Intermittent crash in browser_overflowScroll.js due to: "ASSERTION: illegal refcnt: 'PRInt32(mRefCnt) >= 0', file gfx/src/nsDeviceContext.h, line 26" & "ASSERTION: nsDeviceContext not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()'"

RESOLVED WORKSFORME

Status

()

defect
--
critical
RESOLVED WORKSFORME
7 years ago
7 years ago

People

(Reporter: emorley, Assigned: roc)

Tracking

({assertion, intermittent-failure})

Trunk
mozilla19
x86_64
macOS
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox18 affected, firefox19 affected)

Details

(Whiteboard: [leave open])

Attachments

(1 attachment)

Reporter

Description

7 years ago
Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test mochitest-other on 2012-07-23 03:55:04 PDT for push 4c75b59971a6

https://tbpl.mozilla.org/php/getParsedLog.php?id=13768461&full=1&branch=mozilla-inbound

{
TEST-PASS | chrome://mochitests/content/browser/browser/base/content/test/browser_overflowScroll.js | Scrolled one tab to the right with the mouse wheel
###!!! ASSERTION: illegal refcnt: 'PRInt32(mRefCnt) >= 0', file ../../../gfx/src/nsDeviceContext.h, line 26
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0007F360 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00254A40]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0012B057 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00300737]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0050ECBA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x006E439A]
mac_plugin_interposing_child_OnShowCursor+0x001447A4 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x015ED244]
JS_CompareValues+0x00035DEA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C5143A]
JS_CompareValues+0x000334AB [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAFB]
JS_CompareValues+0x00029E2D [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4547D]
JS_CompareValues+0x0001D093 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C386E3]
JS_CompareValues+0x00033476 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAC6]
JS_CompareValues+0x00033B9A [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4F1EA]
JS_CallFunctionValue+0x00000157 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01BA27D7]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007AA19B [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0097F87B]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EB236 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C0916]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007E080F [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009B5EEF]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EAED7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C05B7]
XRE_AddJarManifestLocation+0x0000CDE5 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01689F05]
XRE_AddJarManifestLocation+0x0000D03C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0168A15C]
XRE_AddJarManifestLocation+0x00006E59 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01683F79]
mac_plugin_interposing_child_OnShowCursor+0x0017F8FE [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0162839E]
JSD_GetValueForObject+0x0013D5F7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01376FA7]
JSD_GetValueForObject+0x000F692C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013302DC]
__CFRunLoopDoSources0+0x00000551 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004E401]
__CFRunLoopRun+0x00000369 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004C5F9]
CFRunLoopRunSpecific+0x0000023F [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004BDBF]
RunCurrentEventLoopInMode+0x0000014D [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E7EE]
ReceiveNextEventCommon+0x00000094 [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E551]
BlockUntilNextEventMatchingListInMode+0x0000003B [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E4AC]
_DPSNextEvent+0x000002C4 [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043EB2]
-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]+0x0000009B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043801]
JSD_GetValueForObject+0x000F5966 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0132F316]
-[NSApplication run]+0x0000018B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x0000968F]
JSD_GetValueForObject+0x000F6F3E [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013308EE]
js::BaseProxyHandler::toWrapper()+0x00111DC2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x010E9BB2]
XRE_InitCommandLine+0x000053CC [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C33C]
XRE_InitCommandLine+0x00005A15 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C985]
XRE_main+0x000000D2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000CCF2]
start+0x00000805 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/firefox-bin +0x00001D05]
###!!! ASSERTION: nsDeviceContext not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()', file ../../../gfx/src/nsDeviceContext.h, line 26
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0007F360 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00254A40]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0012B057 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00300737]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0050ECBA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x006E439A]
mac_plugin_interposing_child_OnShowCursor+0x001447A4 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x015ED244]
JS_CompareValues+0x00035DEA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C5143A]
JS_CompareValues+0x000334AB [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAFB]
JS_CompareValues+0x00029E2D [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4547D]
JS_CompareValues+0x0001D093 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C386E3]
JS_CompareValues+0x00033476 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAC6]
JS_CompareValues+0x00033B9A [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4F1EA]
JS_CallFunctionValue+0x00000157 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01BA27D7]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007AA19B [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0097F87B]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EB236 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C0916]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007E080F [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009B5EEF]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EAED7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C05B7]
XRE_AddJarManifestLocation+0x0000CDE5 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01689F05]
XRE_AddJarManifestLocation+0x0000D03C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0168A15C]
XRE_AddJarManifestLocation+0x00006E59 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01683F79]
mac_plugin_interposing_child_OnShowCursor+0x0017F8FE [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0162839E]
JSD_GetValueForObject+0x0013D5F7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01376FA7]
JSD_GetValueForObject+0x000F692C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013302DC]
__CFRunLoopDoSources0+0x00000551 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004E401]
__CFRunLoopRun+0x00000369 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004C5F9]
CFRunLoopRunSpecific+0x0000023F [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004BDBF]
RunCurrentEventLoopInMode+0x0000014D [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E7EE]
ReceiveNextEventCommon+0x00000094 [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E551]
BlockUntilNextEventMatchingListInMode+0x0000003B [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E4AC]
_DPSNextEvent+0x000002C4 [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043EB2]
-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]+0x0000009B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043801]
JSD_GetValueForObject+0x000F5966 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0132F316]
-[NSApplication run]+0x0000018B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x0000968F]
JSD_GetValueForObject+0x000F6F3E [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013308EE]
js::BaseProxyHandler::toWrapper()+0x00111DC2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x010E9BB2]
XRE_InitCommandLine+0x000053CC [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C33C]
XRE_InitCommandLine+0x00005A15 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C985]
XRE_main+0x000000D2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000CCF2]
start+0x00000805 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/firefox-bin +0x00001D05]
WARNING: shutting down early because of crash!: file ../../../../dom/plugins/ipc/PluginModuleChild.cpp, line 703
WARNING: plugin process _exit()ing: file ../../../../dom/plugins/ipc/PluginModuleChild.cpp, line 668
TEST-UNEXPECTED-FAIL | chrome://mochitests/content/browser/browser/base/content/test/browser_overflowScroll.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:03:21.615110
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpDDTTJepidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64-debug/1343040163/firefox-17.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | chrome://mochitests/content/browser/browser/base/content/test/browser_overflowScroll.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpV1kTlQ/minidumps/7D83B66A-A434-41D1-B724-075177DD2307.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / 0x0000000d
Crash address: 0x0

Thread 0 (crashed)
 0  XUL!nsIPresShell::GetRootScrollFrame [nsPresShell.cpp : 2302 + 0x3]
    rbx = 0x00000009   r12 = 0x27d29950   r13 = 0x286016b0   r14 = 0x0000003b
    r15 = 0x4741505f   rip = 0x01afa5f7   rsp = 0x5fbfb160   rbp = 0x5fbfb170
    Found by: given as instruction pointer in context
 1  XUL!nsLayoutUtils::PaintFrame [nsLayoutUtils.cpp : 1555 + 0x7]
    rip = 0x01adc817   rsp = 0x5fbfb180
    Found by: stack scanning
}
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Reporter

Updated

7 years ago
Blocks: 747602
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
This is really bad, since it indicates that an nsDeviceContext is being created off the main thread, but it's not clear what's causing the problem because we don't have a stack for that creation.
This patch might help us find the problem.
Assignee: nobody → roc
Attachment #671766 - Flags: review?(matspal)

Updated

7 years ago
Attachment #671766 - Flags: review?(matspal) → review+
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Reporter

Comment 52

7 years ago
https://hg.mozilla.org/mozilla-central/rev/0f2858ae977f
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla19
It sounds like this is a diagnostic patch, so let's leave this open until a real fix comes down the pipeline.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Whiteboard: [orange] → [orange][leave open]
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Comment hidden (Legacy TBPL/Treeherder Robot)
Status: REOPENED → RESOLVED
Closed: 7 years ago7 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange][leave open] → [leave open]
You need to log in before you can comment on or make changes to this bug.