crash in mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange

REOPENED
Unassigned

Status

()

Core
Layout
--
critical
REOPENED
5 years ago
2 years ago

People

(Reporter: Scoobidiver (away), Unassigned)

Tracking

({crash, regression})

18 Branch
All
Windows 7
crash, regression
Points:
---

Firefox Tracking Flags

(firefox18 affected, firefox19 affected, firefox20 affected, firefox21 affected)

Details

(crash signature)

(Reporter)

Description

5 years ago
It started spiking in 18.0a1/20120911030553 and occurs mainly with 64-bit builds. The regression range for the spike is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=1cb30394aa56&tochange=96287ad60bef

Signature 	mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*) More Reports Search
UUID	5a2d5c42-8267-4a25-8df5-aabd62120916
Date Processed	2012-09-16 08:15:43
Uptime	5036
Last Crash	1.5 hours before submission
Install Age	8.9 hours since version was first installed.
Install Time	2012-09-15 13:51:00
Product	Firefox
Version	18.0a1
Build ID	20120915030531
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 42 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0xd
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x1244, AdapterSubsysID: 00000000, AdapterDriverVersion: 8.17.12.9573
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
EMCheckCompatibility	True
Adapter Vendor ID	0x10de
Adapter Device ID	0x1244
Total Virtual Memory	4294836224
Available Virtual Memory	3190112256
System Memory Use Percentage	57
Available Page File	20126511104
Available Physical Memory	7264235520

Frame 	Module 	Signature 	Source
0 	xul.dll 	mozilla::`anonymous namespace'::ContainerState::InvalidateForLayerChange 	layout/base/FrameLayerBuilder.cpp:1935
1 	xul.dll 	mozilla::`anonymous namespace'::ContainerState::ProcessDisplayItems 	layout/base/FrameLayerBuilder.cpp:1917
2 	xul.dll 	mozilla::`anonymous namespace'::ContainerState::ProcessDisplayItems 	layout/base/FrameLayerBuilder.cpp:1794
3 	xul.dll 	mozilla::FrameLayerBuilder::BuildContainerLayerFor 	layout/base/FrameLayerBuilder.cpp:2503
4 	mozglue.dll 	je_realloc 	memory/mozjemalloc/jemalloc.c:6520
5 	xul.dll 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:1015
6 	xul.dll 	mozilla::FramePropertyTable::Get 	layout/base/FramePropertyTable.cpp:74
7 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
8 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
9 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
10 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
11 		@0x1c642877

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3A%60anonymous+namespace%27%27%3A%3AContainerState%3A%3AInvalidateForLayerChange%28nsDisplayItem*%2C+mozilla%3A%3Alayers%3A%3ALayer*%29
(Reporter)

Comment 1

5 years ago
It's #5 top browser crasher in 18.0a1.
Keywords: topcrash
(Reporter)

Comment 2

5 years ago
There are no crashes after 18.0a1/2012092703.
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → WORKSFORME
(Reporter)

Comment 3

5 years ago
The signature morphed.

It's #37 top browser crasher w/o hangs in 18.0b3 and #114 in 19.0a2.

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3A%60anonymous+namespace%27%27%3A%3AContainerState%3A%3AInvalidateForLayerChange%28nsDisplayItem*%2C+mozilla%3A%3Alayers%3A%3ALayer*%2C+mozilla%3A%3AFrameLayerBuilder%3A%3AClip+const%26%2C+nsPoint+const%26%2C+nsDisplayItemGeometry*%29
Status: RESOLVED → REOPENED
Crash Signature: [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*)] → [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*)] [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer* mozilla::Fr…
status-firefox18: --- → affected
status-firefox19: --- → affected
status-firefox20: --- → affected
Keywords: topcrash
Resolution: WORKSFORME → ---
(Reporter)

Updated

5 years ago
status-firefox21: --- → affected

Updated

2 years ago
Crash Signature: [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*)] [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*, mozilla::F… → [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*)] [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*, mozilla::F…
You need to log in before you can comment on or make changes to this bug.