753350 - crash in GLEngine@0xaa... with Flash 11.2.202.233

Status: RESOLVED FIXED

(Core :: Graphics, defect)

Description

[Andrew McCreight [:mccr8]]

This bug was filed from the Socorro interface and is 
report bp-5b576f82-7fd6-4fd0-8821-d06492120509 .
============================================================= 
In Google Reader, I am subscribed to the "Official Gmail Blog".  Twice now, when I've clicked on the link to bring up the entries for the blog, then clicked on the latest entry, it has crashed immediately with this signature.  

https://crash-stats.mozilla.com/report/index/bp-5b576f82-7fd6-4fd0-8821-d06492120509
https://crash-stats.mozilla.com/report/index/bp-3d48dd46-cae8-4a9f-9d27-6e92d2120509

Comment 1

[Andrew McCreight [:mccr8]]

I get similar crashes when I load the Amazon Cloud player:
https://crash-stats.mozilla.com/report/index/bp-1d396c56-0a38-4e86-8916-a29f72120509
https://crash-stats.mozilla.com/report/index/bp-812295b7-cc83-4d0b-b6c1-8e6712120509

Comment 2

[Andrew McCreight [:mccr8]]

I used the Amazon Cloud player yesterday, so this is probably a very recent regression.

Comment 3

[Marcia Knous [:marcia]]

Andrew: I tried to repro on Amazon Cloud player and with Google Reader using Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:15.0) Gecko/15.0 Firefox/15.0a1 but so far I have not luck reproducing. Wondering if maybe an extension is tickling the crash?

Comment 4

[Andrew McCreight [:mccr8]]

Yeah, it turns out I can't reproduce on a clean profile either.  I'll try figuring out if it is an addon.

Comment 5

[Andrew McCreight [:mccr8]]

I still get it without any extensions, in my main profile.  I tried enabling/disabling incremental GC but it didn't seem to matter.  If I disable Flash, then it loads up without crashing, but of course it doesn't actually play anything.

Comment 6

[Andrew McCreight [:mccr8]]

I have Flash 11.2.202.233, which is apparently out of date.  I'll try upgrading it.

Comment 7

[Andrew McCreight [:mccr8]]

Both that Google Reader entry and the Amazon Cloud player work just fine with Flash 11.2.202.235, so maybe this was some kind of Flash bug.

Comment 8

[Marcia Knous [:marcia]]

Adding Sal from Adobe - would be interesting to know why that flash version is crashing in this instance. I was running with the latest version Version: 11.2.202.235 and that was likely why I was not able to reproduce the crash.

Comment 9

[Andrew McCreight [:mccr8]]

I couldn't reproduce on a clean profile even with 233, so maybe my profile was just mangled in some odd way.

Comment 10

[smadayag]

i'm glad it's working for you on a clean profile.  11,2,202,235 was a security update only.

Comment 11

[Scoobidiver (away)]

It's hit by many users and is currently #3 top crasher in today's build.
The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=1092c1a3ac50&tochange=dd29535bac5f
It might be a regression from bug 749678.

More reports at:
https://crash-stats.mozilla.com/report/list?signature=GLEngine%400xaaf9d
https://crash-stats.mozilla.com/report/list?signature=GLEngine%400xaa5ba

Comment 12

[Josh Matthews [:jdm]]

I can reproduce this consistently in my daily profile by visiting http://blog.mozilla.org/about_mozilla/2012/05/08/tracking-the-trackers-become-a-mobile-test-driver-and-more/ and clicking on the "teaser reel" link.

Comment 13

[Josh Matthews [:jdm]]

I can also reproduce it consistently by opening http://udp.github.com in a new tab.

Comment 14

[Benoit Jacob [:bjacob] (mostly away)]

Indeed, there is clearly a regression with plugins using OpenGL, which means in particular Flash on Mac OSX, from bug 749678.

I just backed it out on inbound:
http://hg.mozilla.org/integration/mozilla-inbound/rev/3e0f7b9a39d7

With this commit message:

Unfortunately, in-process plugins using OpenGL break the assumption made by these patches, that the current GL context is only changed by GLContext::MakeCurrent. Another issue, regardless of in-process, is that our host-side code in nsCoreAnimationSupport.mm uses direct CGL calls, bypassing GLContext.

Comment 15

[Scoobidiver (away)]

There are no crashes after 15.0a1/20120513. It's fixed by the backout of bug 749678.