Last Comment Bug 955748 - Crash in arena_run_tree_insert | arena_dalloc | realloc | moz_xrealloc | nsTArray_base<nsTArrayInfallibleAllocator
: Crash in arena_run_tree_insert | arena_dalloc | realloc | moz_xrealloc | nsTA...
Status: NEW
[b2g-crash]
: crash
Product: Core
Classification: Components
Component: Layout (show other bugs)
: 28 Branch
: All Android
-- critical (vote)
: ---
Assigned To: Nobody; OK to take it and work on it
:
: Jet Villegas (:jet)
Mentors:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-12-30 10:23 PST by Naoki Hirata :nhirata (please use needinfo instead of cc)
Modified: 2014-01-06 12:42 PST (History)
3 users (show)
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments

Description User image Naoki Hirata :nhirata (please use needinfo instead of cc) 2013-12-30 10:23:27 PST
This bug was filed from the Socorro interface and is 
report bp-d44c7137-cc1d-472e-be08-ea1362131227.
=============================================================
Frame 	Module 	Signature 	Source
0 	libmozglue.so 	arena_run_tree_insert 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c
1 	libmozglue.so 	arena_dalloc 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c
2 	libmozglue.so 	realloc 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c
3 	libxul.so 	moz_xrealloc 	/home/geeksphone/FOS/peak/gecko/memory/mozalloc/mozalloc.cpp
4 	libxul.so 	nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>::EnsureCapacity(unsigned int, unsigned int) 	/home/geeksphone/FOS/peak/objdir-gecko/media/webrtc/signaling/signaling_ecc/../../../../dist/include/nsTArray.h
5 	libxul.so 	mozilla::FrameLayerBuilder::AddThebesDisplayItem(mozilla::layers::ThebesLayer*, nsDisplayItem*, mozilla::DisplayItemClip const&, nsIFrame*, mozilla::LayerState, nsPoint const&, nsAutoPtr<nsDisplayItemGeometry>) 	/home/geeksphone/FOS/peak/objdir-gecko/layout/base/../../dist/include/nsTArray.h
6 	libxul.so 	mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList const&, mozilla::ContainerLayerParameters const&, gfx3DMatrix const*, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/FrameLayerBuilder.cpp
7 	libxul.so 	nsDisplayOwnLayer::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp
8 	libxul.so 	mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList const&, mozilla::ContainerLayerParameters const&, gfx3DMatrix const*, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/FrameLayerBuilder.cpp
9 	libxul.so 	nsDisplayList::PaintForFrame(nsDisplayListBuilder*, nsRenderingContext*, nsIFrame*, unsigned int) const 	/home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp
10 	libxul.so 	nsDisplayList::PaintRoot(nsDisplayListBuilder*, nsRenderingContext*, unsigned int) const 	/home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp
11 	libxul.so 	nsLayoutUtils::PaintFrame(nsRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsLayoutUtils.cpp
12 	libxul.so 	PresShell::Paint(nsView*, nsRegion const&, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsPresShell.cpp
13 	libxul.so 	nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) 	/home/geeksphone/FOS/peak/gecko/view/src/nsViewManager.cpp
14 	libxul.so 	nsViewManager::ProcessPendingUpdates() 	/home/geeksphone/FOS/peak/gecko/view/src/nsViewManager.cpp
15 	libxul.so 	nsRefreshDriver::Tick(long long, mozilla::TimeStamp) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsRefreshDriver.cpp
16 	libxul.so 	mozilla::RefreshDriverTimer::TimerTick(nsITimer*, void*) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsRefreshDriver.cpp
17 	libxul.so 	nsTimerImpl::Fire() 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsTimerImpl.cpp
18 	libxul.so 	nsTimerEvent::Run() 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsTimerImpl.cpp
19 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp
20 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	/home/geeksphone/FOS/peak/gecko/xpcom/glue/nsThreadUtils.cpp
21 	libxul.so 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	/home/geeksphone/FOS/peak/gecko/ipc/glue/MessagePump.cpp
22 	libxul.so 	MessageLoop::RunInternal() 	/home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc
23 	libxul.so 	MessageLoop::Run() 	/home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc
24 	libxul.so 	nsBaseAppShell::Run() 	/home/geeksphone/FOS/peak/gecko/widget/xpwidgets/nsBaseAppShell.cpp
25 	libxul.so 	nsAppStartup::Run() 	/home/geeksphone/FOS/peak/gecko/toolkit/components/startup/nsAppStartup.cpp
26 	libxul.so 	XREMain::XRE_mainRun() 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp
27 	libxul.so 	XREMain::XRE_main(int, char**, nsXREAppData const*) 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp
28 	libxul.so 	XRE_main 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp
29 	b2g 	main 	/home/geeksphone/FOS/peak/gecko/b2g/app/nsBrowserApp.cpp
30 	libc.so 	__libc_init

More reports: 
https://crash-stats.mozilla.com/report/list?product=B2G&signature=arena_run_tree_insert+|+arena_dalloc+|+realloc+|+moz_xrealloc+|+nsTArray_base%3CnsTArrayInfallibleAllocator%2C+nsTArray_CopyWithMemutils%3E%3A%3AEnsureCapacity%28unsigned+int%2C+unsigned+int%29+|+mozilla%3A%3AFrameLayerBuilder%3A%3AAddThebesDisplayItem%28mozilla%3A%3Alayers%3A%3AThebes...
Comment 1 User image Randell Jesup [:jesup] 2014-01-01 23:10:19 PST
Automatic classifier getting confused....

Note You need to log in before you can comment on or make changes to this bug.