Closed Bug 736526 Opened 10 years ago Closed 6 years ago

OOM crash in nsFontMetrics::Init

Categories

(Core :: Graphics, defect)

14 Branch
ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Keywords: crash, regression, Whiteboard: [native-crash])

Crash Data

It first appeared in 14.0a1/20120314130626. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=1ca7a94573f2&tochange=a888f210af4e

Signature 	TouchBadMemory More Reports Search
UUID	2b0d2d78-158d-40bd-a6ec-c22d42120315
Date Processed	2012-03-15 01:52:21
Uptime	3
Last Crash	3.5 hours before submission
Install Age	3.7 hours since version was first installed.
Install Time	2012-03-14 22:11:58
Product	FennecAndroid
Version	14.0a1
Build ID	20120314130626
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 2.6.35.7-g83f1a47 #1 SMP PREEMPT Fri Jan 6 20:17:17 CST 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
EGL? EGL+ AdapterVendorID: mapphone_cdma, AdapterDeviceID: DROID BIONIC.
AdapterDescription: 'Android, Model: 'DROID BIONIC', Product: 'targa_vzw', Manufacturer: 'motorola', Hardware: 'mapphone_cdma''.
GL Context? GL Context+ GL Layers? GL Layers- 
motorola DROID BIONIC
verizon/targa_vzw/cdma_targa:2.3.4/5.5.1_84_DBN-71/120106:user/release-keys
Processor Notes 	This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	True
OOMAllocationSize	112

Frame 	Module 	Signature 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	libmozalloc.so 	moz_xmalloc 	memory/mozalloc/mozalloc.cpp:105
3 	libxul.so 	gfxAndroidPlatform::CreateFontGroup 	mozalloc.h:229
4 	libxul.so 	nsFontMetrics::Init 	gfx/src/nsFontMetrics.cpp:141
5 	libxul.so 	nsFontCache::GetMetricsFor 	gfx/src/nsDeviceContext.cpp:174
6 	libxul.so 	nsDeviceContext::GetMetricsFor 	gfx/src/nsDeviceContext.cpp:289
7 	libxul.so 	nsLayoutUtils::GetFontMetricsForStyleContext 	layout/base/nsLayoutUtils.cpp:2114
8 	libxul.so 	nsLayoutUtils::GetFontMetricsForFrame 	layout/base/nsLayoutUtils.cpp:2094
9 	libxul.so 	GetFontGroupForFrame 	layout/generic/nsTextFrameThebes.cpp:1641
10 	libxul.so 	BuildTextRunsScanner::BuildTextRunForFrames 	layout/generic/nsTextFrameThebes.cpp:1877
11 	libxul.so 	BuildTextRunsScanner::FlushFrames 	layout/generic/nsTextFrameThebes.cpp:1397
12 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1560
13 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1600
14 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1600
15 	libxul.so 	BuildTextRunsScanner::ScanFrame 	layout/generic/nsTextFrameThebes.cpp:1600
16 	libxul.so 	nsTextFrame::EnsureTextRun 	layout/generic/nsTextFrameThebes.cpp:1300
17 	libxul.so 	nsTextFrame::AddInlineMinWidthForFlow 	layout/generic/nsTextFrameThebes.cpp:6580
18 	libxul.so 	nsTextFrame::AddInlineMinWidth 	layout/generic/nsTextFrameThebes.cpp:6728
19 	libxul.so 	nsBlockFrame::GetMinWidth 	layout/generic/nsBlockFrame.cpp:759
20 	libxul.so 	nsLayoutUtils::IntrinsicForContainer 	layout/base/nsLayoutUtils.cpp:2464
21 	libxul.so 	nsTableCellFrame::GetMinWidth 	layout/tables/nsTableCellFrame.cpp:736
22 	libxul.so 	GetWidthInfo 	layout/tables/BasicTableLayoutStrategy.cpp:120
23 	libxul.so 	BasicTableLayoutStrategy::ComputeColumnIntrinsicWidths 	layout/tables/BasicTableLayoutStrategy.cpp:245
24 	libxul.so 	BasicTableLayoutStrategy::ComputeIntrinsicWidths 	layout/tables/BasicTableLayoutStrategy.cpp:425
25 	libxul.so 	BasicTableLayoutStrategy::GetMinWidth 	layout/tables/BasicTableLayoutStrategy.cpp:75
...

More reports at:
More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=TouchBadMemory
Blocks: 719373
Crash Signature: [@ TouchBadMemory] → [@ TouchBadMemory] [@ TouchBadMemory | mozalloc_abort | moz_xmalloc | gfxAndroidPlatform::CreateFontGroup]
Crash Signature: [@ TouchBadMemory] [@ TouchBadMemory | mozalloc_abort | moz_xmalloc | gfxAndroidPlatform::CreateFontGroup] → [@ TouchBadMemory] [@ TouchBadMemory | mozalloc_abort | moz_xmalloc | gfxAndroidPlatform::CreateFontGroup ]
I have experienced this crash lately with Firefor Nightly on Android. I was sharing a page via email and after I got back to the page and tried to navigate away Firefox crashed.

Here the crash report: bp-4a2fd7ba-4477-4d7b-a410-00a612120503

I wasn't able to reproduce it yet.
Summary: crash in nsFontMetrics::Init @ TouchBadMemory → OOM crash in nsFontMetrics::Init
I am closing this bug report as incomplete since there are no reports beyond Fennec 15. Please reopen this bug report if you can reproduce the crash in the current Fennec version.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.