955748 - Crash in arena_run_tree_insert | arena_dalloc | realloc | moz_xrealloc | nsTArray_base<nsTArrayInfallibleAllocator

Status: RESOLVED WONTFIX

(Core :: Layout, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-d44c7137-cc1d-472e-be08-ea1362131227.
=============================================================
Frame 	Module 	Signature 	Source
0 	libmozglue.so 	arena_run_tree_insert 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c
1 	libmozglue.so 	arena_dalloc 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c
2 	libmozglue.so 	realloc 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c
3 	libxul.so 	moz_xrealloc 	/home/geeksphone/FOS/peak/gecko/memory/mozalloc/mozalloc.cpp
4 	libxul.so 	nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>::EnsureCapacity(unsigned int, unsigned int) 	/home/geeksphone/FOS/peak/objdir-gecko/media/webrtc/signaling/signaling_ecc/../../../../dist/include/nsTArray.h
5 	libxul.so 	mozilla::FrameLayerBuilder::AddThebesDisplayItem(mozilla::layers::ThebesLayer*, nsDisplayItem*, mozilla::DisplayItemClip const&, nsIFrame*, mozilla::LayerState, nsPoint const&, nsAutoPtr<nsDisplayItemGeometry>) 	/home/geeksphone/FOS/peak/objdir-gecko/layout/base/../../dist/include/nsTArray.h
6 	libxul.so 	mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList const&, mozilla::ContainerLayerParameters const&, gfx3DMatrix const*, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/FrameLayerBuilder.cpp
7 	libxul.so 	nsDisplayOwnLayer::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp
8 	libxul.so 	mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList const&, mozilla::ContainerLayerParameters const&, gfx3DMatrix const*, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/FrameLayerBuilder.cpp
9 	libxul.so 	nsDisplayList::PaintForFrame(nsDisplayListBuilder*, nsRenderingContext*, nsIFrame*, unsigned int) const 	/home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp
10 	libxul.so 	nsDisplayList::PaintRoot(nsDisplayListBuilder*, nsRenderingContext*, unsigned int) const 	/home/geeksphone/FOS/peak/gecko/layout/base/nsDisplayList.cpp
11 	libxul.so 	nsLayoutUtils::PaintFrame(nsRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsLayoutUtils.cpp
12 	libxul.so 	PresShell::Paint(nsView*, nsRegion const&, unsigned int) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsPresShell.cpp
13 	libxul.so 	nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) 	/home/geeksphone/FOS/peak/gecko/view/src/nsViewManager.cpp
14 	libxul.so 	nsViewManager::ProcessPendingUpdates() 	/home/geeksphone/FOS/peak/gecko/view/src/nsViewManager.cpp
15 	libxul.so 	nsRefreshDriver::Tick(long long, mozilla::TimeStamp) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsRefreshDriver.cpp
16 	libxul.so 	mozilla::RefreshDriverTimer::TimerTick(nsITimer*, void*) 	/home/geeksphone/FOS/peak/gecko/layout/base/nsRefreshDriver.cpp
17 	libxul.so 	nsTimerImpl::Fire() 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsTimerImpl.cpp
18 	libxul.so 	nsTimerEvent::Run() 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsTimerImpl.cpp
19 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp
20 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	/home/geeksphone/FOS/peak/gecko/xpcom/glue/nsThreadUtils.cpp
21 	libxul.so 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	/home/geeksphone/FOS/peak/gecko/ipc/glue/MessagePump.cpp
22 	libxul.so 	MessageLoop::RunInternal() 	/home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc
23 	libxul.so 	MessageLoop::Run() 	/home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc
24 	libxul.so 	nsBaseAppShell::Run() 	/home/geeksphone/FOS/peak/gecko/widget/xpwidgets/nsBaseAppShell.cpp
25 	libxul.so 	nsAppStartup::Run() 	/home/geeksphone/FOS/peak/gecko/toolkit/components/startup/nsAppStartup.cpp
26 	libxul.so 	XREMain::XRE_mainRun() 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp
27 	libxul.so 	XREMain::XRE_main(int, char**, nsXREAppData const*) 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp
28 	libxul.so 	XRE_main 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp
29 	b2g 	main 	/home/geeksphone/FOS/peak/gecko/b2g/app/nsBrowserApp.cpp
30 	libc.so 	__libc_init

More reports: 
https://crash-stats.mozilla.com/report/list?product=B2G&signature=arena_run_tree_insert+|+arena_dalloc+|+realloc+|+moz_xrealloc+|+nsTArray_base%3CnsTArrayInfallibleAllocator%2C+nsTArray_CopyWithMemutils%3E%3A%3AEnsureCapacity%28unsigned+int%2C+unsigned+int%29+|+mozilla%3A%3AFrameLayerBuilder%3A%3AAddThebesDisplayItem%28mozilla%3A%3Alayers%3A%3AThebes...

Comment 1

[Randell Jesup [:jesup] (needinfo me)]

Automatic classifier getting confused....

Comment 2

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.