887214 - Graphics branch: Mochitest crash on B2G VM slaves in EnsureErrorTarget()

Status: RESOLVED WORKSFORME

(Core :: Graphics: Canvas2D, defect)

Description

[Benoit Jacob [:bjacob] (mostly away)]

https://tbpl.mozilla.org/php/getParsedLog.php?id=24598542&tree=Graphics#error0

21:33:29  WARNING -  TEST-UNEXPECTED-FAIL | /tests/content/base/test/test_bug590812.html | application timed out after 330 seconds with no output
21:33:29     INFO -  INFO | automation.py | Application ran for: 0:33:19.251484
21:33:29     INFO -  INFO | zombiecheck | Reading PID log: /tmp/tmpKY3Naupidlog
21:33:31     INFO -  mozcrash INFO | Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/b2g/tinderbox-builds/graphics-ics_armv7a_gecko/1372214659/b2g-25.0a1.en-US.android-arm.crashreporter-symbols.zip
21:33:31     INFO -  checking for crashes in '/data/local/tests/profile/minidumps'
21:33:31     INFO -  Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/b2g/tinderbox-builds/graphics-ics_armv7a_gecko/1372214659/b2g-25.0a1.en-US.android-arm.crashreporter-symbols.zip
21:33:53  WARNING -  PROCESS-CRASH | /tests/content/base/test/test_bug590812.html | application crashed [@ mozilla::dom::CanvasRenderingContext2D::EnsureErrorTarget()]
21:33:53     INFO -  Crash dump filename: /tmp/tmpI9gf1W/4d639411-d287-8cca-0aa22415-3a689053.dmp
21:33:53     INFO -  Operating system: Android
21:33:53     INFO -                    0.0.0 Linux 2.6.29-00294-g701690d #1 Mon May 20 22:43:07 CST 2013 armv7l Android/full/generic:4.0.4.0.4.0.4/OPENMASTER/1893:eng/test-keys
21:33:53     INFO -  CPU: arm
21:33:53     INFO -       0 CPUs
21:33:53     INFO -  Crash reason:  SIGSEGV
21:33:53     INFO -  Crash address: 0x4
21:33:53     INFO -  Thread 0 (crashed)
21:33:53     INFO -   0  libxul.so!mozilla::dom::CanvasRenderingContext2D::EnsureErrorTarget() [RefPtr.h:b47995bcf303 : 72 + 0x0]
21:33:53     INFO -       r4 = 0x41a6ec88    r5 = 0x40e4d451    r6 = 0x00000000    r7 = 0x00000000
21:33:53     INFO -       r8 = 0x00000000    r9 = 0x43ad8c00   r10 = 0x00000000    fp = 0x40600000
21:33:53     INFO -       sp = 0xbec11550    lr = 0x40e4d42d    pc = 0x406f2d0a
21:33:53     INFO -      Found by: given as instruction pointer in context
21:33:53     INFO -   1  libxul.so!mozilla::dom::CanvasRenderingContext2D::EnsureTarget() [CanvasRenderingContext2D.cpp:b47995bcf303 : 850 + 0x3]
21:33:53     INFO -       r4 = 0x43ad8c00    r5 = 0x43a0cea0    r6 = 0x00000000    r7 = 0x00000000
21:33:53     INFO -       r8 = 0x00000000    r9 = 0x43ad8c00   r10 = 0x00000000    fp = 0x40600000
21:33:53     INFO -       sp = 0xbec11570    pc = 0x406f4755
21:33:53     INFO -      Found by: call frame info
21:33:53     INFO -   2  libxul.so!mozilla::dom::CanvasRenderingContext2D::DrawWindow(nsIDOMWindow*, double, double, double, double, nsAString_internal const&, unsigned int, mozilla::ErrorResult&) [CanvasRenderingContext2D.cpp:b47995bcf303 : 3163 + 0x5]
21:33:53     INFO -       r4 = 0x433b38d0    r5 = 0x43ad8c00    r6 = 0x433b38d0    r7 = 0x00000000
21:33:53     INFO -       r8 = 0xbec11728    r9 = 0x43ad8c00   r10 = 0x00000000    fp = 0x40600000
21:33:53     INFO -       sp = 0xbec115a8    pc = 0x406f6eaf
21:33:53     INFO -      Found by: call frame info
21:33:53     INFO -   3  libxul.so!mozilla::dom::CanvasRenderingContext2DBinding::drawWindow [CanvasRenderingContext2DBinding.cpp:b47995bcf303 : 3079 + 0x25]
21:33:53     INFO -       r4 = 0x444a8190    r5 = 0xbec117ac    r6 = 0x433b38d0    r7 = 0xbec11728
21:33:53     INFO -       r8 = 0x433b38d0    r9 = 0x43ad8c00   r10 = 0x00000000    fp = 0x40600000
21:33:53     INFO -       sp = 0xbec11700    pc = 0x40c50e07
21:33:53     INFO -      Found by: call frame info
21:33:53     INFO -   4  libxul.so!mozilla::dom::CanvasRenderingContext2DBinding::genericMethod [CanvasRenderingContext2DBinding.cpp:b47995bcf303 : 4015 + 0x3]
21:33:53     INFO -       r4 = 0x40c50c1d    r5 = 0x444a8190    r6 = 0x43ad8c00    r7 = 0x456a7280
21:33:53     INFO -       r8 = 0x418597b4    r9 = 0xbec11c08   r10 = 0x41a632ac    fp = 0xbec11bf0
21:33:53     INFO -       sp = 0xbec117a0    pc = 0x40c4f375
21:33:53     INFO -      Found by: call frame info
21:33:53     INFO -   5  libxul.so!js::Invoke [jscntxtinlines.h:b47995bcf303 : 321 + 0x5]
21:33:53     INFO -       r4 = 0x00000000    r5 = 0x444a8190    r6 = 0xbec117f0    r7 = 0x418c1c3c
21:33:53     INFO -       r8 = 0x00000000    r9 = 0xbec11c08   r10 = 0x41a632ac    fp = 0xbec11bf0
21:33:53     INFO -       sp = 0xbec117d8    pc = 0x411bee15
21:33:53     INFO -      Found by: call frame info
21:33:53     INFO -   6  libxul.so!Interpret [Interpreter.cpp:b47995bcf303 : 2298 + 0xd]

Comment 1

[Benoit Jacob [:bjacob] (mostly away)]

The stack frame 1 shows that EnsureTarget destroyed the existing mTarget and failed to create a new one. It is a bit stupid, then, that this be the moment that we choose to try to create the Error target! The whole error target seems a bit wrong tbh, especially it having an actual surface, even if it's a 1x1 surface.

Comment 2

[Benoit Jacob [:bjacob] (mostly away)]

Er, rather, EnsureTarget saw that we didn't have a target, tried to create one, failed.