846319 - crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width <n>, aRect.height <m>"

Reporter

Description

•

11 years ago

This bug was filed from the Socorro interface and is 
report bp-cc877b35-e658-416a-a66d-506c52130228 .
=============================================================

Scoobidiver (away)

Reporter

Comment 1

•

11 years ago

Sorry. Hit too soon.

It's similar to bug 705641 but with null values.

Signature 	mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f More Reports Search
UUID	cc877b35-e658-416a-a66d-506c52130228
Date Processed	2013-02-28 12:55:32
Uptime	1381
Last Crash	4.9 days before submission
Install Age	26.2 minutes since version was first installed.
Install Time	2013-02-28 12:29:13
Product	FennecAndroid
Version	22.0a1
Build ID	20130228030852
Release Channel	nightly
OS	Android
OS Version	0.0.0 Linux 3.1.10-00003-gb0003ba #1 SMP PREEMPT Fri Dec 28 17:34:31 CST 2012 armv7l asus/JP_epad/TF300T:4.1.1/JRO03C/JP_epad-10.4.2.20-20121228:user/release-keys
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
AdapterDescription: 'NVIDIA Corporation -- NVIDIA Tegra 3 -- OpenGL ES 2.0 14.01002 -- Model: ASUS Pad TF300T, Product: JP_epad, Manufacturer: asus, Hardware: cardhu'
EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ xpcom_runtime_abort(###!!! ABORT: Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0: file ../../../gfx/layers/opengl/LayerManagerOGL.cpp, line 1545)
asus ASUS Pad TF300T
asus/JP_epad/TF300T:4.1.1/JRO03C/JP_epad-10.4.2.20-20121228:user/release-keys
Processor Notes 	sp-processor02.phx1.mozilla.com_20347:2008; exploitablity tool: ERROR: unable to analyze dump
EMCheckCompatibility	True
Adapter Vendor ID	NVIDIA Corporation
Adapter Device ID	NVIDIA Tegra 3
Device	asus ASUS Pad TF300T
Android API Version	16 (REL)
Android CPU ABI	armeabi-v7a

Frame 	Module 	Signature 	Source
0 	libmozalloc.so 	mozalloc_abort 	mozalloc_abort.cpp:30
1 	libxul.so 	NS_DebugBreak_P 	nsDebugImpl.cpp:422
2 	dalvik-bitmap-2 (deleted) 	dalvik-bitmap-2 @0x2bd11f 	
3 	dalvik-mark-stack (deleted) 	dalvik-mark-stack @0x28e2f40 	
4 	dalvik-heap (deleted) 	dalvik-heap @0x824d1e 	
5 	dalvik-mark-stack (deleted) 	dalvik-mark-stack @0x9d002a 	
6 	dalvik-heap (deleted) 	dalvik-heap @0xa832f70 	
7 	browser.db (deleted) 	browser.db @0xc202a 	
8 	libxul.so 	gfxMatrix::Translate 	gfxMatrix.cpp:37
9 	libxul.so 	mozilla::layers::Layer::SnapTransformTranslation 	gfx/layers/Layers.cpp:597
10 	libxul.so 	nsACString_internal::AppendFunc 	nsTSubstring.h:407
11 	libnspr4.so 	FuncStuff 	prprf.c:1043
12 	libnspr4.so 	libnspr4.so@0xa0ab 	
13 	libnspr4.so 	fill_n 	prprf.c:205
14 	libxul.so 	nsACString_internal::ReplaceASCII 	nsTSubstring.cpp:507
15 	libxul.so 	nsACString_internal::AppendFunc 	nsTSubstring.h:407
16 	libnspr4.so 	FuncStuff 	prprf.c:1043
17 	libnspr4.so 	libnspr4.so@0xa0ab 	
18 	libnspr4.so 	dosprintf 	prprf.c:1028
19 	libxul.so 	mozilla::layers::ImageLayer::ComputeEffectiveTransforms 	ImageLayers.cpp:48
20 	libxul.so 	mozilla::layers::CanvasLayer::ComputeEffectiveTransforms 	Layers.h:1649
21 	dalvik-heap (deleted) 	dalvik-heap @0x21c509c 	
22 	dalvik-heap (deleted) 	dalvik-heap @0x2fb35ef 	
23 	libGLESv2_tegra_impl.so 	libGLESv2_tegra_impl.so@0x1228a 	
24 	libmozglue.so 	arena_malloc 	jemalloc.c:4159
25 	libmozglue.so 	__wrap_malloc 	jemalloc.c:4239 
...

status-firefox22: --- → affected

Summary: crash i → crash with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0"

Whiteboard: [native-crash]

Version: 19 Branch → Trunk

Scoobidiver (away)

Reporter

Updated

•

11 years ago

Hardware: All → ARM

Scoobidiver (away)

Reporter

Updated

•

11 years ago

Summary: crash with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0" → crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0"

Scoobidiver (away)

Reporter

Updated

•

11 years ago

Depends on: 858926

Scoobidiver (away)

Reporter

Updated

•

11 years ago

Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] → [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ]

Scoobidiver (away)

Reporter

Updated

•

11 years ago

status-firefox23: --- → affected

Summary: crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0" → crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width <n>, aRect.height <m>"

Scoobidiver (away)

Reporter

Updated

•

11 years ago

Depends on: 764756

Scoobidiver (away)

Reporter

Updated

•

11 years ago

Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] → [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak | imgRequest::RemoveFromCache() ] [@ mozal…

Scoobidiver (away)

Reporter

Comment 2

•

11 years ago

It's #132 crasher in 20.0.1.

Here is a non buggy stack trace:
Frame 	Module 	Signature 	Source
0 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:30
1 	libxul.so 	NS_DebugBreak_P 	xpcom/base/nsDebugImpl.cpp:422
2 	libxul.so 	mozilla::layers::LayerManagerOGL::CreateFBOWithTexture 	gfx/layers/opengl/LayerManagerOGL.cpp:1534
3 	libxul.so 	mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> 	gfx/layers/opengl/ContainerLayerOGL.cpp:236
4 	libxul.so 	mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> 	gfx/layers/opengl/ContainerLayerOGL.cpp:274
5 	libxul.so 	mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> 	gfx/layers/opengl/ContainerLayerOGL.cpp:274
6 	libxul.so 	mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> 	gfx/layers/opengl/ContainerLayerOGL.cpp:274
7 	libxul.so 	mozilla::layers::LayerManagerOGL::Render 	gfx/layers/opengl/LayerManagerOGL.cpp:1120
8 	libxul.so 	mozilla::layers::LayerManagerOGL::EndTransaction 	gfx/layers/opengl/LayerManagerOGL.cpp:788
9 	libxul.so 	mozilla::layers::LayerManagerOGL::EndEmptyTransaction 	gfx/layers/opengl/LayerManagerOGL.cpp:729
10 	libxul.so 	mozilla::layers::CompositorParent::Composite 	gfx/layers/ipc/CompositorParent.cpp:620
11 	libxul.so 	mozilla::layers::CompositorParent::ResumeComposition 	gfx/layers/ipc/CompositorParent.cpp:355
12 	libxul.so 	RunnableMethod<mozilla::ipc::AsyncChannel, void 	ipc/chromium/src/base/tuple.h:400
13 	libxul.so 	MessageLoop::RunTask 	ipc/chromium/src/base/message_loop.cc:333
14 	libxul.so 	MessageLoop::DeferOrRunPendingTask 	ipc/chromium/src/base/message_loop.cc:341
15 	libxul.so 	MessageLoop::DoWork 	ipc/chromium/src/base/message_loop.cc:441
16 	libxul.so 	base::MessagePumpDefault::Run 	ipc/chromium/src/base/message_pump_default.cc:23
17 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:215
18 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:208
19 	libxul.so 	base::Thread::ThreadMain 	ipc/chromium/src/base/thread.cc:156
20 	libxul.so 	ThreadFunc 	ipc/chromium/src/base/platform_thread_posix.cc:39
21 	libc.so 	libc.so@0x11a8e 	
22 	libc.so 	libc.so@0x11652 	

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozalloc_abort%28char+const*%29+|+NS_DebugBreak_P+|+mozilla%3A%3Alayers%3A%3ALayerManagerOGL%3A%3ACreateFBOWithTexture%28nsIntRect+const%26%2C+mozilla%3A%3Alayers%3A%3ALayerManagerOGL%3A%3AInitMode%2C+unsigned+int%2C+unsigned+int*%2C+unsigned+int*%29

Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak | imgRequest::RemoveFromCache() ] [@ mozal… → [@ mozalloc_abort(char const*) | NS_DebugBreak_P | mozilla::layers::LayerManagerOGL::CreateFBOWithTexture(nsIntRect const&, mozilla::layers::LayerManagerOGL::InitMode, unsigned int, unsigned int*, unsigned int*) ] [@ mozalloc_abort(char const*) | NS_Deb…

status-firefox20: --- → affected

BMO Automation

Updated

•

9 years ago

Crash Signature: , unsigned int*) ] [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak |, unsigned int) ] [@… → , unsigned int*) ] [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak |, unsigned int) ] [@ …

BugBot [:suhaib / :marco/ :calixte]

Comment 3

•

4 years ago

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED

Closed: 4 years ago

Resolution: --- → WORKSFORME

Bugzilla

Quick Search

crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width <n>, aRect.height <m>"

Categories

(Core :: Graphics, defect)

Tracking

()

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Keywords: crash, Whiteboard: [native-crash])

Crash Data

Security

(public)

User Story

Description

Comment 1

Updated

Updated

Updated

Updated

Updated

Updated

Updated

Comment 2

Updated

Comment 3