Closed Bug 928857 Opened 11 years ago Closed 11 years ago

[fugu]monkey test crash at nsDisplayItem::GetClippedBounds

Categories

(Firefox OS Graveyard :: General, defect)

ARM
Gonk (Firefox OS)
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED INVALID

People

(Reporter: james.zhang, Unassigned)

Details

Attachments

(1 file)

Pls see snapshot, maybe crash at "selected keyborads" scenario

Operating system: Android
                  0.0.0 Linux 3.0.8 #1 PREEMPT Fri Oct 18 14:23:33 CST 2013 armv7l Spreadtrum/sp7710ga_gonk/sp7710ga_gonk:4.0.4.0.4.0.4/OPENMASTER/68:eng/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x4b0

Thread 0 (crashed)
 0  libxul.so!nsDisplayItem::GetClippedBounds(nsDisplayListBuilder*) [nsDisplayList.cpp : 1620 + 0x0]
     r4 = 0xbef66210    r5 = 0xbef661d8    r6 = 0x000004b0    r7 = 0xbef661e8
     r8 = 0xbef688d8    r9 = 0xbef6629c   r10 = 0x00000001    fp = 0x00000001
     sp = 0xbef661c4    lr = 0x40f071df    pc = 0x40f0718e
    Found by: given as instruction pointer in context
 1  libxul.so!nsDisplayList::GetBounds(nsDisplayListBuilder*) const [nsDisplayList.cpp : 969 + 0x9]
     r4 = 0xbef66210    r5 = 0xbef661d8    r6 = 0x000004b0    r7 = 0xbef661e8
     r8 = 0xbef688d8    r9 = 0xbef6629c   r10 = 0x00000001    fp = 0x00000001
     sp = 0xbef661d8    pc = 0x40f071df
    Found by: call frame info
 2  libxul.so!nsDisplayWrapList::UpdateBounds(nsDisplayListBuilder*) [nsDisplayList.h : 2338 + 0xb]
     r4 = 0x47eadc5c    r5 = 0xbef66210    r6 = 0xbef688d8    r7 = 0xbef663dc
     r8 = 0x46f82448    r9 = 0xbef6629c   r10 = 0x00000001    fp = 0x00000001
     sp = 0xbef66210    pc = 0x40f07217
    Found by: call frame info
 3  libxul.so!nsDisplayWrapList::nsDisplayWrapList [nsDisplayList.cpp : 2763 + 0x7]
     r4 = 0x47eadc10    r5 = 0x4794abd8    r6 = 0xbef688d8    r7 = 0xbef663dc
     r8 = 0x46f82448    r9 = 0xbef6629c   r10 = 0x00000001    fp = 0x00000001
     sp = 0xbef66230    pc = 0x40f0733d
    Found by: call frame info
 4  libxul.so!WrapInWrapList [nsFrame.cpp : 1988 + 0x9]
     r4 = 0x47eadc10    r5 = 0xbef663dc    r6 = 0x4794abd8    r7 = 0xbef688d8
     r8 = 0x46f82448    r9 = 0xbef6629c   r10 = 0x00000001    fp = 0x00000001
     sp = 0xbef66250    pc = 0x40f50db3
    Found by: call frame info
 5  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2229 + 0x9]
     r4 = 0xbef688d8    r5 = 0x4794abd8    r6 = 0xbef662b4    r7 = 0xbef663dc
     r8 = 0x46f82448    r9 = 0xbef6629c   r10 = 0x00000001    fp = 0x00000001
     sp = 0xbef66268    pc = 0x40f53b5b
    Found by: call frame info
 6  libxul.so!DisplayLine [nsBlockFrame.cpp : 6090 + 0x13]
     r4 = 0xbef66868    r5 = 0xbef66678    r6 = 0x00000002    r7 = 0x4794aee8
     r8 = 0x4794a548    r9 = 0xbef688d8   r10 = 0x00000000    fp = 0x00000004
     sp = 0xbef66468    pc = 0x40f3d097
    Found by: call frame info
 7  libxul.so!nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsBlockFrame.cpp : 6182 + 0x1d]
     r4 = 0xbef66668    r5 = 0x4794a548    r6 = 0xbef688d8    r7 = 0xbef66868
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x80000000    fp = 0x80000000
     sp = 0xbef66578    pc = 0x40f3d23b
    Found by: call frame info
 8  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x4794a548    r6 = 0x40f3d0e5    r7 = 0xbef66868
     r8 = 0x470d5a88    r9 = 0x4794a010   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef666a8    pc = 0x40f539d9
    Found by: call frame info
 9  libxul.so!DisplayLine [nsBlockFrame.cpp : 6090 + 0x13]
     r4 = 0xbef66ca8    r5 = 0xbef66ab8    r6 = 0x00000000    r7 = 0x4794a548
     r8 = 0x4794a010    r9 = 0xbef688d8   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef668a8    pc = 0x40f3d097
    Found by: call frame info
10  libxul.so!nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsBlockFrame.cpp : 6182 + 0x1d]
     r4 = 0xbef66aa8    r5 = 0x4794a010    r6 = 0xbef688d8    r7 = 0xbef66ca8
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x80000000    fp = 0x80000000
     sp = 0xbef669b8    pc = 0x40f3d23b
    Found by: call frame info
11  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x4794a010    r6 = 0x40f3d0e5    r7 = 0xbef66ca8
     r8 = 0x470d5700    r9 = 0x470d5bc0   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef66ae8    pc = 0x40f539d9
    Found by: call frame info
12  libxul.so!nsCanvasFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsCanvasFrame.cpp : 360 + 0x11]
     r4 = 0x470d5bc0    r5 = 0xbef688d8    r6 = 0x4794a010    r7 = 0x00000000
     r8 = 0xbef66f38    r9 = 0x00000000   r10 = 0xbef66f50    fp = 0xffffffb8
     sp = 0xbef66ce8    pc = 0x40f456d3
    Found by: call frame info
13  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x470d5bc0    r6 = 0x40f45561    r7 = 0xbef66ee8
     r8 = 0x47538dc0    r9 = 0x470d5d98   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef66d28    pc = 0x40f539d9
    Found by: call frame info
14  libxul.so!nsGfxScrollFrameInner::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsGfxScrollFrame.cpp : 2304 + 0x13]
     r4 = 0x470d5de8    r5 = 0xbef688d8    r6 = 0x00000000    r7 = 0xbef6732c
     r8 = 0x424bf130    r9 = 0x00000000   r10 = 0xbef67288    fp = 0xbef67024
     sp = 0xbef66f28    pc = 0x40f5cab3
    Found by: call frame info
15  libxul.so!nsHTMLScrollFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsGfxScrollFrame.h : 445 + 0x5]
     r4 = 0xbef688d8    r5 = 0x470d5d98    r6 = 0x40f5cc9d    r7 = 0xbef67288
     r8 = 0x470d5c98    r9 = 0x470d5298   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef670c0    pc = 0x40f5cca5
    Found by: call frame info
16  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x470d5d98    r6 = 0x40f5cc9d    r7 = 0xbef67288
     r8 = 0x470d5c98    r9 = 0x470d5298   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef670c8    pc = 0x40f539d9
    Found by: call frame info
17  libxul.so!ViewportFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsViewportFrame.cpp : 70 + 0xf]
     r4 = 0x470d5298    r5 = 0xbef674cc    r6 = 0xbef688d8    r7 = 0xbef6732c
     r8 = 0x40445000    r9 = 0x4044a000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef672c8    pc = 0x40f82229
    Found by: call frame info
18  libxul.so!nsIFrame::BuildDisplayListForStackingContext(nsDisplayListBuilder*, nsRect const&, nsDisplayList*) [nsFrame.cpp : 1864 + 0xf]
     r4 = 0xbef688d8    r5 = 0x470d5298    r6 = 0xbef6732c    r7 = 0x40f8219d
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef672f8    pc = 0x40f51785
    Found by: call frame info
19  libxul.so!nsSubDocumentFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsSubDocumentFrame.cpp : 391 + 0xb]
     r4 = 0xbef688d8    r5 = 0x464f1c20    r6 = 0x470d5298    r7 = 0x00000000
     r8 = 0x00000001    r9 = 0x46786800   r10 = 0x0000003c    fp = 0x00000001
     sp = 0xbef67508    pc = 0x40f731ab
    Found by: call frame info
20  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2200 + 0xd]
     r4 = 0xbef688d8    r5 = 0x464f1c20    r6 = 0x40f72f6d    r7 = 0xbef677f0
     r8 = 0x464f1ad8    r9 = 0xbef67664   r10 = 0x00000001    fp = 0x00000000
     sp = 0xbef67630    pc = 0x40f53a5d
    Found by: call frame info
21  libxul.so!DisplayLine [nsBlockFrame.cpp : 6090 + 0x13]
     r4 = 0xbef67c30    r5 = 0xbef67a40    r6 = 0x00000000    r7 = 0x464f1c20
     r8 = 0x4644e3e8    r9 = 0xbef688d8   r10 = 0x00000000    fp = 0x00000004
     sp = 0xbef67830    pc = 0x40f3d097
    Found by: call frame info
22  libxul.so!nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsBlockFrame.cpp : 6182 + 0x1d]
     r4 = 0xbef67a30    r5 = 0x4644e3e8    r6 = 0xbef688d8    r7 = 0xbef67c30
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x80000000    fp = 0x80000000
     sp = 0xbef67940    pc = 0x40f3d23b
    Found by: call frame info
23  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x4644e3e8    r6 = 0x40f3d0e5    r7 = 0xbef67c30
     r8 = 0x4644e218    r9 = 0x46ba5c20   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef67a70    pc = 0x40f539d9
    Found by: call frame info
24  libxul.so!DisplayLine [nsBlockFrame.cpp : 6090 + 0x13]
     r4 = 0xbef68070    r5 = 0xbef67e80    r6 = 0x00000000    r7 = 0x4644e3e8
     r8 = 0x46ba5c20    r9 = 0xbef688d8   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef67c70    pc = 0x40f3d097
    Found by: call frame info
25  libxul.so!nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsBlockFrame.cpp : 6182 + 0x1d]
     r4 = 0xbef67e70    r5 = 0x46ba5c20    r6 = 0xbef688d8    r7 = 0xbef68070
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x80000000    fp = 0x80000000
     sp = 0xbef67d80    pc = 0x40f3d23b
    Found by: call frame info
26  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x46ba5c20    r6 = 0x40f3d0e5    r7 = 0xbef68070
     r8 = 0x45bd65e8    r9 = 0x45bd6730   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef67eb0    pc = 0x40f539d9
    Found by: call frame info
27  libxul.so!nsCanvasFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsCanvasFrame.cpp : 360 + 0x11]
     r4 = 0x45bd6730    r5 = 0xbef688d8    r6 = 0x46ba5c20    r7 = 0x00000000
     r8 = 0xbef68300    r9 = 0x00000000   r10 = 0xbef68318    fp = 0xffffffb8
     sp = 0xbef680b0    pc = 0x40f456d3
    Found by: call frame info
28  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x45bd6730    r6 = 0x40f45561    r7 = 0xbef682b0
     r8 = 0x46ba5990    r9 = 0x45bd6908   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef680f0    pc = 0x40f539d9
    Found by: call frame info
29  libxul.so!nsGfxScrollFrameInner::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsGfxScrollFrame.cpp : 2304 + 0x13]
     r4 = 0x45bd6958    r5 = 0xbef688d8    r6 = 0x00000000    r7 = 0xbef686f4
     r8 = 0x424bf130    r9 = 0x00000000   r10 = 0xbef68650    fp = 0xbef683ec
     sp = 0xbef682f0    pc = 0x40f5cab3
    Found by: call frame info
30  libxul.so!nsHTMLScrollFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsGfxScrollFrame.h : 445 + 0x5]
     r4 = 0xbef688d8    r5 = 0x45bd6908    r6 = 0x40f5cc9d    r7 = 0xbef68650
     r8 = 0x45bd6808    r9 = 0x45bd6298   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef68488    pc = 0x40f5cca5
    Found by: call frame info
31  libxul.so!nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) [nsFrame.cpp : 2187 + 0xd]
     r4 = 0xbef688d8    r5 = 0x45bd6908    r6 = 0x40f5cc9d    r7 = 0xbef68650
     r8 = 0x45bd6808    r9 = 0x45bd6298   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef68490    pc = 0x40f539d9
    Found by: call frame info
32  libxul.so!ViewportFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) [nsViewportFrame.cpp : 70 + 0xf]
     r4 = 0x45bd6298    r5 = 0xbef68894    r6 = 0xbef688d8    r7 = 0xbef686f4
     r8 = 0x40445000    r9 = 0x4044a000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef68690    pc = 0x40f82229
    Found by: call frame info
33  libxul.so!nsIFrame::BuildDisplayListForStackingContext(nsDisplayListBuilder*, nsRect const&, nsDisplayList*) [nsFrame.cpp : 1864 + 0xf]
     r4 = 0xbef688d8    r5 = 0x45bd6298    r6 = 0xbef686f4    r7 = 0x40f8219d
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef686c0    pc = 0x40f51785
    Found by: call frame info
34  libxul.so!nsLayoutUtils::GetFramesForArea(nsIFrame*, nsRect const&, nsTArray<nsIFrame*>&, unsigned int) [nsLayoutUtils.cpp : 1906 + 0xb]
     r4 = 0xbef688d8    r5 = 0x45bd6298    r6 = 0xbef68d80    r7 = 0xbef68d9c
     r8 = 0xbef68dc8    r9 = 0xbef69558   r10 = 0x4424a12c    fp = 0xbef69074
     sp = 0xbef688d0    pc = 0x40f1700b
    Found by: call frame info
35  libxul.so!nsLayoutUtils::GetFrameForPoint(nsIFrame*, nsPoint, unsigned int) [nsLayoutUtils.cpp : 1877 + 0x5]
     r4 = 0xbef68f50    r5 = 0x00000000    r6 = 0x45bd6298    r7 = 0x00000000
     r8 = 0xbef68ff0    r9 = 0xbef69558   r10 = 0x4424a12c    fp = 0xbef69074
     sp = 0xbef68dc8    pc = 0x40f170c9
    Found by: call frame info
36  libxul.so!mozilla::FindFrameTargetedByInputEvent(nsGUIEvent const*, nsIFrame*, nsPoint const&, unsigned int) [PositionedEventTargeting.cpp : 312 + 0x9]
     r4 = 0x424bf130    r5 = 0x42997bb0    r6 = 0x45bd6298    r7 = 0x00000000
     r8 = 0xbef68ff0    r9 = 0xbef69558   r10 = 0x4424a12c    fp = 0xbef69074
     sp = 0xbef68e18    pc = 0x40ee875f
    Found by: call frame info
37  libxul.so!PresShell::HandleEvent(nsIFrame*, nsGUIEvent*, bool, nsEventStatus*) [nsPresShell.cpp : 6281 + 0x9]
     r4 = 0xbef69558    r5 = 0x42997bb0    r6 = 0x45bd6298    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef68fd8   r10 = 0x4424a12c    fp = 0xbef69074
     sp = 0xbef68f98    pc = 0x40f2818f
    Found by: call frame info
38  libxul.so!nsViewManager::DispatchEvent(nsGUIEvent*, nsView*, nsEventStatus*) [nsViewManager.cpp : 740 + 0xf]
     r4 = 0xbef69558    r5 = 0xbef69050    r6 = 0x40f27981    r7 = 0x45bd6298
     r8 = 0x4044a000    r9 = 0x424d0978   r10 = 0x4424a12c    fp = 0x00000000
     sp = 0xbef69048    pc = 0x411927d3
    Found by: call frame info
39  libxul.so!nsView::HandleEvent(nsGUIEvent*, bool) [nsView.cpp : 1083 + 0xd]
     r4 = 0xbef69070    r5 = 0xbef69558    r6 = 0x424cfc40    r7 = 0x424d0978
     r8 = 0xbef69558    r9 = 0x424d0978   r10 = 0x4424a12c    fp = 0x00000000
     sp = 0xbef69070    pc = 0x41191439
    Found by: call frame info
40  libxul.so!nsWindow::DispatchEvent(nsGUIEvent*, nsEventStatus&) [nsWindow.cpp : 484 + 0x9]
     r4 = 0xbef6909c    r5 = 0x42311b28    r6 = 0x424cfc40    r7 = 0x424d0978
     r8 = 0xbef69558    r9 = 0x424d0978   r10 = 0x4424a12c    fp = 0x00000000
     sp = 0xbef69088    pc = 0x414957a1
    Found by: call frame info
41  libxul.so!nsWindow::DispatchInputEvent(nsGUIEvent&, bool*) [nsWindow.cpp : 288 + 0x11]
     r4 = 0x00000000    r5 = 0xbef69558    r6 = 0x424cfc40    r7 = 0x424d0978
     r8 = 0xbef69558    r9 = 0x424d0978   r10 = 0x4424a12c    fp = 0x00000000
     sp = 0xbef69098    pc = 0x4149615f
    Found by: call frame info
42  libxul.so!GeckoInputDispatcher::dispatchOnce() [nsAppShell.cpp : 155 + 0x3]
     r4 = 0xbef69558    r5 = 0x0000012e    r6 = 0xbef690e0    r7 = 0x424d0978
     r8 = 0xbef69558    r9 = 0x424d0978   r10 = 0x4424a12c    fp = 0x00000000
     sp = 0xbef690b0    pc = 0x41495041
    Found by: call frame info
43  libxul.so!nsAppShell::ProcessNextNativeEvent(bool) [nsAppShell.cpp : 835 + 0x5]
     r4 = 0x4291b100    r5 = 0x00000001    r6 = 0xbef69608    r7 = 0x00000001
     r8 = 0x00000048    r9 = 0x00000000   r10 = 0x00000001    fp = 0x00000000
     sp = 0xbef695f8    pc = 0x41493bfd
    Found by: call frame info
44  libxul.so!nsBaseAppShell::DoProcessNextNativeEvent(bool, unsigned int) [nsBaseAppShell.cpp : 137 + 0x5]
     r4 = 0x4291b100    r5 = 0x404df940    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000014    r9 = 0x00000000   r10 = 0x00000001    fp = 0x00000000
     sp = 0xbef69718    pc = 0x4149ab5f
    Found by: call frame info
45  libxul.so!nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, bool, unsigned int) [nsBaseAppShell.cpp : 295 + 0x5]
     r4 = 0x4291b100    r5 = 0x404df940    r6 = 0x0074576b    r7 = 0x00000000
     r8 = 0x00000014    r9 = 0x00000000   r10 = 0x00000001    fp = 0x00000000
     sp = 0xbef69730    pc = 0x4149ac3d
    Found by: call frame info
46  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 595 + 0x5]
     r4 = 0x404df940    r5 = 0x00000001    r6 = 0x4149ab81    r7 = 0x00000001
     r8 = 0xbef6979f    r9 = 0x00000000   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef69758    pc = 0x4178b405
    Found by: call frame info
47  libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 238 + 0xb]
     r4 = 0x00000001    r5 = 0x404ec0c0    r6 = 0x40401e30    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef6992c   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef69798    pc = 0x4176aa0d
    Found by: call frame info
48  libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 116 + 0x7]
     r4 = 0x40401e20    r5 = 0x404ec0c0    r6 = 0x40401e30    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef6992c   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef697a8    pc = 0x414e86ff
    Found by: call frame info
49  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 220 + 0x5]
     r4 = 0x404ec0c0    r5 = 0x4291b100    r6 = 0x404df940    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef6992c   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef697d0    pc = 0x417a6d59
    Found by: call frame info
50  libxul.so!MessageLoop::Run() [message_loop.cc : 213 + 0x5]
     r4 = 0x404ec0c0    r5 = 0x4291b100    r6 = 0x404df940    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef6992c   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef697d8    pc = 0x417a6dcf
    Found by: call frame info
51  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 161 + 0x7]
     r4 = 0x00000000    r5 = 0x4291b100    r6 = 0x404df940    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef6992c   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef697f0    pc = 0x4149a5f1
    Found by: call frame info
52  libxul.so!nsAppStartup::Run() [nsAppStartup.cpp : 269 + 0x5]
     r4 = 0x438d4370    r5 = 0x41773fed    r6 = 0xbef69ac5    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef6992c   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef69800    pc = 0x41401bcd
    Found by: call frame info
53  libxul.so!XREMain::XRE_mainRun() [nsAppRunner.cpp : 3870 + 0x5]
     r4 = 0xbef699d4    r5 = 0x41773fed    r6 = 0xbef69ac5    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xbef6992c   r10 = 0xbef69938    fp = 0x00000000
     sp = 0xbef69808    pc = 0x40d71897
    Found by: call frame info
54  libxul.so!XREMain::XRE_main(int, char**, nsXREAppData const*) [nsAppRunner.cpp : 3938 + 0x5]
     r4 = 0xbef699d4    r5 = 0xbef699ae    r6 = 0x00000000    r7 = 0x00021360
     r8 = 0x40445000    r9 = 0x4044a000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef699a8    pc = 0x40d73fc3
    Found by: call frame info
55  libxul.so!XRE_main [nsAppRunner.cpp : 4140 + 0x3]
     r4 = 0x00021360    r5 = 0xbef6bbb4    r6 = 0x00000001    r7 = 0x00000000
     r8 = 0xbef699d4    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef699d0    pc = 0x40d74125
    Found by: call frame info
56  b2g!main [nsBrowserApp.cpp : 168 + 0xf]
     r4 = 0x40d740d9    r5 = 0x00000000    r6 = 0x00000001    r7 = 0xbef6bbb4
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef69ae0    pc = 0x00009a9f
    Found by: call frame info
57  libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
     r4 = 0x00009814    r5 = 0xbef6bbb4    r6 = 0x00000001    r7 = 0xbef6bbbc
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef6bb98    pc = 0x400df527
    Found by: call frame info
58  0xb0001dc5
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbef6bbb0    pc = 0xb0001dc7
    Found by: call frame info
59  b2g!MOZ_PNG_push_proc_row [pngpread.c : 1225 + 0x5]
     sp = 0xbef6bc14    pc = 0x0000b8d7
    Found by: stack scanning
60  0x6
     r4 = 0x00000020    r5 = 0x00000005    sp = 0xbef6bc3c    pc = 0x00000008
    Found by: call frame info
Hi James,
Can you have someone take a look into this?

 0  libxul.so!nsDisplayItem::GetClippedBounds(nsDisplayListBuilder*) [nsDisplayList.cpp : 1620 + 0x0]
    Found by: given as instruction pointer in context
https://git.mozilla.org/?p=releases/gecko.git;a=blob;f=layout/base/nsDisplayList.cpp;h=130a52198b569027934b1a9312251997937ba1fd;hb=v1.2#l1620

This is really weird. There's no possible to get SIGSEGV here, since all reference here are either local variable or this. But you can that you are facing a SIGSEGV caused by "given as instruction pointer". Maybe your memory stack is corrupted?
We'll build a version without optimization and try to reproduce this issue.
Flags: needinfo?(james.zhang)
We can't reproduce now, you can close this bug.
Flags: needinfo?(james.zhang)
Case closed per request.

--
Keven
Status: UNCONFIRMED → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: