733325 - Crash in nsWindow::GetClientOffset with abort message: "RenderComposite: RenderBadPicture (invalid Picture parameter)"

Status: RESOLVED DUPLICATE of bug 733323

(Core :: Graphics, defect)

Description

[Scoobidiver (away)]

Signature 	TouchBadMemory More Reports Search
UUID	27668ea5-4772-456e-bda7-af7602120228
Date Processed	2012-02-28 23:30:25
Uptime	78
Last Crash	1.4 minutes before submission
Install Age	15.3 hours since version was first installed.
Install Time	2012-02-28 08:14:09
Product	Firefox
Version	13.0a1
Build ID	20120227031120
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 2.6.32-38-generic #83-Ubuntu SMP Wed Jan 4 11:13:04 UTC 2012 i686
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 15 stepping 13
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
OpenGL: NVIDIA Corporation -- GeForce 8600M GT/PCI/SSE2 -- 3.2.0 NVIDIA 195.36.24 -- texture_from_pixmap
RenderComposite: RenderBadPicture (invalid Picture parameter); 6 requests agoxpcom_runtime_abort(###!!! ABORT: RenderComposite: RenderBadPicture (invalid Picture parameter); 6 requests ago: file /builds/slave/m-cen-lnx-ntly/build/toolkit/xre/nsX11ErrorHandler.cpp, line 190)
EMCheckCompatibility	False

Frame 	Module 	Signature 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	libxul.so 	NS_DebugBreak_P 	xpcom/base/nsDebugImpl.cpp:388
3 	libxul.so 	X11Error 	toolkit/xre/nsX11ErrorHandler.cpp:190
4 	libbonoboui-2.so.0.0.0 	libbonoboui-2.so.0.0.0@0x20d33 	
5 	libX11.so.6.3.0 	_XError 	XlibInt.c:3103
6 	libX11.so.6.3.0 	process_responses 	xcb_io.c:214
7 	libX11.so.6.3.0 	_XReply 	xcb_io.c:464
8 	libX11.so.6.3.0 	XGetWindowProperty 	GetProp.c:64
9 	libgdk-x11-2.0.so.0.2000.1 	IA__gdk_property_get 	gdkproperty-x11.c:593
10 	libxul.so 	nsWindow::GetClientOffset 	widget/gtk2/nsWindow.cpp:1557
11 	libxul.so 	nsWindow::GetClientBounds 	widget/gtk2/nsWindow.cpp:1528
12 	libxul.so 	nsView::DoResetWidgetBounds 	view/src/nsView.cpp:443
13 	libxul.so 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:401
14 	libxul.so 	nsViewManager::UpdateWidgetGeometry 	view/src/nsViewManager.cpp:1365
15 	libxul.so 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4139
16 	libxul.so 	nsDocument::FlushPendingNotifications 	content/base/src/nsDocument.cpp:6332
17 	libxul.so 	nsComputedDOMStyle::GetPropertyCSSValue 	layout/style/nsComputedDOMStyle.cpp:500
18 	libxul.so 	nsComputedDOMStyle::GetPropertyValue 	layout/style/nsComputedDOMStyle.cpp:323
19 	libxul.so 	nsComputedDOMStyle::GetPropertyValue 	layout/style/nsComputedDOMStyle.cpp:268
20 	libxul.so 	nsIDOMCSS2Properties_Get 	obj-firefox/js/xpconnect/src/dom_quickstubs.cpp:6602
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=TouchBadMemory

Comment 1

[Karl Tomlinson (:karlt)]

A crash stack generated with MOZ_X_SYNC=1 in the environment would help here.

Comment 2

[Karl Tomlinson (:karlt)]

Most likely the same issue as bug 733323.