Closed Bug 791532 Opened 12 years ago Closed 6 years ago

crash in mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Version:
18 Branch
Platform:
All
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WONTFIX
Tracking Flags:
Tracking Status
firefox18 --- affected
firefox19 --- affected
firefox20 --- affected
firefox21 --- affected

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

It started spiking in 18.0a1/20120911030553 and occurs mainly with 64-bit builds. The regression range for the spike is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=1cb30394aa56&tochange=96287ad60bef

Signature 	mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*) More Reports Search
UUID	5a2d5c42-8267-4a25-8df5-aabd62120916
Date Processed	2012-09-16 08:15:43
Uptime	5036
Last Crash	1.5 hours before submission
Install Age	8.9 hours since version was first installed.
Install Time	2012-09-15 13:51:00
Product	Firefox
Version	18.0a1
Build ID	20120915030531
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 42 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0xd
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x1244, AdapterSubsysID: 00000000, AdapterDriverVersion: 8.17.12.9573
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
EMCheckCompatibility	True
Adapter Vendor ID	0x10de
Adapter Device ID	0x1244
Total Virtual Memory	4294836224
Available Virtual Memory	3190112256
System Memory Use Percentage	57
Available Page File	20126511104
Available Physical Memory	7264235520

Frame 	Module 	Signature 	Source
0 	xul.dll 	mozilla::`anonymous namespace'::ContainerState::InvalidateForLayerChange 	layout/base/FrameLayerBuilder.cpp:1935
1 	xul.dll 	mozilla::`anonymous namespace'::ContainerState::ProcessDisplayItems 	layout/base/FrameLayerBuilder.cpp:1917
2 	xul.dll 	mozilla::`anonymous namespace'::ContainerState::ProcessDisplayItems 	layout/base/FrameLayerBuilder.cpp:1794
3 	xul.dll 	mozilla::FrameLayerBuilder::BuildContainerLayerFor 	layout/base/FrameLayerBuilder.cpp:2503
4 	mozglue.dll 	je_realloc 	memory/mozjemalloc/jemalloc.c:6520
5 	xul.dll 	nsDisplayList::PaintForFrame 	layout/base/nsDisplayList.cpp:1015
6 	xul.dll 	mozilla::FramePropertyTable::Get 	layout/base/FramePropertyTable.cpp:74
7 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
8 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
9 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
10 	xul.dll 	nsViewManager::ProcessPendingUpdatesForView 	view/src/nsViewManager.cpp:406
11 		@0x1c642877

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3A%60anonymous+namespace%27%27%3A%3AContainerState%3A%3AInvalidateForLayerChange%28nsDisplayItem*%2C+mozilla%3A%3Alayers%3A%3ALayer*%29
It's #5 top browser crasher in 18.0a1.
Keywords: topcrash
There are no crashes after 18.0a1/2012092703.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
The signature morphed.

It's #37 top browser crasher w/o hangs in 18.0b3 and #114 in 19.0a2.

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3A%60anonymous+namespace%27%27%3A%3AContainerState%3A%3AInvalidateForLayerChange%28nsDisplayItem*%2C+mozilla%3A%3Alayers%3A%3ALayer*%2C+mozilla%3A%3AFrameLayerBuilder%3A%3AClip+const%26%2C+nsPoint+const%26%2C+nsDisplayItemGeometry*%29
Status: RESOLVED → REOPENED
Crash Signature: [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*)] → [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer*)] [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::Layer* mozilla::FrameLaye…
status-firefox18: --- → affected
status-firefox19: --- → affected
status-firefox20: --- → affected
Keywords: topcrash
Resolution: WORKSFORME → ---
status-firefox21: --- → affected
Crash Signature: , mozilla::FrameLayerBuilder::Clip const&, nsPoint const&, nsDisplayItemGeometry*)] → , mozilla::FrameLayerBuilder::Clip const&, nsPoint const&, nsDisplayItemGeometry*)] [@ mozilla::`anonymous namespace''::ContainerState::InvalidateForLayerChange]
Closing because no crash reported since 12 weeks.
Status: REOPENED → RESOLVED
Closed: 12 years ago → 6 years ago
Resolution: --- → WONTFIX
Closing because no crash reported since 12 weeks.
You need to log in before you can comment on or make changes to this bug.