896166 - crash in mozilla::layers::DeprecatedTextureHost::CreateDeprecatedTextureHost

Status: RESOLVED INCOMPLETE

(Core :: Graphics: Layers, defect)

Description

[Scoobidiver (away)]

It first showed up in 25.0a1/20130711 but is discontinuous across builds.

Signature 	mozilla::layers::DeprecatedTextureHost::CreateDeprecatedTextureHost(int, unsigned int, unsigned int) More Reports Search
UUID 	6388ac5d-0858-4004-9f22-2c2d22130720
Date Processed	2013-07-20 03:30:30.269584
Uptime	10
Last Crash	396768 seconds before submission
Install Age 	10 since version was first installed.
Install Time 	2013-07-20 03:30:09
Product 	FennecAndroid
Version 	25.0a1
Build ID 	20130719030204
Release Channel 	nightly
OS 	Android
OS Version 	0.0.0 Linux 3.0.31-795498 #1 SMP PREEMPT Fri Feb 1 22:41:37 KST 2013 armv7l samsung/p4noterfxx/p4not
Build Architecture 	arm
Build Architecture Info 	ARMv0 | 4
Crash Reason 	SIGSEGV
Crash Address 	0x0
App Notes 	
AdapterDescription: 'ARM -- Mali-400 MP -- OpenGL ES 2.0 -- Model: GT-N8000, Product: p4noterfxx, Manufacturer: samsung, Hardware: smdk4x12'
Stagefright? Stagefright+ 
samsung GT-N8000
samsung/p4noterfxx/p4noterf:4.1.2/JZO54K/N8000DXUCMB1:user/release-keys
Adapter Vendor ID 	ARM
Adapter Device ID 	Mali-400 MP
Android CPU ABI 	armeabi-v7a
Android Manufacturer 	samsung
Android Model 	GT-N8000
Android Version 	16 (REL)

Frame 	Module 	Signature 	Source
0 	libxul.so 	mozilla::layers::DeprecatedTextureHost::CreateDeprecatedTextureHost(int, unsigned int, unsigned int) 	gfx/layers/composite/TextureHost.cpp
1 	libxul.so 	mozilla::layers::ImageHostSingle::MakeDeprecatedTextureHost(unsigned int, mozilla::layers::SurfaceDescriptor const&, mozilla::layers::ISurfaceAllocator*, mozilla::layers::TextureInfo const&) 	gfx/layers/composite/ImageHost.cpp
2 	libxul.so 	mozilla::layers::ImageHostBuffered::MakeDeprecatedTextureHost(unsigned int, mozilla::layers::SurfaceDescriptor const&, mozilla::layers::ISurfaceAllocator*, mozilla::layers::TextureInfo const&) 	gfx/layers/composite/ImageHost.cpp
3 	libxul.so 	mozilla::layers::ImageHostSingle::EnsureDeprecatedTextureHost(unsigned int, mozilla::layers::SurfaceDescriptor const&, mozilla::layers::ISurfaceAllocator*, mozilla::layers::TextureInfo const&) 	gfx/layers/composite/ImageHost.cpp
4 	libxul.so 	mozilla::layers::CompositableParentManager::ReceiveCompositableUpdate(mozilla::layers::CompositableOperation const&, std::vector<mozilla::layers::EditReply, std::allocator<mozilla::layers::EditReply> >&) 	gfx/layers/ipc/CompositableTransactionParent.cpp
5 	libxul.so 	mozilla::layers::ImageBridgeParent::RecvUpdate(nsTArray<mozilla::layers::CompositableOperation> const&, nsTArray<mozilla::layers::EditReply>*) 	gfx/layers/ipc/ImageBridgeParent.cpp
6 	libxul.so 	mozilla::layers::PImageBridgeParent::OnMessageReceived(IPC::Message const&, IPC::Message*&) 	obj-firefox/ipc/ipdl/PImageBridgeParent.cpp
7 	libxul.so 	mozilla::ipc::SyncChannel::OnDispatchMessage(IPC::Message const&) 	ipc/glue/SyncChannel.cpp
8 	libxul.so 	mozilla::ipc::RPCChannel::OnMaybeDequeueOne() 	ipc/glue/RPCChannel.cpp
9 	libxul.so 	RunnableMethod<ThumbnailRunnable, tag_nsresult (ThumbnailRunnable::*)(), Tuple0>::Run() 	ipc/chromium/src/base/tuple.h
10 	libxul.so 	mozilla::ipc::RPCChannel::DequeueTask::Run() 	obj-firefox/dist/include/mozilla/ipc/RPCChannel.h
11 	libxul.so 	MessageLoop::RunTask(Task*) 	ipc/chromium/src/base/message_loop.cc
12 	libxul.so 	MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) 	ipc/chromium/src/base/message_loop.cc
13 	libxul.so 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
14 	libxul.so 	base::MessagePumpDefault::Run(base::MessagePump::Delegate*) 	ipc/chromium/src/base/message_pump_default.cc
15 	libxul.so 	MessageLoop::RunInternal() 	ipc/chromium/src/base/message_loop.cc
16 	libxul.so 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
17 	libxul.so 	base::Thread::ThreadMain() 	ipc/chromium/src/base/thread.cc
18 	libxul.so 	ThreadFunc 	ipc/chromium/src/base/platform_thread_posix.cc
19 	libc.so 	libc.so@0x12e02 	
20 	libc.so 	libc.so@0x1255a 	

More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=mozilla%3A%3Alayers%3A%3ADeprecatedTextureHost%3A%3ACreateDeprecatedTextureHost%28int%2C+unsigned+int%2C+unsigned+int%29

Comment 1

[Milan Sreckovic [:milan] (needinfo for best results)]

Nicolas, related to the recent landing?

Comment 2

[Nicolas Silva [:nical]]

So far the only thing that landed is renaming classes, So I don't think so.
From the look of the stack trace it could be that Compositor::GetBackend() returned an invalid backend token. This could happen if we haven't yet instantiated a Compositor, which is surprising because by the time we receive compositable updates we should already have created a compositor long ago.
Or it could be something else, but this function doesn't have a lot of things that could lead to this segfault.

Comment 3

[u279076]

Closing due to a lack of recent reports. Please reopen this bug report if you can reproduce the crash in a current version.