Closed Bug 743596 Opened 13 years ago Closed 12 years ago

Crash in nsCanvasRenderingContext2DAzure::FillRect

Categories

(Core :: Graphics: Canvas2D, defect)

Product:
Core
Component:
Graphics: Canvas2D
Version:
7 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: epinal99-bugzilla2, Unassigned)

References

Details

(Keywords: crash, regression, reproducible)

Crash Data

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0 Build ID: 20120312181643 Steps to reproduce: 1. Be sure hardware acceleration (HWA) is enabled 2. Open this JS demo http://js1k.com/2012-love/demo/1195 3. Disable HWA Actual results: FF11+ crashes. CR for FF11: https://crash-stats.mozilla.com/report/index/0847b052-e334-4603-85b6-5c5c62120409 CR for FF14: https://crash-stats.mozilla.com/report/index/bp-4742e153-b003-4063-9af3-f3b092120408 For FF11, Crashing Thread: Frame Module Signature Source 0 xul.dll nsCanvasRenderingContext2DAzure::FillRect content/canvas/src/nsCanvasRenderingContext2DAzure.cpp:2128 1 xul.dll nsIDOMCanvasRenderingContext2D_FillRect obj-firefox/js/xpconnect/src/dom_quickstubs.cpp:2041 2 mozjs.dll js::InvokeKernel js/src/jsinterp.cpp:625 3 mozjs.dll js::Interpret js/src/jsinterp.cpp:3506 4 mozjs.dll js::types::TypeMonitorCall js/src/jsinferinlines.h:330 5 mozjs.dll UncachedInlineCall js/src/methodjit/InvokeHelpers.cpp:390 6 mozjs.dll js::mjit::stubs::UncachedCallHelper js/src/methodjit/InvokeHelpers.cpp:473 7 mozjs.dll CallCompiler::update js/src/methodjit/MonoIC.cpp:989 8 mozjs.dll js::mjit::ic::Call js/src/methodjit/MonoIC.cpp:1047 9 mozjs.dll js::mjit::EnterMethodJIT js/src/methodjit/MethodJIT.cpp:1063 10 mozjs.dll js::mjit::JaegerShot js/src/methodjit/MethodJIT.cpp:1136 11 mozjs.dll js::RunScript js/src/jsinterp.cpp:577 12 mozjs.dll js::InvokeKernel js/src/jsinterp.cpp:643 13 mozjs.dll js::Invoke js/src/jsinterp.cpp:675 14 mozjs.dll JS_CallFunctionValue js/src/jsapi.cpp:5213 15 xul.dll nsJSContext::CallEventHandler dom/base/nsJSEnvironment.cpp:1927 16 xul.dll nsGlobalWindow::RunTimeout dom/base/nsGlobalWindow.cpp:9306 17 xul.dll nsGlobalWindow::RunPendingTimeoutsRecursive dom/base/nsGlobalWindow.cpp:6653 18 xul.dll nsGlobalWindow::RunPendingTimeoutsRecursive dom/base/nsGlobalWindow.cpp:6686 19 xul.dll nsGlobalWindow::RunPendingTimeoutsRecursive dom/base/nsGlobalWindow.cpp:6686 20 xul.dll nsPendingTimeoutRunner::Run dom/base/nsGlobalWindow.cpp:6701 21 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:660 22 nspr4.dll PR_Unlock nsprpub/pr/src/threads/combined/prulock.c:347 23 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:201 24 xul.dll _SEH_epilog4 25 xul.dll MessageLoop::Run ipc/chromium/src/base/message_loop.cc:175 26 xul.dll nsImageBoxFrame::OnStopDecode layout/xul/base/src/nsImageBoxFrame.cpp:608 27 xul.dll nsBaseAppShell::Run widget/src/xpwidgets/nsBaseAppShell.cpp:189 28 WindowsCodecs.dll jinit_color_deconverter
Crash Signature: [@ nsCanvasRenderingContext2DAzure::FillRect(float, float, float, float) ]
Component: Untriaged → Canvas: 2D
Keywords: crash, reproducible
Product: Firefox → Core
Regression window(m-c) Not crash: http://hg.mozilla.org/mozilla-central/rev/450e4d9ea2d5 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110624 Firefox/7.0a1 ID:20110625025936 Crash: http://hg.mozilla.org/mozilla-central/rev/48ad4ffc4230 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110625 Firefox/7.0a1 ID:20110625030821 Pushlog: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=450e4d9ea2d5&tochange=48ad4ffc4230 Regression window(m-i) Not crash: http://hg.mozilla.org/integration/mozilla-inbound/rev/c65f1fb0449d Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110624 Firefox/7.0a1 ID:20110624094307 Crash: http://hg.mozilla.org/integration/mozilla-inbound/rev/46c3d095bc75 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110624 Firefox/7.0a1 ID:20110624104626 Pushlog: http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=c65f1fb0449d&tochange=46c3d095bc75 Triggered by:Bug 651858
Severity: normal → critical
Status: UNCONFIRMED → NEW
Ever confirmed: true
Blocks: 651858
Keywords: regression
QA Contact: untriaged → canvas.2d
Version: 11 Branch → 7 Branch
We should really just stop allowing 'live' switching off of HWA. The problem is some driver crashes may -still- cause it to happen.
(In reply to Bas Schouten (:bas) from comment #2) > We should really just stop allowing 'live' switching off of HWA. The problem > is some driver crashes may -still- cause it to happen. It looks like you got an example here. :) https://crash-stats.mozilla.com/report/index/980b5e34-531a-418d-9b25-1a1312120620 Comment: "installing amd video drivers" I guess the AMD drivers crashed the FF too.
I tried with the latest Nightly and I'm not able to reproduce the crash. m-c bad=2012-08-03 good=2012-08-04 http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=89dcadd42ec4&tochange=20fc34efd733 I guess that is bug 773460 which has "fixed" the crash.
Thanks for following up Loic!
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.