Closed Bug 874810 Opened 12 years ago Closed 8 years ago

crash in mozilla::layers::ShmemYCbCrImage::CopyData mainly on HTC Wildfire S with marvel hw running Gingerbread

Categories

(Core :: Audio/Video: Playback, defect)

21 Branch
ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE
Tracking Status
firefox21 --- affected
firefox22 + wontfix
firefox23 - affected

People

(Reporter: scoobidiver, Assigned: snorp)

References

()

Details

(Keywords: crash, regression, reproducible, Whiteboard: [native-crash][ARMv6])

Crash Data

It's #4 crasher in 21.0 and #11 in 22.0b1 for ARMv6 devices only. Here are the breakdown per device for the last days: * May 20: HTC Wildfire S A510e 31 HTC Wildfire S 2 HTC Wildfire S A510b 1 * May 19: HTC Wildfire S A510e 37 HTC Wildfire S A510b 3 HTC Status 2 HTC ChaCha A810e 2 * May 18: HTC Wildfire S A510e 29 HTC Wildfire S A510b 5 HTC_A510c 4 HTC ChaCha A810e 2 Signature mozilla::layers::ShmemYCbCrImage::CopyData(unsigned char const*, unsigned char const*, unsigned char const*, nsIntSize, unsigned int, nsIntSize, unsigned int, unsigned int, unsigned int) More Reports Search UUID e24dc9ec-f2af-4354-a27c-4d3072130522 Date Processed 2013-05-22 01:19:17 Uptime 196 Install Age 4.2 hours since version was first installed. Install Time 2013-05-21 21:09:14 Product FennecAndroid Version 22.0 Build ID 20130514175617 Release Channel beta OS Android OS Version 0.0.0 Linux 2.6.35.10-g696f19b #1 PREEMPT Tue Apr 10 18:15:52 CST 2012 armv6l htc_europe/htc_marvel/marvel:2.3.5/GRJ90/362953.3:user/release-keys Build Architecture arm Build Architecture Info ARMv0 Crash Reason SIGSEGV Crash Address 0x41594000 App Notes AdapterDescription: 'Qualcomm -- Adreno (TM) 200 -- OpenGL ES 2.0 1566933 -- Model: HTC Wildfire S A510e, Product: htc_marvel, Manufacturer: HTC, Hardware: marvel' EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ Stagefright? Stagefright+ nothumb Build HTC HTC Wildfire S A510e htc_europe/htc_marvel/marvel:2.3.5/GRJ90/362953.3:user/release-keys Processor Notes sp-processor03_phx1_mozilla_com_20396:2012; non-integer value of "SecondsSinceLastCrash"; exploitability tool: ERROR: unable to analyze dump EMCheckCompatibility True Adapter Vendor ID Qualcomm Adapter Device ID Adreno (TM) 200 Device HTC HTC Wildfire S A510e Android API Version 10 (REL) Android CPU ABI armeabi Frame Module Signature Source 0 libc.so libc.so@0xce84 1 dalvik-heap (deleted) dalvik-heap @0x157fffe 2 ashmem (deleted) ashmem @0x1a 3 libxul.so mozilla::layers::ShmemYCbCrImage::CopyData gfx/layers/ipc/ShmemYCbCrImage.cpp:175 4 dalvik-heap (deleted) dalvik-heap @0x158effe 5 dalvik-heap (deleted) dalvik-heap @0x1592bfe 6 libxul.so mozilla::layers::SharedPlanarYCbCrImage::SetData gfx/layers/ipc/ImageContainerChild.cpp:567 7 cookies.sqlite-shm cookies.sqlite-shm@0x7ffe 8 ashmem (deleted) ashmem @0x1a 9 ashmem (deleted) ashmem @0xf01a 10 ashmem (deleted) ashmem @0x12c1a 11 libxul.so mozilla::VideoData::Create content/media/MediaDecoderReader.cpp:249 12 dalvik-heap (deleted) dalvik-heap @0x157fffe 13 dalvik-heap (deleted) dalvik-heap @0x157fffe 14 dalvik-heap (deleted) dalvik-heap @0x158effe 15 dalvik-heap (deleted) dalvik-heap @0x1592bfe 16 libxul.so mozilla::VideoData::Create content/media/MediaDecoderReader.cpp:266 17 libxul.so mozilla::ReentrantMonitorAutoEnter::~ReentrantMonitorAutoEnter obj-firefox/dist/include/mozilla/ReentrantMonitor.h:80 18 libxul.so mozilla::MediaPluginReader::DecodeVideoFrame content/media/plugins/MediaPluginReader.cpp:244 19 libc.so libc.so@0x1117a 20 libc.so libc.so@0x1117a 21 dalvik-heap (deleted) dalvik-heap @0x157fffe 22 dalvik-heap (deleted) dalvik-heap @0x158effe 23 dalvik-heap (deleted) dalvik-heap @0x1592bfe 24 dalvik-heap (deleted) dalvik-heap @0x157fffe 25 dalvik-heap (deleted) dalvik-heap @0x157fffe 26 dalvik-heap (deleted) dalvik-heap @0x158effe 27 dalvik-heap (deleted) dalvik-heap @0x1592bfe 28 libxul.so mozilla::MediaDecoderReader::DecodeToFirstVideoData content/media/MediaDecoderReader.cpp:417 29 libxul.so mozilla::MediaDecoderReader::FindStartTime content/media/MediaDecoderReader.cpp:451 30 libxul.so mozilla::MediaDecoderStateMachine::FindStartTime content/media/MediaDecoderStateMachine.cpp:2500 31 libxul.so mozilla::MediaDecoderStateMachine::DecodeMetadata content/media/MediaDecoderStateMachine.cpp:1837 32 libc.so libc.so@0x2396 33 @0xafcffffe 34 libc.so libc.so@0x1117a 35 libxul.so mozilla::MediaDecoderStateMachine::DecodeThreadRun content/media/MediaDecoderStateMachine.cpp:498 36 libxul.so nsRunnableMethodImpl<tag_nsresult obj-firefox/dist/include/nsThreadUtils.h:350 37 libxul.so nsRunnableMethodImpl<tag_nsresult obj-firefox/dist/include/nsThreadUtils.h:305 38 libxul.so nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:627 39 libc.so libc.so@0x11072 40 libnss3.so pt_AttachThread nsprpub/pr/src/pthreads/ptthread.c:283 41 libxul.so NS_ProcessNextEvent obj-firefox/xpcom/build/nsThreadUtils.cpp:238 42 libxul.so nsThread::ThreadFunc xpcom/threads/nsThread.cpp:265 43 libnss3.so pt_AttachThread nsprpub/pr/src/pthreads/ptthread.c:283 44 libnss3.so _pt_root nsprpub/pr/src/pthreads/ptthread.c:191 45 libnss3.so pt_AttachThread nsprpub/pr/src/pthreads/ptthread.c:283 46 libc.so libc.so@0x11bea 47 libc.so libc.so@0x117ae More reports at: https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Alayers%3A%3AShmemYCbCrImage%3A%3ACopyData%28unsigned+char+const*%2C+unsigned+char+const*%2C+unsigned+char+const*%2C+nsIntSize%2C+unsigned+int%2C+nsIntSize%2C+unsigned+int%2C+unsigned+int%2C+unsigned+int%29
Starting this off with blassey since he knows ARMv6 voodoo
Assignee: nobody → blassey.bugs
Snorp, do you have a wildfire S?
Assignee: blassey.bugs → snorp
I do have a Wildfire S, and will try to take a look at this.
(In reply to James Willcox (:snorp) (jwillcox@mozilla.com) from comment #3) > I do have a Wildfire S, and will try to take a look at this. Any updates? Please add qawanted if we need their help.
Flags: needinfo?(snorp)
Strangely, it works fine in gdb. Ugh.
Keywords: reproducible
Bug 845867 is so high that this bug exited top-5 ARMv6 crashers: #17 in 22.0.
Keywords: topcrash
What does this look like on 23?
Flags: needinfo?(scoobidiver)
(In reply to lsblakk@mozilla.com [:lsblakk] from comment #8) > What does this look like on 23? It fluctuates on ARMv6 crashes but still low: no crashes on July 4, #7 on July 5, #26 on July 6, no crashes on July 7. There's no need to track.
Flags: needinfo?(scoobidiver)
Component: Audio/Video → Audio/Video: Playback
Crash Signature: [@ mozilla::layers::ShmemYCbCrImage::CopyData(unsigned char const*, unsigned char const*, unsigned char const*, nsIntSize, unsigned int, nsIntSize, unsigned int, unsigned int, unsigned int)] → [@ mozilla::layers::ShmemYCbCrImage::CopyData(unsigned char const*, unsigned char const*, unsigned char const*, nsIntSize, unsigned int, nsIntSize, unsigned int, unsigned int, unsigned int)] [@ mozilla::layers::ShmemYCbCrImage::CopyData]
Gingerbread is no longer supported.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.