Open Bug 728533 Opened 8 years ago Updated 2 years ago

EXCEPTION_ILLEGAL_INSTRUCTION crash @ nsIFrame::BuildDisplayListForChild with AMD Radeon HD 6xxx series

Categories

(Core :: Layout, defect, critical)

x86
Windows 7
defect
Not set
critical

Tracking

()

Tracking Status
firefox47 --- affected
firefox48 --- affected
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected
firefox51 --- affected
firefox52 --- wontfix

People

(Reporter: scoobidiver, Unassigned)

References

(Depends on 1 open bug, Blocks 2 open bugs)

Details

(Keywords: crash, Whiteboard: [platform-rel-AMD])

Crash Data

EXCEPTION_ILLEGAL_INSTRUCTION crashes are mainly correlated to AMD/ATI drivers:
  nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int)|EXCEPTION_ILLEGAL_INSTRUCTION (165 crashes)
     95% (156/165) vs.   6% (3150/54820) atidxx32.dll
         72% (118/165) vs.   1% (352/54820) 8.17.10.318
          5% (9/165) vs.   0% (106/54820) 8.17.10.325
          7% (11/165) vs.   0% (141/54820) 8.17.10.331
          2% (3/165) vs.   0% (160/54820) 8.17.10.337
          4% (7/165) vs.   0% (213/54820) 8.17.10.355
          1% (2/165) vs.   1% (383/54820) 8.17.10.362
          1% (1/165) vs.   0% (112/54820) 8.17.10.378
          1% (2/165) vs.   0% (243/54820) 8.17.10.405
          2% (3/165) vs.   1% (532/54820) 8.17.10.414

The device IDs I manually checked in crash reports are 0x9802, 0x9803, 0x9804, 0x9805, 0x9806, and 0x9807.

Signature 	nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) More Reports Search
UUID	32eea880-9ad3-4e21-9b5d-80a592120218
Date Processed	2012-02-18 06:46:55
Uptime	164
Last Crash	4.9 minutes before submission
Install Age	3.6 days since version was first installed.
Install Time	2012-02-14 17:24:17
Product	Firefox
Version	10.0.1
Build ID	20120208060813
Release Channel	release
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	AuthenticAMD family 20 model 1 stepping 0
Crash Reason	EXCEPTION_ILLEGAL_INSTRUCTION
Crash Address	0x66da3fc1
App Notes 	
AdapterVendorID: 1002, AdapterDeviceID: 9802, AdapterSubsysID: 00000000, AdapterDriverVersion: 8.850.0.0
D2D? D2D+
DWrite? DWrite+
D3D10 Layers? D3D10 Layers+
EMCheckCompatibility	True
Total Virtual Memory	2147352576
Available Virtual Memory	1752805376
System Memory Use Percentage	43

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1950
1 	xul.dll 	nsTableFrame::GenericTraversal 	layout/tables/nsTableFrame.cpp:1166
2 	xul.dll 	nsTableFrame::DisplayGenericTablePart 	layout/tables/nsTableFrame.cpp:1226
3 	xul.dll 	nsTableRowFrame::BuildDisplayList 	layout/tables/nsTableRowFrame.cpp:632
4 	xul.dll 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
5 	xul.dll 	DisplayRows 	layout/tables/nsTableRowGroupFrame.cpp:226
6 	xul.dll 	nsTableFrame::DisplayGenericTablePart 	layout/tables/nsTableFrame.cpp:1226
7 	xul.dll 	nsTableRowGroupFrame::BuildDisplayList 	layout/tables/nsTableRowGroupFrame.cpp:268
8 	xul.dll 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
9 	xul.dll 	nsTableFrame::GenericTraversal 	layout/tables/nsTableFrame.cpp:1166
10 	xul.dll 	nsTableFrame::DisplayGenericTablePart 	layout/tables/nsTableFrame.cpp:1226
11 	xul.dll 	nsTableFrame::BuildDisplayList 	layout/tables/nsTableFrame.cpp:1314
12 	xul.dll 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:1995
...

More reports at:
https://crash-stats.mozilla.com/report/list?reason=EXCEPTION_ILLEGAL_INSTRUCTION&signature=nsIFrame%3A%3ABuildDisplayListForChild%28nsDisplayListBuilder*%2C%20nsIFrame*%2C%20nsRect%20const%26%2C%20nsDisplayListSet%20const%26%2C%20unsigned%20int%29
Blocks: 605780
Depends on: 755974
There are 9 crashes in 13.0.1.
Keywords: topcrash
There has been a spike in crashes (hit currently by three users) since 20.0a1/20121218.

The first frames of the stack trace look like:
Frame 	Module 	Signature 	Source
0 	xul.dll 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:2178
1 	xul.dll 	nsBoxFrame::BuildDisplayListForChildren 	layout/xul/base/src/nsBoxFrame.cpp:1366
2 	xul.dll 	nsBoxFrame::BuildDisplayList 	layout/xul/base/src/nsBoxFrame.cpp:1328
3 	xul.dll 	nsIFrame::BuildDisplayListForChild 	layout/generic/nsFrame.cpp:2237
4 	xul.dll 	nsBoxFrame::BuildDisplayListForChildren 	layout/xul/base/src/nsBoxFrame.cpp:1366
Component: Layout: Tables → Layout
Crash Signature: [@ nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int)] → [@ nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int)] [@ nsIFrame::BuildDisplayListForChild]
Crash volume for signature 'nsIFrame::BuildDisplayListForChild':
 - nightly (version 50): 17 crashes from 2016-06-06.
 - aurora  (version 49): 29 crashes from 2016-06-07.
 - beta    (version 48): 676 crashes from 2016-06-06.
 - release (version 47): 1410 crashes from 2016-05-31.
 - esr     (version 45): 72 crashes from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          2          8          2          2          1          0          1
 - aurora           9          3          4          1          5          4          0
 - beta           142        115        126        101         72         68         23
 - release        225        175        208        225        208        207         86
 - esr              7          8         10         10         13          8          1

Affected platforms: Windows, Mac OS X, Linux
Crash volume for signature 'nsIFrame::BuildDisplayListForChild':
 - nightly (version 51): 2 crashes from 2016-08-01.
 - aurora  (version 50): 1 crash from 2016-08-01.
 - beta    (version 49): 187 crashes from 2016-08-02.
 - release (version 48): 169 crashes from 2016-07-25.
 - esr     (version 45): 114 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       1       0
 - aurora        0       0       0
 - beta         62      72      24
 - release      49      58      27
 - esr           9       8      10

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #884
 - aurora            #1009
 - beta    #352      #333
 - release #432      #348
 - esr     #489
Crash volume for signature 'nsIFrame::BuildDisplayListForChild':
 - nightly (version 52): 1 crash from 2016-09-19.
 - aurora  (version 51): 2 crashes from 2016-09-19.
 - beta    (version 50): 36 crashes from 2016-09-20.
 - release (version 49): 196 crashes from 2016-09-05.
 - esr     (version 45): 149 crashes from 2016-06-01.

Crash volume on the last weeks (Week N is from 10-03 to 10-09):
            W. N-1  W. N-2
 - nightly       1       0
 - aurora        2       0
 - beta         29       7
 - release     153      43
 - esr           6       5

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly           #989
 - aurora            #521
 - beta    #648      #292
 - release #404      #326
 - esr     #1204
platform-rel: --- → ?
Whiteboard: [platform-rel-AMD]
platform-rel: ? → ---
Mass wontfix for bugs affecting firefox 52.
Depends on: 1335925
You need to log in before you can comment on or make changes to this bug.