Closed Bug 902426 Opened 7 years ago Closed 7 years ago

crash in mozilla::dom::CanvasRenderingContext2D::Demote

Categories

(Core :: Canvas: 2D, defect, critical)

25 Branch
ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla26
Tracking Status
firefox24 --- unaffected
firefox25 + fixed
firefox26 --- fixed

People

(Reporter: scoobidiver, Assigned: snorp)

References

Details

(Keywords: crash, regression, topcrash)

Crash Data

Attachments

(1 file)

There's one crash after the fix of bug 898768.

Signature 	mozilla::dom::CanvasRenderingContext2D::Demote() More Reports Search
UUID 	6a9c2371-055e-402c-9fe1-1c58c2130806
Date Processed	2013-08-06 11:43:13.943433
Uptime	510
Install Age 	510 since version was first installed.
Install Time 	2013-08-06 11:34:31
Product 	FennecAndroid
Version 	25.0a1
Build ID 	20130805030205
Release Channel 	nightly
OS 	Android
OS Version 	0.0.0 Linux 3.1.10-franco.Kernel #65 SMP PREEMPT Fri Jun 21 02:17:56 WEST 2013 armv7l google/nakasi/
Build Architecture 	arm
Build Architecture Info 	ARMv0 | 4
Crash Reason 	SIGSEGV
Crash Address 	0x39
App Notes 	
AdapterDescription: 'NVIDIA Corporation -- NVIDIA Tegra 3 -- OpenGL ES 2.0 14.01002 -- Model: Nexus 7, Product: nakasi, Manufacturer: asus, Hardware: grouper'
GL Layers! EGL? EGL+ GL Context? GL Context+ GL Layers+ Stagefright? Stagefright+ 
asus Nexus 7
google/nakasi/grouper:4.2.2/JDQ39/573038:user/release-keys

Frame 	Module 	Signature 	Source
0 	libxul.so 	mozilla::dom::CanvasRenderingContext2D::Demote() 	content/canvas/src/CanvasRenderingContext2D.cpp
1 	libxul.so 	mozilla::dom::CanvasRenderingContext2D::EnsureTarget() 	content/canvas/src/CanvasRenderingContext2D.cpp
2 	libxul.so 	mozilla::dom::CanvasRenderingContext2D::DrawImage(mozilla::dom::HTMLImageElementOrHTMLCanvasElementOrHTMLVideoElement const&, double, double, double, double, double, double, double, double, unsigned char, mozilla::ErrorResult&) 	content/canvas/src/CanvasRenderingContext2D.cpp
3 	libxul.so 	mozilla::dom::CanvasRenderingContext2DBinding::drawImage 	obj-firefox/dist/include/mozilla/dom/CanvasRenderingContext2D.h
4 	libxul.so 	mozilla::dom::CanvasRenderingContext2DBinding::genericMethod 	obj-firefox/dom/bindings/CanvasRenderingContext2DBinding.cpp
5 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/jscntxtinlines.h
6 	libxul.so 	Interpret 	js/src/vm/Interpreter.cpp
7 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	js/src/vm/Interpreter.cpp
8 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
9 	libxul.so 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
10 	libxul.so 	JS_CallFunctionValue(JSContext*, JSObject*, JS::Value, unsigned int, JS::Value*, JS::Value*) 	js/src/jsapi.cpp
...

More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=mozilla%3A%3Adom%3A%3ACanvasRenderingContext2D%3A%3ADemote%28%29
There are also crashes with the initial stack trace: bp-64632006-b31f-4144-b700-650c52130809.
Summary: crash in mozilla::dom::CanvasRenderingContext2D::DrawImage @ mozilla::dom::CanvasRenderingContext2D::Demote → crash in mozilla::dom::CanvasRenderingContext2D::Demote
Attachment #788364 - Flags: review?(matt.woodrow) → review+
https://hg.mozilla.org/mozilla-central/rev/d457c3266659
Assignee: nobody → snorp
Status: NEW → RESOLVED
Closed: 7 years ago
Flags: in-testsuite?
Resolution: --- → FIXED
Target Milestone: --- → mozilla26
This is the top crasher on 25b6 please nominate for uplift.
Flags: needinfo?(snorp)
a=akeybl if this is low risk
You need to log in before you can comment on or make changes to this bug.