736526 - OOM crash in nsFontMetrics::Init

Status: RESOLVED INCOMPLETE

(Core :: Graphics, defect)

Description

[Scoobidiver (away)]

It first appeared in 14.0a1/20120314130626. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=1ca7a94573f2&tochange=a888f210af4e

Signature 	TouchBadMemory More Reports Search
UUID	2b0d2d78-158d-40bd-a6ec-c22d42120315
Date Processed	2012-03-15 01:52:21
Uptime	3
Last Crash	3.5 hours before submission
Install Age	3.7 hours since version was first installed.
Install Time	2012-03-14 22:11:58
Product	FennecAndroid
Version	14.0a1
Build ID	20120314130626
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 2.6.35.7-g83f1a47 #1 SMP PREEMPT Fri Jan 6 20:17:17 CST 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
EGL? EGL+ AdapterVendorID: mapphone_cdma, AdapterDeviceID: DROID BIONIC.
AdapterDescription: 'Android, Model: 'DROID BIONIC', Product: 'targa_vzw', Manufacturer: 'motorola', Hardware: 'mapphone_cdma''.
GL Context? GL Context+ GL Layers? GL Layers- 
motorola DROID BIONIC
verizon/targa_vzw/cdma_targa:2.3.4/5.5.1_84_DBN-71/120106:user/release-keys
Processor Notes 	This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	True
OOMAllocationSize	112

Frame 	Module 	Signature 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	libmozalloc.so 	moz_xmalloc 	memory/mozalloc/mozalloc.cpp:105
3 	libxul.so 	gfxAndroidPlatform::CreateFontGroup 	mozalloc.h:229
4 	libxul.so 	nsFontMetrics::Init 	gfx/src/nsFontMetrics.cpp:141
5 	libxul.so 	nsFontCache::GetMetricsFor 	gfx/src/nsDeviceContext.cpp:174
6 	libxul.so 	nsDeviceContext::GetMetricsFor 	gfx/src/nsDeviceContext.cpp:289
7 	libxul.so 	nsLayoutUtils::GetFontMetricsForStyleContext 	layout/base/nsLayoutUtils.cpp:2114
8 	libxul.so 	nsLayoutUtils::GetFontMetricsForFrame 	layout/base/nsLayoutUtils.cpp:2094
9 	libxul.so 	GetFontGroupForFrame 	layout/generic/nsTextFrameThebes.cpp:1641
10 	libxul.so 	BuildTextRunsScanner::BuildTextRunForFrames 	layout/generic/nsTextFrameThebes.cpp:1877
11 	libxul.so 	BuildTextRunsScanner::FlushFrames 	layout/generic/nsTextFrameThebes.cpp:1397
12 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1560
13 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1600
14 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1600
15 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1600
16 	libxul.so 	nsTextFrame::EnsureTextRun 	layout/generic/nsTextFrameThebes.cpp:1300
17 	libxul.so 	nsTextFrame::AddInlineMinWidthForFlow 	layout/generic/nsTextFrameThebes.cpp:6580
18 	libxul.so 	nsTextFrame::AddInlineMinWidth 	layout/generic/nsTextFrameThebes.cpp:6728
19 	libxul.so 	nsBlockFrame::GetMinWidth 	layout/generic/nsBlockFrame.cpp:759
20 	libxul.so 	nsLayoutUtils::IntrinsicForContainer 	layout/base/nsLayoutUtils.cpp:2464
21 	libxul.so 	nsTableCellFrame::GetMinWidth 	layout/tables/nsTableCellFrame.cpp:736
22 	libxul.so 	GetWidthInfo 	layout/tables/BasicTableLayoutStrategy.cpp:120
23 	libxul.so 	BasicTableLayoutStrategy::ComputeColumnIntrinsicWidths 	layout/tables/BasicTableLayoutStrategy.cpp:245
24 	libxul.so 	BasicTableLayoutStrategy::ComputeIntrinsicWidths 	layout/tables/BasicTableLayoutStrategy.cpp:425
25 	libxul.so 	BasicTableLayoutStrategy::GetMinWidth 	layout/tables/BasicTableLayoutStrategy.cpp:75
...

More reports at:
More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=TouchBadMemory

Comment 1

[Henrik Skupin [:whimboo][⌚️UTC+2]]

I have experienced this crash lately with Firefor Nightly on Android. I was sharing a page via email and after I got back to the page and tried to navigate away Firefox crashed.

Here the crash report: bp-4a2fd7ba-4477-4d7b-a410-00a612120503

I wasn't able to reproduce it yet.

Comment 2

[u279076]

I am closing this bug report as incomplete since there are no reports beyond Fennec 15. Please reopen this bug report if you can reproduce the crash in the current Fennec version.