Closed Bug 756999 Opened 8 years ago Closed 7 years ago

Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html and more [@ nsFontInflationData::FindFontInflationDataFor] at crash address 0x28

Categories

(Core :: Layout, defect, critical)

ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: emorley, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

Android XUL Tegra 250 mozilla-inbound opt test reftest-2 on 2012-05-21 00:55:41 PDT for push de36859eb332

slave: tegra-116

https://tbpl.mozilla.org/php/getParsedLog.php?id=11910350&tree=Mozilla-Inbound

{
REFTEST TEST-START | http://10.250.48.213:30116/tests/layout/reftests/font-inflation/relevant-width-1-ref.html | 1610 / 2542 (63%)
REFTEST TEST-PASS | http://10.250.48.213:30116/tests/layout/reftests/font-inflation/relevant-width-1.html | image comparison (==) 
REFTEST INFO | Loading a blank page
SET PREFERENCE pref(font.size.inflation.emPerLine,15)
SET PREFERENCE pref(font.size.inflation.lineThreshold,0)
REFTEST TEST-START | http://10.250.48.213:30116/tests/layout/reftests/font-inflation/relevant-width-overflow-1.html | 1611 / 2542 (63%)
INFO | automation.py | Application ran for: 0:04:36.405762
INFO | automation.py | Reading PID log: /tmp/tmp8i4SA4pidlog
getting files in '/mnt/sdcard/tests/reftest/profile/minidumps/'
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/mobile/tinderbox-builds/mozilla-inbound-android-xul/1337586292/fennec-15.0a1.en-US.android-arm.crashreporter-symbols.zip
PROCESS-CRASH | automation.py | application crashed (minidump found)
Crash dump filename: /tmp/tmpnWs7u7/6e9b31cd-ad08-df57-6fcd69ae-309d99b3.dmp
Operating system: Linux
                  0.0.0 Linux 2.6.32.9-00002-gd8084dc-dirty #1 SMP PREEMPT Wed Feb 2 11:32:06 PST 2011 armv7l
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x28

Thread 4 (crashed)
 0  libxul.so!nsFontInflationData::FindFontInflationDataFor [nsIFrame.h:de36859eb332 : 1380 + 0x0]
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00003029    r7 = 0x00000024
     r8 = 0x00000403    r9 = 0x00000200   r10 = 0x00000000    fp = 0x00000000
     sp = 0x4d7dbac8    lr = 0x723701e7    pc = 0x723a12bc
    Found by: given as instruction pointer in context
 1  libxul.so!nsLayoutUtils::InflationMinFontSizeFor [nsLayoutUtils.cpp:de36859eb332 : 4803 + 0x6]
     r4 = 0x539c7320    r5 = 0x539c73f0    r6 = 0x00000000    r7 = 0x00000080
     r8 = 0x00000403    r9 = 0x00000200   r10 = 0x00000000    fp = 0x00000000
     sp = 0x4d7dbae0    pc = 0x723701e7
    Found by: call frame info
 2  libxul.so!nsLayoutUtils::FontSizeInflationFor [nsLayoutUtils.cpp:de36859eb332 : 4827 + 0x6]
     r4 = 0x539c73f0    r5 = 0x40000000    r6 = 0x4f762800    r7 = 0x539c743c
     r8 = 0x00000001    r9 = 0x00000001   r10 = 0x00000000    fp = 0x00000000
     sp = 0x4d7dbb10    pc = 0x72370425
    Found by: call frame info
 3  libxul.so!nsHTMLReflowState::CalcLineHeight [nsHTMLReflowState.cpp:de36859eb332 : 2254 + 0x4]
     r4 = 0x53983278    r5 = 0x40000000    r6 = 0x4f762800    r7 = 0x539c743c
     r8 = 0x00000001    r9 = 0x00000001   r10 = 0x00000000    fp = 0x00000000
     sp = 0x4d7dbb18    pc = 0x723b48d7
    Found by: call frame info
 4  libxul.so!nsBlockReflowState::nsBlockReflowState [nsBlockReflowState.cpp:de36859eb332 : 149 + 0x4]
     r4 = 0x4d7dbbb8    r5 = 0x4d7dbde4    r6 = 0x4f762800    r7 = 0x539c743c
     r8 = 0x00000001    r9 = 0x00000001   r10 = 0x00000000    fp = 0x00000000
     sp = 0x4d7dbb28    pc = 0x7239bed7
    Found by: call frame info
 5  libxul.so!nsBlockFrame::Reflow [nsIFrame.h:de36859eb332 : 1380 + 0x0]
     r4 = 0x4d7dbde4    r5 = 0x539c73f0    r6 = 0x4d7dbed8    r7 = 0x4d7dbde4
     r8 = 0x00000000    r9 = 0x4f762800   r10 = 0x4d7dbed8    fp = 0x00000000
     sp = 0x4d7dbb70    pc = 0x7239a875
    Found by: call frame info
 6  libxul.so!nsContainerFrame::ReflowChild [nsContainerFrame.cpp:de36859eb332 : 945 + 0x0]
     r4 = 0x539c73f0    r5 = 0x4f762800    r6 = 0x7239a6cd    r7 = 0x4d7dbe9c
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x4d7dbed8    fp = 0x00000000
     sp = 0x4d7dbd88    pc = 0x7239f30b
    Found by: call frame info
 7  libxul.so!nsHTMLScrollFrame::ReflowScrolledFrame [nsGfxScrollFrame.cpp:de36859eb332 : 554 + 0x0]
     r4 = 0x539c7320    r5 = 0x4d7dbf84    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x4d7dbde4   r10 = 0x4f762800    fp = 0x00000000
     sp = 0x4d7dbdb8    pc = 0x723b0591
}
https://tbpl.mozilla.org/php/getParsedLog.php?id=11943902&tree=Mozilla-Inbound
Summary: Intermittent crash during relevant-width-overflow-1.html [@ nsFontInflationData::FindFontInflationDataFor] → Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html [@ nsFontInflationData::FindFontInflationDataFor]
I'm pretty sure this is the same as bug 749186. I'm working on it and it will hopefully be done this week. I'm going to leave this bug open so crashes can be starred from tbpl.
https://tbpl.mozilla.org/php/getParsedLog.php?id=11980927&tree=Mozilla-Inbound
Summary: Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html [@ nsFontInflationData::FindFontInflationDataFor] → Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html [@ nsFontInflationData::FindFontInflationDataFor]
https://tbpl.mozilla.org/php/getParsedLog.php?id=11987093&tree=Mozilla-Inbound
Summary: Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html [@ nsFontInflationData::FindFontInflationDataFor] → Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html [@ nsFontInflationData::FindFontInflationDataFor]
https://tbpl.mozilla.org/php/getParsedLog.php?id=11987116&tree=Fx-Team
Summary: Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html [@ nsFontInflationData::FindFontInflationDataFor] → Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html threshold-select-combobox-contents [@ nsFontInflationData::FindFontInflationDataFor]
threshold-select-listbox-contents-under-2.html
https://tbpl.mozilla.org/php/getParsedLog.php?id=12019130&tree=Mozilla-Inbound
Summary: Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html threshold-select-combobox-contents [@ nsFontInflationData::FindFontInflationDataFor] → Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html and more [@ nsFontInflationData::FindFontInflationDataFor]
This crash is currently Fennec 15.0a1's #3 topcrash for the past 3 days.
Summary: Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html and more [@ nsFontInflationData::FindFontInflationDataFor] → Intermittent crash during relevant-width-overflow-1.html, threshold-scope-float-2.html, threshold-scope-float-overflow-1.html, threshold-input-text-contents-under-1.html and more [@ nsFontInflationData::FindFontInflationDataFor] at crash address 0x28
I find it rather interesting that *all* of these crashes are on Android XUL Fennec (given that we run these tests on all platforms).
Though maybe that makes sense given that E10s is involved, which perhaps means that preference changes take place at slightly different times, which forces us to do the preference change handling.  In other words, the underlying problem that the second patch in bug 749186 fixed.
Depends on: 763702
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.