777197 - certain -moz-transform CSS change (without transition) causes the b2g process to crash

Status: RESOLVED DUPLICATE of bug 777495

(Firefox OS Graveyard :: General, defect)

Description

[Tony Chung [:tchung]]

On a connected call, tapping the keypad will crash the Dialer App, reset the phone to lockscreen, and revert the connected carrier back to "searching.." state.  All this, while the call is still active.  

Worse yet, you cannot find a way to get back to the Dialer app screen where the call can be cancelled.

See the video screencast i posted in the URL.

Environment:
- 7-24-2012 Daily build, otoro phone
- SIM Card: AT&T service 
- gaia commt: a97c4a1576c74357e63a8cbc3af9deedb17991b4
- gecko commit: d65369077acadf5458c3ef57d4e5a5cb3ac17f37


Repro:
1) launch dialer app, and call any number.  (i used mozilla's switchboard #, 650-903-0800)
2) when the call connects, tap the keypad button
3) Verify the following:
** Dialer app crashes, exits to lockscreen
** SIM card resets carrier to "Searching..." status
** Unable to relaunch Dialer App and end the call (no UI)
** Call is still going on all this time.

Expected:
- keypad launches and opens digits, no crashes

ActuaL:
- crashes and such

Comment 1

[Tony Chung [:tchung]]

Attachment: logcat

attaching logcat of crash

Comment 2

[Etienne Segonzac (:etienne)]

Investigated...

The code is toggling a CSS class switching from
|-moz-transform: translateY(-100%);|
to
|-moz-transform: translateY(0);|

If instead I use change the top the crash does *not* happen.

Comment 3

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

07-25 18:56:04.081: D/memalloc(1920): /dev/pmem: Allocated buffer base:0x491a5000 size:450560 offset:614400 fd:90
07-25 18:56:04.091: E/memalloc(1920): unrecognized pixel format: 8
07-25 18:56:04.091: W/GraphicBufferAllocator(1920): alloc(320, 460, 8, 00000133, ...) failed -22 (Invalid argument)
07-25 18:56:04.101: A/libc(1920): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1)