Closed Bug 868127 Opened 11 years ago Closed 11 years ago

crash in libxul.so!mozilla::layers::GestureEventListener::HandleInputEvent [GestureEventListener.cpp : 159 + 0x4]

Categories

(Firefox OS Graveyard :: General, defect)

Product:
Firefox OS Graveyard
Component:
General
Platform:
ARM
Gonk (Firefox OS)
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(blocking-b2g:leo+)

Status:
RESOLVED WORKSFORME
Milestone:
1.1 CS (11may)
Project Flags:
blocking-b2g leo+

People

(Reporter: ikumar, Assigned: tzimmermann)

Details

(Keywords: crash, Whiteboard: [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=1)

Crash Data

Attachments

(1 file)

minidump file for the crash.
161.07 KB, text/plain
Details 
This crash was seen during stability testing with the following test steps:
1.Play Music in background in repeat mode
2.Enable auto answer.
3.Receive MT calls and MT SMS Randomly
4.Performed manual testing for 1 to 2 hrs. on different applications,
5.Open multiple applications. (Like Camera, video, gallery phone, Messaging, Browser etc.,)
6.Then the performance of the device went bad.
7.Opened the Email application and tapped on the name field to enter the name.
8.Then key board is not displayed to enter the name, But the B2G os crashed is displayed and mini dumps are generated in the phone.



Crash reason: SIGSEGV
Crash address: 0xf
Thread 0 (crashed)
0 libxul.so!mozilla::layers::GestureEventListener::HandleInputEvent [GestureEventListener.cpp : 159 + 0x4]
r0 = 0x44b18e00 r1 = 0x47c79e20 r2 = 0x00000000 r3 = 0x00000003
r4 = 0x47cf4150 r5 = 0xbed90cf8 r6 = 0x64bfa925 r7 = 0x00000000
r8 = 0x00000001 r9 = 0x0000001c r10 = 0x47cf4158 fp = 0xbed90d38
sp = 0xbed90c10 lr = 0x400e3434 pc = 0x4142ad88
Found by: given as instruction pointer in context
1 libxul.so!mozilla::layers::AsyncPanZoomController::HandleInputEvent [AsyncPanZoomController.cpp : 253 + 0x3]
r4 = 0x47e31c00 r5 = 0x47e31c00 r6 = 0xbed90cf8 r7 = 0x00000001
r8 = 0xbed90cf8 r9 = 0xbed90d3c r10 = 0x47e31c00 fp = 0xbed90d38
sp = 0xbed90c58 pc = 0x41425db7
Found by: call frame info
2 libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 246 + 0x7]
r4 = 0x47e31c00 r5 = 0xbed90cf8 r6 = 0x47d6c560 r7 = 0x00000001
r8 = 0xbed90cf8 r9 = 0xbed90d3c r10 = 0x47e31c00 fp = 0xbed90d38
sp = 0xbed90c80 pc = 0x41425f7d
Found by: call frame info
3 libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 173 + 0x7]
r4 = 0xbed91618 r5 = 0xbed90d88 r6 = 0x47d6c560 r7 = 0x00000001
r8 = 0xbed90cf8 r9 = 0xbed90d3c r10 = 0x47e31c00 fp = 0xbed90d38
sp = 0xbed90ca8 pc = 0x414260af
Found by: call frame info
4 libxul.so!mozilla::layout::RenderFrameParent::NotifyInputEvent [RenderFrameParent.cpp : 783 + 0x3]
r4 = 0xbed90d88 r5 = 0xbed91618 r6 = 0xffffffff r7 = 0xfffffffc
r8 = 0xbed90dc8 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000
sp = 0xbed90d70 pc = 0x40d33adb
Found by: call frame info
5 libxul.so!mozilla::dom::TabParent::MaybeForwardEventToRenderFrame [TabParent.cpp : 1259 + 0x7]
r4 = 0xbed90d88 r5 = 0xbed91618 r6 = 0xffffffff r7 = 0xfffffffc
r8 = 0xbed90dc8 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000
sp = 0xbed90d78 pc = 0x4128ac5d
Found by: call frame info
6 libxul.so!mozilla::dom::TabParent::SendRealTouchEvent [TabParent.cpp : 465 + 0x9]
r4 = 0x44ba5440 r5 = 0xbed91618 r6 = 0xffffffff r7 = 0xfffffffc
r8 = 0xbed90dc8 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000
sp = 0xbed90d88 pc = 0x4128b999
Found by: call frame info
7 libxul.so!nsEventStateManager::DispatchCrossProcessEvent [nsEventStateManager.cpp : 1549 + 0x3]
r4 = 0xbed9112c r5 = 0x00000000 r6 = 0xbed91618 r7 = 0x00000000
r8 = 0xbed90e20 r9 = 0x419ccffc r10 = 0xbed9112c fp = 0x00000000
sp = 0xbed90de8 pc = 0x40e4c693
Found by: call frame info
8 libxul.so!nsEventStateManager::HandleCrossProcessEvent [nsEventStateManager.cpp : 1733 + 0xb]
r0 = 0x48c64fc0 r1 = 0xbed91618 r4 = 0x44b36920 r5 = 0x00000000
r6 = 0xbed91618 r7 = 0x00000000 r8 = 0xbed90e20 r9 = 0x419ccffc
r10 = 0xbed9112c fp = 0x00000000 sp = 0xbed90df8 pc = 0x40e4ed57
Found by: call frame info
9 libxul.so!nsEventStateManager::PostHandleEvent [nsEventStateManager.cpp : 3114 + 0x7]
r4 = 0x48c64fc0 r5 = 0xbed91618 r6 = 0xbed9112c r7 = 0x4987e400
r8 = 0x41c6548c r9 = 0x485fb800 r10 = 0xbed9112c fp = 0x48c64fdc
sp = 0xbed90e50 pc = 0x40e4ede1
Found by: call frame info
10 libxul.so!PresShell::HandleEventInternal [nsPresShell.cpp : 6652 + 0x17]
r4 = 0xbed91618 r5 = 0x4ee4d200 r6 = 0x41c6548c r7 = 0x00000000
r8 = 0x4987e400 r9 = 0x48c64fc0 r10 = 0xbed9112c fp = 0xbed90f78
sp = 0xbed90f38 pc = 0x40cdb367
Found by: call frame info
11 libxul.so!PresShell::HandlePositionedEvent [nsPresShell.cpp : 6345 + 0x9]
r4 = 0x4ee4d200 r5 = 0x485fb800 r6 = 0xbed91618 r7 = 0xbed90fcc
r8 = 0xbed9112c r9 = 0x40d00761 r10 = 0x419cc268 fp = 0xbed91078
sp = 0xbed90fc8 pc = 0x40cdb4e9
Found by: call frame info
12 libxul.so!PresShell::HandleEvent [nsPresShell.cpp : 6144 + 0xb]
r0 = 0x4ee4d200 r1 = 0x00000000 r2 = 0xbed91618 r4 = 0xbed91618
r5 = 0xbed910b0 r6 = 0x485fb800 r7 = 0x4ee4d200 r8 = 0x00000000
r9 = 0x00000000 r10 = 0x419cc268 fp = 0xbed91078 sp = 0xbed90ff0
pc = 0x40cdc089
Found by: call frame info
13 libxul.so!nsViewManager::DispatchEvent [nsViewManager.cpp : 779 + 0xf]
r4 = 0xbed91618 r5 = 0xbed91108 r6 = 0x40cdb501 r7 = 0x485fb800
r8 = 0x4042d000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed91100 pc = 0x40eee969
Found by: call frame info
14 libxul.so!nsView::HandleEvent [nsView.cpp : 1062 + 0xd]
r0 = 0xbed9112c r1 = 0xbed91618 r2 = 0x47de6900 r3 = 0x40428000
r4 = 0x485f2340 r5 = 0x40eee70d r6 = 0x47cbc460 r7 = 0xbed91618
r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed91128 pc = 0x40eed19d
Found by: call frame info
15 libxul.so!nsWindow::DispatchEvent [nsWindow.cpp : 481 + 0x9]
r0 = 0x47cbc460 r1 = 0x00000001 r2 = 0x00000000 r4 = 0xbed9115c
r5 = 0x41b92250 r6 = 0x41c749a4 r7 = 0x00000001 r8 = 0x00000048
r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91148
pc = 0x4120b059
Found by: call frame info
16 libxul.so!nsWindow::DispatchInputEvent [nsWindow.cpp : 286 + 0x11]
r4 = 0xbed9167f r5 = 0xbed91618 r6 = 0x41c749a4 r7 = 0x00000001
r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed91158 pc = 0x4120b89f
Found by: call frame info
17 libxul.so!GeckoInputDispatcher::dispatchOnce [nsAppShell.cpp : 197 + 0xd]
r0 = 0xbed91618 r1 = 0xbed9167f r4 = 0x00001452 r5 = 0xbed91618
r6 = 0xbed916b8 r7 = 0x00000001 r8 = 0x00000048 r9 = 0x00000000
r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91170 pc = 0x4120aa2b
Found by: call frame info
18 libxul.so!nsAppShell::ProcessNextNativeEvent [nsAppShell.cpp : 725 + 0x5]
r4 = 0x43302c40 r5 = 0x00000001 r6 = 0xbed916b8 r7 = 0x00000001
r8 = 0x00000048 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed916a8 pc = 0x41209c71
Found by: call frame info
19 libxul.so!nsBaseAppShell::DoProcessNextNativeEvent [nsBaseAppShell.cpp : 139 + 0x5]
r4 = 0x43302c40 r5 = 0x40407c40 r6 = 0x00000000 r7 = 0x00000000
r8 = 0x00000014 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed917c8 pc = 0x412268cf
Found by: call frame info
20 libxul.so!nsBaseAppShell::OnProcessNextEvent [nsBaseAppShell.cpp : 286 + 0x9]
r4 = 0x43302c40 r5 = 0x40407c40 r6 = 0x03da4db4 r7 = 0x00000000
r8 = 0x00000014 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed917e0 pc = 0x41226995
Found by: call frame info
21 libxul.so!nsThread::ProcessNextEvent [nsThread.cpp : 593 + 0x5]
r0 = 0x43302c40 r1 = 0x00407c40 r4 = 0x40407c40 r5 = 0x00000000
r6 = 0x412268f1 r7 = 0x00000001 r8 = 0xbed9184f r9 = 0x4042d000
r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91808 pc = 0x413abc57
Found by: call frame info
22 libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 237 + 0xb]
r4 = 0x00000000 r5 = 0x4043d0c0 r6 = 0x40402530 r7 = 0x00000001
r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed91848 pc = 0x4138c0df
Found by: call frame info
23 libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 82 + 0x7]
r0 = 0x40407c40 r1 = 0x00000000 r4 = 0x40402520 r5 = 0x4043d0c0
r6 = 0x40402530 r7 = 0x00000001 r8 = 0x00000000 r9 = 0x4042d000
r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91858 pc = 0x412a01fd
Found by: call frame info
24 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
r4 = 0x4043d0c0 r5 = 0x43302c40 r6 = 0x40407c40 r7 = 0xbed91afd
r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed91880 pc = 0x413cdbb9
Found by: call frame info
25 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
r4 = 0x4043d0c0 r5 = 0x43302c40 r6 = 0x40407c40 r7 = 0xbed91afd
r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed91888 pc = 0x413cdc63
Found by: call frame info
26 libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7]
r0 = 0x00000001 r1 = 0x41c75700 r2 = 0x4043d0c0 r3 = 0x00000000
r4 = 0x00000000 r5 = 0x43302c40 r6 = 0x40407c40 r7 = 0xbed91afd
r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed918a0 pc = 0x41226495
Found by: call frame info
27 libxul.so!nsAppStartup::Run [nsAppStartup.cpp : 290 + 0x5]
r4 = 0x4346ae80 r5 = 0x41396a35 r6 = 0x00000000 r7 = 0xbed91afd
r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed918b0 pc = 0x4118988d
Found by: call frame info
28 libxul.so!XREMain::XRE_mainRun [nsAppRunner.cpp : 3794 + 0x5]
r4 = 0xbed91a0c r5 = 0x41396a35 r6 = 0x00000000 r7 = 0xbed91afd
r8 = 0x00000000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed918b8 pc = 0x40bb5bfb
Found by: call frame info
29 libxul.so!XREMain::XRE_main [nsAppRunner.cpp : 3860 + 0x5]
r4 = 0xbed91a0c r5 = 0xbed919e7 r6 = 0x00000000 r7 = 0xbed93bf4
r8 = 0x40428000 r9 = 0x4042d000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed919e0 pc = 0x40bb8399
Found by: call frame info
30 libxul.so!XRE_main [nsAppRunner.cpp : 3935 + 0x3]
r0 = 0x40428000 r1 = 0x00000001 r2 = 0xbed93bf4 r4 = 0x0001f170
r5 = 0xbed93bf4 r6 = 0x00000001 r7 = 0x00000000 r8 = 0xbed91a0c
r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbed91a08
pc = 0x40bb84e5
Found by: call frame info
31 b2g!main [nsBrowserApp.cpp : 168 + 0xf]
r4 = 0x40bb8499 r5 = 0x00000000 r6 = 0x00000001 r7 = 0xbed93bf4
r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed91b18 pc = 0x0000999f
Found by: call frame info
32 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
r4 = 0x00009714 r5 = 0xbed93bf4 r6 = 0x00000001 r7 = 0xbed93bfc
r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed93bd8 pc = 0x400e7a77
Found by: call frame info
33 libc.so!__cxa_atexit [atexit.c : 99 + 0x3]
r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000
r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000
sp = 0xbed93bf0 pc = 0x400f0437
Found by: call frame info
34 0xbed93db3
r0 = 0x00000001 r1 = 0xbed93cf3 r4 = 0x00000000 r5 = 0xbed93d03
r6 = 0xbed93d15 r7 = 0xbed93d28 r8 = 0xbed93d4b r9 = 0xbed93d64
r10 = 0xbed93d81 fp = 0x00000000 sp = 0xbed93c18 pc = 0xbed93db5
Found by: call frame info
blocking-b2g: --- → leo?
Whiteboard: [btg-1449]
(leo+, blocks product stability goals)
blocking-b2g: leo? → leo+
Severity: normal → critical
Crash Signature: [@ mozilla::layers::GestureEventListener::HandleInputEvent]
Keywords: crash
Whiteboard: [btg-1449] → [b2g-crash][btg-1449]
Seems a duplication of bug 862240 comment 3?
unagi weekly build 13.05.02 and tara also have the same crash.
blocking gecko-18 branch

Operating system: Android
                  0.0.0 Linux 3.0.8-g8349eac #1 PREEMPT Fri Apr 26 16:33:44 CST 2013 armv7l
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0xf

Thread 0 (crashed)
 0  libxul.so!mozilla::layers::GestureEventListener::HandleInputEvent [GestureEventListener.cpp : 159 + 0x4]
     r4 = 0x4a8aba60    r5 = 0xbeb3acb8    r6 = 0x4d4e7113    r7 = 0x00000000
     r8 = 0x00000001    r9 = 0x0000001c   r10 = 0x4a8aba68    fp = 0xbeb3acf8
     sp = 0xbeb3abd0    lr = 0x400d5364    pc = 0x41465390
    Found by: given as instruction pointer in context
 1  libxul.so!mozilla::layers::AsyncPanZoomController::HandleInputEvent [AsyncPanZoomController.cpp : 253 + 0x3]
     r4 = 0x4bbb6c00    r5 = 0x4bbb6c00    r6 = 0xbeb3acb8    r7 = 0x00000001
     r8 = 0xbeb3acb8    r9 = 0xbeb3acfc   r10 = 0x4bbb6c00    fp = 0xbeb3acf8
     sp = 0xbeb3ac18    pc = 0x414603bf
    Found by: call frame info
 2  libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 246 + 0x7]
     r4 = 0x4bbb6c00    r5 = 0xbeb3acb8    r6 = 0x4d4fcba0    r7 = 0x00000001
     r8 = 0xbeb3acb8    r9 = 0xbeb3acfc   r10 = 0x4bbb6c00    fp = 0xbeb3acf8
     sp = 0xbeb3ac40    pc = 0x41460585
    Found by: call frame info
 3  libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent [AsyncPanZoomController.cpp : 173 + 0x7]
     r4 = 0xbeb3b5d8    r5 = 0xbeb3ad48    r6 = 0x4d4fcba0    r7 = 0x00000001
     r8 = 0xbeb3acb8    r9 = 0xbeb3acfc   r10 = 0x4bbb6c00    fp = 0xbeb3acf8
     sp = 0xbeb3ac68    pc = 0x414606b7
    Found by: call frame info
 4  libxul.so!mozilla::layout::RenderFrameParent::NotifyInputEvent [RenderFrameParent.cpp : 783 + 0x3]
     r4 = 0xbeb3ad48    r5 = 0xbeb3b5d8    r6 = 0xffffffff    r7 = 0xfffffffc
     r8 = 0xbeb3ad88    r9 = 0x41aaf75c   r10 = 0xbeb3b0ec    fp = 0x00000000
     sp = 0xbeb3ad30    pc = 0x40d6fdb3
    Found by: call frame info
 5  libxul.so!mozilla::dom::TabParent::MaybeForwardEventToRenderFrame [TabParent.cpp : 1259 + 0x7]
     r4 = 0xbeb3ad48    r5 = 0xbeb3b5d8    r6 = 0xffffffff    r7 = 0xfffffffc
     r8 = 0xbeb3ad88    r9 = 0x41aaf75c   r10 = 0xbeb3b0ec    fp = 0x00000000
     sp = 0xbeb3ad38    pc = 0x412c4cd5
    Found by: call frame info
 6  libxul.so!mozilla::dom::TabParent::SendRealTouchEvent [TabParent.cpp : 465 + 0x9]
     r4 = 0x4959f2c0    r5 = 0xbeb3b5d8    r6 = 0xffffffff    r7 = 0xfffffffc
     r8 = 0xbeb3ad88    r9 = 0x41aaf75c   r10 = 0xbeb3b0ec    fp = 0x00000000
     sp = 0xbeb3ad48    pc = 0x412c5a11
    Found by: call frame info
 7  libxul.so!nsEventStateManager::DispatchCrossProcessEvent [nsEventStateManager.cpp : 1549 + 0x3]
     r4 = 0xbeb3b0ec    r5 = 0xbeb3b5d8    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0xbeb3ade0    r9 = 0x41aaf75c   r10 = 0xbeb3b0ec    fp = 0x00000000
     sp = 0xbeb3ada8    pc = 0x40e888bb
    Found by: call frame info
 8  libxul.so!nsEventStateManager::HandleCrossProcessEvent [nsEventStateManager.cpp : 1733 + 0xb]
     r4 = 0x4d8db150    r5 = 0xbeb3b5d8    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0xbeb3ade0    r9 = 0x41aaf75c   r10 = 0xbeb3b0ec    fp = 0x00000000
     sp = 0xbeb3adb8    pc = 0x40e8af7f
    Found by: call frame info
 9  libxul.so!nsEventStateManager::PostHandleEvent [nsEventStateManager.cpp : 3114 + 0x7]
     r4 = 0x495d4420    r5 = 0xbeb3b5d8    r6 = 0xbeb3b0ec    r7 = 0x495dec00
     r8 = 0x41d476ec    r9 = 0x47b18800   r10 = 0xbeb3b0ec    fp = 0x495d443c
     sp = 0xbeb3ae10    pc = 0x40e8b009
    Found by: call frame info
10  libxul.so!PresShell::HandleEventInternal [nsPresShell.cpp : 6652 + 0x17]
     r4 = 0xbeb3b5d8    r5 = 0x49013700    r6 = 0x41d476ec    r7 = 0x00000000
     r8 = 0x495dec00    r9 = 0x495d4420   r10 = 0xbeb3b0ec    fp = 0xbeb3af38
     sp = 0xbeb3aef8    pc = 0x40d17687
    Found by: call frame info
11  libxul.so!PresShell::HandlePositionedEvent [nsPresShell.cpp : 6345 + 0x9]
     r4 = 0x49013700    r5 = 0x47b18800    r6 = 0xbeb3b5d8    r7 = 0xbeb3af8c
     r8 = 0xbeb3b0ec    r9 = 0x40d3ca81   r10 = 0x41aae9c8    fp = 0xbeb3b038
     sp = 0xbeb3af88    pc = 0x40d17809
    Found by: call frame info
12  libxul.so!PresShell::HandleEvent [nsPresShell.cpp : 6144 + 0xb]
     r4 = 0xbeb3b5d8    r5 = 0xbeb3b070    r6 = 0x47b18800    r7 = 0x49013700
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x41aae9c8    fp = 0xbeb3b038
     sp = 0xbeb3afb0    pc = 0x40d183a9
    Found by: call frame info
13  libxul.so!nsViewManager::DispatchEvent [nsViewManager.cpp : 779 + 0xf]
     r4 = 0xbeb3b5d8    r5 = 0xbeb3b0c8    r6 = 0x40d17821    r7 = 0x47b18800
     r8 = 0x404e8000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b0c0    pc = 0x40f29519
    Found by: call frame info
14  libxul.so!nsView::HandleEvent [nsView.cpp : 1062 + 0xd]
     r4 = 0x47bb7190    r5 = 0x40f292bd    r6 = 0x46ac8ca0    r7 = 0xbeb3b5d8
     r8 = 0x00000048    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b0e8    pc = 0x40f27d4d
    Found by: call frame info
15  libxul.so!nsWindow::DispatchEvent [nsWindow.cpp : 481 + 0x9]
     r4 = 0xbeb3b11c    r5 = 0x41c744e0    r6 = 0x41d56bfc    r7 = 0x00000001
     r8 = 0x00000048    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b108    pc = 0x412450b1
    Found by: call frame info
16  libxul.so!nsWindow::DispatchInputEvent [nsWindow.cpp : 286 + 0x11]
     r4 = 0xbeb3b63f    r5 = 0xbeb3b5d8    r6 = 0x41d56bfc    r7 = 0x00000001
     r8 = 0x00000048    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b118    pc = 0x412458f7
    Found by: call frame info
17  libxul.so!GeckoInputDispatcher::dispatchOnce [nsAppShell.cpp : 197 + 0xd]
     r4 = 0x00001452    r5 = 0xbeb3b5d8    r6 = 0xbeb3b678    r7 = 0x00000001
     r8 = 0x00000048    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b130    pc = 0x41244a83
    Found by: call frame info
18  libxul.so!nsAppShell::ProcessNextNativeEvent [nsAppShell.cpp : 725 + 0x5]
     r4 = 0x421bd8e0    r5 = 0x00000001    r6 = 0xbeb3b678    r7 = 0x00000001
     r8 = 0x00000048    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b668    pc = 0x41243cc9
    Found by: call frame info
19  libxul.so!nsBaseAppShell::DoProcessNextNativeEvent [nsBaseAppShell.cpp : 139 + 0x5]
     r4 = 0x421bd8e0    r5 = 0x404ca940    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000014    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b788    pc = 0x412608ff
    Found by: call frame info
20  libxul.so!nsBaseAppShell::OnProcessNextEvent [nsBaseAppShell.cpp : 286 + 0x9]
     r4 = 0x421bd8e0    r5 = 0x404ca940    r6 = 0x00dca6c4    r7 = 0x00000000
     r8 = 0x00000014    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b7a0    pc = 0x412609c5
    Found by: call frame info
21  libxul.so!nsThread::ProcessNextEvent [nsThread.cpp : 593 + 0x5]
     r4 = 0x404ca940    r5 = 0x00000000    r6 = 0x41260921    r7 = 0x00000001
     r8 = 0xbeb3b80f    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b7c8    pc = 0x413e5a63
    Found by: call frame info
22  libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 237 + 0xb]
     r4 = 0x00000000    r5 = 0x404fd0c0    r6 = 0x404c4500    r7 = 0x00000001
     r8 = 0x00000000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b808    pc = 0x413c5ed7
    Found by: call frame info
23  libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 82 + 0x7]
     r4 = 0x404c44f0    r5 = 0x404fd0c0    r6 = 0x404c4500    r7 = 0x00000001
     r8 = 0x00000000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b818    pc = 0x412da275
    Found by: call frame info
24  libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
     r4 = 0x404fd0c0    r5 = 0x421bd8e0    r6 = 0x404ca940    r7 = 0xbeb3babd
     r8 = 0x00000000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b840    pc = 0x414081a9
    Found by: call frame info
25  libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
     r4 = 0x404fd0c0    r5 = 0x421bd8e0    r6 = 0x404ca940    r7 = 0xbeb3babd
     r8 = 0x00000000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b848    pc = 0x41408253
    Found by: call frame info
26  libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7]
     r4 = 0x00000000    r5 = 0x421bd8e0    r6 = 0x404ca940    r7 = 0xbeb3babd
     r8 = 0x00000000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b860    pc = 0x412604c5
    Found by: call frame info
27  libxul.so!nsAppStartup::Run [nsAppStartup.cpp : 290 + 0x5]
     r4 = 0x433e6be0    r5 = 0x413d082d    r6 = 0x00000000    r7 = 0xbeb3babd
     r8 = 0x00000000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b870    pc = 0x411c3d05
    Found by: call frame info
28  libxul.so!XREMain::XRE_mainRun [nsAppRunner.cpp : 3795 + 0x5]
     r4 = 0xbeb3b9cc    r5 = 0x413d082d    r6 = 0x00000000    r7 = 0xbeb3babd
     r8 = 0x00000000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b878    pc = 0x40bf377b
    Found by: call frame info
29  libxul.so!XREMain::XRE_main [nsAppRunner.cpp : 3861 + 0x5]
     r4 = 0xbeb3b9cc    r5 = 0xbeb3b9a7    r6 = 0x00000000    r7 = 0xbeb3dbb4
     r8 = 0x404e3000    r9 = 0x404e8000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b9a0    pc = 0x40bf5df5
    Found by: call frame info
30  libxul.so!XRE_main [nsAppRunner.cpp : 3936 + 0x3]
     r4 = 0x00020850    r5 = 0xbeb3dbb4    r6 = 0x00000001    r7 = 0x00000000
     r8 = 0xbeb3b9cc    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3b9c8    pc = 0x40bf5f41
    Found by: call frame info
31  b2g!main [nsBrowserApp.cpp : 168 + 0xf]
     r4 = 0x40bf5ef5    r5 = 0x00000000    r6 = 0x00000001    r7 = 0xbeb3dbb4
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3bad8    pc = 0x00009a0f
    Found by: call frame info
32  libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
     r4 = 0x00009784    r5 = 0xbeb3dbb4    r6 = 0x00000001    r7 = 0xbeb3dbbc
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3db98    pc = 0x400d9937
    Found by: call frame info
33  libc.so!__cxa_atexit [atexit.c : 99 + 0x3]
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb3dbb0    pc = 0x400e1f1f
    Found by: call frame info
34  0xbeb3dd54
     r4 = 0x00000000    r5 = 0xbeb3dcc5    r6 = 0xbeb3dcd7    r7 = 0xbeb3dcea
     r8 = 0xbeb3dd0d    r9 = 0xbeb3dd26   r10 = 0xbeb3dd43    fp = 0x00000000
     sp = 0xbeb3dbd8    pc = 0xbeb3dd56
    Found by: call frame info
35  b2g!MOZ_PNG_build_gamma_tab [png.c : 2645 + 0x9]
     sp = 0xbeb3dc14    pc = 0x0000b8d7
    Found by: stack scanning
(In reply to Benjamin Chen [:bechen] from comment #2)
> Seems a duplication of bug 862240 comment 3?

After merged patch from bug 862240, unagi has this new crash.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Opps, maybe not a dup per comment 4.  Hard to spot the real comments when folks inline massive backtraces in comments.   Attachments are better for this.
Status: RESOLVED → REOPENED
Resolution: DUPLICATE → ---
Assignee: nobody → tzimmermann
Whiteboard: [b2g-crash][btg-1449] → [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=0
Whiteboard: [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=0 → [b2g-crash][btg-1449], u=fx-os-user c=may-6-17 p=1
I haven't been able to reproduce this bug.

> 
> Crash reason: SIGSEGV
> Crash address: 0xf

This looks like we dereference a NULL pointer and try to access the element at offset 0xf (== +15 bytes). Fields at offset 15 I found are

GestureListener::mSpanChange
AsyncPanZoomController::mGeckoContentController
Thomas, anything you can work with from available information or do you need additional information from Inder/James?
Flags: needinfo?(tzimmermann)
Target Milestone: --- → 1.1 CS (11may)
Inder how often this bug is reproducible ? Could you reduce the STR ?
Flags: needinfo?(ikumar)
(In reply to David Scravaglieri [:scravag] from comment #9)
> Inder how often this bug is reproducible ? Could you reduce the STR ?
It has appeared once in our stability testing on AU80 build which is about a week old.
It hasn't been reproduced since so don't know of any other STR.
Flags: needinfo?(ikumar)
(In reply to Wayne Chang [:wchang] from comment #8)
> Thomas, anything you can work with from available information or do you need
> additional information from Inder/James?

Well, there is nothing obviously broken near the crashed code location and I couldn't find any problems related to the 0xf that shows up in the stack trace. Without some clear STR, there is not much I can do here. But since it has only showed up once, this problem is probably not that severe.
Flags: needinfo?(tzimmermann)
Inder, I'm seeing a bunch of new crash reports come in from weekend testing.  I agree that if this issue is not reproduced on AU 90 then we can probably withdraw this bug for now.
Flags: needinfo?(ikumar)
Ok, sounds good. I will update once we have analyzed all the recent crash reports.
Flags: needinfo?(ikumar)
We haven't seen this crash in recent builds. Closing it for now.
Status: REOPENED → RESOLVED
Closed: 11 years ago → 11 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: