813821 - Parent process crash with low memory and few browser tabs

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: General, defect)

Description

[Gregor Wagner [:gwagner]]

I get a reliable crash when I open the maps app and afterwards some tabs (cnn, nytimes) in the browser. I see a low memory notification and afterwards the parent process crashes:

D/memalloc(  622): /dev/pmem: Allocated buffer base:0x49800000 size:143360 offset:3420160 fd:109
D/memalloc(  622): /dev/pmem: Allocated buffer base:0x49800000 size:245760 offset:2519040 fd:133
D/memalloc( 1056): /dev/pmem: Mapped buffer base:0x47700000 size:2764800 offset:2519040 fd:45
D/memalloc(  622): /dev/pmem: Freeing buffer base:0x49a17000 size:327680 offset:2191360 fd:152
D/memalloc( 1056): /dev/pmem: Unmapping buffer base:0x45f00000 size:2519040 offset:2191360
D/memalloc(  622): /dev/pmem: Freeing buffer base:0x49b8e000 size:327680 offset:3727360 fd:154
I/GonkMemoryPressure( 1056): Dispatching low-memory memory-pressure event
I/IdleService(  622): Get idle time: time since reset 1263 msec
I/IdleService(  622): Idle timer callback: current idle time 1263 msec
I/IdleService(  622): next timeout 5648430051698097 usec (4294967293736 msec from now)
I/IdleService(  622): SetTimerExpiryIfBefore: next timeout 5648430051698097 usec
I/IdleService(  622): reset timer expiry from 0 usec to 5648430051708097 usec
I/IdleService(  622): Idle timer callback: tell observer 475c31e0 user is idle
I/IdleService(  622): Get idle time: time since reset 1263 msec
I/GonkMemoryPressure(  622): Checking to see if memory pressure is over.
I/GonkMemoryPressure(  622): Memory pressure is over.
I/GonkMemoryPressure(  665): Checking to see if memory pressure is over.
I/GonkMemoryPressure(  665): Memory pressure is over.
I/GonkMemoryPressure( 2888): Checking to see if memory pressure is over.
I/GonkMemoryPressure( 2888): Memory pressure is over.
I/GonkMemoryPressure( 1056): Checking to see if memory pressure is over.
I/GonkMemoryPressure( 1056): Memory pressure is over.
I/GonkMemoryPressure( 2854): Checking to see if memory pressure is over.
I/GonkMemoryPressure( 2854): Memory pressure is over.
I/GonkMemoryPressure(  856): Checking to see if memory pressure is over.
I/GonkMemoryPressure(  856): Memory pressure is over.
D/memalloc(  622): /dev/pmem: Allocated buffer base:0x49800000 size:266240 offset:2191360 fd:152
F/libc    (  622): Fatal signal 11 (SIGSEGV) at 0x0000000c (code=1)
I/DEBUG   (  623): debuggerd committing suicide to free the zombie!
I/DEBUG   ( 3135): debuggerd: Oct 22 2012 10:24:32
I/Gecko   ( 1056): [Child 1056] WARNING: pipe error (3): Connection reset by peer: file /Volumes/2mac/otoro/user/B2G/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 431
I/Gecko   ( 1056): [Child 1056] WARNING: pipe error (14): Connection reset by peer: file /Volumes/2mac/otoro/user/B2G/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 431
E/AudioHardwareMSM76XXA( 3136): failed to open AUDIO_NORMAL_FILTER /system/etc/AudioFilter.csv: No such file or directory (2).
E/AudioHardwareMSM76XXA( 3136): failed to open AUTO_VOLUME_CONTROL /system/etc/AutoVolumeControl.txt: No such file or directory (2)
E/AudioHardwareMSM76XXA( 3136): setMode:mode = 0, status = -17
E/AudioHardwareMSM76XXA( 3136): rpc_snd_set_volume(0, 0, 7)
E/AudioHardwareMSM76XXA( 3136): rpc_snd_set_volume(6, 0, 7)
E/AudioHardwareMSM76XXA( 3136): rpc_snd_set_volume(12, 0, 7)

Comment 1

[Gregor Wagner [:gwagner]]

This is on the otoro phone. 
And I just reproduced it without gps.

Comment 2

[Gregor Wagner [:gwagner]]

I think I hit it again with a debugger:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 599.620]
mozilla::layers::RefLayer::ConnectReferentLayer (this=0x45effd3c, aLayer=0x47019090, aParent=<value optimized out>)
    at ../../dist/include/Layers.h:1593
1593	    aLayer->SetParent(this);
(gdb) bt
#0  mozilla::layers::RefLayer::ConnectReferentLayer (this=0x45effd3c, aLayer=0x47019090, aParent=<value optimized out>)
    at ../../dist/include/Layers.h:1593
#1  mozilla::layers::AutoResolveRefLayers::WalkTheTree<(mozilla::layers::AutoResolveRefLayers::Op)0> (this=0x45effd3c, aLayer=0x47019090, 
    aParent=<value optimized out>) at /Volumes/2mac/unagi/1/B2G/gecko/gfx/layers/ipc/CompositorParent.cpp:485
#2  0x40fa729a in mozilla::layers::AutoResolveRefLayers::WalkTheTree<(mozilla::layers::AutoResolveRefLayers::Op)0> (this=0x45effd3c, 
    aLayer=0x47012890, aParent=<value optimized out>) at /Volumes/2mac/unagi/1/B2G/gecko/gfx/layers/ipc/CompositorParent.cpp:500
#3  0x40fa729a in mozilla::layers::AutoResolveRefLayers::WalkTheTree<(mozilla::layers::AutoResolveRefLayers::Op)0> (this=0x45effd3c, 
    aLayer=0x49a86490, aParent=<value optimized out>) at /Volumes/2mac/unagi/1/B2G/gecko/gfx/layers/ipc/CompositorParent.cpp:500
#4  0x40fa729a in mozilla::layers::AutoResolveRefLayers::WalkTheTree<(mozilla::layers::AutoResolveRefLayers::Op)0> (this=0x45effd3c, 
    aLayer=0x46b15490, aParent=<value optimized out>) at /Volumes/2mac/unagi/1/B2G/gecko/gfx/layers/ipc/CompositorParent.cpp:500
#5  0x40fa83ca in AutoResolveRefLayers (this=0x437c5c30) at /Volumes/2mac/unagi/1/B2G/gecko/gfx/layers/ipc/CompositorParent.cpp:471
#6  mozilla::layers::CompositorParent::Composite (this=0x437c5c30) at /Volumes/2mac/unagi/1/B2G/gecko/gfx/layers/ipc/CompositorParent.cpp:549
#7  0x40e1a3f2 in DispatchToMethod<mozilla::dom::ContentParent, void (mozilla::dom::ContentParent::*)()> (this=<value optimized out>)
    at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/tuple.h:383
#8  RunnableMethod<mozilla::dom::ContentParent, void (mozilla::dom::ContentParent::*)(), Tuple0>::Run (this=<value optimized out>)
    at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/task.h:307
#9  0x40f4bc38 in MessageLoop::RunTask (this=0x45effdf0, task=0x0) at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/message_loop.cc:333
#10 0x40f4ca8e in MessageLoop::DeferOrRunPendingTask (this=0x7, pending_task=<value optimized out>)
    at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/message_loop.cc:341
#11 0x40f4d66c in MessageLoop::DoWork (this=0x45effdf0) at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/message_loop.cc:441
#12 0x40f4d8ec in base::MessagePumpDefault::Run (this=0x44bedd40, delegate=0x45effdf0)
    at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/message_pump_default.cc:23
#13 0x40f4bbe8 in MessageLoop::RunInternal (this=0x4cf0b) at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/message_loop.cc:215
#14 0x40f4bc9e in MessageLoop::RunHandler (this=0x45effdf0) at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/message_loop.cc:208
#15 MessageLoop::Run (this=0x45effdf0) at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/message_loop.cc:182
#16 0x40f5400c in base::Thread::ThreadMain (this=0x44bf1580) at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/thread.cc:156
#17 0x40f5e0bc in ThreadFunc (closure=0x1) at /Volumes/2mac/unagi/1/B2G/gecko/ipc/chromium/src/base/platform_thread_posix.cc:39
#18 0x400d4e18 in __thread_entry (func=0x40f5e0b5 <ThreadFunc>, arg=0x44bf1580, tls=<value optimized out>) at bionic/libc/bionic/pthread.c:217
#19 0x400d496c in pthread_create (thread_out=<value optimized out>, attr=0xbeca2410, start_routine=0x40f5e0b5 <ThreadFunc>, arg=0x44bf1580)

Comment 3

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

These seem like different bugs, maybe; the stack in comment 0 is a null pointer deref, but comment 2 seems to be a nonnull deref.  Do you still have this in gdb?

Comment 4

[BMO Automation]

Firefox OS is not being worked on