Closed Bug 970403 Opened 11 years ago Closed 11 years ago

crash in android_atomic_add

Categories

(Core :: Graphics: Layers, defect)

Product:
Core
Component:
Graphics: Layers
Platform:
ARM
Gonk (Firefox OS)
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: nhirata, Unassigned)

Details

(Keywords: crash, topcrash-b2g)

Crash Data

This bug was filed from the Socorro interface and is report bp-586cf4a2-8d05-416e-9ddc-d78d12140210. ============================================================= Since this was someone's custom built engineering build, we have no symbols. Having said that, we're seeing a huge number of crashes. Dev should make sure they update their blobs to the latest OEM blobs. Also : https://marketplace.firefox.com/app/09490ca4-2e4b-4802-a112-28d3888ea400/manifest.webapp?feature_profile=7d7ba9fe6f6d.47.4 is one of the webpages. I think we should follow up to see if we can reproduce this crash on a good build that we have symbols for to see if this is really dev operating on old blobs or if we can take action on this crasher. The main reason why I state this, it's 53.2 % of the current crashes we see in 1.4 w/ 1861 crashes.
The game is here: https://marketplace.firefox.com/app/flappy-birds Can someone try to reproduce with this app?
Keywords: qawanted
There's a Flappy Bird and a Flappy Birds app in the marketplace.
There's some graphics issues, but no crashing when using a v1.2 OEM base build. and the latest 1.4; I'm thinking it might be devices that have not updated the v1.2 OEM base build to v1.2-device.cfg
From an inari phone running 1.4, https://crash-stats.mozilla.com/report/index/9e0290f2-83d0-49e2-bd50-327b92140224 : Frame Module Signature Source 0 libcutils.so android_atomic_add system/core/include/cutils/atomic-arm.h 1 libxul.so android::sp<android::GraphicBuffer>::operator=(android::sp<android::GraphicBuffer> const&) /builds/slave/b2g_m-cen_inari_eng_ntly-00000/build/objdir-gecko/gfx/layers/../../../frameworks/base/include/utils/RefBase.h 2 libxul.so mozilla::layers::GrallocBufferActor::InitFromHandle(mozilla::layers::MagicGrallocBufferHandle const&) gfx/layers/ipc/ShadowLayerUtilsGralloc.cpp 3 libxul.so mozilla::layers::GrallocTextureClientOGL::AllocateGralloc(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits>, unsigned int, unsigned int) gfx/layers/opengl/GrallocTextureClient.cpp 4 libxul.so mozilla::layers::GrallocTextureClientOGL::AllocateForSurface(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits>, mozilla::layers::TextureAllocationFlags) gfx/layers/opengl/GrallocTextureClient.cpp 5 libxul.so mozilla::layers::ContentClientRemoteBuffer::CreateAndAllocateTextureClient(mozilla::RefPtr<mozilla::layers::TextureClient>&, unsigned int) gfx/layers/client/ContentClient.cpp 6 libxul.so mozilla::layers::ContentClientRemoteBuffer::BuildTextureClients(mozilla::gfx::SurfaceFormat, nsIntRect const&, unsigned int) gfx/layers/client/ContentClient.cpp 7 libxul.so mozilla::layers::ContentClientRemoteBuffer::CreateBuffer(gfxContentType, nsIntRect const&, unsigned int, mozilla::RefPtr<mozilla::gfx::DrawTarget>*, mozilla::RefPtr<mozilla::gfx::DrawTarget>*) gfx/layers/client/ContentClient.cpp 8 libxul.so mozilla::layers::RotatedContentBuffer::BeginPaint(mozilla::layers::ThebesLayer*, unsigned int) gfx/layers/RotatedBuffer.cpp 9 libxul.so mozilla::layers::ContentClientBasic::BeginPaintBuffer(mozilla::layers::ThebesLayer*, unsigned int) 10 libxul.so mozilla::layers::ClientThebesLayer::PaintThebes() gfx/layers/client/ClientThebesLayer.cpp 11 libxul.so mozilla::layers::ClientThebesLayer::RenderLayer() gfx/layers/client/ClientThebesLayer.cpp 12 libxul.so mozilla::layers::ClientContainerLayer::RenderLayer() gfx/layers/client/ClientContainerLayer.h 13 libxul.so mozilla::layers::ClientContainerLayer::RenderLayer() gfx/layers/client/ClientContainerLayer.h 14 libxul.so mozilla::layers::ClientContainerLayer::RenderLayer() gfx/layers/client/ClientContainerLayer.h 15 libxul.so mozilla::layers::ClientLayerManager::EndTransactionInternal(void (*)(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) gfx/layers/client/ClientLayerManager.cpp 16 libxul.so mozilla::layers::ClientLayerManager::EndTransaction(void (*)(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) gfx/layers/client/ClientLayerManager.cpp 17 libxul.so nsDisplayList::PaintForFrame(nsDisplayListBuilder*, nsRenderingContext*, nsIFrame*, unsigned int) const layout/base/nsDisplayList.cpp 18 libxul.so nsDisplayList::PaintRoot(nsDisplayListBuilder*, nsRenderingContext*, unsigned int) const layout/base/nsDisplayList.cpp 19 libxul.so nsLayoutUtils::PaintFrame(nsRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) layout/base/nsLayoutUtils.cpp 20 libxul.so PresShell::Paint(nsView*, nsRegion const&, unsigned int) layout/base/nsPresShell.cpp 21 libxul.so nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) view/src/nsViewManager.cpp 22 libxul.so nsViewManager::ProcessPendingUpdates() view/src/nsViewManager.cpp 23 libxul.so nsRefreshDriver::Tick(long long, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp 24 libxul.so mozilla::RefreshDriverTimer::TimerTick(nsITimer*, void*) layout/base/nsRefreshDriver.cpp 25 libxul.so nsTimerImpl::Fire() xpcom/threads/nsTimerImpl.cpp 26 libxul.so nsTimerEvent::Run() xpcom/threads/nsTimerImpl.cpp 27 libxul.so nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp 28 libxul.so NS_ProcessNextEvent(nsIThread*, bool) xpcom/glue/nsThreadUtils.cpp 29 libxul.so mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 30 libxul.so mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 31 libxul.so MessageLoop::RunInternal() ipc/chromium/src/base/message_loop.cc 32 libxul.so MessageLoop::Run() ipc/chromium/src/base/message_loop.cc 33 libxul.so nsBaseAppShell::Run() widget/xpwidgets/nsBaseAppShell.cpp 34 libxul.so XRE_RunAppShell toolkit/xre/nsEmbedFunctions.cpp 35 libxul.so mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 36 libxul.so MessageLoop::RunInternal() ipc/chromium/src/base/message_loop.cc 37 libxul.so MessageLoop::Run() ipc/chromium/src/base/message_loop.cc 38 libxul.so XRE_InitChildProcess toolkit/xre/nsEmbedFunctions.cpp 39 plugin-container main ipc/app/MozillaRuntimeMain.cpp 40 libc.so __libc_init bionic/libc/bionic/libc_init_dynamic.c 41 @0xb00045a9
Component: General → Graphics: Layers
Product: Firefox OS → Core
Assignee: nobody → sotaro.ikeda.g
I found another web page: URL https://www.webkit.org/perf/sunspider-1.0.2/sunspider-1.0.2/results.html?%7B%22v%22:%20%22sunspider-1.0.2%22,%20%223d-cube%22:%5B308,352,360,353,309,300,299,332,304,367%5D,%223d-morph%22:%5B73,108,111,84,74,85,85,82,78,117%5D,%223d-raytrace%22:%5B217,296,259,239,228,215,282,260,220,231%5D,%22access-binary-trees%22:%5B58,77,58,57,144,61,60,59,72,62%5D,%22access-fannkuch%22:%5B72,91,75,75,80,74,75,74,75,79%5D,%22access-nbody%22:%5B39,63,43,43,42,50,41,42,42,42%5D,%22access-nsieve%22:%5B88,100,96,92,132,89,100,83,91,85%5D,%22bitops-3bit-bits-in-byte%22:%5B12,12,13,15,14,14,13,12,14,14%5D,%22bitops-bits-in-byte%22:%5B23,41,22,23,49,24,23,28,36,23%5D,%22bitops-bitwise-and%22:%5B19,21,18,18,19,22,19,18,46,19%5D,%22bitops-nsieve-bits%22:%5B67,50,48,47,48,71,78,49,64,82%5D,%22controlflow-recursive%22:%5B46,28,27,27,26,39,29,27,28,27%5D,%22crypto-aes%22:%5B264,179,175,178,203,278,348,178,212,206%5D,%22crypto-md5%22:%5B66,65,92,66,87,66,81,66,67,68%5D,%22crypto-sha1%22:%5B52,47,46,49,66,51,47,46,51,53%5D,%22date-format-tofte%22:%5B249,210,250,222,325,243,292,214,265,246%5D,%22date-format-xparb%22:%5B301,302,307,313,632,427,331,286,304,354%5D,%22math-cordic%22:%5B38,38,40,51,54,37,38,37,36,53%5D,%22math-partial-sums%22:%5B79,81,117,94,81,81,88,79,81,97%5D,%22math-spectral-norm%22:%5B25,26,25,26,26,27,25,27,26,27%5D,%22regexp-dna%22:%5B226,174,174,184,174,203,169,246,170,171%5D,%22string-base64%22:%5B103,81,82,211,83,114,83,114,83,78%5D,%22string-fasta%22:%5B108,95,100,115,95,128,97,97,124,97%5D,%22string-tagcloud%22:%5B271,313,317,305,270,305,269,363,373,356%5D,%22string-unpack-code%22:%5B370,367,362,330,328,443,322,334,317,332%5D,%22string-validate-input%22:%5B122,137,140,117,116,137,116,298,121,125%5D%7D It looks like someone tried to run this using sunspider on a ZTE device. Other web pages: http://peacekeeper.futuremark.com/run.action http://www.weerradar.nl/ http://tweakers.net/
Can you try to reproduce this bug using the below URLs: * https://www.webkit.org/perf/sunspider/sunspider.html * http://peacekeeper.futuremark.com/run.action * http://www.weerradar.nl/ * http://tweakers.net/
Flags: needinfo?(sparsons)
Keywords: qawanted
(In reply to Jason Smith [:jsmith] from comment #6) > Can you try to reproduce this bug using the below URLs: > > * https://www.webkit.org/perf/sunspider/sunspider.html > * http://peacekeeper.futuremark.com/run.action > * http://www.weerradar.nl/ > * http://tweakers.net/ No crashes occurred when navigating to these websites (and letting tests be performed for the applicable ones). Device: Buri v1.4 MOZ RIL BuildID: 20140224040201 Gaia: ffb527b84594396ed611edf0a8a5a130d60a742f Gecko: 31113754db3b Version: 30.0a1 Firmware Version: V1.2-device.cfg
Flags: needinfo?(sparsons)
QA Contact: mvaughan
Keywords: qawanted
These are the last 28 days URL and the number of times they crashed on that URL: Total Count URL 12 app://gallery.gaiamobile.org/manifest.webapp 7 app://settings.gaiamobile.org/manifest.webapp 7 https://www.webkit.org/perf/sunspider-1.0.2/sunspider-1.0.2/results.html?%7B%... 7 https://marketplace.firefox.com/packaged.webapp 5 app://sms.gaiamobile.org/manifest.webapp 4 https://mobile.twitter.com/cache/twitter.webapp 4 https://www.webkit.org/perf/sunspider-1.0.2/sunspider-1.0.2/results.html?%7B%... 3 app://homescreen.gaiamobile.org/manifest.webapp 2 app://communications.gaiamobile.org/manifest.webapp 2 http://www.weerradar.nl/ 2 app://music.gaiamobile.org/manifest.webapp 2 http://i.reddit.com/ 2 http://lxer.com/ 1 http://www.google.com/search?q=sunspider 1 http://peacekeeper.futuremark.com/run.action 1 http://tweakers.net/ 1 http://moztw.org/ 1 http://www.google.com/search?q=peacekeeper%20js 1 http://www.google.com/search?q=peacekeaper%20js 1 app://email.gaiamobile.org/manifest.webapp 1 http://www.google.com/search?q=cb%20250%20modifications 1 http://www.google.com/search?q=cb%20250%20hacks 1 http://iwastesomuchtime.com/ 1 http://www.google.com/search?q=posthotellet%20brunch
It looks like inari you can just easily crash; I think it's driver related. see https://bugzilla.mozilla.org/show_bug.cgi?id=816671 I was crashing on Marketplace by doing simple searches with the Inari. We need to make sure Dev are using the latest drivers.
I think the better thought is to get them off inaris if possible.
Assignee: sotaro.ikeda.g → nobody
Looks like the number of these crashes is diminishing. I think we'll close this as a WFM and a bad configuration issue.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WORKSFORME
Are we sure of the source of this error ? I'm able to reproduce it simply by long tapping an icon on homescreen, on Nexus S. I know this device is not supported, but this used to work, and I'd like to understand the real rational for the bug, when some of you can have a look a it of course. Backtrace from gdb: Program received signal SIGBUS, Bus error. android_atomic_add (increment=1, ptr=0x42133613) at system/core/include/cutils/atomic-arm.h:158 158 __asm__ __volatile__ ("ldrex %0, [%4]\n" (gdb) bt #0 android_atomic_add (increment=1, ptr=0x42133613) at system/core/include/cutils/atomic-arm.h:158 #1 0x40a40030 in android::LightRefBase<android::GraphicBuffer>::incStrong (this=0x44ed53b8, other=...) at /home/alex/codaz/B2G/frameworks/base/include/utils/RefBase.h:168 #2 android::EGLNativeBase<ANativeWindowBuffer, android::GraphicBuffer, android::LightRefBase<android::GraphicBuffer> >::incStrong (this=0x44ed53b8, other=...) at /home/alex/codaz/B2G/frameworks/base/include/ui/egl/android_natives.h:64 #3 android::sp<android::GraphicBuffer>::operator= (this=0x44ed53b8, other=...) at /home/alex/codaz/B2G/frameworks/base/include/utils/StrongPointer.h:155 #4 0x40a4004c in mozilla::layers::GrallocBufferActor::InitFromHandle (this=<value optimized out>, aHandle=...) at /home/alex/codaz/B2G/gecko/gfx/layers/ipc/ShadowLayerUtilsGralloc.cpp:359 #5 0x40a79a92 in mozilla::layers::GrallocTextureClientOGL::AllocateGralloc (this=0x4420f3a0, aSize=..., aAndroidFormat=1, aUsage=307) at /home/alex/codaz/B2G/gecko/gfx/layers/opengl/GrallocTextureClient.cpp:317 #6 0x40a79ba4 in mozilla::layers::GrallocTextureClientOGL::AllocateForSurface (this=0x1, aSize=...) at /home/alex/codaz/B2G/gecko/gfx/layers/opengl/GrallocTextureClient.cpp:257 #7 0x40a5ed3a in mozilla::layers::ImageClientSingle::UpdateImageInternal (this=0x439d2c40, aContainer=<value optimized out>, aContentFlags=<value optimized out>, aIsSwapped=0xbeb0533f) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ImageClient.cpp:237 #8 0x40a5ee98 in mozilla::layers::ImageClientBuffered::UpdateImage (this=0x439d2c40, aContainer=0x43e26ce0, aContentFlags=0) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ImageClient.cpp:287 #9 0x40a5b598 in mozilla::layers::ClientImageLayer::RenderLayer (this=0x45e554f0) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ClientImageLayer.cpp:164 #10 0x40a5b00e in mozilla::layers::ClientContainerLayer::RenderLayer (this=0x45e6b800) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ClientContainerLayer.h:79 #11 0x40a5b00e in mozilla::layers::ClientContainerLayer::RenderLayer (this=0x44eb9800) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ClientContainerLayer.h:79 #12 0x40a5b00e in mozilla::layers::ClientContainerLayer::RenderLayer (this=0x43a24c00) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ClientContainerLayer.h:79 #13 0x40a5ba86 in mozilla::layers::ClientLayerManager::EndTransactionInternal (this=0x43092440, aCallback=0x410d3ae1 <mozilla::FrameLayerBuilder::DrawThebesLayer(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*)>, aCallbackData=0xbeb05708) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ClientLayerManager.cpp:190 #14 0x40a5c00a in mozilla::layers::ClientLayerManager::EndTransaction (this=0x43092440, aCallback=0x410d3ae1 <mozilla::FrameLayerBuilder::DrawThebesLayer(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*)>, aCallbackData=0xbeb05708, aFlags=mozilla::layers::LayerManager::END_DEFAULT) at /home/alex/codaz/B2G/gecko/gfx/layers/client/ClientLayerManager.cpp:216 #15 0x410f9530 in nsDisplayList::PaintForFrame (this=<value optimized out>, aBuilder=0xbeb05708, aCtx=<value optimized out>, aForFrame=<value optimized out>, aFlags=13) at /home/alex/codaz/B2G/gecko/layout/base/nsDisplayList.cpp:1358 #16 0x410f96d0 in nsDisplayList::PaintRoot (this=0xbeb059fc, aBuilder=0xbeb05708, aCtx=0x0, aFlags=13) at /home/alex/codaz/B2G/gecko/layout/base/nsDisplayList.cpp:1199 #17 0x41104406 in nsLayoutUtils::PaintFrame (aRenderingContext=<value optimized out>, aFrame=0x433cf2b8, aDirtyRegion=<value optimized out>, aBackstop=<value optimized out>, aFlags=772) at /home/alex/codaz/B2G/gecko/layout/base/nsLayoutUtils.cpp:2792 #18 0x410c9bda in PresShell::Paint (this=0x42e2c0c0, aViewToPaint=<value optimized out>, aDirtyRegion=..., aFlags=<value optimized out>) at /home/alex/codaz/B2G/gecko/layout/base/nsPresShell.cpp:5916 #19 0x40e91ce4 in nsViewManager::ProcessPendingUpdatesPaint (this=0x430f52e0, aWidget=0x42fd4e00) at /home/alex/codaz/B2G/gecko/view/src/nsViewManager.cpp:451 #20 0x40e91db8 in nsViewManager::ProcessPendingUpdatesForView (this=<value optimized out>, aView=<value optimized out>, aFlushDirtyRegion=true) at /home/alex/codaz/B2G/gecko/view/src/nsViewManager.cpp:392 #21 0x40e91e2c in nsViewManager::ProcessPendingUpdates (this=<value optimized out>) at /home/alex/codaz/B2G/gecko/view/src/nsViewManager.cpp:1082 #22 0x410ccf1c in nsRefreshDriver::Tick (this=0x42fed880, aNowEpoch=2412234771, aNowTime=...) at /home/alex/codaz/B2G/gecko/layout/base/nsRefreshDriver.cpp:1207 #23 0x410cd1f2 in mozilla::RefreshDriverTimer::TickDriver (aTimer=<value optimized out>, aClosure=<value optimized out>) at /home/alex/codaz/B2G/gecko/layout/base/nsRefreshDriver.cpp:168 #24 mozilla::RefreshDriverTimer::Tick (aTimer=<value optimized out>, aClosure=<value optimized out>) at /home/alex/codaz/B2G/gecko/layout/base/nsRefreshDriver.cpp:160 #25 mozilla::RefreshDriverTimer::TimerTick (aTimer=<value optimized out>, aClosure=<value optimized out>) at /home/alex/codaz/B2G/gecko/layout/base/nsRefreshDriver.cpp:185 #26 0x406f3f30 in nsTimerImpl::Fire (this=0x4398c380) at /home/alex/codaz/B2G/gecko/xpcom/threads/nsTimerImpl.cpp:551 #27 0x406f3fe2 in nsTimerEvent::Run (this=<value optimized out>) at /home/alex/codaz/B2G/gecko/xpcom/threads/nsTimerImpl.cpp:635 #28 0x406f24aa in nsThread::ProcessNextEvent (this=0x403024e0, mayWait=false, result=0xbeb05f7f) at /home/alex/codaz/B2G/gecko/xpcom/threads/nsThread.cpp:699 #29 0x406bffc0 in NS_ProcessNextEvent (thread=0x439ac2e0, mayWait=false) at /home/alex/codaz/B2G/gecko/xpcom/glue/nsThreadUtils.cpp:263 #30 0x40839fd0 in mozilla::ipc::MessagePump::Run (this=0x40301ac0, aDelegate=0xbeb0688c) at /home/alex/codaz/B2G/gecko/ipc/glue/MessagePump.cpp:95 #31 0x4083a09e in mozilla::ipc::MessagePumpForChildProcess::Run (this=0x40301ac0, aDelegate=0xbeb0688c) at /home/alex/codaz/B2G/gecko/ipc/glue/MessagePump.cpp:283 #32 0x4082d8a0 in MessageLoop::RunInternal (this=0x1000000) at /home/alex/codaz/B2G/gecko/ipc/chromium/src/base/message_loop.cc:226 #33 0x4082d91e in MessageLoop::RunHandler (this=0xbeb0688c) at /home/alex/codaz/B2G/gecko/ipc/chromium/src/base/message_loop.cc:219 #34 MessageLoop::Run (this=0xbeb0688c) at /home/alex/codaz/B2G/gecko/ipc/chromium/src/base/message_loop.cc:193 #35 0x40cd1658 in nsBaseAppShell::Run (this=0x430e4040) at /home/alex/codaz/B2G/gecko/widget/xpwidgets/nsBaseAppShell.cpp:164 ---Type <return> to continue, or q <return> to quit--- #36 0x4131595e in XRE_RunAppShell () at /home/alex/codaz/B2G/gecko/toolkit/xre/nsEmbedFunctions.cpp:679 #37 0x4083a06c in mozilla::ipc::MessagePumpForChildProcess::Run (this=0x40301ac0, aDelegate=0xbeb0688c) at /home/alex/codaz/B2G/gecko/ipc/glue/MessagePump.cpp:253 #38 0x4082d8a0 in MessageLoop::RunInternal (this=0x430e4040) at /home/alex/codaz/B2G/gecko/ipc/chromium/src/base/message_loop.cc:226 #39 0x4082d91e in MessageLoop::RunHandler (this=0xbeb0688c) at /home/alex/codaz/B2G/gecko/ipc/chromium/src/base/message_loop.cc:219 #40 MessageLoop::Run (this=0xbeb0688c) at /home/alex/codaz/B2G/gecko/ipc/chromium/src/base/message_loop.cc:193 #41 0x41315de8 in XRE_InitChildProcess (aArgc=-1095734744, aArgv=0xbeb0699c, aProcess=1077145600) at /home/alex/codaz/B2G/gecko/toolkit/xre/nsEmbedFunctions.cpp:516 #42 0x00008750 in main (argc=8, argv=0xbeb06a24) at /home/alex/codaz/B2G/gecko/ipc/app/MozillaRuntimeMain.cpp:149
Flags: needinfo?(sotaro.ikeda.g)
Flags: needinfo?(nhirata.bugzilla)
I am reopening this bug due to Alexandre's comment. Alexandre, can you show me what you have for : adb shell getprop ro.build.version.sdk please?
Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---
Flags: needinfo?(lissyx+mozillians)
15
Flags: needinfo?(lissyx+mozillians)
FWIW, this is very unlikely to get fixed or even looked at unless it can be reproduced on one of the current generation of devices... something like Tarako, Flame, Nexus 4, or hamachi/buri. I suspect something is returning NULL but we're not checking, and instead end up trying to increment its refcount. I don't know if we can trust the "this" pointer values in the backtrace above, but maybe?
Bug 995796 seems similar bug.
Flags: needinfo?(sotaro.ikeda.g)
(In reply to Vladimir Vukicevic [:vlad] [:vladv] from comment #15) > FWIW, this is very unlikely to get fixed or even looked at unless it can be > reproduced on one of the current generation of devices... something like > Tarako, Flame, Nexus 4, or hamachi/buri. > > I suspect something is returning NULL but we're not checking, and instead > end up trying to increment its refcount. I don't know if we can trust the > "this" pointer values in the backtrace above, but maybe? Of course, but the fact that I'm reproducing under different circumstances makes me wondering if we may not have an underlying issue. No reason to rush on it for now, I agree. I'll try to see if I can reproduce this on Tarako, if we have master builds for it. Since it's a non-Adreno device, maybe it can expose the bug more easily.
(In reply to Sotaro Ikeda [:sotaro] from comment #16) > Bug 995796 seems similar bug. Thanks for this !
Thanks Sotaro-san.
Status: REOPENED → RESOLVED
Closed: 11 years ago → 11 years ago
Flags: needinfo?(nhirata.bugzilla)
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.