743567 - b2g crashes

Status: RESOLVED WORKSFORME

(Firefox OS Graveyard :: General, defect)

Description

[Hubert Figuiere [:hub]]

I build b2g (the xul application) using mozilla-inbound (what I use to build Nightly that I run) on Linux 64-bits (Fedora 16)

When I start it using 
./obj-b2g-dbg/dist/bin/b2g

it crashes.

The console display the following:
Cannot open socket for RIL!
-*- WifiWorker component: Wifi starting
SmsDatabaseService: Opened database: sms 1
SmsDatabaseService: Started transaction [object IDBTransaction] of type readonly
SmsDatabaseService: Retrieving object store sms
SmsDatabaseService: Could not get the last key from sms database. Probably empty database
Could not load libcutils.so. Using fake propdb.
Could not load libnetutils.so!
-*- WifiWorker component: Got an error from the event worker: resource://gre/modules/libhardware_legacy.js:7: couldn't open library

-*- WifiWorker component: Got an error from the control worker: resource://gre/modules/libhardware_legacy.js:7: couldn't open library

SmsDatabaseService: Transaction [object IDBTransaction] completed.
======================= webapi+apps.js ======================= 
Cannot open socket for RIL!
Cannot open socket for RIL!
###!!! ABORT: RenderFreePicture: RenderBadPicture (invalid Picture parameter): file /home/hub/source/mozilla/src/toolkit/xre/nsX11ErrorHandler.cpp, line 190
###!!! ABORT: RenderFreePicture: RenderBadPicture (invalid Picture parameter): file /home/hub/source/mozilla/src/toolkit/xre/nsX11ErrorHandler.cpp, line 190
zsh: segmentation fault (core dumped)  ./obj-b2g-dbg/dist/bin/b2g


The gdb stack trace is as follow:
b2g: xcb_io.c:140: dequeue_pending_request: Assertion `req == dpy->xcb->pending_requests' failed.

Program received signal SIGABRT, Aborted.
0x00000036e0436285 in __GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64	  return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);
Missing separate debuginfos, use: debuginfo-install PackageKit-gtk-module-0.6.21-2.fc16.x86_64 expat-2.0.1-11.fc15.x86_64 gtk2-2.24.8-3.fc16.x86_64 gtk2-engines-2.20.2-2.fc15.x86_64 libXau-1.0.6-2.fc15.x86_64 libXcursor-1.1.11-3.fc15.x86_64 libXi-1.4.5-1.fc16.x86_64 libXinerama-1.1.1-2.fc15.x86_64 libXrandr-1.3.1-2.fc15.x86_64 libXrender-0.9.6-2.fc15.x86_64 libXt-1.1.1-1.fc16.x86_64 libXxf86vm-1.1.1-2.fc15.x86_64 libnotify-0.7.4-1.fc16.x86_64 libogg-1.2.2-3.fc15.x86_64 libpciaccess-0.12.1-1.fc15.x86_64 libselinux-2.1.6-6.fc16.x86_64 libuuid-2.20.1-2.2.fc16.x86_64 libvorbis-1.3.3-1.fc16.x86_64 nss-mdns-0.10-9.fc15.x86_64 nss-myhostname-0.3-1.fc16.x86_64 nss-softokn-freebl-3.13.3-1.fc16.x86_64 pixman-0.22.2-1.fc16.x86_64
(gdb) where
#0  0x00000036e0436285 in __GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00000036e0437b9b in __GI_abort () at abort.c:91
#2  0x00000036e042ee9e in __assert_fail_base (fmt=<optimized out>, assertion=0x3cd60b8db8 "req == dpy->xcb->pending_requests", file=0x3cd60b8ccb "xcb_io.c", 
    line=<optimized out>, function=<optimized out>) at assert.c:94
#3  0x00000036e042ef42 in __GI___assert_fail (assertion=0x3cd60b8db8 "req == dpy->xcb->pending_requests", file=0x3cd60b8ccb "xcb_io.c", line=140, function=
    0x3cd60b9060 "dequeue_pending_request") at assert.c:103
#4  0x0000003cd60450ee in dequeue_pending_request (dpy=<optimized out>, req=<optimized out>) at xcb_io.c:140
#5  0x0000003cd6045e2c in _XReply (dpy=0x7ffff7d9f000, rep=0x7fffffff8ab0, extra=0, discard=1) at xcb_io.c:574
#6  0x0000003cd60415a3 in XSync (dpy=0x7ffff7d9f000, discard=0) at Sync.c:44
#7  0x00007ffff5607a2d in mozilla::layers::ShadowLayerForwarder::EndTransaction (this=0x7fffddf37420, aReplies=0x7fffffff9828)
    at /home/hub/source/mozilla/src/gfx/layers/ipc/ShadowLayers.cpp:322
#8  0x00007ffff55f5912 in mozilla::layers::BasicShadowLayerManager::ForwardTransaction (this=0x7fffddf373a0)
    at /home/hub/source/mozilla/src/gfx/layers/basic/BasicLayers.cpp:3439
#9  0x00007ffff4cfc8dd in nsDisplayList::PaintForFrame (this=0x7fffffffab38, aBuilder=0x7fffffffa500, aCtx=<optimized out>, aForFrame=0x7fffe487ec28, 
    aFlags=<optimized out>) at /home/hub/source/mozilla/src/layout/base/nsDisplayList.cpp:637
#10 0x00007ffff4d0eda8 in nsLayoutUtils::PaintFrame (aRenderingContext=0x0, aFrame=0x7fffe487ec28, aDirtyRegion=..., aBackstop=4294967295, aFlags=260)
    at /home/hub/source/mozilla/src/layout/base/nsLayoutUtils.cpp:1790
#11 0x00007ffff4d1f461 in PresShell::Paint (this=0x7ffff7dad090, aViewToPaint=<optimized out>, aWidgetToPaint=<optimized out>, aDirtyRegion=..., 
    aIntDirtyRegion=<optimized out>, aWillSendDidPaint=<optimized out>) at /home/hub/source/mozilla/src/layout/base/nsPresShell.cpp:5424
#12 0x00007ffff4feff5a in nsViewManager::Refresh (this=0x7fffdeafffb0, aView=0x7fffdea777a0, aWidget=0x7fffddf9c100, aRegion=..., aWillSendDidPaint=true)
    at /home/hub/source/mozilla/src/view/src/nsViewManager.cpp:377
#13 0x00007ffff4ff145f in nsViewManager::DispatchEvent (this=0x7fffdeafffb0, aEvent=0x7fffffffaf90, aView=<optimized out>, aStatus=0x7fffffffae9c)
    at /home/hub/source/mozilla/src/view/src/nsViewManager.cpp:813
#14 0x00007ffff4fef487 in HandleEvent (aEvent=0x7fffffffaf90) at /home/hub/source/mozilla/src/view/src/nsView.cpp:158
#15 0x00007ffff54348ee in nsWindow::DispatchEvent (this=<optimized out>, aEvent=<optimized out>, aStatus=@0x7fffffffb0dc)
    at /home/hub/source/mozilla/src/widget/gtk2/nsWindow.cpp:524
#16 0x00007ffff543c26f in nsWindow::OnExposeEvent (this=0x7fffddf9c100, aEvent=<optimized out>) at /home/hub/source/mozilla/src/widget/gtk2/nsWindow.cpp:2233
#17 0x00007ffff543c522 in expose_event_cb (widget=<optimized out>, event=0x7fffffffb640) at /home/hub/source/mozilla/src/widget/gtk2/nsWindow.cpp:5360
#18 0x0000003eecd4ed03 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#19 0x00000036e340ea24 in g_closure_invoke (closure=0x7fffe81f9310, return_value=0x7fffffffb2e0, n_param_values=2, param_values=0x7fffd24ef700, 
    invocation_hint=<optimized out>) at gclosure.c:774
#20 0x00000036e3420d17 in signal_emit_unlocked_R (node=<optimized out>, detail=0, instance=0x7fffe4881c80, emission_return=0x7fffffffb440, instance_and_params=
    0x7fffd24ef700) at gsignal.c:3272


When in gdb, the window show the clock and the lock screen from b2g. When no in gdb I don't even have the time to see it as it disappear.

Comment 1

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

This stack makes it look like you're using out-of-process web content on a gtk-X11 machine, except part of the stack doesn't look right.

Did you change any prefs or have any patches applied when you hit this crash?

Comment 2

[Hubert Figuiere [:hub]]

nope. that was my first run of b2g.

Actually I forgot to pass "-profile /home/hub/source/mozilla/B2G/gaia/profile". With that I get further, but when I try to slide up the lock screen, I get a similar crash with a similar stack frame.

Comment 3

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

In b2g/app/b2g.js, try flipping this pref

pref("layers.offmainthreadcomposition.enabled", true);

to false.

Comment 4

[Hubert Figuiere [:hub]]

Changing this pref works.

Comment 5

[Hubert Figuiere [:hub]]

I can no longer reproduce with yesterday's inbound. The pref has been changed in fb5ff0b8fd6c though.

Comment 6

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

Yes, omtc was temporarily pref'd off because of this and another regression.  Please leave this bug open since it hasn't been fixed.

I was able to reproduce this.

Comment 7

[Dietrich Ayala (:dietrich)]

Please try to reproduce with a contemporary build. Re-open if still crashing.