906197 - Intermittent test_webgl_conformance_test_suite.html | application crashed [@ 0xfffffffe][@ mozilla::FramePropertyTable::Get(nsIFrame const*, mozilla::FramePropertyDescriptor const*, bool*)]

Status: RESOLVED WORKSFORME

(Core :: Layout, defect, P5)

Description

[Ryan VanderMeulen [:RyanVM]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=26645991&tree=Mozilla-Inbound

Android 4.0 Panda mozilla-inbound opt test mochitest-gl on 2013-08-16 11:21:23 PDT for push bd3c00d28b55
slave: panda-0853

11:36:31     INFO -  4617 INFO TEST-INFO | /tests/content/canvas/test/webgl/test_webgl_conformance_test_suite.html | [conformance/misc/uninitialized-test.html] (WebGL mochitest) Starting test page
11:36:31     INFO -  INFO | automation.py | Application ran for: 0:02:43.473164
11:36:31     INFO -  INFO | zombiecheck | Reading PID log: /tmp/tmpNEvIUmpidlog
11:36:32     INFO -  mozcrash INFO | Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/mobile/tinderbox-builds/mozilla-inbound-android/1376671822/fennec-26.0a1.en-US.android-arm.crashreporter-symbols.zip
11:36:45     INFO -  /data/anr/traces.txt not found
11:36:45  WARNING -  PROCESS-CRASH | /tests/content/canvas/test/webgl/test_webgl_conformance_test_suite.html | application crashed [@ 0xfffffffe]
11:36:45     INFO -  Crash dump filename: /tmp/tmpP3dYLc/59f1e5a7-f536-19cf-745a74af-5be9bab5.dmp
11:36:45     INFO -  Operating system: Android
11:36:45     INFO -                    0.0.0 Linux 3.2.0+ #2 SMP PREEMPT Thu Nov 29 08:06:57 EST 2012 armv7l pandaboard/pandaboard/pandaboard:4.0.4/IMM76I/5:eng/test-keys
11:36:45     INFO -  CPU: arm
11:36:45     INFO -       2 CPUs
11:36:45     INFO -  Crash reason:  SIGSEGV
11:36:45     INFO -  Crash address: 0xfffffffe
11:36:45     INFO -  Thread 13 (crashed)
11:36:45     INFO -   0  0xfffffffe
11:36:45     INFO -       r4 = 0x6aa4e474    r5 = 0x00000000    r6 = 0x6c5ae8f0    r7 = 0x692f4298
11:36:45     INFO -       r8 = 0x63a3bfb0    r9 = 0x00000000   r10 = 0x6926fc00    fp = 0xffffffff
11:36:45     INFO -       sp = 0x5d40e458    lr = 0x6258f9b9    pc = 0xfffffffe
11:36:45     INFO -      Found by: given as instruction pointer in context
11:36:45     INFO -   1  libxul.so!mozilla::FramePropertyTable::Get(nsIFrame const*, mozilla::FramePropertyDescriptor const*, bool*) [FramePropertyTable.cpp:bd3c00d28b55 : 77 + 0x5]
11:36:45     INFO -       sp = 0x5d40e460    pc = 0x626abd4d
11:36:45     INFO -      Found by: stack scanning
11:36:45     INFO -   2  libxul.so!AppendIfNonempty [nsContainerFrame.cpp:bd3c00d28b55 : 310 + 0x3]
11:36:45     INFO -       r4 = 0x00000080    r5 = 0x5d40e4d4    sp = 0x5d40e478    pc = 0x627042a3
11:36:45     INFO -      Found by: call frame info
11:36:45     INFO -   3  libxul.so!nsContainerFrame::GetChildLists(nsTArray<mozilla::layout::FrameChildList>*) const [nsContainerFrame.cpp:bd3c00d28b55 : 322 + 0x5]
11:36:45     INFO -       r4 = 0x6c5ae8f0    r5 = 0x5d40e4d4    r6 = 0x6aa4e474    sp = 0x5d40e488
11:36:45     INFO -       pc = 0x627042dd
11:36:45     INFO -      Found by: call frame info
11:36:45     INFO -   4  libxul.so!nsIFrame::GetCrossDocChildLists(nsTArray<mozilla::layout::FrameChildList>*) [nsFrame.cpp:bd3c00d28b55 : 1305 + 0x9]
11:36:45     INFO -       r4 = 0x6c5ae8f0    r5 = 0x5d40e4d4    r6 = 0x00000000    sp = 0x5d40e4a0
11:36:45     INFO -       pc = 0x6270f339
11:36:45     INFO -      Found by: call frame info
11:36:45     INFO -   5  libxul.so!nsIFrame::ClearInvalidationStateBits() [nsFrame.cpp:bd3c00d28b55 : 4804 + 0x7]
11:36:45     INFO -       r4 = 0x6c5ae8f0    r5 = 0x5d40e4d4    r6 = 0x00000000    sp = 0x5d40e4c0
11:36:45     INFO -       pc = 0x6270ffd7
11:36:45     INFO -      Found by: call frame info
11:36:45     INFO -   6  libxul.so!nsIFrame::ClearInvalidationStateBits() [nsFrame.cpp:bd3c00d28b55 : 4810 + 0x5]
11:36:45     INFO -       r4 = 0x68e22a60    r5 = 0x5d40e534    r6 = 0x00000000    sp = 0x5d40e520
11:36:45     INFO -       pc = 0x6270fff1
11:36:45     INFO -      Found by: call frame info
11:36:45     INFO -   7  libxul.so!nsIFrame::ClearInvalidationStateBits() [nsFrame.cpp:bd3c00d28b55 : 4810 + 0x5]
11:36:45     INFO -       r4 = 0x68378cc0    r5 = 0x5d40e594    r6 = 0x00000000    sp = 0x5d40e580
11:36:45     INFO -       pc = 0x6270fff1

Comment 1

[Mats Palmgren (inactive)]

Attachment: stack (for posterity)

Comment 2

[Mats Palmgren (inactive)]

Interesting, I don't think I've seen this crash stack before.
Here's the source for the top stack frames:
http://hg.mozilla.org/mozilla-central/annotate/703b6a6e627b/layout/base/FramePropertyTable.cpp#l64
(the stack dump blames line 77, fwiw)
http://hg.mozilla.org/mozilla-central/annotate/703b6a6e627b/layout/generic/nsContainerFrame.cpp#l302
(the stack dump blames line 322, fwiw)

Comment 3

[Mats Palmgren (inactive)]

... and nsIFrame::GetCrossDocChildLists (at line 1305 per stack dump, fwiw):
http://hg.mozilla.org/mozilla-central/annotate/703b6a6e627b/layout/generic/nsFrame.cpp#l1292
nsIFrame::ClearInvalidationStateBits (at line 4804 per stack dump, fwiw):
http://hg.mozilla.org/mozilla-central/annotate/703b6a6e627b/layout/generic/nsFrame.cpp#l4800

Comment 5

[Mats Palmgren (inactive)]

It looks like the test_webgl_conformance_test_suite.html is running a series
of tests that it loads in an <iframe> ...

Maybe we could run test_webgl_conformance_test_suite.html multiple times
per test run, just to increase the chance of this crash occurring again?

Comment 6

[Ed Morley [:emorley]]

Intermittent failure not seen for >3 months; filter on mass-intermittent-wfm-20140812.