Closed Bug 866483 Opened 8 years ago Closed 7 years ago

[unagi][weekly build 13.04.24]monkey test crash in mozilla::layers::ShadowLayersChild::ActorDestroy

Categories

(Firefox OS Graveyard :: General, defect)

ARM
Gonk (Firefox OS)
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 862097

People

(Reporter: james.zhang, Unassigned)

References

Details

(Keywords: crash, Whiteboard: [b2g-crash])

Crash Data

Attachments

(1 file)

Operating system: Android
                  0.0.0 Linux 3.0.8-perf-svn26240 #1 PREEMPT Mon Oct 8 01:19:17 HKT 2012 armv7l toro/full_unagi/unagi:4.0.4.0.4.0.4/OPENMASTER/eng.apusr.20130426.185459:eng/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x0

Thread 0 (crashed)
 0  libxul.so!mozalloc_abort [mozalloc_abort.cpp : 30 + 0x4]
     r4 = 0xbeba0d7c    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbeba0990
     r8 = 0x40c84015    r9 = 0x00000001   r10 = 0xbeba0990    fp = 0x41243638
     sp = 0xbeba0978    lr = 0x410fbf0f    pc = 0x410fbf12
    Found by: given as instruction pointer in context
 1  libxul.so!NS_DebugBreak_P [nsDebugImpl.cpp : 423 + 0x5]
     r4 = 0xbeba0d7c    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbeba0990
     r8 = 0x40c84015    r9 = 0x00000001   r10 = 0xbeba0990    fp = 0x41243638
     sp = 0xbeba0980    pc = 0x40c83dfd
    Found by: call frame info
 2  libxul.so!mozilla::layers::ShadowLayersChild::ActorDestroy [ShadowLayersChild.cpp : 68 + 0x13]
     r4 = 0x43ebd0d0    r5 = 0xbeba0dc4    r6 = 0xbeba0dc4    r7 = 0x00000004
     r8 = 0x00000004    r9 = 0x44259574   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0db0    pc = 0x40d023af
    Found by: call frame info
 3  libxul.so!mozilla::layers::PLayersChild::DestroySubtree [PLayersChild.cpp : 673 + 0x9]
     r4 = 0x43ebd0d0    r5 = 0xbeba0dc4    r6 = 0xbeba0dc4    r7 = 0x00000004
     r8 = 0x00000004    r9 = 0x44259574   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0dc0    pc = 0x40bfe24f
    Found by: call frame info
 4  libxul.so!mozilla::layers::PCompositorChild::DestroySubtree [PCompositorChild.cpp : 886 + 0x5]
     r4 = 0x4394c6b0    r5 = 0x00000001    r6 = 0x00000004    r7 = 0x00000004
     r8 = 0x00000001    r9 = 0x439db4f4   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0de8    pc = 0x40bf7d23
    Found by: call frame info
 5  libxul.so!mozilla::layers::PCompositorChild::OnChannelError [PCompositorChild.cpp : 775 + 0x3]
     r4 = 0x4394c6b0    r5 = 0x4394c6bc    r6 = 0x00000000    r7 = 0xbeba1808
     r8 = 0xbeba0e68    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e10    pc = 0x40bf7d5b
    Found by: call frame info
 6  libxul.so!mozilla::ipc::AsyncChannel::NotifyMaybeChannelError [AsyncChannel.cpp : 547 + 0x5]
     r4 = 0x4394c6bc    r5 = 0x4394c6bc    r6 = 0x00000000    r7 = 0xbeba1808
     r8 = 0xbeba0e68    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e18    pc = 0x40b70d87
    Found by: call frame info
 7  libxul.so!mozilla::ipc::AsyncChannel::OnNotifyMaybeChannelError [AsyncChannel.cpp : 512 + 0x5]
     r4 = 0x43935430    r5 = 0x4394c6bc    r6 = 0x00000000    r7 = 0xbeba1808
     r8 = 0xbeba0e68    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e20    pc = 0x40b7103d
    Found by: call frame info
 8  libxul.so!RunnableMethod<IPC::ChannelProxy::Context, void (IPC::ChannelProxy::Context::*)(), Tuple0>::Run [tuple.h : 383 + 0x5]
     r4 = 0xbeba17fc    r5 = 0x44259920    r6 = 0xbeba0e70    r7 = 0xbeba1808
     r8 = 0xbeba0e68    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e40    pc = 0x40b57723
    Found by: call frame info
 9  libxul.so!MessageLoop::RunTask [message_loop.cc : 337 + 0x5]
     r4 = 0xbeba17fc    r5 = 0x44259920    r6 = 0xbeba0e70    r7 = 0xbeba1808
     r8 = 0xbeba0e68    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e48    pc = 0x40ca221d
    Found by: call frame info
10  libxul.so!MessageLoop::DeferOrRunPendingTask [message_loop.cc : 345 + 0x5]
     r4 = 0x00000001    r5 = 0xbeba0e60    r6 = 0xbeba0e70    r7 = 0xbeba1808
     r8 = 0xbeba0e68    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e58    pc = 0x40ca304f
    Found by: call frame info
11  libxul.so!MessageLoop::DoWork [message_loop.cc : 445 + 0x7]
     r4 = 0xbeba17fc    r5 = 0xbeba0e60    r6 = 0xbeba0e70    r7 = 0xbeba1808
     r8 = 0xbeba0e68    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e60    pc = 0x40ca3c2d
    Found by: call frame info
12  libxul.so!mozilla::ipc::DoWorkRunnable::Run [MessagePump.cpp : 42 + 0x7]
     r4 = 0xbeba17fc    r5 = 0x00000001    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbeba0ee7    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0e90    pc = 0x40b7419d
    Found by: call frame info
13  libxul.so!nsThread::ProcessNextEvent [nsThread.cpp : 620 + 0x5]
     r4 = 0x41bc88e0    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbeba0ee7    r9 = 0x41bc890c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0ea0    pc = 0x40c7fb47
    Found by: call frame info
14  libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 237 + 0xb]
     r4 = 0x00000000    r5 = 0xbeba17fc    r6 = 0x41bc4350    r7 = 0x00000001
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0ee0    pc = 0x40c5ff0f
    Found by: call frame info
15  libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 82 + 0x7]
     r4 = 0x41bc4340    r5 = 0xbeba17fc    r6 = 0x41bc4350    r7 = 0x00000001
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0ef0    pc = 0x40b742ad
    Found by: call frame info
16  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 231 + 0x7]
     r4 = 0xbeba17fc    r5 = 0x41bc4340    r6 = 0xbeba17fc    r7 = 0x00000001
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f18    pc = 0x40b7435f
    Found by: call frame info
17  libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
     r4 = 0xbeba17fc    r5 = 0x43986100    r6 = 0x41bc88e0    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f30    pc = 0x40ca21d9
    Found by: call frame info
18  libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
     r4 = 0xbeba17fc    r5 = 0x43986100    r6 = 0x41bc88e0    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f38    pc = 0x40ca2283
    Found by: call frame info
19  libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7]
     r4 = 0x00000000    r5 = 0x43986100    r6 = 0x41bc88e0    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f50    pc = 0x40afa4fd
    Found by: call frame info
20  libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 646 + 0x5]
     r4 = 0xbeba0f64    r5 = 0x41bc4340    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f60    pc = 0x404921b9
    Found by: call frame info
21  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 198 + 0x3]
     r4 = 0xbeba17fc    r5 = 0x41bc4340    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f78    pc = 0x40b7432d
    Found by: call frame info
22  libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
     r4 = 0xbeba17fc    r5 = 0x41bcb600    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f90    pc = 0x40ca21d9
    Found by: call frame info
23  libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
     r4 = 0xbeba17fc    r5 = 0x41bcb600    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0f98    pc = 0x40ca2283
    Found by: call frame info
24  libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 485 + 0xb]
     r4 = 0xbeba17fc    r5 = 0x41bcb600    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41bdb000    r9 = 0x41be0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba0fb0    pc = 0x4049255d
    Found by: call frame info
25  plugin-container!main [MozillaRuntimeMain.cpp : 60 + 0x5]
     r4 = 0xbeba1964    r5 = 0x00000005    r6 = 0xbeba1934    r7 = 0xbeba1980
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba1930    pc = 0x00008583
    Found by: call frame info
26  libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
     r4 = 0x00008524    r5 = 0xbeba1964    r6 = 0x00000006    r7 = 0xbeba1980
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba1948    pc = 0x400a477b
    Found by: call frame info
27  0xb0001dc5
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeba1960    pc = 0xb0001dc7
    Found by: call frame info
Crash Signature: [@ mozalloc_abort | NS_DebugBreak_P | mozilla::layers::ShadowLayersChild::ActorDestroy]
Keywords: crash
Whiteboard: [b2g-crash]
Hello Sotaro,

This looks like bug 862097 which is already fixed. Can you help to take a look and decide whether we should mark this as a duplicated bug? Many thanks!
Flags: needinfo?(sotaro.ikeda.g)
The abort is called when unrecoverable error is detected by gfx ipc module. From the logcat, b2g process opens too much file descriptors and failed IPC by that. It causes abort.

-----------------------------------------------------

I/IdleService(  110): reset timer expiry to 676 msec from now
E/Sensors (  110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files)
I/IdleService(  110): Get idle time: time since reset 102 msec
I/IdleService(  110): Idle timer callback: current idle time 102 msec
I/IdleService(  110): next timeout 897 msec from now
I/IdleService(  110): SetTimerExpiryIfBefore: next timeout 897 msec from now
I/IdleService(  110): reset timer expiry to 907 msec from now
E/Sensors (  110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files)
E/Sensors (  110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files)
E/memalloc(  110): /dev/pmem: Failed to initialize pmem sub-heap: -1
W/memalloc(  110): Falling back to ashmem
E/memalloc(  110): couldn't create ashmem (Too many open files)
E/msm7627a.gralloc(  110): gralloc failed err=Too many open files
W/GraphicBufferAllocator(  110): alloc(320, 24, 2, 00000133, ...) failed -24 (Too many open files)
E/Sensors (  110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files)
I/Gecko   (  110): [Parent 110] WARNING: Message needs unreceived descriptors channel:50ae0000 message-type:65533 header()->num_fds:1 num_fds:0 fds_i:0: file /home/apusr/B2G_Unagi/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 551
D/memalloc(  110): /dev/pmem: Freeing buffer base:0x4a8ed000 size:614400 offset:1843200 fd:877
D/memalloc(  110): /dev/pmem: Freeing buffer base:0x4aa19000 size:614400 offset:3072000 fd:923
I/Gecko   ( 2505): [Child 2505] WARNING: pipe error (18): Connection reset by peer: file /home/apusr/B2G_Unagi/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 432
I/Gecko   ( 2505): 
I/Gecko   ( 2505): ###!!! [Child][SyncChannel] Error: Channel error: cannot send/recv
I/Gecko   ( 2505): 
I/Gecko   ( 2505): 
I/Gecko   ( 2505): ###!!! [Child][AsyncChannel] Error: Channel error: cannot send/recv
I/Gecko   ( 2505): 
I/Gecko   ( 2505): [Child 2505] WARNING: FileDescriptorSet destroyed with unconsumed descriptors: file /home/apusr/B2G_Unagi/gecko/ipc/chromium/src/chrome/common/file_descriptor_set_posix.cc, line 20
I/Gecko   ( 2505): 
I/Gecko   ( 2505): ###!!! [Child][SyncChannel] Error: Channel error: cannot send/recv
I/Gecko   ( 2505): 
I/Gecko   ( 2505): [Child 2505] ###!!! ABORT: ActorDestroy by IPC channel failure at ShadowLayersChild: file /home/apusr/B2G_Unagi/gecko/gfx/layers/ipc/ShadowLayersChild.cpp, line 68
E/Gecko   ( 2505): mozalloc_abort: [Child 2505] ###!!! ABORT: ActorDestroy by IPC channel failure at ShadowLayersChild: file /home/apusr/B2G_Unagi/gecko/gfx/layers/ipc/ShadowLayersChild.cpp, line 68
Flags: needinfo?(sotaro.ikeda.g)
I checked manifest of gonk-misc. It is older one than bug 862097. This bug is dupe of bug 862097.

  <project name="gonk-misc" remote="b2g" revision="ded7bc971be7f0543db3e7dcf8e2ff134739aef2"/>
fix of bug 862097 is 73bd5f975f28fb696f3e647c50ac4fe03464d582
Duplicate of this bug: 870672
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 862097
You need to log in before you can comment on or make changes to this bug.