832119 - crash in mozilla::layers::PGrallocBufferChild::Write

Status: RESOLVED WORKSFORME

(Firefox OS Graveyard :: General, defect)

Description

[Michael Vines [:m1] [:evilmachines]]

Attachment: decoded minidump of crash

Seen on AU177

Reported STR: 
1. Go to Contacts and add a contact.
2. Add a picture to contact from the gallery.

Top frames:
Crash reason:  SIGSEGV
Crash address: 0x100

Thread 8 (crashed)
 0  libxul.so!mozilla::layers::PGrallocBufferChild::Write [PGrallocBufferChild.cpp : 379 + 0x0]
     r4 = 0x00000000    r5 = 0x42664820    r6 = 0x00000001    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d00    lr = 0x40b26c3d    pc = 0x40b26b2c
    Found by: given as instruction pointer in context
 1  libxul.so!mozilla::layers::PGrallocBufferChild::Send__delete__ [PGrallocBufferChild.cpp : 75 + 0x3]
     r4 = 0x000000f0    r5 = 0x42664820    r6 = 0x00000001    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d20    pc = 0x40b26c3d
    Found by: call frame info
 2  libxul.so!mozilla::layers::DeallocSurfaceDescriptorGrallocSync [ImageBridgeChild.cpp : 408 + 0x5]
     r4 = 0x4277acd8    r5 = 0x42515cd0    r6 = 0x42515cdf    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d40    pc = 0x40c25889
    Found by: call frame info
 3  libxul.so!RunnableFunction<void (*)(const mozilla::layers::SurfaceDescriptor&, mozilla::Monitor*, bool*), Tuple3<mozilla::layers::SurfaceDescriptor, mozilla::Monitor*, bool*> >::Run [tuple.h : 459 + 0x9]
     r4 = 0x43877df0    r5 = 0x4277acd0    r6 = 0x43877d80    r7 = 0x43877df8
     r8 = 0x43877d78    r9 = 0x43406e30   r10 = 0x00000000    fp = 0x00000001
     sp = 0x43877d50    pc = 0x40c2577b
    Found by: call frame info

Comment 1

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

(In reply to Michael Vines [:m1] from comment #0)
> Reported STR: 
> 1. Go to Contacts and add a contact.
> 2. Add a picture to contact from the gallery.

FWIW this looks a lot like a crash in the video player based on loaded .so's.  Do you happen to have the .extra around?

(Would be nice if your processor script could be taught to start cat'ing that to these excellent decoded dumps.  I have one that does that.)

Comment 2

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

Oh, actually I see libcamera_client.so is loaded so this is likely mr. camera.

The STR shouldn't actually be s/gallery/camera/ by any chance?

Comment 3

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

(Good chance this is another symptom of bug 826829 so we should probably wait for another run with that landed before investigating more.)

Comment 4

[Michael Vines [:m1] [:evilmachines]]

(WFM. I'll withdraw this and hope it doesn't comes back.)