
Last Resolved: 6 years ago6 years ago
Resolution: --- → FIXED
Status: RESOLVED → VERIFIED

Updated

6 years ago
No longer depends on: 722044

Updated

6 years ago
Crash Signature: [@ TouchBadMemory] → [@ TouchBadMemory] [@ TouchBadMemory | mozalloc_abort | dalvik-heap (deleted)@0x7c711f] [@ TouchBadMemory | mozalloc_abort | dalvik-heap (deleted)@0x11f011f] [@ TouchBadMemory | mozalloc_abort | dalvik-heap (deleted)@0x11f111f]
https://hg.mozilla.org/releases/mozilla-aurora/rev/e8b308c39205
status-firefox13: --- → fixed
status-firefox14: --- → fixed
You need to log in before you can comment on or make changes to this bug.