crash in mozilla::layers::PGrallocBufferChild::Write

RESOLVED WORKSFORME

Status

RESOLVED WORKSFORME
6 years ago
6 years ago

People

(Reporter: m1, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [BTG-998])

Attachments

(1 attachment)

Created attachment 703705 [details]
decoded minidump of crash

Seen on AU177

Reported STR: 
1. Go to Contacts and add a contact.
2. Add a picture to contact from the gallery.

Top frames:
Crash reason:  SIGSEGV
Crash address: 0x100

Thread 8 (crashed)
 0  libxul.so!mozilla::layers::PGrallocBufferChild::Write [PGrallocBufferChild.cpp : 379 + 0x0]
     r4 = 0x00000000    r5 = 0x42664820    r6 = 0x00000001    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d00    lr = 0x40b26c3d    pc = 0x40b26b2c
    Found by: given as instruction pointer in context
 1  libxul.so!mozilla::layers::PGrallocBufferChild::Send__delete__ [PGrallocBufferChild.cpp : 75 + 0x3]
     r4 = 0x000000f0    r5 = 0x42664820    r6 = 0x00000001    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d20    pc = 0x40b26c3d
    Found by: call frame info
 2  libxul.so!mozilla::layers::DeallocSurfaceDescriptorGrallocSync [ImageBridgeChild.cpp : 408 + 0x5]
     r4 = 0x4277acd8    r5 = 0x42515cd0    r6 = 0x42515cdf    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d40    pc = 0x40c25889
    Found by: call frame info
 3  libxul.so!RunnableFunction<void (*)(const mozilla::layers::SurfaceDescriptor&, mozilla::Monitor*, bool*), Tuple3<mozilla::layers::SurfaceDescriptor, mozilla::Monitor*, bool*> >::Run [tuple.h : 459 + 0x9]
     r4 = 0x43877df0    r5 = 0x4277acd0    r6 = 0x43877d80    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d50    pc = 0x40c2577b
    Found by: call frame info
(In reply to Michael Vines [:m1] from comment #0)
> Reported STR: 
> 1. Go to Contacts and add a contact.
> 2. Add a picture to contact from the gallery.

FWIW this looks a lot like a crash in the video player based on loaded .so's.  Do you happen to have the .extra around?

(Would be nice if your processor script could be taught to start cat'ing that to these excellent decoded dumps.  I have one that does that.)
Oh, actually I see libcamera_client.so is loaded so this is likely mr. camera.

The STR shouldn't actually be s/gallery/camera/ by any chance?
(Good chance this is another symptom of bug 826829 so we should probably wait for another run with that landed before investigating more.)
Depends on: 826829
(Reporter)

Comment 4

6 years ago
(WFM. I'll withdraw this and hope it doesn't comes back.)
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.