Closed
Bug 868965
Opened 12 years ago
Closed 7 years ago
[tara]B2G video process crash:Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'
Categories
(Firefox OS Graveyard :: General, defect)
Tracking
(Not tracked)
RESOLVED
WONTFIX
People
(Reporter: cheng.luo, Unassigned)
References
Details
(Keywords: crash, Whiteboard: [b2g-crash])
Crash Data
Attachments
(1 file)
|
336.86 KB,
application/octet-stream
|
Details |
User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.19 (KHTML, like Gecko) Ubuntu/11.04 Chromium/18.0.1025.151 Chrome/18.0.1025.151 Safari/535.19
Steps to reproduce:
version:base on unagi_weekly_build_13.05.02
1、flash the handset, insert SDcard which have more then fifty 3gp files;
2、entry video app after first startup;
Or
1、adb shell
2、rm -r /data/local/indexedDB/*video*
3、entry video app when SDcard have more than fifty 3gp files;
Actual results:
Crash
Expected results:
Generating video thumbnail list
stack as follow:
#0 0x41045e02 in mozalloc_abort (msg=<value optimized out>)
at /media/NewFS/sprd_weekly/B2G/gecko/memory/mozalloc/mozalloc_abort.cpp:30
#1 0x40c36b86 in Abort (aMsg=0x123 <Address 0x123 out of bounds>)
at /media/NewFS/sprd_weekly/B2G/gecko/xpcom/base/nsDebugImpl.cpp:423
#2 0x40c36d08 in NS_DebugBreak_P (aSeverity=3,
aStr=0x42a27df8 "IPDL error [PImageContainerChild]: \"Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'\". abort()ing as a result.", aExpr=<value optimized out>, aFile=<value optimized out>,
aLine=535) at /media/NewFS/sprd_weekly/B2G/gecko/xpcom/base/nsDebugImpl.cpp:380
#3 0x40bad820 in mozilla::layers::PImageContainerChild::FatalError (this=<value optimized out>,
aMsg=0x410d3467 "Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'")
at /media/NewFS/sprd_weekly/B2G/objdir-gecko/ipc/ipdl/PImageContainerChild.cpp:535
#4 0x40bad256 in mozilla::layers::PImageContainerChild::Read (this=0x42bb2400, __v=0x43b36c04, __msg=0x43b36cc8,
__iter=0x43b36c68) at /media/NewFS/sprd_weekly/B2G/objdir-gecko/ipc/ipdl/PImageContainerChild.cpp:1047
#5 0x40bad4f6 in mozilla::layers::PImageContainerChild::Read (this=0x42bb2400, __v=0x43b36c04, __msg=0x43b36cc8,
__iter=0x43b36c68) at /media/NewFS/sprd_weekly/B2G/objdir-gecko/ipc/ipdl/PImageContainerChild.cpp:648
#6 0x40bad5ca in mozilla::layers::PImageContainerChild::Read (this=0x42bb2400, __v=0x43b36c04, __msg=0x43b36cc8,
__iter=0x43b36c68) at /media/NewFS/sprd_weekly/B2G/objdir-gecko/ipc/ipdl/PImageContainerChild.cpp:841
#7 0x40bad8a0 in mozilla::layers::PImageContainerChild::OnMessageReceived (this=0x42bb2400, __msg=...)
at /media/NewFS/sprd_weekly/B2G/objdir-gecko/ipc/ipdl/PImageContainerChild.cpp:388
#8 0x40bab618 in mozilla::layers::PCompositorChild::OnMessageReceived (this=0x43801820, __msg=...)
at /media/NewFS/sprd_weekly/B2G/objdir-gecko/ipc/ipdl/PCompositorChild.cpp:627
#9 0x40b26704 in mozilla::ipc::AsyncChannel::OnDispatchMessage (this=0x4380182c, msg=...)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/glue/AsyncChannel.cpp:471
#10 0x40b2bb5e in mozilla::ipc::RPCChannel::OnMaybeDequeueOne (this=0x4380182c)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/glue/RPCChannel.cpp:402
#11 0x40b0c0da in DispatchToMethod<mozilla::dom::ContentParent, void (mozilla::dom::ContentParent::*)()> (
---Type <return> to continue, or q <return> to quit---
obj=<value optimized out>, method=0x40b2ba89 <mozilla::ipc::RPCChannel::OnMaybeDequeueOne()>,
arg=<value optimized out>) at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/tuple.h:383
#12 0x40b0c0f0 in RunnableMethod<mozilla::dom::ContentParent, void (mozilla::dom::ContentParent::*)(), Tuple0>::Run (
this=<value optimized out>) at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/task.h:307
#13 0x40b2a1fa in mozilla::ipc::RPCChannel::RefCountedTask::Run (this=<value optimized out>)
at ../../dist/include/mozilla/ipc/RPCChannel.h:425
#14 0x40b2a404 in mozilla::ipc::RPCChannel::DequeueTask::Run (this=<value optimized out>)
at ../../dist/include/mozilla/ipc/RPCChannel.h:448
#15 0x40c4d424 in MessageLoop::RunTask (this=0x43b36e00, task=0x0)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/message_loop.cc:337
#16 0x40c4ef96 in MessageLoop::DeferOrRunPendingTask (this=0x40b2ba89, pending_task=<value optimized out>)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/message_loop.cc:345
#17 0x40c4f31a in MessageLoop::DoWork (this=0x43b36e00)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/message_loop.cc:445
#18 0x40c4f958 in base::MessagePumpDefault::Run (this=0x4383a700, delegate=0x43b36e00)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/message_pump_default.cc:23
#19 0x40c4d4e8 in MessageLoop::RunInternal (this=0x43b36e00)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/message_loop.cc:219
#20 0x40c4d4f2 in MessageLoop::RunHandler (this=0x40b2ba89)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/message_loop.cc:212
#21 0x40c4d50a in MessageLoop::Run (this=0x43b36e00)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/message_loop.cc:186
#22 0x40c50ade in base::Thread::ThreadMain (this=0x4383d220)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/thread.cc:156
#23 0x40c532b4 in ThreadFunc (closure=0x40b2ba89)
at /media/NewFS/sprd_weekly/B2G/gecko/ipc/chromium/src/base/platform_thread_posix.cc:39
|
||
Comment 2•12 years ago
|
||
It's bug 862230 with STR.
Severity: normal → critical
Status: UNCONFIRMED → NEW
Crash Signature: [@ mozalloc_abort | NS_DebugBreak_P | mozilla::layers::PImageContainerChild::FatalError ]
Ever confirmed: true
Keywords: crash
OS: All → Gonk (Firefox OS)
Hardware: All → ARM
Whiteboard: [b2g-crash]
I think it maybe relate to Bug 850566 which patch has add image size to SurfaceDescriptorGralloc?
the crash stack looks like Bug 862425 too.
Crash Signature: [@ mozalloc_abort | NS_DebugBreak_P | mozilla::layers::PImageContainerChild::FatalError ]
|
|
||
Comment 4•12 years ago
|
||
(In reply to cheng.luo from comment #3)
> the crash stack looks like Bug 862425 too.
Except for mozilla::layers::PImageContainerChild::FatalError that doesn't match mozilla::layers::PImageBridgeChild::FatalError.
Crash Signature: [@ mozalloc_abort | NS_DebugBreak_P | mozilla::layers::PImageContainerChild::FatalError ]
Except for mozilla::layers::PImageContainerChild::FatalError
> that doesn't match mozilla::layers::PImageBridgeChild::FatalError.
I am not sure of the problem about PImageContainerChild or PImageBridgeChild.
I refer to that "Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'".
I found Bug 869347 has the same error output:"Error deserializing 'bufferParent' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'"
|
||
Comment 8•11 years ago
|
||
Hi
|
|
||
Comment 9•11 years ago
|
||
This bug is the same as Bug 862230.
When this crash occurs, these thread's backtrace are always as below. And the crash application is video.
The crash thread want to read YCbCrImage layer data, but this layer is destroyed by thread 0.
Thread 10 (crashed)
0 libxul.so!mozalloc_abort [mozalloc_abort.cpp : 30 + 0x4]
r4 = 0x43dc3b1c r5 = 0x00000000 r6 = 0xffffffff r7 = 0x43dc3730
r8 = 0x40c4eabd r9 = 0x00000001 r10 = 0x43dc3730 fp = 0x41f289b8
sp = 0x43dc3718 lr = 0x410c7867 pc = 0x410c786a
Found by: given as instruction pointer in context
1 libxul.so!NS_DebugBreak_P [nsDebugImpl.cpp : 423 + 0x5]
r4 = 0x43dc3b1c r5 = 0x00000000 r6 = 0xffffffff r7 = 0x43dc3730
r8 = 0x40c4eabd r9 = 0x00000001 r10 = 0x43dc3730 fp = 0x41f289b8
sp = 0x43dc3720 pc = 0x40c4e8a5
Found by: call frame info
2 libxul.so!mozilla::layers::PImageContainerChild::FatalError [PImageContainerChild.cpp : 535 + 0x13]
r4 = 0x43dc3b5c r5 = 0x00000000 r6 = 0x411fe12c r7 = 0x43dc3d0c
r8 = 0x00000000 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3b50 pc = 0x40bc4637
Found by: call frame info
3 libxul.so!mozilla::layers::PImageContainerChild::Read [PImageContainerChild.cpp : 1043 + 0xd]
r4 = 0x442269c0 r5 = 0x43dc3cbc r6 = 0x43dc3c70 r7 = 0x43dc3d0c
r8 = 0x00000000 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3bc0 pc = 0x40bc40e7
Found by: call frame info
4 libxul.so!mozilla::layers::PImageContainerChild::Read [PImageContainerChild.cpp : 648 + 0xb]
r4 = 0x43dc3c70 r5 = 0x442269c0 r6 = 0x43dc3d0c r7 = 0x43dc3be0
r8 = 0x43dc3cbc r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3be0 pc = 0x40bc4469
Found by: call frame info
5 libxul.so!mozilla::layers::PImageContainerChild::Read [PImageContainerChild.cpp : 841 + 0x3]
r4 = 0x43dc3c70 r5 = 0x442269c0 r6 = 0x43dc3d0c r7 = 0x43dc3c10
r8 = 0x43dc3cbc r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3c10 pc = 0x40bc451f
Found by: call frame info
6 libxul.so!mozilla::layers::PImageContainerChild::OnMessageReceived [PImageContainerChild.cpp : 388 + 0x3]
r4 = 0x442269c0 r5 = 0x00000000 r6 = 0x43dc3c70 r7 = 0x00160000
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3c70 pc = 0x40bc4687
Found by: call frame info
7 libxul.so!mozilla::layers::PCompositorChild::OnMessageReceived [PCompositorChild.cpp : 627 + 0x7]
r4 = 0x43a4c820 r5 = 0x43dc3d0c r6 = 0x43dc3d0c r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3cd8 pc = 0x40bc1865
Found by: call frame info
8 libxul.so!mozilla::ipc::AsyncChannel::OnDispatchMessage [AsyncChannel.cpp : 471 + 0x5]
r4 = 0x43a4c82c r5 = 0x43dc3d0c r6 = 0x43dc3d0c r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3cf8 pc = 0x40b3b98b
Found by: call frame info
9 libxul.so!mozilla::ipc::RPCChannel::OnMaybeDequeueOne [RPCChannel.cpp : 402 + 0x7]
r4 = 0x43a4c82c r5 = 0x43dc3d0c r6 = 0x43dc3d0c r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3d08 pc = 0x40b40807
Found by: call frame info
10 libxul.so!RunnableMethod<IPC::ChannelProxy::Context, void (IPC::ChannelProxy::Context::*)(), Tuple0>::Run [tuple.h : 383 + 0x5]
r4 = 0x43dc3dec r5 = 0x440ee4d0 r6 = 0x43dc3d78 r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3d40 pc = 0x40b2216b
Found by: call frame info
11 libxul.so!mozilla::ipc::RPCChannel::DequeueTask::Run [RPCChannel.h : 425 + 0x9]
r4 = 0x43dc3dec r5 = 0x440ee4d0 r6 = 0x43dc3d78 r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3d48 pc = 0x40b3f1b1
Found by: call frame info
12 libxul.so!MessageLoop::RunTask [message_loop.cc : 337 + 0x5]
r4 = 0x43dc3dec r5 = 0x440ee4d0 r6 = 0x43dc3d78 r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3d50 pc = 0x40c6ccc5
Found by: call frame info
13 libxul.so!MessageLoop::DeferOrRunPendingTask [message_loop.cc : 345 + 0x5]
r4 = 0x00000001 r5 = 0x43dc3d68 r6 = 0x43dc3d78 r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3d60 pc = 0x40c6daf7
Found by: call frame info
14 libxul.so!MessageLoop::DoWork [message_loop.cc : 445 + 0x7]
r4 = 0x43dc3dec r5 = 0x43dc3d68 r6 = 0x43dc3d78 r7 = 0x43dc3df8
r8 = 0x43dc3d70 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3d68 pc = 0x40c6e6d5
Found by: call frame info
15 libxul.so!base::MessagePumpDefault::Run [message_pump_default.cc : 23 + 0x7]
r4 = 0x43ab16a0 r5 = 0x43dc3dec r6 = 0x43ab16ac r7 = 0x43dc3da0
r8 = 0x43dc3d98 r9 = 0x43ab16b0 r10 = 0x00000001 fp = 0x00000001
sp = 0x43dc3d98 pc = 0x40c6e965
Found by: call frame info
16 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
r4 = 0x43dc3dec r5 = 0x43dc3dec r6 = 0x00000010 r7 = 0x0024a998
r8 = 0x0024a988 r9 = 0x0024b460 r10 = 0x00100000 fp = 0x00000001
sp = 0x43dc3dc8 pc = 0x40c6cc81
Found by: call frame info
17 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
r4 = 0x43dc3dec r5 = 0x43dc3dec r6 = 0x00000010 r7 = 0x0024a998
r8 = 0x0024a988 r9 = 0x0024b460 r10 = 0x00100000 fp = 0x00000001
sp = 0x43dc3dd0 pc = 0x40c6cd2b
Found by: call frame info
18 libxul.so!base::Thread::ThreadMain [thread.cc : 156 + 0x5]
r4 = 0x43abc1f0 r5 = 0x43dc3dec r6 = 0x00000010 r7 = 0x0024a998
r8 = 0x0024a988 r9 = 0x0024b460 r10 = 0x00100000 fp = 0x00000001
sp = 0x43dc3de8 pc = 0x40c75045
Found by: call frame info
19 libxul.so!ThreadFunc [platform_thread_posix.cc : 39 + 0x5]
r4 = 0x43dc3f00 r5 = 0x40c7f011 r6 = 0x43abc1f0 r7 = 0x00000078
r8 = 0x40c7f011 r9 = 0x43abc1f0 r10 = 0x00100000 fp = 0x00000001
sp = 0x43dc3ee8 pc = 0x40c7f019
Found by: call frame info
20 libc.so!__thread_entry [pthread.c : 217 + 0x6]
r4 = 0x43dc3f00 r5 = 0x40c7f011 r6 = 0x43abc1f0 r7 = 0x00000078
r8 = 0x40c7f011 r9 = 0x43abc1f0 r10 = 0x00100000 fp = 0x00000001
sp = 0x43dc3ef0 pc = 0x40092038
Found by: call frame info
21 libc.so!pthread_create [pthread.c : 357 + 0xe]
r4 = 0x43dc3f00 r5 = 0x0024be30 r6 = 0xbeed8b20 r7 = 0x00000078
r8 = 0x40c7f011 r9 = 0x43abc1f0 r10 = 0x00100000 fp = 0x00000001
sp = 0x43dc3f00 pc = 0x40091b8c
Found by: call frame info
Thread 0
0 libc.so + 0xd680
r4 = 0x4402da54 r5 = 0x43ff0e70 r6 = 0x00000000 r7 = 0x000000f0
r8 = 0xbeed8f37 r9 = 0x41ac890c r10 = 0x00000000 fp = 0x00000000
sp = 0xbeed8d98 lr = 0x4009177c pc = 0x4008c680
Found by: given as instruction pointer in context
1 libc.so!__pthread_cond_timedwait [pthread.c : 1500 + 0xa]
sp = 0xbeed8db8 pc = 0x40091830
Found by: stack scanning
2 libnspr4.so!PR_WaitCondVar [ptsynch.c : 385 + 0x7]
r4 = 0x4402da50 r5 = 0x41ac92b0 r6 = 0xffffffff sp = 0xbeed8dd0
pc = 0x401452b1
Found by: call frame info
3 libxul.so!mozilla::layers::ImageBridgeChild::DeallocSurfaceDescriptorGralloc [CondVar.h : 71 + 0x9]
r4 = 0x44058e20 r5 = 0xbeed8de4 r6 = 0x44285648 sp = 0xbeed8de0
pc = 0x40cca4c9
Found by: call frame info
4 libxul.so!mozilla::layers::GrallocPlanarYCbCrImage::~GrallocPlanarYCbCrImage [GrallocImages.cpp : 28 + 0x5]
r4 = 0x44285648 r5 = 0x442855c0 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e38 pc = 0x40cce73f
Found by: call frame info
5 libxul.so!mozilla::layers::GrallocPlanarYCbCrImage::~GrallocPlanarYCbCrImage [GrallocImages.cpp : 29 + 0x3]
r4 = 0x442855c0 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e48 pc = 0x40cce75d
Found by: call frame info
6 libxul.so!mozilla::MediaStream::Release + 0x17
r4 = 0x442855c0 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e50 pc = 0x4073d841
Found by: call frame info
7 libxul.so!mozilla::VideoFrameContainer::ClearCurrentFrame [nsAutoPtr.h : 874 + 0x5]
r4 = 0x43fc3df0 r5 = 0x442855c0 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e60 pc = 0x408dfe57
Found by: call frame info
8 libxul.so!nsMediaOmxReader::ResetDecode [nsMediaOmxReader.cpp : 108 + 0x3]
r4 = 0x41f44400 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e70 pc = 0x408aa289
Found by: call frame info
9 libxul.so!nsMediaOmxReader::~nsMediaOmxReader [nsMediaOmxReader.cpp : 32 + 0x3]
r4 = 0x41f44400 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e78 pc = 0x408aa415
Found by: call frame info
10 libxul.so!nsMediaOmxReader::~nsMediaOmxReader [nsMediaOmxReader.cpp : 33 + 0x3]
r4 = 0x41f44400 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e80 pc = 0x408aa441
Found by: call frame info
11 libxul.so!nsBuiltinDecoderStateMachine::~nsBuiltinDecoderStateMachine [nsAutoPtr.h : 38 + 0x5]
r4 = 0x41f27360 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e88 pc = 0x408d9f47
Found by: call frame info
12 libxul.so!MediaOmxStateMachine::~MediaOmxStateMachine [MediaOmxStateMachine.h : 8 + 0xb]
r4 = 0x41f27360 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e90 pc = 0x408a9bcd
Found by: call frame info
13 libxul.so!MediaOmxStateMachine::~MediaOmxStateMachine [MediaOmxStateMachine.h : 8 + 0x5]
r4 = 0x41f27360 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8e98 pc = 0x408a9bdd
Found by: call frame info
14 libxul.so!PipUIContext::Release + 0x19
r4 = 0x41f27360 r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8ea0 pc = 0x4046894b
Found by: call frame info
15 libxul.so!XPCNativeScriptableCreateInfo::SetCallback [nsCOMPtr.h : 440 + 0x5]
r4 = 0x441be45c r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8eb0 pc = 0x4049f821
Found by: call frame info
16 libxul.so!nsCOMPtr_base::assign_with_AddRef [nsCOMPtr.cpp : 49 + 0x7]
r4 = 0x441be45c r5 = 0x00000000 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8eb8 pc = 0x40821bb5
Found by: call frame info
17 libxul.so!nsDecoderDisposeEvent::Run [nsCOMPtr.h : 622 + 0x3]
r4 = 0x00000000 r5 = 0xbeed8ed0 r6 = 0x441be458 r7 = 0xbeed8ed4
sp = 0xbeed8ec8 pc = 0x408dae83
Found by: call frame info
18 libxul.so!nsThread::ProcessNextEvent [nsThread.cpp : 620 + 0x5]
r4 = 0x41ac88e0 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000001
sp = 0xbeed8ef0 pc = 0x40c4a5ef
Found by: call frame info
19 libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 237 + 0xb]
r4 = 0x00000000 r5 = 0xbeed984c r6 = 0x41ac4350 r7 = 0x00000001
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8f30 pc = 0x40c2a9af
Found by: call frame info
20 libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 82 + 0x7]
r4 = 0x41ac4340 r5 = 0xbeed984c r6 = 0x41ac4350 r7 = 0x00000001
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8f40 pc = 0x40b3ec7d
Found by: call frame info
21 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 231 + 0x7]
r4 = 0xbeed984c r5 = 0x41ac4340 r6 = 0xbeed984c r7 = 0x00000001
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8f68 pc = 0x40b3ed2f
Found by: call frame info
22 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
r4 = 0xbeed984c r5 = 0x43abd0a0 r6 = 0x41ac88e0 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8f80 pc = 0x40c6cc81
Found by: call frame info
23 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
r4 = 0xbeed984c r5 = 0x43abd0a0 r6 = 0x41ac88e0 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8f88 pc = 0x40c6cd2b
Found by: call frame info
24 libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7]
r4 = 0x00000000 r5 = 0x43abd0a0 r6 = 0x41ac88e0 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8fa0 pc = 0x40ac4f45
Found by: call frame info
25 libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 646 + 0x5]
r4 = 0xbeed8fb4 r5 = 0x41ac4340 r6 = 0x00000002 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8fb0 pc = 0x4045c339
Found by: call frame info
26 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 198 + 0x3]
r4 = 0xbeed984c r5 = 0x41ac4340 r6 = 0x00000002 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8fc8 pc = 0x40b3ecfd
Found by: call frame info
27 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
r4 = 0xbeed984c r5 = 0x41acb600 r6 = 0x00000002 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8fe0 pc = 0x40c6cc81
Found by: call frame info
28 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
r4 = 0xbeed984c r5 = 0x41acb600 r6 = 0x00000002 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed8fe8 pc = 0x40c6cd2b
Found by: call frame info
29 libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 485 + 0xb]
r4 = 0xbeed984c r5 = 0x41acb600 r6 = 0x00000002 r7 = 0x00000003
r8 = 0x41adb000 r9 = 0x41ae0000 sp = 0xbeed9000 pc = 0x4045c6dd
Found by: call frame info
30 plugin-container!main [MozillaRuntimeMain.cpp : 60 + 0x5]
r4 = 0xbeed99b4 r5 = 0x00000005 r6 = 0xbeed9984 r7 = 0xbeed99d0
r8 = 0x00000000 r9 = 0x00000000 sp = 0xbeed9980 pc = 0x00008583
Found by: call frame info
31 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
r4 = 0x00008524 r5 = 0xbeed99b4 r6 = 0x00000006 r7 = 0xbeed99d0
r8 = 0x00000000 r9 = 0x00000000 sp = 0xbeed9998 pc = 0x40095937
Found by: call frame info
32 0xb0001dc5
r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000
r8 = 0x00000000 r9 = 0x00000000 sp = 0xbeed99b0 pc = 0xb0001dc7
Found by: call frame info
|
||
Comment 10•11 years ago
|
||
I tried the STR a few times with videos from `make -C gaia reference-workload-x-heavy` and was unable to reproduce it. What were the video files used to test? Their characteristics?
|
|
||
Comment 11•11 years ago
|
||
The log says
I/Gecko (18466): IPDL protocol error: could not look up PGrallocBuffer
I/Gecko (18466): IPDL protocol error: Error deserializing 'bufferChild' (PGrallocBuffer) member of 'SurfaceDescriptorGralloc'
So when we receive the ReturnImage message in ImageContainerChild, the PGrallocBuffer actor has been __delete__'ed.
|
|
||
Comment 12•11 years ago
|
||
I have unloaded the crash video to spreadtrum's FTP, please receive my email.
|
|
||
Comment 13•11 years ago
|
||
On unagi I get
D/memalloc( 967): /dev/pmem: Freeing buffer base:0x4a872000 size:65536 offset:5341184 fd:160
D/memalloc( 1150): /dev/pmem: Unmapping buffer base:0x47bf2000 size:5406720 offset:5341184
E/OMXCodec( 1150): [OMX.qcom.video.decoder.mpeg4] Timed out waiting for output buffers: 0/5
D/memalloc( 967): /dev/pmem: Allocated buffer base:0x4a35a000 size:57344 offset:4464640 fd:161
D/memalloc( 1150): /dev/pmem: Mapped buffer base:0x4685a000 size:4521984 offset:4464640 fd:78
after generating a few thumbnail then the video app freezes.
|
||
Comment 14•11 years ago
|
||
(In reply to Kan-Ru Chen [:kanru] from comment #13)
> On unagi I get
>
> D/memalloc( 967): /dev/pmem: Freeing buffer base:0x4a872000 size:65536
> offset:5341184 fd:160
> D/memalloc( 1150): /dev/pmem: Unmapping buffer base:0x47bf2000 size:5406720
> offset:5341184
> E/OMXCodec( 1150): [OMX.qcom.video.decoder.mpeg4] Timed out waiting for
> output buffers: 0/5
> D/memalloc( 967): /dev/pmem: Allocated buffer base:0x4a35a000 size:57344
> offset:4464640 fd:161
> D/memalloc( 1150): /dev/pmem: Mapped buffer base:0x4685a000 size:4521984
> offset:4464640 fd:78
>
> after generating a few thumbnail then the video app freezes.
How did you make the rom? current unagi's MozBuild does not enable Bug 864230. It is only applied to hamachi(buri), leo.
|
|
||
Comment 15•11 years ago
|
||
(In reply to Sotaro Ikeda [:sotaro] from comment #14)
> (In reply to Kan-Ru Chen [:kanru] from comment #13)
> > On unagi I get
> >
> > D/memalloc( 967): /dev/pmem: Freeing buffer base:0x4a872000 size:65536
> > offset:5341184 fd:160
> > D/memalloc( 1150): /dev/pmem: Unmapping buffer base:0x47bf2000 size:5406720
> > offset:5341184
> > E/OMXCodec( 1150): [OMX.qcom.video.decoder.mpeg4] Timed out waiting for
> > output buffers: 0/5
> > D/memalloc( 967): /dev/pmem: Allocated buffer base:0x4a35a000 size:57344
> > offset:4464640 fd:161
> > D/memalloc( 1150): /dev/pmem: Mapped buffer base:0x4685a000 size:4521984
> > offset:4464640 fd:78
> >
> > after generating a few thumbnail then the video app freezes.
>
> How did you make the rom? current unagi's MozBuild does not enable Bug
> 864230. It is only applied to hamachi(buri), leo.
Should I enable it? I built the gecko from the b2g18 branch.
|
|
||
Comment 16•11 years ago
|
||
With build from https://pvtbuilds.mozilla.org/pub/mozilla.org/b2g/nightly/mozilla-b2g18-unagi/2013/04/2013-04-26-07-02-04/ my unagi was able to decode 41 out of 58 test video clips. It didn't crash though.
|
||
Comment 17•7 years ago
|
||
Firefox OS is not being worked on
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WONTFIX
You need to log in
before you can comment on or make changes to this bug.
Description
•