Closed Bug 893373 Opened 12 years ago Closed 9 years ago

[Win7] startup crash in HwGlyphRunRealizer::IssueRenderingCommands after installing MS KB2835361 (July 10)

Categories

(Core :: Graphics, defect)

Product:
Core
Component:
Graphics
Version:
22 Branch
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, Whiteboard: [startupcrash])

Crash Data

It's a new startup crash that is currently #130 browser crasher in 22.0 and started spiking on July 11. A comment says: "Recent Windows update KB2835361 causes Firefox (versions 21 and 22) to crash" (see http://technet.microsoft.com/en-US/security/bulletin/ms13-054). It's confirmed by correlations: 100% (189/189) vs. 6% (5675/102928) d3d10.dll 0% (0/189) vs. 0% (4/102928) 6.1.7100.0 0% (0/189) vs. 0% (1/102928) 6.1.7600.16384 99% (187/189) vs. 5% (5164/102928) 6.1.7600.16385 0% (0/189) vs. 0% (7/102928) 6.2.9200.16384 1% (2/189) vs. 0% (99/102928) 6.2.9200.16492 0% (0/189) vs. 0% (5/102928) 7.0.6002.18107 0% (0/189) vs. 0% (109/102928) 7.0.6002.22573 0% (0/189) vs. 0% (286/102928) 7.0.6002.23097 Stack traces are various: Frame Module Signature Source 0 d2d1.dll HwGlyphRunRealizer::IssueRenderingCommands(BatchedBrush *) 1 d2d1.dll CHwSurfaceRenderTarget::DrawGlyphRunInternal(D2D_POINT_2F,DWRITE_GLYPH_RUN const *,BatchedBrush *,DWRITE_MEASURING_MODE) 2 d2d1.dll CCommand_DrawGlyphRun::Execute(CBaseRenderTarget *) 3 d2d1.dll CHwSurfaceRenderTarget::ProcessBatch(CBatch *) 4 d2d1.dll CBatchSerializer::FlushInternal() 5 d2d1.dll DrawingContext::FlushBatch() 6 d2d1.dll DrawingContext::Flush(unsigned __int64 *,unsigned __int64 *) 7 d2d1.dll D2DRenderTargetBase<ID2D1BitmapRenderTarget>::Flush(unsigned __int64 *,unsigned __int64 *) 8 gkmedias.dll mozilla::gfx::DrawTargetD2D::FillGlyphsManual(mozilla::gfx::ScaledFontDWrite *,mozilla::gfx::GlyphBuffer const &,mozilla::gfx::Color const &,IDWriteRenderingParams *,mozilla::gfx::DrawOptions const &) gfx/2d/DrawTargetD2D.cpp 9 gkmedias.dll mozilla::gfx::DrawTargetD2D::FillGlyphs(mozilla::gfx::ScaledFont *,mozilla::gfx::GlyphBuffer const &,mozilla::gfx::Pattern const &,mozilla::gfx::DrawOptions const &,mozilla::gfx::GlyphRenderingOptions const *) gfx/2d/DrawTargetD2D.cpp 10 xul.dll GlyphBufferAzure::Flush(mozilla::gfx::DrawTarget *,gfxTextObjectPaint *,mozilla::gfx::ScaledFont *,gfxFont::DrawMode,bool,mozilla::gfx::GlyphRenderingOptions const *,gfxContext *,mozilla::gfx::Matrix const *,mozilla::gfx::DrawOptions const &,bool) gfx/thebes/gfxFont.cpp 11 xul.dll gfxFont::Draw(gfxTextRun *,unsigned int,unsigned int,gfxContext *,gfxFont::DrawMode,gfxPoint *,gfxFont::Spacing *,gfxTextObjectPaint *,gfxTextRunDrawCallbacks *) gfx/thebes/gfxFont.cpp 12 xul.dll gfxTextRun::Draw(gfxContext *,gfxPoint,gfxFont::DrawMode,unsigned int,unsigned int,gfxTextRun::PropertyProvider *,double *,gfxTextObjectPaint *,gfxTextRunDrawCallbacks *) gfx/thebes/gfxFont.cpp 13 xul.dll nsFontMetrics::DrawString(wchar_t const *,unsigned int,int,int,nsRenderingContext *,nsRenderingContext *) gfx/src/nsFontMetrics.cpp 14 xul.dll nsTextBoxFrame::DrawText(nsRenderingContext &,nsRect const &,nsRect const &,unsigned int const *) layout/xul/base/src/nsTextBoxFrame.cpp ... Frame Module Signature Source 0 d2d1.dll HwGlyphRunRealizer::IssueRenderingCommands(BatchedBrush *) 1 d2d1.dll CHwSurfaceRenderTarget::DrawGlyphRunInternal(D2D_POINT_2F,DWRITE_GLYPH_RUN const *,BatchedBrush *,DWRITE_MEASURING_MODE) 2 d2d1.dll CCommand_DrawGlyphRun::Execute(CBaseRenderTarget *) 3 d2d1.dll CHwSurfaceRenderTarget::ProcessBatch(CBatch *) 4 d2d1.dll CBatchSerializer::FlushInternal() 5 d2d1.dll DrawingContext::FlushBatch() 6 d2d1.dll DrawingContext::Flush(unsigned __int64 *,unsigned __int64 *) 7 d2d1.dll D2DRenderTargetBase<ID2D1BitmapRenderTarget>::Flush(unsigned __int64 *,unsigned __int64 *) 8 gkmedias.dll mozilla::gfx::DrawTargetD2D::Flush() gfx/2d/DrawTargetD2D.cpp 9 gkmedias.dll mozilla::gfx::DrawTargetD2D::Snapshot() gfx/2d/DrawTargetD2D.cpp 10 xul.dll gfxContext::PopGroupToSource() gfx/thebes/gfxContext.cpp 11 xul.dll mozilla::layers::BasicLayerManager::PopGroupToSourceWithCachedSurface(gfxContext *,gfxContext *) gfx/layers/basic/BasicLayerManager.cpp 12 xul.dll mozilla::layers::BasicThebesLayer::PaintThebes(gfxContext *,mozilla::layers::Layer *,void (*)(mozilla::layers::ThebesLayer *,gfxContext *,nsIntRegion const &,nsIntRegion const &,void *),void *,mozilla::layers::ReadbackProcessor *) gfx/layers/basic/BasicThebesLayer.cpp 13 xul.dll mozilla::layers::BasicLayerManager::PaintSelfOrChildren(mozilla::layers::PaintLayerContext &,gfxContext *) gfx/layers/basic/BasicLayerManager.cpp ... Frame Module Signature Source 0 d2d1.dll HwGlyphRunRealizer::IssueRenderingCommands(BatchedBrush *) 1 d2d1.dll CHwSurfaceRenderTarget::DrawGlyphRunInternal(D2D_POINT_2F,DWRITE_GLYPH_RUN const *,BatchedBrush *,DWRITE_MEASURING_MODE) 2 d2d1.dll CCommand_DrawGlyphRun::Execute(CBaseRenderTarget *) 3 d2d1.dll CHwSurfaceRenderTarget::ProcessBatch(CBatch *) 4 d2d1.dll CBatchSerializer::FlushInternal() 5 d2d1.dll DrawingContext::FlushBatch() 6 d2d1.dll DrawingContext::Flush(unsigned __int64 *,unsigned __int64 *) 7 d2d1.dll D2DRenderTargetBase<ID2D1BitmapRenderTarget>::Flush(unsigned __int64 *,unsigned __int64 *) 8 gkmedias.dll mozilla::gfx::DrawTargetD2D::Flush() gfx/2d/DrawTargetD2D.cpp 9 xul.dll gfxContext::~gfxContext() gfx/thebes/gfxContext.cpp 10 xul.dll xul.dll@0x18cf60 11 xul.dll gfxContext::Release() obj-firefox/dist/include/gfxContext.h 12 xul.dll nsRefPtr<gfxContext>::~nsRefPtr<gfxContext>() obj-firefox/dist/include/nsAutoPtr.h 13 xul.dll mozilla::layers::ThebesLayerD3D10::DrawRegion(nsIntRegion &,mozilla::layers::Layer::SurfaceMode) gfx/layers/d3d10/ThebesLayerD3D10.cpp 14 gkmedias.dll mozilla::gfx::Factory::CreateDrawTargetForD3D10Texture(ID3D10Texture2D *,mozilla::gfx::SurfaceFormat) gfx/2d/Factory.cpp 15 xul.dll mozilla::layers::ThebesLayerD3D10::Validate(mozilla::layers::ReadbackProcessor *) gfx/layers/d3d10/ThebesLayerD3D10.cpp ... More reports at: https://crash-stats.mozilla.com/report/list?signature=HwGlyphRunRealizer%3A%3AIssueRenderingCommands%28BatchedBrush*%29
Crash Signature: [@ HwGlyphRunRealizer::IssueRenderingCommands(BatchedBrush*)] → [@ HwGlyphRunRealizer::IssueRenderingCommands(BatchedBrush*)] [@ HwGlyphRunRealizer::IssueRenderingCommands]
There are no reports of this crash beyond Firefox 43. Please reopen this bug report if you can reproduce the crash.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.