Closed Bug 868127 Opened 12 years ago Closed 12 years ago

crash in libxul.so!mozilla::layers::GestureEventListener::HandleInputEvent [GestureEventListener.cpp : 159 + 0x4]

Categories

(Firefox OS Graveyard :: General, defect)

Product:
Firefox OS Graveyard
Component:
General
Platform:
ARM
Gonk (Firefox OS)
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(blocking-b2g:leo+)

Status:
RESOLVED WORKSFORME
Milestone:
1.1 CS (11may)
Project Flags:
blocking-b2g leo+

People

(Reporter: ikumar, Assigned: tzimmermann)

Details

(Keywords: crash, Whiteboard: [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=1)

Crash Data

Attachments

(1 file)

minidump file for the crash.
161.07 KB, text/plain
Details
This crash was seen during stability testing with the following test steps: 1.Play Music in background in repeat mode 2.Enable auto answer. 3.Receive MT calls and MT SMS Randomly 4.Performed manual testing for 1 to 2 hrs. on different applications, 5.Open multiple applications. (Like Camera, video, gallery phone, Messaging, Browser etc.,) 6.Then the performance of the device went bad. 7.Opened the Email application and tapped on the name field to enter the name. 8.Then key board is not displayed to enter the name, But the B2G os crashed is displayed and mini dumps are generated in the phone. Crash reason: SIGSEGV Crash address: 0xf Thread 0 (crashed) 0 libxul.so!mozilla::layers::GestureEventListener::HandleInputEvent [GestureEventListener.cpp : 159 + 0x4] r0 = 0x44b18e00 r1 = 0x47c79e20 r2 = 0x00000000 r3 = 0x00000003 r4 = 0x47cf4150 r5 = 0xbed90cf8 r6 = 0x64bfa925 r7 = 0x00000000 r8 = 0x00000001 r9 = 0x0000001c r10 = 0x47cf4158 fp = 0xbed90d38 sp = 0xbed90c10 lr = 0x400e3434 pc = 0x4142ad88 Found by: given as instruction pointer in context 1 libxul.so!mozilla::layers::AsyncPanZoomController::HandleInputEvent [AsyncPanZoomController.cpp : 253 + 0x3] r4 = 0x47e31c00 r5 = 0x47e31c00 r6 = 0xbed90cf8 r7 = 0x00000001 r8 = 0xbed90cf8 r9 = 0xbed90d3c r10 = 0x47e31c00 fp = 0xbed90d38 sp = 0xbed90c58 pc = 0x41425db7 Found by: call frame info 2 libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 246 + 0x7] r4 = 0x47e31c00 r5 = 0xbed90cf8 r6 = 0x47d6c560 r7 = 0x00000001 r8 = 0xbed90cf8 r9 = 0xbed90d3c r10 = 0x47e31c00 fp = 0xbed90d38 sp = 0xbed90c80 pc = 0x41425f7d Found by: call frame info 3 libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 173 + 0x7] r4 = 0xbed91618 r5 = 0xbed90d88 r6 = 0x47d6c560 r7 = 0x00000001 r8 = 0xbed90cf8 r9 = 0xbed90d3c r10 = 0x47e31c00 fp = 0xbed90d38 sp = 0xbed90ca8 pc = 0x414260af Found by: call frame info 4 libxul.so!mozilla::layout::RenderFrameParent::NotifyInputEvent [RenderFrameParent.cpp : 783 + 0x3] r4 = 0xbed90d88 r5 = 0xbed91618 r6 = 0xffffffff r7 = 0xfffffffc r8 = 0xbed90dc8 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000 sp = 0xbed90d70 pc = 0x40d33adb Found by: call frame info 5 libxul.so!mozilla::dom::TabParent::MaybeForwardEventToRenderFrame [TabParent.cpp : 1259 + 0x7] r4 = 0xbed90d88 r5 = 0xbed91618 r6 = 0xffffffff r7 = 0xfffffffc r8 = 0xbed90dc8 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000 sp = 0xbed90d78 pc = 0x4128ac5d Found by: call frame info 6 libxul.so!mozilla::dom::TabParent::SendRealTouchEvent [TabParent.cpp : 465 + 0x9] r4 = 0x44ba5440 r5 = 0xbed91618 r6 = 0xffffffff r7 = 0xfffffffc r8 = 0xbed90dc8 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000 sp = 0xbed90d88 pc = 0x4128b999 Found by: call frame info 7 libxul.so!nsEventStateManager::DispatchCrossProcessEvent [nsEventStateManager.cpp : 1549 + 0x3] r4 = 0xbed9112c r5 = 0x00000000 r6 = 0xbed91618 r7 = 0x00000000 r8 = 0xbed90e20 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000 sp = 0xbed90de8 pc = 0x40e4c693 Found by: call frame info 8 libxul.so!nsEventStateManager::HandleCrossProcessEvent [nsEventStateManager.cpp : 1733 + 0xb] r0 = 0x48c64fc0 r1 = 0xbed91618 r4 = 0x44b36920 r5 = 0x00000000 r6 = 0xbed91618 r7 = 0x00000000 r8 = 0xbed90e20 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000 sp = 0xbed90df8 pc = 0x40e4ed57 Found by: call frame info 9 libxul.so!nsEventStateManager::PostHandleEvent [nsEventStateManager.cpp : 3114 + 0x7] r4 = 0x48c64fc0 r5 = 0xbed91618 r6 = 0xbed9112c r7 = 0x4987e400 r8 = 0x41c6548c r9 = 0x485fb800 r10 = 0xbed9112c fp = 0x48c64fdc sp = 0xbed90e50 pc = 0x40e4ede1 Found by: call frame info 10 libxul.so!PresShell::HandleEventInternal [nsPresShell.cpp : 6652 + 0x17] r4 = 0xbed91618 r5 = 0x4ee4d200 r6 = 0x41c6548c r7 = 0x00000000 r8 = 0x4987e400 r9 = 0x48c64fc0 r10 = 0xbed9112c fp = 0xbed90f78 sp = 0xbed90f38 pc = 0x40cdb367 Found by: call frame info 11 libxul.so!PresShell::HandlePositionedEvent [nsPresShell.cpp : 6345 + 0x9] r4 = 0x4ee4d200 r5 = 0x485fb800 r6 = 0xbed91618 r7 = 0xbed90fcc r8 = 0xbed9112c r9 = 0x40d00761 r10 = 0x419cc268 fp = 0xbed91078 sp = 0xbed90fc8 pc = 0x40cdb4e9 Found by: call frame info 12 libxul.so!PresShell::HandleEvent [nsPresShell.cpp : 6144 + 0xb] r0 = 0x4ee4d200 r1 = 0x00000000 r2 = 0xbed91618 r4 = 0xbed91618 r5 = 0xbed910b0 r6 = 0x485fb800 r7 = 0x4ee4d200 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x419cc268 fp = 0xbed91078 sp = 0xbed90ff0 pc = 0x40cdc089 Found by: call frame info 13 libxul.so!nsViewManager::DispatchEvent [nsViewManager.cpp : 779 + 0xf] r4 = 0xbed91618 r5 = 0xbed91108 r6 = 0x40cdb501 r7 = 0x485fb800 r8 = 0x4042d000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91100 pc = 0x40eee969 Found by: call frame info 14 libxul.so!nsView::HandleEvent [nsView.cpp : 1062 + 0xd] r0 = 0xbed9112c r1 = 0xbed91618 r2 = 0x47de6900 r3 = 0x40428000 r4 = 0x485f2340 r5 = 0x40eee70d r6 = 0x47cbc460 r7 = 0xbed91618 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91128 pc = 0x40eed19d Found by: call frame info 15 libxul.so!nsWindow::DispatchEvent [nsWindow.cpp : 481 + 0x9] r0 = 0x47cbc460 r1 = 0x00000001 r2 = 0x00000000 r4 = 0xbed9115c r5 = 0x41b92250 r6 = 0x41c749a4 r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91148 pc = 0x4120b059 Found by: call frame info 16 libxul.so!nsWindow::DispatchInputEvent [nsWindow.cpp : 286 + 0x11] r4 = 0xbed9167f r5 = 0xbed91618 r6 = 0x41c749a4 r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91158 pc = 0x4120b89f Found by: call frame info 17 libxul.so!GeckoInputDispatcher::dispatchOnce [nsAppShell.cpp : 197 + 0xd] r0 = 0xbed91618 r1 = 0xbed9167f r4 = 0x00001452 r5 = 0xbed91618 r6 = 0xbed916b8 r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91170 pc = 0x4120aa2b Found by: call frame info 18 libxul.so!nsAppShell::ProcessNextNativeEvent [nsAppShell.cpp : 725 + 0x5] r4 = 0x43302c40 r5 = 0x00000001 r6 = 0xbed916b8 r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed916a8 pc = 0x41209c71 Found by: call frame info 19 libxul.so!nsBaseAppShell::DoProcessNextNativeEvent [nsBaseAppShell.cpp : 139 + 0x5] r4 = 0x43302c40 r5 = 0x40407c40 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000014 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed917c8 pc = 0x412268cf Found by: call frame info 20 libxul.so!nsBaseAppShell::OnProcessNextEvent [nsBaseAppShell.cpp : 286 + 0x9] r4 = 0x43302c40 r5 = 0x40407c40 r6 = 0x03da4db4 r7 = 0x00000000 r8 = 0x00000014 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed917e0 pc = 0x41226995 Found by: call frame info 21 libxul.so!nsThread::ProcessNextEvent [nsThread.cpp : 593 + 0x5] r0 = 0x43302c40 r1 = 0x00407c40 r4 = 0x40407c40 r5 = 0x00000000 r6 = 0x412268f1 r7 = 0x00000001 r8 = 0xbed9184f r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91808 pc = 0x413abc57 Found by: call frame info 22 libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 237 + 0xb] r4 = 0x00000000 r5 = 0x4043d0c0 r6 = 0x40402530 r7 = 0x00000001 r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91848 pc = 0x4138c0df Found by: call frame info 23 libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 82 + 0x7] r0 = 0x40407c40 r1 = 0x00000000 r4 = 0x40402520 r5 = 0x4043d0c0 r6 = 0x40402530 r7 = 0x00000001 r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91858 pc = 0x412a01fd Found by: call frame info 24 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5] r4 = 0x4043d0c0 r5 = 0x43302c40 r6 = 0x40407c40 r7 = 0xbed91afd r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91880 pc = 0x413cdbb9 Found by: call frame info 25 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5] r4 = 0x4043d0c0 r5 = 0x43302c40 r6 = 0x40407c40 r7 = 0xbed91afd r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91888 pc = 0x413cdc63 Found by: call frame info 26 libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7] r0 = 0x00000001 r1 = 0x41c75700 r2 = 0x4043d0c0 r3 = 0x00000000 r4 = 0x00000000 r5 = 0x43302c40 r6 = 0x40407c40 r7 = 0xbed91afd r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed918a0 pc = 0x41226495 Found by: call frame info 27 libxul.so!nsAppStartup::Run [nsAppStartup.cpp : 290 + 0x5] r4 = 0x4346ae80 r5 = 0x41396a35 r6 = 0x00000000 r7 = 0xbed91afd r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed918b0 pc = 0x4118988d Found by: call frame info 28 libxul.so!XREMain::XRE_mainRun [nsAppRunner.cpp : 3794 + 0x5] r4 = 0xbed91a0c r5 = 0x41396a35 r6 = 0x00000000 r7 = 0xbed91afd r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed918b8 pc = 0x40bb5bfb Found by: call frame info 29 libxul.so!XREMain::XRE_main [nsAppRunner.cpp : 3860 + 0x5] r4 = 0xbed91a0c r5 = 0xbed919e7 r6 = 0x00000000 r7 = 0xbed93bf4 r8 = 0x40428000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed919e0 pc = 0x40bb8399 Found by: call frame info 30 libxul.so!XRE_main [nsAppRunner.cpp : 3935 + 0x3] r0 = 0x40428000 r1 = 0x00000001 r2 = 0xbed93bf4 r4 = 0x0001f170 r5 = 0xbed93bf4 r6 = 0x00000001 r7 = 0x00000000 r8 = 0xbed91a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91a08 pc = 0x40bb84e5 Found by: call frame info 31 b2g!main [nsBrowserApp.cpp : 168 + 0xf] r4 = 0x40bb8499 r5 = 0x00000000 r6 = 0x00000001 r7 = 0xbed93bf4 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91b18 pc = 0x0000999f Found by: call frame info 32 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00009714 r5 = 0xbed93bf4 r6 = 0x00000001 r7 = 0xbed93bfc r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed93bd8 pc = 0x400e7a77 Found by: call frame info 33 libc.so!__cxa_atexit [atexit.c : 99 + 0x3] r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed93bf0 pc = 0x400f0437 Found by: call frame info 34 0xbed93db3 r0 = 0x00000001 r1 = 0xbed93cf3 r4 = 0x00000000 r5 = 0xbed93d03 r6 = 0xbed93d15 r7 = 0xbed93d28 r8 = 0xbed93d4b r9 = 0xbed93d64 r10 = 0xbed93d81 fp = 0x00000000 sp = 0xbed93c18 pc = 0xbed93db5 Found by: call frame info
blocking-b2g: --- → leo?
Whiteboard: [btg-1449]
(leo+, blocks product stability goals)
blocking-b2g: leo? → leo+
Severity: normal → critical
Crash Signature: [@ mozilla::layers::GestureEventListener::HandleInputEvent]
Keywords: crash
Whiteboard: [btg-1449] → [b2g-crash][btg-1449]
Seems a duplication of bug 862240 comment 3?
unagi weekly build 13.05.02 and tara also have the same crash. blocking gecko-18 branch Operating system: Android 0.0.0 Linux 3.0.8-g8349eac #1 PREEMPT Fri Apr 26 16:33:44 CST 2013 armv7l CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0xf Thread 0 (crashed) 0 libxul.so!mozilla::layers::GestureEventListener::HandleInputEvent [GestureEventListener.cpp : 159 + 0x4] r4 = 0x4a8aba60 r5 = 0xbeb3acb8 r6 = 0x4d4e7113 r7 = 0x00000000 r8 = 0x00000001 r9 = 0x0000001c r10 = 0x4a8aba68 fp = 0xbeb3acf8 sp = 0xbeb3abd0 lr = 0x400d5364 pc = 0x41465390 Found by: given as instruction pointer in context 1 libxul.so!mozilla::layers::AsyncPanZoomController::HandleInputEvent [AsyncPanZoomController.cpp : 253 + 0x3] r4 = 0x4bbb6c00 r5 = 0x4bbb6c00 r6 = 0xbeb3acb8 r7 = 0x00000001 r8 = 0xbeb3acb8 r9 = 0xbeb3acfc r10 = 0x4bbb6c00 fp = 0xbeb3acf8 sp = 0xbeb3ac18 pc = 0x414603bf Found by: call frame info 2 libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 246 + 0x7] r4 = 0x4bbb6c00 r5 = 0xbeb3acb8 r6 = 0x4d4fcba0 r7 = 0x00000001 r8 = 0xbeb3acb8 r9 = 0xbeb3acfc r10 = 0x4bbb6c00 fp = 0xbeb3acf8 sp = 0xbeb3ac40 pc = 0x41460585 Found by: call frame info 3 libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 173 + 0x7] r4 = 0xbeb3b5d8 r5 = 0xbeb3ad48 r6 = 0x4d4fcba0 r7 = 0x00000001 r8 = 0xbeb3acb8 r9 = 0xbeb3acfc r10 = 0x4bbb6c00 fp = 0xbeb3acf8 sp = 0xbeb3ac68 pc = 0x414606b7 Found by: call frame info 4 libxul.so!mozilla::layout::RenderFrameParent::NotifyInputEvent [RenderFrameParent.cpp : 783 + 0x3] r4 = 0xbeb3ad48 r5 = 0xbeb3b5d8 r6 = 0xffffffff r7 = 0xfffffffc r8 = 0xbeb3ad88 r9 = 0x41aaf75c r10 = 0xbeb3b0ec fp = 0x00000000 sp = 0xbeb3ad30 pc = 0x40d6fdb3 Found by: call frame info 5 libxul.so!mozilla::dom::TabParent::MaybeForwardEventToRenderFrame [TabParent.cpp : 1259 + 0x7] r4 = 0xbeb3ad48 r5 = 0xbeb3b5d8 r6 = 0xffffffff r7 = 0xfffffffc r8 = 0xbeb3ad88 r9 = 0x41aaf75c r10 = 0xbeb3b0ec fp = 0x00000000 sp = 0xbeb3ad38 pc = 0x412c4cd5 Found by: call frame info 6 libxul.so!mozilla::dom::TabParent::SendRealTouchEvent [TabParent.cpp : 465 + 0x9] r4 = 0x4959f2c0 r5 = 0xbeb3b5d8 r6 = 0xffffffff r7 = 0xfffffffc r8 = 0xbeb3ad88 r9 = 0x41aaf75c r10 = 0xbeb3b0ec fp = 0x00000000 sp = 0xbeb3ad48 pc = 0x412c5a11 Found by: call frame info 7 libxul.so!nsEventStateManager::DispatchCrossProcessEvent [nsEventStateManager.cpp : 1549 + 0x3] r4 = 0xbeb3b0ec r5 = 0xbeb3b5d8 r6 = 0x00000000 r7 = 0x00000000 r8 = 0xbeb3ade0 r9 = 0x41aaf75c r10 = 0xbeb3b0ec fp = 0x00000000 sp = 0xbeb3ada8 pc = 0x40e888bb Found by: call frame info 8 libxul.so!nsEventStateManager::HandleCrossProcessEvent [nsEventStateManager.cpp : 1733 + 0xb] r4 = 0x4d8db150 r5 = 0xbeb3b5d8 r6 = 0x00000000 r7 = 0x00000000 r8 = 0xbeb3ade0 r9 = 0x41aaf75c r10 = 0xbeb3b0ec fp = 0x00000000 sp = 0xbeb3adb8 pc = 0x40e8af7f Found by: call frame info 9 libxul.so!nsEventStateManager::PostHandleEvent [nsEventStateManager.cpp : 3114 + 0x7] r4 = 0x495d4420 r5 = 0xbeb3b5d8 r6 = 0xbeb3b0ec r7 = 0x495dec00 r8 = 0x41d476ec r9 = 0x47b18800 r10 = 0xbeb3b0ec fp = 0x495d443c sp = 0xbeb3ae10 pc = 0x40e8b009 Found by: call frame info 10 libxul.so!PresShell::HandleEventInternal [nsPresShell.cpp : 6652 + 0x17] r4 = 0xbeb3b5d8 r5 = 0x49013700 r6 = 0x41d476ec r7 = 0x00000000 r8 = 0x495dec00 r9 = 0x495d4420 r10 = 0xbeb3b0ec fp = 0xbeb3af38 sp = 0xbeb3aef8 pc = 0x40d17687 Found by: call frame info 11 libxul.so!PresShell::HandlePositionedEvent [nsPresShell.cpp : 6345 + 0x9] r4 = 0x49013700 r5 = 0x47b18800 r6 = 0xbeb3b5d8 r7 = 0xbeb3af8c r8 = 0xbeb3b0ec r9 = 0x40d3ca81 r10 = 0x41aae9c8 fp = 0xbeb3b038 sp = 0xbeb3af88 pc = 0x40d17809 Found by: call frame info 12 libxul.so!PresShell::HandleEvent [nsPresShell.cpp : 6144 + 0xb] r4 = 0xbeb3b5d8 r5 = 0xbeb3b070 r6 = 0x47b18800 r7 = 0x49013700 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x41aae9c8 fp = 0xbeb3b038 sp = 0xbeb3afb0 pc = 0x40d183a9 Found by: call frame info 13 libxul.so!nsViewManager::DispatchEvent [nsViewManager.cpp : 779 + 0xf] r4 = 0xbeb3b5d8 r5 = 0xbeb3b0c8 r6 = 0x40d17821 r7 = 0x47b18800 r8 = 0x404e8000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b0c0 pc = 0x40f29519 Found by: call frame info 14 libxul.so!nsView::HandleEvent [nsView.cpp : 1062 + 0xd] r4 = 0x47bb7190 r5 = 0x40f292bd r6 = 0x46ac8ca0 r7 = 0xbeb3b5d8 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b0e8 pc = 0x40f27d4d Found by: call frame info 15 libxul.so!nsWindow::DispatchEvent [nsWindow.cpp : 481 + 0x9] r4 = 0xbeb3b11c r5 = 0x41c744e0 r6 = 0x41d56bfc r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b108 pc = 0x412450b1 Found by: call frame info 16 libxul.so!nsWindow::DispatchInputEvent [nsWindow.cpp : 286 + 0x11] r4 = 0xbeb3b63f r5 = 0xbeb3b5d8 r6 = 0x41d56bfc r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b118 pc = 0x412458f7 Found by: call frame info 17 libxul.so!GeckoInputDispatcher::dispatchOnce [nsAppShell.cpp : 197 + 0xd] r4 = 0x00001452 r5 = 0xbeb3b5d8 r6 = 0xbeb3b678 r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b130 pc = 0x41244a83 Found by: call frame info 18 libxul.so!nsAppShell::ProcessNextNativeEvent [nsAppShell.cpp : 725 + 0x5] r4 = 0x421bd8e0 r5 = 0x00000001 r6 = 0xbeb3b678 r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b668 pc = 0x41243cc9 Found by: call frame info 19 libxul.so!nsBaseAppShell::DoProcessNextNativeEvent [nsBaseAppShell.cpp : 139 + 0x5] r4 = 0x421bd8e0 r5 = 0x404ca940 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000014 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b788 pc = 0x412608ff Found by: call frame info 20 libxul.so!nsBaseAppShell::OnProcessNextEvent [nsBaseAppShell.cpp : 286 + 0x9] r4 = 0x421bd8e0 r5 = 0x404ca940 r6 = 0x00dca6c4 r7 = 0x00000000 r8 = 0x00000014 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b7a0 pc = 0x412609c5 Found by: call frame info 21 libxul.so!nsThread::ProcessNextEvent [nsThread.cpp : 593 + 0x5] r4 = 0x404ca940 r5 = 0x00000000 r6 = 0x41260921 r7 = 0x00000001 r8 = 0xbeb3b80f r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b7c8 pc = 0x413e5a63 Found by: call frame info 22 libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 237 + 0xb] r4 = 0x00000000 r5 = 0x404fd0c0 r6 = 0x404c4500 r7 = 0x00000001 r8 = 0x00000000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b808 pc = 0x413c5ed7 Found by: call frame info 23 libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 82 + 0x7] r4 = 0x404c44f0 r5 = 0x404fd0c0 r6 = 0x404c4500 r7 = 0x00000001 r8 = 0x00000000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b818 pc = 0x412da275 Found by: call frame info 24 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5] r4 = 0x404fd0c0 r5 = 0x421bd8e0 r6 = 0x404ca940 r7 = 0xbeb3babd r8 = 0x00000000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b840 pc = 0x414081a9 Found by: call frame info 25 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5] r4 = 0x404fd0c0 r5 = 0x421bd8e0 r6 = 0x404ca940 r7 = 0xbeb3babd r8 = 0x00000000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b848 pc = 0x41408253 Found by: call frame info 26 libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7] r4 = 0x00000000 r5 = 0x421bd8e0 r6 = 0x404ca940 r7 = 0xbeb3babd r8 = 0x00000000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b860 pc = 0x412604c5 Found by: call frame info 27 libxul.so!nsAppStartup::Run [nsAppStartup.cpp : 290 + 0x5] r4 = 0x433e6be0 r5 = 0x413d082d r6 = 0x00000000 r7 = 0xbeb3babd r8 = 0x00000000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b870 pc = 0x411c3d05 Found by: call frame info 28 libxul.so!XREMain::XRE_mainRun [nsAppRunner.cpp : 3795 + 0x5] r4 = 0xbeb3b9cc r5 = 0x413d082d r6 = 0x00000000 r7 = 0xbeb3babd r8 = 0x00000000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b878 pc = 0x40bf377b Found by: call frame info 29 libxul.so!XREMain::XRE_main [nsAppRunner.cpp : 3861 + 0x5] r4 = 0xbeb3b9cc r5 = 0xbeb3b9a7 r6 = 0x00000000 r7 = 0xbeb3dbb4 r8 = 0x404e3000 r9 = 0x404e8000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b9a0 pc = 0x40bf5df5 Found by: call frame info 30 libxul.so!XRE_main [nsAppRunner.cpp : 3936 + 0x3] r4 = 0x00020850 r5 = 0xbeb3dbb4 r6 = 0x00000001 r7 = 0x00000000 r8 = 0xbeb3b9cc r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3b9c8 pc = 0x40bf5f41 Found by: call frame info 31 b2g!main [nsBrowserApp.cpp : 168 + 0xf] r4 = 0x40bf5ef5 r5 = 0x00000000 r6 = 0x00000001 r7 = 0xbeb3dbb4 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3bad8 pc = 0x00009a0f Found by: call frame info 32 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00009784 r5 = 0xbeb3dbb4 r6 = 0x00000001 r7 = 0xbeb3dbbc r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3db98 pc = 0x400d9937 Found by: call frame info 33 libc.so!__cxa_atexit [atexit.c : 99 + 0x3] r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeb3dbb0 pc = 0x400e1f1f Found by: call frame info 34 0xbeb3dd54 r4 = 0x00000000 r5 = 0xbeb3dcc5 r6 = 0xbeb3dcd7 r7 = 0xbeb3dcea r8 = 0xbeb3dd0d r9 = 0xbeb3dd26 r10 = 0xbeb3dd43 fp = 0x00000000 sp = 0xbeb3dbd8 pc = 0xbeb3dd56 Found by: call frame info 35 b2g!MOZ_PNG_build_gamma_tab [png.c : 2645 + 0x9] sp = 0xbeb3dc14 pc = 0x0000b8d7 Found by: stack scanning
(In reply to Benjamin Chen [:bechen] from comment #2) > Seems a duplication of bug 862240 comment 3? After merged patch from bug 862240, unagi has this new crash.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
Opps, maybe not a dup per comment 4. Hard to spot the real comments when folks inline massive backtraces in comments. Attachments are better for this.
Status: RESOLVED → REOPENED
Resolution: DUPLICATE → ---
Assignee: nobody → tzimmermann
Whiteboard: [b2g-crash][btg-1449] → [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=0
Whiteboard: [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=0 → [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=1
I haven't been able to reproduce this bug. > > Crash reason: SIGSEGV > Crash address: 0xf This looks like we dereference a NULL pointer and try to access the element at offset 0xf (== +15 bytes). Fields at offset 15 I found are GestureListener::mSpanChange AsyncPanZoomController::mGeckoContentController
Thomas, anything you can work with from available information or do you need additional information from Inder/James?
Flags: needinfo?(tzimmermann)
Target Milestone: --- → 1.1 CS (11may)
Inder how often this bug is reproducible ? Could you reduce the STR ?
Flags: needinfo?(ikumar)
(In reply to David Scravaglieri [:scravag] from comment #9) > Inder how often this bug is reproducible ? Could you reduce the STR ? It has appeared once in our stability testing on AU80 build which is about a week old. It hasn't been reproduced since so don't know of any other STR.
Flags: needinfo?(ikumar)
(In reply to Wayne Chang [:wchang] from comment #8) > Thomas, anything you can work with from available information or do you need > additional information from Inder/James? Well, there is nothing obviously broken near the crashed code location and I couldn't find any problems related to the 0xf that shows up in the stack trace. Without some clear STR, there is not much I can do here. But since it has only showed up once, this problem is probably not that severe.
Flags: needinfo?(tzimmermann)
Inder, I'm seeing a bunch of new crash reports come in from weekend testing. I agree that if this issue is not reproduced on AU 90 then we can probably withdraw this bug for now.
Flags: needinfo?(ikumar)
Ok, sounds good. I will update once we have analyzed all the recent crash reports.
Flags: needinfo?(ikumar)
We haven't seen this crash in recent builds. Closing it for now.
Status: REOPENED → RESOLVED
Closed: 12 years ago → 12 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: