736714 - OOM crash in mozilla::css::Declaration::CompressFrom

Status: RESOLVED WONTFIX

(Core :: CSS Parsing and Computation, defect)

Description

[Scoobidiver (away)]

It first appeared in 14.0a1/20120314130626.

Signature 	TouchBadMemory More Reports Search
UUID	fb6b00dd-8df8-4c67-9265-48abc2120316
Date Processed	2012-03-16 20:12:57
Uptime	11
Last Crash	21 seconds before submission
Install Age	44 seconds since version was first installed.
Install Time	2012-03-16 20:12:20
Product	FennecAndroid
Version	14.0a1
Build ID	20120316031151
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 2.6.35.7-g790a33c #1 SMP PREEMPT Mon Aug 15 00:07:09 CDT 2011 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
EGL? EGL+ AdapterVendorID: mapphone_cdma, AdapterDeviceID: DROID BIONIC.
AdapterDescription: 'Android, Model: 'DROID BIONIC', Product: 'targa_vzw', Manufacturer: 'motorola', Hardware: 'mapphone_cdma''.
GL Context? GL Context+ GL Layers? GL Layers- 
motorola DROID BIONIC
verizon/targa_vzw/cdma_targa:2.3.4/5.5.1_84_DBN-55/110814:user/release-keys
EMCheckCompatibility	True
OOMAllocationSize	104

Frame 	Module 	Signature [Expand] 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	libmozalloc.so 	moz_xmalloc 	memory/mozalloc/mozalloc.cpp:105
3 	libxul.so 	nsCSSExpandedDataBlock::Compress 	mozalloc.h:229
4 	libxul.so 	mozilla::css::Declaration::CompressFrom 	layout/style/Declaration.h:127
5 	libxul.so 	CSSParserImpl::ParseDeclarationBlock 	layout/style/nsCSSParser.cpp:3722
6 	libxul.so 	CSSParserImpl::ParseRuleSet 	layout/style/nsCSSParser.cpp:2577
7 	libxul.so 	nsCSSParser::ParseSheet 	layout/style/nsCSSParser.cpp:950
8 	libxul.so 	mozilla::css::Loader::ParseSheet 	layout/style/Loader.cpp:1645
9 	libxul.so 	mozilla::css::SheetLoadData::OnStreamComplete 	layout/style/Loader.cpp:991
10 	libxul.so 	nsUnicharStreamLoader::OnStopRequest 	netwerk/base/src/nsUnicharStreamLoader.cpp:123
11 	libxul.so 	nsHTTPCompressConv::OnStopRequest 	netwerk/streamconv/converters/nsHTTPCompressConv.cpp:127
12 	libxul.so 	nsStreamListenerTee::OnStopRequest 	netwerk/base/src/nsStreamListenerTee.cpp:82
13 	libxul.so 	nsHttpChannel::OnStopRequest 	netwerk/protocol/http/nsHttpChannel.cpp:4377
14 	libxul.so 	nsInputStreamPump::OnStateStop 	netwerk/base/src/nsInputStreamPump.cpp:583
15 	libxul.so 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:405
16 	libxul.so 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:114
17 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:657
18 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
19 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
20 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
21 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201
22 	libxul.so 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:189
23 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:295
24 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3703
...

More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=TouchBadMemory

Comment 1

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

This is an out-of-memory crash resulting from a call to infallible malloc allocating a 104 byte object.  That's by design.  (And if we didn't crash here we'd just crash a little bit later.)