Last Comment Bug 776329 - crash in nsSurfaceTexture::GetTransformMatrix on Honeycomb and above
: crash in nsSurfaceTexture::GetTransformMatrix on Honeycomb and above
: crash, qawanted, regression, topcrash
Product: Core
Classification: Components
Component: Graphics: Layers (show other bugs)
: 15 Branch
: ARM Android
-- critical (vote)
: mozilla17
Assigned To: James Willcox (:snorp) (
: Milan Sreckovic [:milan]
Depends on: 776334
Blocks: honeycomb-flash
  Show dependency treegraph
Reported: 2012-07-22 00:35 PDT by Scoobidiver (away)
Modified: 2012-08-20 16:28 PDT (History)
7 users (show)
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Description User image Scoobidiver (away) 2012-07-22 00:35:49 PDT
It first appeared in 17.0a1/20120721041038. The regression range is:
It's likely a regression from bug 687267.

Signature 	_JNIEnv::CallVoidMethod | nsSurfaceTexture::GetTransformMatrix More Reports Search
UUID	cb9b528f-24c5-4bfe-b19d-089932120722
Date Processed	2012-07-22 05:38:20
Uptime	30
Last Crash	45 seconds before submission
Install Age	4.9 hours since version was first installed.
Install Time	2012-07-22 00:41:12
Product	FennecAndroid
Version	17.0a1
Build ID	20120721041038
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux #1 SMP PREEMPT Thu Dec 1 09:13:52 KST 2011 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
AdapterDescription: 'NVIDIA Corporation -- NVIDIA Tegra -- OpenGL ES 2.0 -- Model: GT-P7500, Product: GT-P7500, Manufacturer: samsung, Hardware: p3'
EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ 
samsung GT-P7500
EMCheckCompatibility	True
Adapter Vendor ID	NVIDIA Corporation
Adapter Device ID	NVIDIA Tegra

Frame 	Module 	Signature 	Source
1 	dalvik-heap (deleted) 	dalvik-heap @0x65d6ee 	
3 	dalvik-heap (deleted) 	dalvik-heap @0x65d6ee 	
4 	_JNIEnv::CallVoidMethod 	jni.h:631
5 	nsSurfaceTexture::GetTransformMatrix 	gfx/thebes/nsSurfaceTexture.cpp:94
6 	mozilla::gl::GLContextEGL::GetSharedHandleDetails 	gfx/gl/GLContextProviderEGL.cpp:1004
7 	mozilla::layers::ShadowImageLayerOGL::RenderLayer 	gfx/layers/opengl/ImageLayerOGL.cpp:932
8 	mozilla::layers::ShadowContainerLayerOGL::RenderLayer 	gfx/layers/opengl/ContainerLayerOGL.cpp:220
9 	mozilla::layers::ShadowContainerLayerOGL::RenderLayer 	gfx/layers/opengl/ContainerLayerOGL.cpp:220
10 	mozilla::layers::ShadowContainerLayerOGL::RenderLayer 	gfx/layers/opengl/ContainerLayerOGL.cpp:220
11 	mozilla::layers::LayerManagerOGL::Render 	gfx/layers/opengl/LayerManagerOGL.cpp:792
12 	mozilla::layers::LayerManagerOGL::EndTransaction 	gfx/layers/opengl/LayerManagerOGL.cpp:415
13 	mozilla::layers::LayerManagerOGL::EndEmptyTransaction 	gfx/layers/opengl/LayerManagerOGL.cpp:388
14 	mozilla::layers::CompositorParent::Composite 	gfx/layers/ipc/CompositorParent.cpp:425
15 	RunnableMethod<mozilla::layers::CompositorParent, void , Tuple0>::Run 	ipc/chromium/src/base/tuple.h:383
16 	MessageLoop::RunTask 	ipc/chromium/src/base/
17 	MessageLoop::DeferOrRunPendingTask 	ipc/chromium/src/base/
18 	MessageLoop::DoWork 	ipc/chromium/src/base/
19 	base::MessagePumpDefault::Run 	ipc/chromium/src/base/
20 	MessageLoop::RunInternal 	ipc/chromium/src/base/
21 	MessageLoop::Run 	ipc/chromium/src/base/
22 	base::Thread::ThreadMain 	ipc/chromium/src/base/
23 	ThreadFunc 	ipc/chromium/src/base/
24 	__thread_entry 	
25 	pthread_create 	

More reports at:|+nsSurfaceTexture%3A%3AGetTransformMatrix|+_JNIEnv%3A%3ACallVoidMethod+|+nsSurfaceTexture%3A%3AGetTransformMatrix
Comment 1 User image Scoobidiver (away) 2012-07-27 23:16:37 PDT
With combined signatures, it's #3 top crasher in 15.0b2 and #7 in 16.0a2 over the last 3 days.
Comment 2 User image Robert Kaiser 2012-07-30 12:59:53 PDT
The full list of URLs is somewhat long, as esp. for the _JNIEnv::CallVoidMethod | nsSurfaceTexture::GetTransformMatrix signature, there's a lot of URLs with only a single crash in the last week. Those are the URLs from both signature variants that have more than 1 hit:

2 	about:home

There doesn't seem to be any really visible pattern in the sites I'm seeing listed in the full lists.
Comment 3 User image Alex Keybl [:akeybl] 2012-07-30 14:58:14 PDT
Suspected regression from bug 687267. Sending over to snorp for investigation of the stack and what part of the code may be crashing.

Leaving qawanted on to test a few of the URLs you've listed. Testing the Flash video from on a tablet may yield some results, if we're right about the cause.
Comment 4 User image Alex Keybl [:akeybl] 2012-07-30 14:58:59 PDT
Although it's not clear to me how bug 687267 could cause JB crashes.
Comment 5 User image Martijn Wargers [:mwargers] 2012-07-30 16:20:40 PDT
I just got this crash on the TF101, Honeycomb with the latest Aurora build:
I did some panning on this page:
Comment 6 User image Scoobidiver (away) 2012-08-15 15:15:24 PDT
There are crashes on ICS.
Comment 7 User image Bill Gianopoulos [:WG9s] 2012-08-15 15:19:56 PDT
(In reply to Scoobidiver from comment #6)
> There are crashes on ICS.

Well does that mean it is the same issue? or a different issue with the similar crash signature?

Perhaps that issue should be different bug if the issue here is Honeycomb only?
Comment 8 User image Scoobidiver (away) 2012-08-15 15:29:02 PDT
(In reply to Bill Gianopoulos [:WG9s] from comment #7)
> Well does that mean it is the same issue? or a different issue with the similar
> crash signature?
Crashes on ICS appeared after the landing of bug 687267 like on Honeycomb and JB.
It's bad that an Honeycomb bug impacts other Android versions.
Comment 9 User image Robert Kaiser 2012-08-16 14:23:24 PDT
snorp, this is another regression from the Flash for Honeycomb landing, and it adds up to over 10% of all 15.0b4 crashes. Does the bug 776334 fix also fix this or do you need to look into this separately?
Comment 10 User image James Willcox (:snorp) ( 2012-08-16 20:45:13 PDT
(In reply to Robert Kaiser ( from comment #9)
> snorp, this is another regression from the Flash for Honeycomb landing, and
> it adds up to over 10% of all 15.0b4 crashes. Does the bug 776334 fix also
> fix this or do you need to look into this separately?

Yes, I believe this one should now be fixed as well. Marking as such.
Comment 11 User image Lukas Blakk [:lsblakk] use ?needinfo 2012-08-20 16:28:10 PDT
marking 15/16 fixed as well then, as per bug 776334.

Note You need to log in before you can comment on or make changes to this bug.