871937 - crash in gfxImageSurface::AllocateAndInit

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Scoobidiver (away)]

It's #82 browser crasher in 21.0b7 and #131 in 22.0a2.
It first showed up in 21.0b6, 22.0a2/20130502 and 23.0a1/20130501. The regression ranges are (Beta) or might be (Aurora and Nightly):
http://hg.mozilla.org/releases/mozilla-beta/pushloghtml?fromchange=dc33b3fb2fb0&tochange=c1453860aef9
http://hg.mozilla.org/releases/mozilla-aurora/pushloghtml?fromchange=840ca31cb3df&tochange=487982220b4e
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=dd0c611a0a27&tochange=02aa81c59df6
It's likely a regression from bug 845125.

Signature 	moz_abort | arena_run_split | arena_malloc_large | je_malloc | gfxImageSurface::AllocateAndInit(long, int, bool) More Reports Search
UUID	f9e09324-8ca8-4963-912e-6a2cd2130512
Date Processed	2013-05-12 16:36:37
Uptime	4788
Last Crash	21.7 hours before submission
Install Age	1.3 hours since version was first installed.
Install Time	2013-05-12 15:16:42
Product	Firefox
Version	23.0a1
Build ID	20130512030908
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 42 stepping 7
Crash Reason	EXCEPTION_BREAKPOINT
Crash Address	0x73ad2705
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x1050, AdapterSubsysID: 163510cf, AdapterDriverVersion: 9.18.13.1090
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ D3D10 Layers- D3D9 Layers? D3D9 Layers- 
Processor Notes 	sp-processor04_phx1_mozilla_com_19188:2012
EMCheckCompatibility	True
Adapter Vendor ID	0x10de
Adapter Device ID	0x1050
Total Virtual Memory	4294836224
Available Virtual Memory	2384125952
System Memory Use Percentage	83
Available Page File	52154368
Available Physical Memory	703311872

Frame 	Module 	Signature 	Source
0 	mozglue.dll 	moz_abort 	memory/mozjemalloc/jemalloc.c:1590
1 	mozglue.dll 	arena_run_split 	memory/mozjemalloc/jemalloc.c:3410
2 	mozglue.dll 	arena_malloc_large 	memory/mozjemalloc/jemalloc.c:4201
3 	mozglue.dll 	je_malloc 	memory/mozjemalloc/jemalloc.c:6302
4 	xul.dll 	gfxImageSurface::AllocateAndInit 	gfx/thebes/gfxImageSurface.cpp:125
5 	xul.dll 	gfxImageSurface::gfxImageSurface 	gfx/thebes/gfxImageSurface.cpp:101
6 	xul.dll 	imgFrame::Init 	image/src/imgFrame.cpp:193
7 	xul.dll 	mozilla::image::RasterImage::EnsureFrame 	image/src/RasterImage.cpp:1387
8 	xul.dll 	mozilla::image::RasterImage::EnsureFrame 	image/src/RasterImage.cpp:1443
9 	xul.dll 	mozilla::image::Decoder::AllocateFrame 	image/src/Decoder.cpp:213
10 	xul.dll 	mozilla::image::RasterImage::InitDecoder 	image/src/RasterImage.cpp:2579
11 	xul.dll 	mozilla::image::RasterImage::RequestDecodeCore 	image/src/RasterImage.cpp:2823
12 	xul.dll 	mozilla::image::RasterImage::StartDecoding 	image/src/RasterImage.cpp:2737
13 	xul.dll 	imgRequest::StartDecoding 	image/src/imgRequest.cpp:500
14 	xul.dll 	imgRequestProxy::StartDecoding 	image/src/imgRequestProxy.cpp:367
15 	xul.dll 	nsDocument::AddImage 	content/base/src/nsDocument.cpp:8949
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=moz_abort+|+arena_run_split+|+arena_malloc_large+|+je_malloc+|+gfxImageSurface%3A%3AAllocateAndInit%28long%2C+int%2C+bool%29
https://crash-stats.mozilla.com/report/list?signature=moz_abort+|+arena_run_split+|+arena_run_alloc+|+arena_malloc+|+je_malloc+|+gfxImageSurface%3A%3AAllocateAndInit%28long%2C+int%2C+bool%29

Comment 1

[Milan Sreckovic [:milan] (needinfo for best results)]

I can see this looking like a new crash because any crash that looked like:

0 	mozglue.dll 	moz_abort 	memory/mozjemalloc/jemalloc.c:1590
1 	mozglue.dll 	arena_run_split 	memory/mozjemalloc/jemalloc.c:3410
2 	mozglue.dll 	arena_malloc_large 	memory/mozjemalloc/jemalloc.c:4201
3 	mozglue.dll 	je_malloc 	memory/mozjemalloc/jemalloc.c:6302
5 	xul.dll 	gfxImageSurface::gfxImageSurface 	gfx/thebes/gfxImageSurface.cpp:111
6 	xul.dll 	imgFrame::Init 	image/src/imgFrame.cpp:193
7 	xul.dll 	mozilla::image::RasterImage::EnsureFrame 	image/src/RasterImage.cpp:1387
8 	xul.dll 	mozilla::image::RasterImage::EnsureFrame 	image/src/RasterImage.cpp:1443 

is going to look like the stack in Comment 0 after bug 945125. How do I find the "old" crashes?

Comment 2

[Milan Sreckovic [:milan] (needinfo for best results)]

That would be bug 845125, of course.

Comment 3

[Milan Sreckovic [:milan] (needinfo for best results)]

No crashes since 22...