Closed Bug 776505 Opened 12 years ago Closed 12 years ago

Intermittent crash in browser_overflowScroll.js due to: "ASSERTION: illegal refcnt: 'PRInt32(mRefCnt) >= 0', file gfx/src/nsDeviceContext.h, line 26" & "ASSERTION: nsDeviceContext not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()'"

Categories

(Core :: Graphics, defect)

Product:
Core
Component:
Graphics
Platform:
x86_64
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME
Milestone:
mozilla19
Tracking Flags:
Tracking Status
firefox18 --- affected
firefox19 --- affected

People

(Reporter: emorley, Assigned: roc)

References

Details

(Keywords: assertion, intermittent-failure, Whiteboard: [leave open])

Attachments

(1 file)

Assert that nsDeviceContext is created on the main thread only
898 bytes, patch
MatsPalmgren_bugz
: review+
Details | Diff | Splinter Review 
Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test mochitest-other on 2012-07-23 03:55:04 PDT for push 4c75b59971a6

https://tbpl.mozilla.org/php/getParsedLog.php?id=13768461&full=1&branch=mozilla-inbound

{
TEST-PASS | chrome://mochitests/content/browser/browser/base/content/test/browser_overflowScroll.js | Scrolled one tab to the right with the mouse wheel
###!!! ASSERTION: illegal refcnt: 'PRInt32(mRefCnt) >= 0', file ../../../gfx/src/nsDeviceContext.h, line 26
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0007F360 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00254A40]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0012B057 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00300737]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0050ECBA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x006E439A]
mac_plugin_interposing_child_OnShowCursor+0x001447A4 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x015ED244]
JS_CompareValues+0x00035DEA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C5143A]
JS_CompareValues+0x000334AB [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAFB]
JS_CompareValues+0x00029E2D [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4547D]
JS_CompareValues+0x0001D093 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C386E3]
JS_CompareValues+0x00033476 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAC6]
JS_CompareValues+0x00033B9A [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4F1EA]
JS_CallFunctionValue+0x00000157 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01BA27D7]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007AA19B [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0097F87B]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EB236 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C0916]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007E080F [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009B5EEF]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EAED7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C05B7]
XRE_AddJarManifestLocation+0x0000CDE5 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01689F05]
XRE_AddJarManifestLocation+0x0000D03C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0168A15C]
XRE_AddJarManifestLocation+0x00006E59 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01683F79]
mac_plugin_interposing_child_OnShowCursor+0x0017F8FE [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0162839E]
JSD_GetValueForObject+0x0013D5F7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01376FA7]
JSD_GetValueForObject+0x000F692C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013302DC]
__CFRunLoopDoSources0+0x00000551 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004E401]
__CFRunLoopRun+0x00000369 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004C5F9]
CFRunLoopRunSpecific+0x0000023F [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004BDBF]
RunCurrentEventLoopInMode+0x0000014D [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E7EE]
ReceiveNextEventCommon+0x00000094 [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E551]
BlockUntilNextEventMatchingListInMode+0x0000003B [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E4AC]
_DPSNextEvent+0x000002C4 [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043EB2]
-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]+0x0000009B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043801]
JSD_GetValueForObject+0x000F5966 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0132F316]
-[NSApplication run]+0x0000018B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x0000968F]
JSD_GetValueForObject+0x000F6F3E [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013308EE]
js::BaseProxyHandler::toWrapper()+0x00111DC2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x010E9BB2]
XRE_InitCommandLine+0x000053CC [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C33C]
XRE_InitCommandLine+0x00005A15 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C985]
XRE_main+0x000000D2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000CCF2]
start+0x00000805 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/firefox-bin +0x00001D05]
###!!! ASSERTION: nsDeviceContext not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()', file ../../../gfx/src/nsDeviceContext.h, line 26
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0007F360 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00254A40]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0012B057 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x00300737]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x0050ECBA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x006E439A]
mac_plugin_interposing_child_OnShowCursor+0x001447A4 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x015ED244]
JS_CompareValues+0x00035DEA [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C5143A]
JS_CompareValues+0x000334AB [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAFB]
JS_CompareValues+0x00029E2D [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4547D]
JS_CompareValues+0x0001D093 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C386E3]
JS_CompareValues+0x00033476 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4EAC6]
JS_CompareValues+0x00033B9A [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01C4F1EA]
JS_CallFunctionValue+0x00000157 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01BA27D7]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007AA19B [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0097F87B]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EB236 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C0916]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007E080F [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009B5EEF]
mozilla::scache::PathifyURI(nsIURI*, nsACString_internal&)+0x007EAED7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x009C05B7]
XRE_AddJarManifestLocation+0x0000CDE5 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01689F05]
XRE_AddJarManifestLocation+0x0000D03C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0168A15C]
XRE_AddJarManifestLocation+0x00006E59 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01683F79]
mac_plugin_interposing_child_OnShowCursor+0x0017F8FE [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0162839E]
JSD_GetValueForObject+0x0013D5F7 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x01376FA7]
JSD_GetValueForObject+0x000F692C [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013302DC]
__CFRunLoopDoSources0+0x00000551 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004E401]
__CFRunLoopRun+0x00000369 [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004C5F9]
CFRunLoopRunSpecific+0x0000023F [/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation +0x0004BDBF]
RunCurrentEventLoopInMode+0x0000014D [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E7EE]
ReceiveNextEventCommon+0x00000094 [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E551]
BlockUntilNextEventMatchingListInMode+0x0000003B [/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox +0x0002E4AC]
_DPSNextEvent+0x000002C4 [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043EB2]
-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]+0x0000009B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x00043801]
JSD_GetValueForObject+0x000F5966 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0132F316]
-[NSApplication run]+0x0000018B [/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit +0x0000968F]
JSD_GetValueForObject+0x000F6F3E [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x013308EE]
js::BaseProxyHandler::toWrapper()+0x00111DC2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x010E9BB2]
XRE_InitCommandLine+0x000053CC [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C33C]
XRE_InitCommandLine+0x00005A15 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000C985]
XRE_main+0x000000D2 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/XUL +0x0000CCF2]
start+0x00000805 [/Users/cltbld/talos-slave/test/build/FirefoxNightlyDebug.app/Contents/MacOS/firefox-bin +0x00001D05]
WARNING: shutting down early because of crash!: file ../../../../dom/plugins/ipc/PluginModuleChild.cpp, line 703
WARNING: plugin process _exit()ing: file ../../../../dom/plugins/ipc/PluginModuleChild.cpp, line 668
TEST-UNEXPECTED-FAIL | chrome://mochitests/content/browser/browser/base/content/test/browser_overflowScroll.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:03:21.615110
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpDDTTJepidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64-debug/1343040163/firefox-17.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | chrome://mochitests/content/browser/browser/base/content/test/browser_overflowScroll.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpV1kTlQ/minidumps/7D83B66A-A434-41D1-B724-075177DD2307.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / 0x0000000d
Crash address: 0x0

Thread 0 (crashed)
 0  XUL!nsIPresShell::GetRootScrollFrame [nsPresShell.cpp : 2302 + 0x3]
    rbx = 0x00000009   r12 = 0x27d29950   r13 = 0x286016b0   r14 = 0x0000003b
    r15 = 0x4741505f   rip = 0x01afa5f7   rsp = 0x5fbfb160   rbp = 0x5fbfb170
    Found by: given as instruction pointer in context
 1  XUL!nsLayoutUtils::PaintFrame [nsLayoutUtils.cpp : 1555 + 0x7]
    rip = 0x01adc817   rsp = 0x5fbfb180
    Found by: stack scanning
}
Blocks: 747602
This is really bad, since it indicates that an nsDeviceContext is being created off the main thread, but it's not clear what's causing the problem because we don't have a stack for that creation.
This patch might help us find the problem.
Assignee: nobody → roc
Attachment #671766 - Flags: review?(matspal)
Attachment #671766 - Flags: review?(matspal) → review+
https://hg.mozilla.org/mozilla-central/rev/0f2858ae977f
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla19
It sounds like this is a diagnostic patch, so let's leave this open until a real fix comes down the pipeline.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Whiteboard: [orange] → [orange][leave open]
Status: REOPENED → RESOLVED
Closed: 12 years ago → 12 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange][leave open] → [leave open]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: