Closed Bug 848810 Opened 12 years ago Closed 11 years ago

crash in base::CreatePlatformFile on ICS and above

Categories

(Core :: Graphics, defect)

22 Branch
ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox21 --- unaffected
firefox22 + wontfix
firefox23 + wontfix
firefox24 --- unaffected
fennec + ---

People

(Reporter: scoobidiver, Assigned: snorp)

Details

(Keywords: crash, regression, topcrash, Whiteboard: [native-crash])

Crash Data

It first showed up in 22.0a1/20130221072044. The regression range might be (discontinuous across builds): http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=401b967b2dfc&tochange=702d2814efbf It's the same as in bug 845867. Signature base::CreatePlatformFile(std::basic_string<wchar_t, std::char_traits<wchar_t>, std::allocator<wchar_t> > const&, int, bool*) More Reports Search UUID 28cec178-d514-4ddb-9e50-899bc2130307 Date Processed 2013-03-07 15:20:15 Uptime 28 Last Crash 6.0 days before submission Install Age 28 seconds since version was first installed. Install Time 2013-03-07 15:19:50 Product FennecAndroid Version 22.0a1 Build ID 20130307030926 Release Channel nightly OS Android OS Version 0.0.0 Linux 2.6.32.9-g34b306d #1 PREEMPT Sat Aug 20 10:40:49 IST 2011 armv7l verizon/cm_shadow/shadow:4.0.4/IMM76D/eng.jonathan.20120424.010317:userdebug/test-keys Build Architecture arm Build Architecture Info Crash Reason SIGSEGV Crash Address 0x24 App Notes AdapterDescription: 'Imagination Technologies -- PowerVR SGX 530 -- OpenGL ES 2.0 -- Model: DROIDX, Product: cm_shadow, Manufacturer: Motorola, Hardware: mapphone_cdma' EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ Motorola DROIDX verizon/cm_shadow/shadow:4.0.4/IMM76D/eng.jonathan.20120424.010317:userdebug/test-keys Processor Notes sp-processor10.phx1.mozilla.com_28037:2008; exploitablity tool: ERROR: unable to analyze dump EMCheckCompatibility True Adapter Vendor ID Imagination Technologies Adapter Device ID PowerVR SGX 530 Device Motorola DROIDX Android API Version 15 (REL) Android CPU ABI armeabi-v7a Frame Module Signature Source 0 libEGL.so libEGL.so@0xd194 1 libEGL.so libEGL.so@0xcfef 2 libxul.so base::CreatePlatformFile platform_file_posix.cc:66 3 libxul.so mozilla::gl::GLContextEGL::ReleaseSurface gfx/gl/GLLibraryEGL.h:164 4 libxul.so mozilla::gl::GLContextEGL::SwapBuffers gfx/gl/GLContextProviderEGL.cpp:607 5 libxul.so mozilla::layers::CompositorParent::PauseComposition gfx/layers/ipc/CompositorParent.cpp:334 6 libxul.so mozilla::layers::CompositorParent::RecvPause gfx/layers/ipc/CompositorParent.cpp:293 7 libxul.so mozilla::layers::CompositorParent::PauseComposition obj-firefox/dist/include/mozilla/Mutex.h:83 8 libxul.so mozilla::layers::PCompositorParent::OnMessageReceived obj-firefox/ipc/ipdl/PCompositorParent.cpp:482 9 libmozglue.so arena_malloc jemalloc.c:4159 10 libmozglue.so __wrap_realloc jemalloc.c:4239 11 libmozglue.so arena_dalloc jemalloc.c:4667 12 libxul.so base::CreatePlatformFile platform_file_posix.cc:66 13 libxul.so mozilla::ipc::SyncChannel::OnDispatchMessage ipc/glue/SyncChannel.cpp:145 14 libxul.so mozilla::ipc::RPCChannel::OnMaybeDequeueOne ipc/glue/RPCChannel.cpp:400 15 libxul.so RunnableMethod<IPC::ChannelProxy::Context, void tuple.h:383 16 libxul.so IPC::Message& std::map<unsigned int, IPC::Message, std::less<unsigned int>, std: _map.h:181 17 libxul.so mozilla::ipc::RPCChannel::DequeueTask::Run obj-firefox/dist/include/mozilla/ipc/RPCChannel.h:425 18 libxul.so mozilla::ipc::RPCChannel::ShouldDeferNotifyMaybeError const obj-firefox/dist/include/mozilla/ipc/RPCChannel.h:160 19 libxul.so MessageLoop::RunTask message_loop.cc:334 20 libxul.so MessageLoop::DeferOrRunPendingTask message_loop.cc:342 21 libxul.so MessageLoop::DoWork message_loop.cc:442 22 libmozglue.so arena_malloc jemalloc.c:4159 23 libxul.so base::MessagePumpDefault::Run message_pump_default.cc:23 24 libxul.so MessageLoop::RunInternal message_loop.cc:216 25 libxul.so MessageLoop::Run message_loop.cc:209 26 libxul.so base::Thread::ThreadMain thread.cc:156 More reports at: https://crash-stats.mozilla.com/report/list?signature=base%3A%3ACreatePlatformFile%28std%3A%3Abasic_string%3Cwchar_t%2C+std%3A%3Achar_traits%3Cwchar_t%3E%2C+std%3A%3Aallocator%3Cwchar_t%3E+%3E+const%26%2C+int%2C+bool*%29
I was able to reproduce this crash one time by following the steps from https://bugzilla.mozilla.org/show_bug.cgi?id=760394 #c3 https://crash-stats.mozilla.com/report/index/bp-c9be0178-d07c-4575-b269-e96242130325 Device: Galaxy Note (4.0.4)
Crash Signature: [@ base::CreatePlatformFile(std::basic_string<wchar_t, std::char_traits<wchar_t>, std::allocator<wchar_t> > const&, int, bool*)] → [@ base::CreatePlatformFile(std::basic_string<wchar_t, std::char_traits<wchar_t>, std::allocator<wchar_t> > const&, int, bool*)] [@ @0x0 | base::CreatePlatformFile(std::basic_string<wchar_t, std::char_traits<wchar_t>, std::allocator<wchar_t> > const&, in…
It's #6 top crasher in 22.0a2 and #21 in 23.0a1.
tracking-fennec: --- → ?
Keywords: topcrash
It's now down to #37 in 22.0a2 and #32 in 23.0a1.
tracking-fennec: ? → ---
Keywords: topcrash
It spikes from time to time. Indeed, it's #6 top crasher in 22.0a2 and #93 in 23.0a1.
Keywords: topcrash
Catalin, are your STR reliable?
Flags: needinfo?(catalin.suciu)
I tried several times to reproduce using the steps provided in https://bugzilla.mozilla.org/show_bug.cgi?id=725175#c6 (same steps used to reproduce this crash). Nightly still crashes but with a different crash: https://crash-stats.mozilla.com/report/index/bp-f03b3c5e-d435-465e-8c21-645cf2130507 - bug #751175. So, at this moment I can't reproduce the crash reported here.
Flags: needinfo?(catalin.suciu)
Keywords: reproducible
Bug 716859 belongs to the suspected regression range.
tracking-fennec: --- → ?
Summary: crash in base::CreatePlatformFile → crash in base::CreatePlatformFile on ICS and above
Snorp - Any ideas?
Assignee: nobody → snorp
Assignee: snorp → aaron.train
Assignee: aaron.train → snorp
QA Contact: aaron.train
I have no idea what could be going on here. The GL stream stuff only concerns offscreen GL contexts, and we are crashing in the compositor here. I would say this bug is likely similar to the other ones found under bug 844275.
tracking-fennec: ? → +
This is #11 Android Fx22
#11 is sad, but not the end of the world, especially since we think this is related to bug 844275 (longstanding issues).
(In reply to Alex Keybl [:akeybl] from comment #12) > #11 is sad, but not the end of the world, especially since we think this is > related to bug 844275 (longstanding issues). What about #4 in 22.0 and #8 in 23.0b1? Notice that bug 844275 has been fixed since 21.0.
I tried to reproduce again today and I got the same result as in comment #6 Firefox crashes with the crash signature from bug bug #725175 when following the steps used to reproduce this crash
QA Contact: aaron.train
Here are some comments: "nightly Firefox for android crashed while attempting to attach a file to bug report" "presume you have the URL, the 300,00 cube chrome webgl demo. was always going to be a challenge for the browser"
Sounds like we need new steps - could someone try this chrome webgl demo?
Keywords: steps-wanted
Since we didn't get any steps there is no way to proceed here in the FF23 timeframe.
24.0b1 seems unaffected while 23.0 Beta was affected.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WORKSFORME

Removing steps-wanted keyword because this bug has been resolved.

Keywords: steps-wanted
You need to log in before you can comment on or make changes to this bug.