Open Bug 933823 Opened 6 years ago Updated 6 years ago

IPC: crash with PLayerTransaction::Msg_Update [@mozilla::layers::ContentHostDoubleBuffered::UpdateThebes]

Categories

(Core :: IPC, defect, critical)

ARM
Gonk (Firefox OS)
defect
Not set
critical

Tracking

()

People

(Reporter: posidron, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash)

Attachments

(2 files, 2 obsolete files)

Attached file fuzzing-session (obsolete) —
Tested with an opt/non-debug build of https://github.com/posidron/mozilla-central/commit/26121cb
Attached file fuzzing-session
Updated session with more debug output.

I/Gecko   ( 1100): [Faulty] pickle field {Int64} of value: 2 changed to: 1247458513
I/Gecko   ( 1100): [Faulty] - sendmsg() - message @0xb2130e20 with name PLayerTransaction::Msg_Update on channel @0xb3c8b000 type=4325383 transaction_id=-1 routing_id=-1 seq_no=-4
Attached file callstack (obsolete) —
Attachment #825979 - Attachment is obsolete: true
Attached file callstack
Attachment #829029 - Attachment is obsolete: true
You need to log in before you can comment on or make changes to this bug.