Closed Bug 751545 Opened 13 years ago Closed 9 years ago

crash in mozilla::FrameLayerBuilder::AddThebesDisplayItem

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Platform:
All
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: cbook, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is report bp-f8f96fe8-bc7d-4cb2-992f-5835e2120503 . ============================================================= My own crash - happened when the MBP was activated back from sleep - Firefox nightly crashed Crashing Thread Frame Module Signature Source 0 libmozglue.dylib arena_bin_malloc_hard jemalloc.c:3103 1 libmozglue.dylib je_realloc jemalloc.c:4104 2 libsystem_c.dylib libsystem_c.dylib@0xa0242 3 libsystem_c.dylib libsystem_c.dylib@0xa1031 4 libmozalloc.dylib moz_xrealloc mozalloc.cpp:119 5 XUL nsTArray_base<nsTArrayDefaultAllocator>::EnsureCapacity 6 XUL mozilla::FrameLayerBuilder::AddThebesDisplayItem 7 XUL mozilla::::ContainerState::ProcessDisplayItems FrameLayerBuilder.cpp:1556 8 XUL mozilla::::ContainerState::ProcessDisplayItems FrameLayerBuilder.cpp:1441 9 XUL mozilla::FrameLayerBuilder::BuildContainerLayerFor FrameLayerBuilder.cpp:1958 10 XUL nsDisplayList::PaintForFrame nsDisplayList.cpp:619 11 XUL nsDisplayList::PaintRoot nsDisplayList.cpp:559 12 XUL nsLayoutUtils::PaintFrame nsLayoutUtils.cpp:1808 13 XUL PresShell::Paint nsPresShell.cpp:5429 14 XUL nsViewManager::Refresh nsViewManager.cpp:377 15 XUL nsViewManager::DispatchEvent nsViewManager.cpp:813 16 XUL HandleEvent nsView.cpp:158 17 XUL nsChildView::DispatchEvent nsChildView.mm:1509 18 XUL nsChildView::DispatchWindowEvent nsChildView.mm:1519 19 XUL -[ChildView drawRect:inContext:] nsChildView.mm:2585 20 XUL -[ChildView drawRect:] nsChildView.mm:2484 21 AppKit AppKit@0x54baa 22 AppKit AppKit@0x4f59a 23 AppKit AppKit@0x509b9
It might be a dupe of bug 626052.
Component: General → Layout
QA Contact: general → layout
Summary: crash in arena_bin_malloc_hard → crash in mozilla::FrameLayerBuilder::AddThebesDisplayItem
This now shows that it's crashing in a jemalloc assertion (EXCEPTION_BREAKPOINT in arena_dalloc_small). https://crash-stats.mozilla.com/report/index/b938c8ea-5a00-4d41-b9d9-fd8042120629 If we knew which assertion was being hit, that might help us debug this issue.
Depends on: 778404
Crash Signature: [@ arena_bin_malloc_hard] → [@ arena_bin_malloc_hard] [@ arena_bin_malloc_hard | je_realloc | libsystem_c.dylib@0xa0242] [@ arena_dalloc_small | XPCJSContextStack::GetSafeJSContext()]
Crash Signature: [@ arena_bin_malloc_hard] [@ arena_bin_malloc_hard | je_realloc | libsystem_c.dylib@0xa0242] [@ arena_dalloc_small | XPCJSContextStack::GetSafeJSContext()] → [@ arena_bin_malloc_hard] [@ arena_bin_malloc_hard | je_realloc | libsystem_c.dylib@0xa0242] [@ arena_dalloc_small | XPCJSContextStack::GetSafeJSContext()] [@ arena_dalloc_small | XPCJSContextStack::GetSafeJSContext]
AddThebesDisplayItem no longer exists.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.