862425 - B2G camera process crashes with IPDL protocol error: bad ID for PImageBridge and Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'

Status: RESOLVED WONTFIX

(Core :: Graphics: Layers, defect)

Description

[Benoit Jacob [:bjacob] (mostly away)]

STR:

 - build B2G master branch, debug build, with the patch from bug 860441.
 - go to the camera app
 - go back to the home screen
 - go again to the camera app

Result:

I/Gecko   (  439): IPDL protocol error: bad ID for PImageBridge
I/Gecko   (  439): IPDL protocol error: Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'
I/Gecko   (  439): [Child 439] ###!!! ABORT: IPDL error [PImageBridgeChild]: "Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'". abort()ing as a result.: file /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp, line 856
E/Gecko   (  439): mozalloc_abort: [Child 439] ###!!! ABORT: IPDL error [PImageBridgeChild]: "Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'". abort()ing as a result.: file /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp, line 856

Stack, in the camera process:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 439.465]
0x41f2be8c in mozalloc_abort (msg=<value optimized out>)
    at /hack/mozilla-central/memory/mozalloc/mozalloc_abort.cpp:30
30          MOZ_CRASH();
(gdb) bt
#0  0x41f2be8c in mozalloc_abort (msg=<value optimized out>)
    at /hack/mozilla-central/memory/mozalloc/mozalloc_abort.cpp:30
#1  0x414984ae in Abort (aSeverity=<value optimized out>, aStr=<value optimized out>, 
    aExpr=<value optimized out>, aFile=<value optimized out>, aLine=856)
    at /hack/mozilla-central/xpcom/base/nsDebugImpl.cpp:430
#2  NS_DebugBreak (aSeverity=<value optimized out>, aStr=<value optimized out>, 
    aExpr=<value optimized out>, aFile=<value optimized out>, aLine=856)
    at /hack/mozilla-central/xpcom/base/nsDebugImpl.cpp:387
#3  0x411cd80e in mozilla::layers::PImageBridgeChild::FatalError (this=<value optimized out>, 
    aMsg=0x4224a161 "Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'") at /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp:856
#4  0x411cc96a in mozilla::layers::PImageBridgeChild::Read (this=0x43fabff0, __v=0x44fff9b0, 
    __msg=0x44fff510, __iter=0x44fff5f0)
    at /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp:1491
#5  0x411cd282 in mozilla::layers::PImageBridgeChild::Read (this=0x43fabff0, __v=0x44fff9b0, 
    __msg=0x44fff510, __iter=0x44fff5f0)
    at /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp:1013
#6  0x411cd6a2 in mozilla::layers::PImageBridgeChild::Read (this=0x43fabff0, __v=0x44fff9a4, 
    __msg=0x44fff510, __iter=0x44fff5f0)
    at /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp:1314
#7  0x411cd76e in mozilla::layers::PImageBridgeChild::Read (this=0x43fabff0, __v=0x44fff9a4, 
    __msg=0x44fff510, __iter=0x44fff5f0)
    at /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp:1278
#8  0x411cf196 in mozilla::layers::PImageBridgeChild::Read (this=0x43fabff0, __v=0x44fff998, 
    __msg=0x44fff510, __iter=0x44fff5f0)
    at /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp:1561
#9  0x411cf3e4 in mozilla::layers::PImageBridgeChild::SendUpdate (this=0x43fabff0, 
    ops=<value optimized out>, reply=0x44fff998)
    at /hack/b2g/B2G/objdir-gecko/ipc/ipdl/PImageBridgeChild.cpp:260
#10 0x4158b1f2 in mozilla::layers::ImageBridgeChild::EndTransaction (this=0x43fabff0)
    at /hack/mozilla-central/gfx/layers/ipc/ImageBridgeChild.cpp:328
#11 0x4158aef6 in UpdateImageClientNow (aClient=0x44ea5f80, aContainer=0x44e9afb0)
    at /hack/mozilla-central/gfx/layers/ipc/ImageBridgeChild.cpp:288
#12 0x41583f42 in DispatchToFunction<void (*)(mozilla::layers::CompositorParent*, unsigned long long*), mozilla::layers::CompositorParent*, unsigned long long*> (
    function=0x4158ae39 <UpdateImageClientNow>, arg=...)
    at /hack/mozilla-central/ipc/chromium/src/base/tuple.h:454
#13 0x41583dc2 in RunnableFunction<void (*)(mozilla::layers::CompositorParent*, unsigned long long*), Tuple2<mozilla::layers::CompositorParent*, unsigned long long*> >::Run (this=0x43fd8340)
    at /hack/mozilla-central/ipc/chromium/src/base/task.h:415
#14 0x414d4a4e in MessageLoop::RunTask (this=0x44fffdd0, task=0x43fd8340)
    at /hack/mozilla-central/ipc/chromium/src/base/message_loop.cc:334
#15 0x414d5278 in MessageLoop::DeferOrRunPendingTask (this=0x10e, 
---Type <return> to continue, or q <return> to quit---
    pending_task=<value optimized out>)
    at /hack/mozilla-central/ipc/chromium/src/base/message_loop.cc:342
#16 0x414d5fce in MessageLoop::DoWork (this=0x44fffdd0)
    at /hack/mozilla-central/ipc/chromium/src/base/message_loop.cc:442
#17 0x414d634a in base::MessagePumpDefault::Run (this=0x44e6e460, delegate=0x44fffdd0)
    at /hack/mozilla-central/ipc/chromium/src/base/message_pump_default.cc:23
#18 0x414d5002 in MessageLoop::RunInternal (this=0x44fffdd0)
    at /hack/mozilla-central/ipc/chromium/src/base/message_loop.cc:216
#19 0x414d5062 in MessageLoop::RunHandler (this=0x44fffdd0)
    at /hack/mozilla-central/ipc/chromium/src/base/message_loop.cc:209
#20 MessageLoop::Run (this=0x44fffdd0)
    at /hack/mozilla-central/ipc/chromium/src/base/message_loop.cc:183
#21 0x414def94 in base::Thread::ThreadMain (this=0x43f61940)
    at /hack/mozilla-central/ipc/chromium/src/base/thread.cc:156
#22 0x414ec6c6 in ThreadFunc (closure=0x10e)
    at /hack/mozilla-central/ipc/chromium/src/base/platform_thread_posix.cc:39
#23 0x400cce18 in __thread_entry (func=0x414ec6bd <ThreadFunc>, arg=0x43f61940, 
    tls=<value optimized out>) at bionic/libc/bionic/pthread.c:217
#24 0x400cc96c in pthread_create (thread_out=<value optimized out>, attr=0xbeb9c378, 
    start_routine=0x414ec6bd <ThreadFunc>, arg=0x43f61940) at bionic/libc/bionic/pthread.c:357
#25 0x00000000 in ?? ()

Comment 1

[Milan Sreckovic [:milan] (needinfo for best results)]

Benoit, is this gone with all the recently landed patches?

Comment 2

[Benoit Jacob [:bjacob] (mostly away)]

At the moment I can't get b2g to use gralloc at all (bug 868556) and I run into other crashes all the time (bug 867813 comment 6).

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Mass closing as we are no longer working on b2g/firefox os.

Comment 4

[Sylvestre Ledru [:Sylvestre]]

Mass closing as we are no longer working on b2g/firefox os.