750017 - crash in mozilla::layers::BasicTiledLayerBuffer::PaintThebes

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Scoobidiver (away)]

There are 4 crashes from the same user in 15.0a1/20120428.

Signature 	TouchBadMemory | mozalloc_abort | moz_xmalloc | nsTArray_base<nsTArrayDefaultAllocator>::EnsureCapacity | mozilla::layers::TiledLayerBuffer<mozilla::layers::BasicTiledLayerBuffer, mozilla::layers::BasicTiledLayerTile>::Update More Reports Search
UUID	256705c0-6559-43bd-b1a1-af21f2120428
Date Processed	2012-04-28 20:45:14
Uptime	415
Last Crash	7.0 minutes before submission
Install Age	8.9 hours since version was first installed.
Install Time	2012-04-28 11:50:01
Product	FennecAndroid
Version	15.0a1
Build ID	20120428030503
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 3.0.8-gda6252b #1 SMP PREEMPT Fri Apr 13 11:35:09 PDT 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
EGL? EGL+ AdapterVendorID: tuna, AdapterDeviceID: Galaxy Nexus.
AdapterDescription: 'Android, Model: 'Galaxy Nexus', Product: 'yakju', Manufacturer: 'samsung', Hardware: 'tuna''.
GL Context? GL Context+ GL Layers? GL Layers+ 
samsung Galaxy Nexus
google/yakju/maguro:4.0.4/IMM76I/330937:user/release-keys
Processor Notes 	This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	True	
OOMAllocationSize	164952

Frame 	Module 	Signature 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	libmozalloc.so 	moz_xmalloc 	memory/mozalloc/mozalloc.cpp:89
3 	libxul.so 	nsTArray_base<nsTArrayDefaultAllocator>::EnsureCapacity 	nsTArray.h:88
4 	libxul.so 	mozilla::layers::TiledLayerBuffer<mozilla::layers::BasicTiledLayerBuffer, mozill 	nsTArray.h:752
5 	libxul.so 	mozilla::layers::BasicTiledLayerBuffer::PaintThebes 	gfx/layers/basic/BasicTiledThebesLayer.cpp:117
6 	libxul.so 	mozilla::layers::BasicTiledThebesLayer::PaintThebes 	gfx/layers/basic/BasicTiledThebesLayer.cpp:235
7 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1875
8 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1890
9 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1890
10 	libxul.so 	mozilla::layers::BasicLayerManager::PaintLayer 	gfx/layers/basic/BasicLayers.cpp:1890
11 	libxul.so 	mozilla::layers::BasicLayerManager::EndTransactionInternal 	gfx/layers/basic/BasicLayers.cpp:1580
12 	libxul.so 	mozilla::layers::BasicShadowLayerManager::EndTransaction 	gfx/layers/basic/BasicLayers.cpp:1527
13 	libxul.so 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:654
14 	libxul.so 	nsDisplayList::PaintRoot 	layout/base/nsDisplayList.cpp:559
15 	libxul.so 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1808
16 	libxul.so 	PresShell::Paint 	layout/base/nsPresShell.cpp:5429
17 	libxul.so 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:377
18 	libxul.so 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:813
19 	libxul.so 	HandleEvent 	view/src/nsView.cpp:158
20 	libxul.so 	nsWindow::DispatchEvent 	widget/android/nsWindow.cpp:673
21 	libxul.so 	nsWindow::DrawTo 	widget/android/nsWindow.cpp:1036
22 	libxul.so 	nsWindow::DrawTo 	widget/android/nsWindow.cpp:1084
23 	libxul.so 	nsWindow::OnDraw 	widget/android/nsWindow.cpp:1133
24 	libxul.so 	nsWindow::OnGlobalAndroidEvent 	widget/android/nsWindow.cpp:898
25 	libxul.so 	nsAppShell::ProcessNextNativeEvent 	widget/android/nsAppShell.cpp:574
26 	libxul.so 	nsBaseAppShell::DoProcessNextNativeEvent 	widget/xpwidgets/nsBaseAppShell.cpp:171
27 	libxul.so 	nsBaseAppShell::OnProcessNextEvent 	widget/xpwidgets/nsBaseAppShell.cpp:306
28 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:618
29 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
30 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:110
31 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
32 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201
33 	libxul.so 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:189
34 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:295
35 	libxul.so 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3780
36 	libxul.so 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3857
37 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3933
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=TouchBadMemory+|+mozalloc_abort+|+moz_xmalloc+|+nsTArray_base%3CnsTArrayDefaultAllocator%3E%3A%3AEnsureCapacity+|+mozilla%3A%3Alayers%3A%3ATiledLayerBuffer%3Cmozilla%3A%3Alayers%3A%3ABasicTiledLayerBuffer%2C+mozilla%3A%3Alayers%3A%3ABasicTiledLayerTile%3E%3A%3AUpdate

Comment 1

[Edwin Flores [inactive from 2016-12-01] [:eflores] [:edwin]]

Mass resolving WFM: signature(s) hasn't(/haven't) reported in past 28 days.