Closed Bug 743596 Opened 12 years ago Closed 12 years ago

Crash in nsCanvasRenderingContext2DAzure::FillRect

Categories

(Core :: Graphics: Canvas2D, defect)

7 Branch
x86_64
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: epinal99-bugzilla2, Unassigned)

References

Details

(Keywords: crash, regression, reproducible)

Crash Data

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Build ID: 20120312181643

Steps to reproduce:

1. Be sure hardware acceleration (HWA) is enabled
2. Open this JS demo http://js1k.com/2012-love/demo/1195
3. Disable HWA


Actual results:

FF11+ crashes.

CR for FF11: https://crash-stats.mozilla.com/report/index/0847b052-e334-4603-85b6-5c5c62120409
CR for FF14: https://crash-stats.mozilla.com/report/index/bp-4742e153-b003-4063-9af3-f3b092120408

For FF11, Crashing Thread:
Frame 	Module 	Signature 	Source
0 	xul.dll 	nsCanvasRenderingContext2DAzure::FillRect 	content/canvas/src/nsCanvasRenderingContext2DAzure.cpp:2128
1 	xul.dll 	nsIDOMCanvasRenderingContext2D_FillRect 	obj-firefox/js/xpconnect/src/dom_quickstubs.cpp:2041
2 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:625
3 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:3506
4 	mozjs.dll 	js::types::TypeMonitorCall 	js/src/jsinferinlines.h:330
5 	mozjs.dll 	UncachedInlineCall 	js/src/methodjit/InvokeHelpers.cpp:390
6 	mozjs.dll 	js::mjit::stubs::UncachedCallHelper 	js/src/methodjit/InvokeHelpers.cpp:473
7 	mozjs.dll 	CallCompiler::update 	js/src/methodjit/MonoIC.cpp:989
8 	mozjs.dll 	js::mjit::ic::Call 	js/src/methodjit/MonoIC.cpp:1047
9 	mozjs.dll 	js::mjit::EnterMethodJIT 	js/src/methodjit/MethodJIT.cpp:1063
10 	mozjs.dll 	js::mjit::JaegerShot 	js/src/methodjit/MethodJIT.cpp:1136
11 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:577
12 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:643
13 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:675
14 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:5213
15 	xul.dll 	nsJSContext::CallEventHandler 	dom/base/nsJSEnvironment.cpp:1927
16 	xul.dll 	nsGlobalWindow::RunTimeout 	dom/base/nsGlobalWindow.cpp:9306
17 	xul.dll 	nsGlobalWindow::RunPendingTimeoutsRecursive 	dom/base/nsGlobalWindow.cpp:6653
18 	xul.dll 	nsGlobalWindow::RunPendingTimeoutsRecursive 	dom/base/nsGlobalWindow.cpp:6686
19 	xul.dll 	nsGlobalWindow::RunPendingTimeoutsRecursive 	dom/base/nsGlobalWindow.cpp:6686
20 	xul.dll 	nsPendingTimeoutRunner::Run 	dom/base/nsGlobalWindow.cpp:6701
21 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:660
22 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
23 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
24 	xul.dll 	_SEH_epilog4 	
25 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
26 	xul.dll 	nsImageBoxFrame::OnStopDecode 	layout/xul/base/src/nsImageBoxFrame.cpp:608
27 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:189
28 	WindowsCodecs.dll 	jinit_color_deconverter
Crash Signature: [@ nsCanvasRenderingContext2DAzure::FillRect(float, float, float, float) ]
Component: Untriaged → Canvas: 2D
Keywords: crash, reproducible
Product: Firefox → Core
Regression window(m-c)
Not crash:
http://hg.mozilla.org/mozilla-central/rev/450e4d9ea2d5
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110624 Firefox/7.0a1 ID:20110625025936
Crash:
http://hg.mozilla.org/mozilla-central/rev/48ad4ffc4230
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110625 Firefox/7.0a1 ID:20110625030821
Pushlog:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=450e4d9ea2d5&tochange=48ad4ffc4230


Regression window(m-i)
Not crash:
http://hg.mozilla.org/integration/mozilla-inbound/rev/c65f1fb0449d
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110624 Firefox/7.0a1 ID:20110624094307
Crash:
http://hg.mozilla.org/integration/mozilla-inbound/rev/46c3d095bc75
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0a1) Gecko/20110624 Firefox/7.0a1 ID:20110624104626
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=c65f1fb0449d&tochange=46c3d095bc75

Triggered by:Bug 651858
Severity: normal → critical
Status: UNCONFIRMED → NEW
Ever confirmed: true
Blocks: 651858
Keywords: regression
QA Contact: untriaged → canvas.2d
Version: 11 Branch → 7 Branch
We should really just stop allowing 'live' switching off of HWA. The problem is some driver crashes may -still- cause it to happen.
(In reply to Bas Schouten (:bas) from comment #2)
> We should really just stop allowing 'live' switching off of HWA. The problem
> is some driver crashes may -still- cause it to happen.

It looks like you got an example here. :)
https://crash-stats.mozilla.com/report/index/980b5e34-531a-418d-9b25-1a1312120620
Comment: "installing amd video drivers"
I guess the AMD drivers crashed the FF too.
I tried with the latest Nightly and I'm not able to reproduce the crash.

m-c
bad=2012-08-03
good=2012-08-04
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=89dcadd42ec4&tochange=20fc34efd733

I guess that is bug 773460 which has "fixed" the crash.
Thanks for following up Loic!
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.