Closed Bug 923172 Opened 12 years ago Closed 12 years ago

Crashes in libsystem_c.dylib [@ mozilla::gfx::SourceSurfaceCG::InitFromData ], mostly on OS X 10.8

Categories

(Core :: Graphics, defect)

Product:
Core
Component:
Graphics
Version:
27 Branch
Platform:
All
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 920571

People

(Reporter: smichaud, Unassigned)

Details

(Whiteboard: topcrasher)

Crash Data

This is a fairly high volume crash (#4 on Mac trunk over the last week) that appears to have started with the firefox-2013-09-21-03-02-21-mozilla-central nightly. This implies the following regression range: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=8f8a683dfc42&tochange=a2c31dc69ab3
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ]
I'd guess these crashes were triggered by one of the patches for bug 917703 or bug 907926.
Flags: needinfo?(matt.woodrow)
0 libsystem_c.dylib libsystem_c.dylib@0x1ac1 1 XUL mozilla::gfx::SourceSurfaceCG::InitFromData(unsigned char*, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, int, mozilla::gfx::SurfaceFormat) gfx/2d/SourceSurfaceCG.cpp 2 XUL mozilla::gfx::DrawTargetCG::CreateSourceSurfaceFromData(unsigned char*, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, int, mozilla::gfx::SurfaceFormat) const gfx/2d/DrawTargetCG.cpp 3 XUL gfxPlatform::GetSourceSurfaceForSurface(mozilla::gfx::DrawTarget*, gfxASurface*) gfx/thebes/gfxPlatform.cpp 4 XUL gfxPattern::GetPattern(mozilla::gfx::DrawTarget*, mozilla::gfx::Matrix*) gfx/thebes/gfxPattern.cpp 5 XUL gfxContext::FillAzure(float) gfx/thebes/gfxContext.cpp 6 XUL gfxContext::Fill() gfx/thebes/gfxContext.cpp 7 XUL gfxSurfaceDrawable::Draw(gfxContext*, gfxRect const&, bool, gfxPattern::GraphicsFilter const&, gfxMatrix const&) gfx/thebes/gfxDrawable.cpp 8 XUL gfxUtils::DrawPixelSnapped(gfxContext*, gfxDrawable*, gfxMatrix const&, gfxRect const&, gfxRect const&, gfxRect const&, gfxRect const&, gfxImageFormat, gfxPattern::GraphicsFilter, unsigned int) gfx/thebes/gfxUtils.cpp 9 XUL imgFrame::Draw(gfxContext*, gfxPattern::GraphicsFilter, gfxMatrix const&, gfxRect const&, nsIntMargin const&, nsIntRect const&, unsigned int) image/src/imgFrame.cpp 10 XUL mozilla::image::RasterImage::DrawWithPreDownscaleIfNeeded(imgFrame*, gfxContext*, gfxPattern::GraphicsFilter, gfxMatrix const&, gfxRect const&, nsIntRect const&, unsigned int) image/src/RasterImage.cpp 11 XUL mozilla::image::RasterImage::Draw(gfxContext*, gfxPattern::GraphicsFilter, gfxMatrix const&, gfxRect const&, nsIntRect const&, nsIntSize const&, mozilla::SVGImageContext const*, unsigned int, unsigned int) image/src/RasterImage.cpp 12 XUL DrawImageInternal layout/base/nsLayoutUtils.cpp 13 XUL nsLayoutUtils::DrawBackgroundImage(nsRenderingContext*, imgIContainer*, nsIntSize const&, gfxPattern::GraphicsFilter, nsRect const&, nsRect const&, nsPoint const&, nsRect const&, unsigned int) layout/base/nsLayoutUtils.cpp 14 XUL nsImageRenderer::DrawBackground(nsPresContext*, nsRenderingContext&, nsRect const&, nsRect const&, nsPoint const&, nsRect const&) layout/base/nsCSSRendering.cpp 15 XUL nsCSSRendering::PaintBackgroundWithSC(nsPresContext*, nsRenderingContext&, nsIFrame*, nsRect const&, nsRect const&, nsStyleContext*, nsStyleBorder const&, unsigned int, nsRect*, int) layout/base/nsCSSRendering.cpp 16 XUL nsCSSRendering::PaintBackground(nsPresContext*, nsRenderingContext&, nsIFrame*, nsRect const&, nsRect const&, unsigned int, nsRect*, int) layout/base/nsCSSRendering.cpp 17 XUL nsDisplayBackgroundImage::Paint(nsDisplayListBuilder*, nsRenderingContext*) layout/base/nsDisplayList.cpp 18 XUL mozilla::FrameLayerBuilder::DrawThebesLayer(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, nsIntRegion const&, void*) layout/base/FrameLayerBuilder.cpp 19 XUL mozilla::layers::ClientThebesLayer::PaintBuffer(gfxContext*, nsIntRegion const&, nsIntRegion const&, nsIntRegion const&, bool) gfx/layers/client/ClientThebesLayer.cpp 20 XUL mozilla::layers::ClientThebesLayer::PaintThebes() gfx/layers/client/ClientThebesLayer.cpp 21 XUL mozilla::layers::ClientThebesLayer::RenderLayer() gfx/layers/client/ClientThebesLayer.cpp 22 XUL mozilla::layers::ClientContainerLayer::RenderLayer() gfx/layers/client/ClientContainerLayer.h 23 XUL mozilla::layers::ClientContainerLayer::RenderLayer() gfx/layers/client/ClientContainerLayer.h 24 XUL mozilla::layers::ClientLayerManager::EndTransactionInternal(void (*)(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) gfx/layers/client/ClientLayerManager.cpp 25 XUL mozilla::layers::ClientLayerManager::EndTransaction(void (*)(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) gfx/layers/client/ClientLayerManager.cpp 26 XUL nsDisplayList::PaintForFrame(nsDisplayListBuilder*, nsRenderingContext*, nsIFrame*, unsigned int) const layout/base/nsDisplayList.cpp 27 XUL nsDisplayList::PaintRoot(nsDisplayListBuilder*, nsRenderingContext*, unsigned int) const layout/base/nsDisplayList.cpp 28 XUL nsLayoutUtils::PaintFrame(nsRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) layout/base/nsLayoutUtils.cpp 29 XUL PresShell::Paint(nsView*, nsRegion const&, unsigned int) layout/base/nsPresShell.cpp 30 XUL nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) view/src/nsViewManager.cpp 31 XUL nsRefreshDriver::Tick(long long, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp 32 XUL mozilla::RefreshDriverTimer::Tick() layout/base/nsRefreshDriver.cpp 33 XUL nsTimerImpl::Fire() /builds/slave/ux-osx64-ntly-0000000000000000/build/obj-firefox/x86_64/xpcom/threads/../../../../xpcom/threads/nsTimerImpl.cpp 34 XUL nsTimerEvent::Run() /builds/slave/ux-osx64-ntly-0000000000000000/build/obj-firefox/x86_64/xpcom/threads/../../../../xpcom/threads/nsTimerImpl.cpp 35 XUL nsThread::ProcessNextEvent(bool, bool*) /builds/slave/ux-osx64-ntly-0000000000000000/build/obj-firefox/x86_64/xpcom/threads/../../../../xpcom/threads/nsThread.cpp 36 XUL NS_ProcessPendingEvents(nsIThread*, unsigned int) /builds/slave/m-in-osx64-0000000000000000000/build/obj-firefox/x86_64/xpcom/build/../../../../xpcom/glue/nsThreadUtils.cpp 37 XUL nsBaseAppShell::NativeEventCallback() /builds/slave/m-in-osx64-0000000000000000000/build/obj-firefox/x86_64/widget/xpwidgets/../../../../widget/xpwidgets/nsBaseAppShell.cpp 38 XUL nsAppShell::ProcessGeckoEvents(void*) widget/cocoa/nsAppShell.mm 39 CoreFoundation CoreFoundation@0x12b31 40 CoreFoundation CoreFoundation@0x12455 41 CoreFoundation CoreFoundation@0x357f5 42 CarbonCore CarbonCore@0x1b806 43 XUL nsIDOMChromeWindow::COMTypeInfo<int>::kIID 44 XUL nsXBLWindowKeyHandler::WalkHandlers(nsIDOMKeyEvent*, nsIAtom*) content/xbl/src/nsXBLWindowKeyHandler.cpp 45 CoreFoundation CoreFoundation@0x350e2 46 HIToolbox HIToolbox@0x5feb4 47 HIToolbox HIToolbox@0x5fb94 48 HIToolbox HIToolbox@0x5fae3 49 AppKit AppKit@0x155533 50 CoreFoundation CoreFoundation@0x35279 51 libobjc.A.dylib objc::DenseMap<objc_object*, unsigned long, true, objc::DenseMapInfo<objc_object*>, objc::DenseMapInfo<unsigned long> >::find(objc_object* const&) 52 AppKit AppKit@0x154df2 53 AppKit AppKit@0x12f549 54 AppKit AppKit@0x3a1d53 55 AppKit AppKit@0x3a1d20 56 AppKit AppKit@0x3a1d40 57 AppKit AppKit@0x236aff
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ]
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ]
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ]
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ]
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] [@ libsystem_c.dylib@0x1a7b ]
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] [@ libsystem_c.dylib@0x1a7b ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] [@ libsystem_c.dylib@0x1a7b ] [@ libsystem_c.dylib@0x1a75 ]
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] [@ libsystem_c.dylib@0x1a7b ] [@ libsystem_c.dylib@0x1a75 ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] [@ libsystem_c.dylib@0x1a7b ] [@ libsystem_c.dylib@0x1a75 ] [@ libsystem_c.dylib@0x12cc ]
Crash Signature: [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] [@ libsystem_c.dylib@0x1a7b ] [@ libsystem_c.dylib@0x1a75 ] [@ libsystem_c.dylib@0x12cc ] → [@ libsystem_c.dylib@0x1ac1 ] [@ libsystem_c.dylib@0x1ab5 ] [@ libsystem_c.dylib@0x1ab0 ] [@ libsystem_c.dylib@0x1abb ] [@ libsystem_c.dylib@0x1a70 ] [@ libsystem_c.dylib@0x1a7b ] [@ libsystem_c.dylib@0x1a75 ] [@ libsystem_c.dylib@0x12cc ] [@ libs…
Crash Signature: libsystem_c.dylib@0x1a81 ] → libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ]
Crash Signature: libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] → libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] [@ libsystem_c.dylib@0x1b11 ]
Crash Signature: libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] [@ libsystem_c.dylib@0x1b11 ] → libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] [@ libsystem_c.dylib@0x1b11 ] [@ libsystem_c.dylib@0x27d85 ]
All but one of the signature's I've found is on OS X 10.8. But I did find one on OS X 10.7: https://crash-stats.mozilla.com/report/list?signature=libsystem_c.dylib%400x27d85&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&platform=mac&version=Firefox%3A27.0a1&hang_type=any&date=2013-10-02+16%3A00%3A00&range_value=2#reports Together these are easily the #1 Mac topcrasher on the 27 branch.
tracking-firefox27: --- → ?
Summary: Crashes [@ libsystem_c.dylib@0x1ac1 ] on OS X 10.8 → Crashes in libsystem_c.dylib [@ mozilla::gfx::SourceSurfaceCG::InitFromData ], mostly OS X 10.8
Whiteboard: topcrasher
Summary: Crashes in libsystem_c.dylib [@ mozilla::gfx::SourceSurfaceCG::InitFromData ], mostly OS X 10.8 → Crashes in libsystem_c.dylib [@ mozilla::gfx::SourceSurfaceCG::InitFromData ], mostly on OS X 10.8
Version: Trunk → 27 Branch
It's possible this has been fixed by the patch for bug 920571. I don't see any of these crashes in builds later than firefox-2013-09-30-07-12-02.
Crash Signature: libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] [@ libsystem_c.dylib@0x1b11 ] [@ libsystem_c.dylib@0x27d85 ] → libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] [@ libsystem_c.dylib@0x1b11 ] [@ libsystem_c.dylib@0x27d85 ] [@ mozilla::gfx::SourceSurfaceCG::InitFromData(unsigned char*, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, int, m…
It does look a lot like duplicate of bug 920571. Matt, if you agree, let's just dupe this bug to that one.
I also think it's a dup.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
tracking-firefox27: ? → ---
Flags: needinfo?(matt.woodrow)
Crash Signature: libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] [@ libsystem_c.dylib@0x1b11 ] [@ libsystem_c.dylib@0x27d85 ] [@ mozilla::gfx::SourceSurfaceCG::InitFromData(unsigned char*, mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, int, m… → libsystem_c.dylib@0x1a81 ] [@ libsystem_c.dylib@0x1b01 ] [@ libsystem_c.dylib@0x1b11 ] [@ libsystem_c.dylib@0x27d85 ] [@ libsystem_c.dylib@0x34a57 ] [@ mozilla::gfx::SourceSurfaceCG::InitFromData(unsigned char*, mozilla::gfx::IntSizeTyped<mozilla::g…
You need to log in before you can comment on or make changes to this bug.