Closed Bug 979107 Opened 10 years ago Closed 8 years ago

[tarako][1.3t]app process crash Notes=xpcom_runtime_abort([Child 1401] ###!!! ABORT: ActorDestroy by IPC channel failure at CompositorChild: file .../CompositorChild.cpp, line 120) URL={{template}}

Categories

(Core :: Graphics: Layers, defect)

ARM
Gonk (Firefox OS)
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
blocking-b2g -
Tracking Status
b2g-v1.3T --- affected

People

(Reporter: ying.xu, Unassigned)

References

Details

(Keywords: crash, Whiteboard: [b2g-crash])

Crash Data

Attachments

(2 files)

video playing, sometimes video app crash

gaia:d0ad97604dc7cbd230433eef5bd228b46d7154bb
gecko:752d353161d5e4d742920f7c91c920787e2b10c3

Notes=xpcom_runtime_abort([Child 1401] ###!!! ABORT: ActorDestroy by IPC channel failure at CompositorChild: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/gfx/layers/ipc/CompositorChild.cpp, line 120)
URL={{template}}

Operating system: Android
                  0.0.0 Linux 3.0.8+ #1 PREEMPT Tue Feb 11 14:30:19 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/107:userdebug/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x0

Thread 0 (crashed)
 0  libxul.so!mozalloc_abort(char const*) [mozalloc_abort.cpp : 30 + 0x4]
     r4 = 0xbea48e0c    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbea48a20
     r8 = 0x4073accd    r9 = 0x00000001   r10 = 0xbea48a20    fp = 0x4183d1cd
     sp = 0xbea48a08    lr = 0x4172c48f    pc = 0x4172c492
    Found by: given as instruction pointer in context
 1  libxul.so!NS_DebugBreak [nsDebugImpl.cpp : 425 + 0x5]
     r4 = 0xbea48e0c    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbea48a20
     r8 = 0x4073accd    r9 = 0x00000001   r10 = 0xbea48a20    fp = 0x4183d1cd
     sp = 0xbea48a10    pc = 0x4073aab7
    Found by: call frame info
 2  libxul.so!mozilla::layers::CompositorChild::ActorDestroy(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [CompositorChild.cpp : 120 + 0x13]
     r4 = 0x42d17d20    r5 = 0x42d17d20    r6 = 0x00000000    r7 = 0x41ddd4c8
     r8 = 0x00000004    r9 = 0x00000004   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48e40    pc = 0x409e1217
    Found by: call frame info
 3  libxul.so!mozilla::layers::PCompositorChild::DestroySubtree(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [PCompositorChild.cpp : 914 + 0x9]
     r4 = 0x00000000    r5 = 0x42d17d20    r6 = 0x00000000    r7 = 0x41ddd4c8
     r8 = 0x00000004    r9 = 0x00000004   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48e70    pc = 0x408b88e1
    Found by: call frame info
 4  libxul.so!mozilla::layers::PCompositorChild::OnChannelError() [PCompositorChild.cpp : 818 + 0x3]
     r4 = 0x42d17d20    r5 = 0x42d17d50    r6 = 0x00000000    r7 = 0xbea49888
     r8 = 0xbea48ef0    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48e98    pc = 0x408b88f3
    Found by: call frame info
 5  libxul.so!mozilla::ipc::MessageChannel::NotifyMaybeChannelError() [MessageChannel.cpp : 1523 + 0x5]
     r4 = 0x42d17d50    r5 = 0x42d17d50    r6 = 0x00000000    r7 = 0xbea49888
     r8 = 0xbea48ef0    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48ea0    pc = 0x40888803
    Found by: call frame info
 6  libxul.so!mozilla::ipc::MessageChannel::OnNotifyMaybeChannelError() [MessageChannel.cpp : 1552 + 0x5]
     r4 = 0x42d992b0    r5 = 0x42d17d50    r6 = 0x00000000    r7 = 0xbea49888
     r8 = 0xbea48ef0    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48ea8    pc = 0x4088907f
    Found by: call frame info
 7  libxul.so!RunnableMethod<WebCore::ReverbConvolver, void (WebCore::ReverbConvolver::*)(), Tuple0>::Run() [tuple.h : 383 + 0x5]
     r4 = 0xbea4987c    r5 = 0x40301ea0    r6 = 0xbea48ef8    r7 = 0xbea49888
     r8 = 0xbea48ef0    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48ec8    pc = 0x4088866f
    Found by: call frame info
 8  libxul.so!MessageLoop::RunTask(Task*) [message_loop.cc : 340 + 0x5]
     r4 = 0xbea4987c    r5 = 0x40301ea0    r6 = 0xbea48ef8    r7 = 0xbea49888
     r8 = 0xbea48ef0    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48ed0    pc = 0x40881b9d
    Found by: call frame info
 9  libxul.so!MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) [message_loop.cc : 348 + 0x5]
     r4 = 0x00000001    r5 = 0xbea48ee8    r6 = 0xbea48ef8    r7 = 0xbea49888
     r8 = 0xbea48ef0    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48ee0    pc = 0x40882907
    Found by: call frame info
10  libxul.so!MessageLoop::DoWork() [message_loop.cc : 448 + 0x7]
     r4 = 0xbea4987c    r5 = 0xbea48ee8    r6 = 0xbea48ef8    r7 = 0xbea49888
     r8 = 0xbea48ef0    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48ee8    pc = 0x408834c5
    Found by: call frame info
11  libxul.so!mozilla::ipc::DoWorkRunnable::Run() [MessagePump.cpp : 45 + 0x7]
     r4 = 0xbea4987c    r5 = 0x00000001    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbea48f6f    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48f18    pc = 0x4088ba71
    Found by: call frame info
12  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 612 + 0x5]
     r4 = 0x40316880    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbea48f6f    r9 = 0x403168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48f28    pc = 0x40760505
    Found by: call frame info
13  libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 263 + 0xb]
     r4 = 0x00000000    r5 = 0xbea4987c    r6 = 0x40302ad0    r7 = 0x00000001
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48f68    pc = 0x40732d11
    Found by: call frame info
14  libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 85 + 0x7]
     r4 = 0x40302ac0    r5 = 0xbea4987c    r6 = 0x40302ad0    r7 = 0x00000001
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48f78    pc = 0x4088bbb9
    Found by: call frame info
15  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 250 + 0x7]
     r4 = 0xbea4987c    r5 = 0x40302ac0    r6 = 0xbea4987c    r7 = 0x00000001
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48fa0    pc = 0x4088bc87
    Found by: call frame info
16  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5]
     r4 = 0xbea4987c    r5 = 0x42d9f2e0    r6 = 0x40316880    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48fb8    pc = 0x40881b61
    Found by: call frame info
17  libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5]
     r4 = 0xbea4987c    r5 = 0x42d9f2e0    r6 = 0x40316880    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48fc0    pc = 0x40881bdf
    Found by: call frame info
18  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 161 + 0x7]
     r4 = 0x00000000    r5 = 0x42d9f2e0    r6 = 0x40316880    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48fd8    pc = 0x40c4243d
    Found by: call frame info
19  libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 679 + 0x5]
     r4 = 0x80004005    r5 = 0x40302ac0    r6 = 0x4033dc00    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48fe8    pc = 0x41249ea3
    Found by: call frame info
20  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 217 + 0x3]
     r4 = 0xbea4987c    r5 = 0x40302ac0    r6 = 0x4033dc00    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea48ff8    pc = 0x4088bc55
    Found by: call frame info
21  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5]
     r4 = 0xbea4987c    r5 = 0xbea4998c    r6 = 0x4033dc00    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea49010    pc = 0x40881b61
    Found by: call frame info
22  libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5]
     r4 = 0xbea4987c    r5 = 0xbea4998c    r6 = 0x4033dc00    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea49018    pc = 0x40881bdf
    Found by: call frame info
23  libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 516 + 0x9]
     r4 = 0xbea49998    r5 = 0xbea4998c    r6 = 0x4033dc00    r7 = 0x00000003
     r8 = 0xbea49a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea49030    pc = 0x4124a311
    Found by: call frame info
24  plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5]
     r4 = 0x00000001    r5 = 0xbea49a14    r6 = 0x00000008    r7 = 0x000087f3
     r8 = 0x00000009    r9 = 0xbea49a34   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea499d8    pc = 0x00008751
    Found by: call frame info
25  libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
     r4 = 0x00008674    r5 = 0xbea49a14    r6 = 0x00000009    r7 = 0xbea49a3c
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea499f8    pc = 0x4012ba57
    Found by: call frame info
26  0xb0001dc5
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbea49a10    pc = 0xb0001dc7
    Found by: call frame info

b2g main process did not crash ,neither the media server process
blocking-b2g: --- → 1.3T?
Attached file logfile
Crash Signature: CompositorChild::ActorDestroy
ni? Eric's team for comments
Flags: needinfo?(echou)
I've talked to Graphics team. Peter will take a first look since it crashes at CompositorChild.
Flags: needinfo?(echou)
ying, this abort was caused by the following line and it means somewhere the IPC channel had problem.
I tried to search the log from attachment 8385065 [details], but I couldn't find anything about IPC pipe error.
I only saw the crash report about CompositorChild::ActorDestroy.

http://dxr.mozilla.org/mozilla-central/source/gfx/layers/ipc/CompositorChild.cpp#134

Please help to provide logcat with IPC log enabled.

By the way, how about the reproduce steps and reproduce rate?
Flags: needinfo?(ying.xu)
FYI: I personally use attachment 8385539 [details] [diff] [review] in Bug 951712 to enable ipc log. Other ways are also possible.
Component: General → IPC
Product: Firefox OS → Core
Component: IPC → Graphics: Layers
Flags: needinfo?(ying.xu)
Flags: needinfo?(ming.li)
i'm not sure how to reproduce this bug.
The original bug says the reproduce rate is 1/50
Flags: needinfo?(ming.li)
Sotaro, does anything come to mind here?
Flags: needinfo?(sotaro.ikeda.g)
I checked attachment 8385065 [details]. But I can not find a log that seems directly related the problem. Then I try to write my assumptions.

IIRC, IPC channel is closed by the following.
- [1] when IPC protocol detect an error.
- [2] When IPC sync transaction takes too long time.

I noticed [2] in Bug 946720 Comment 35. I feel that in this bug's case [2] seems more possible. IPC channel could be closed by parent side when child side does not respond quickly. IPC channel could be closed by child side when parent does not does not respond quickly.

From this point of view, I re-checked attachment 8385065 [details]. There is a following log. It is not directly related to the crash, but such error happened on tarako.

> 02-15 15:45:44.090    81    81 I Gecko   : [Parent 81] WARNING: waitpid failed pid:1249 errno:10: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/ipc/chromium/src/base/process_util_posix.cc, line 254
> 02-15 15:45:44.090  1249  1249 E Sandbox : install_syscall_filter() failed

IIRC, when it happens, an application seems to freeze some duration. Sample example is Bug 946479 Comment 7 and Bug 945268 Comment 21. 

"install_syscall_filter() failed" is actually in the log. It might better to think about a possibility of IPC stop because of "install_syscall_filter()" problem.
Flags: needinfo?(sotaro.ikeda.g)
:jld, can you comment to Comment 8?
Flags: needinfo?(jld)
(In reply to Sotaro Ikeda [:sotaro] from comment #8)
> > 02-15 15:45:44.090    81    81 I Gecko   : [Parent 81] WARNING: waitpid failed pid:1249 errno:10: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/ipc/chromium/src/base/process_util_posix.cc, line 254

This is bug 943174.  Our use of waitpid was broken before Nuwa (we'd wait on a process multiple times, which doesn't work) and it's even more broken with Nuwa (the main process tries to wait on Nuwa's children, which also doesn't work).

> > 02-15 15:45:44.090  1249  1249 E Sandbox : install_syscall_filter() failed

This *should* be harmless — it's logged on devices without kernel support for seccomp-bpf.  (Also, this log message is no longer present on m-c and 1.3.)

> IIRC, when it happens, an application seems to freeze some duration. Sample
> example is Bug 946479 Comment 7 and Bug 945268 Comment 21. 

I think this is coincidence, unless there's proof that we're spending a significant amount of time in SetCurrentProcessSandbox.
Flags: needinfo?(jld)
Thanks for the comment. If we want to investigate more about the problem. We need a IPC logout enabled log.
ying, can you do test with attachment 8385539 [details] [diff] [review] applied?
Flags: needinfo?(ying.xu)
(In reply to Sotaro Ikeda [:sotaro] from comment #12)
> ying, can you do test with attachment 8385539 [details] [diff] [review]
> applied?

And we need logcat when the problem happens. Though the log could be large...
ok, I will run monkey test with this patch
Flags: needinfo?(ying.xu)
since the reproduction rate is 1/50 and you already testing with a patch, please renominate 1.3T? if this is a true blocker for you. thanks
blocking-b2g: 1.3T? → -
Flags: needinfo?(ying.xu)
We met this crash again and no tombstone with native server.
We need minidump screen shot.

B2G_OS_Version=1.3.0.0-prerelease
Android_Device=sp6821a_gonk
Android_Manufacturer=Spreadtrum
ProductName=B2G
Android_Board=sp6821a
Android_CPU_ABI=armeabi-v7a
Vendor=Mozilla
InstallTime=1988991369
Notes=GL Layers! EGL? EGL+ GL Context? GL Context+ GL Layers+ 
ReleaseChannel=default
Android_CPU_ABI2=armeabi
Version=28.0
Android_Brand=Spreadtrum
ServerURL=https://crash-reports.mozilla.com/submit?id={3c2e2abc-06d4-11e1-ac3b-374f68613e61}&version=28.0&buildid=20140315032342
Android_Hardware=sp8810
useragent_locale=en-US
BuildID=20140315032342
ProductID={3c2e2abc-06d4-11e1-ac3b-374f68613e61}
Android_Version=15(AOSP)
Android_Model=sp6821a
CrashTime=1988999597
StartupTime=1988999596
ProcessType=
Notes=xpcom_runtime_abort([Child 10921] ###!!! ABORT: ActorDestroy by IPC channel failure at CompositorChild: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/gfx/layers/ipc/CompositorChild.cpp, line 120)
URL={{template}}


Operating system: Android
                  0.0.0 Linux 3.0.8+ #1 PREEMPT Sat Mar 15 03:22:11 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/171:userdebug/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x0

Thread 0 (crashed)
 0  libxul.so!mozalloc_abort(char const*) [mozalloc_abort.cpp : 30 + 0x4]
     r4 = 0xbebf5e0c    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbebf5a20
     r8 = 0x4073affd    r9 = 0x00000001   r10 = 0xbebf5a20    fp = 0x4183f7b3
     sp = 0xbebf5a08    lr = 0x4172e47f    pc = 0x4172e482
    Found by: given as instruction pointer in context
 1  libxul.so!NS_DebugBreak [nsDebugImpl.cpp : 425 + 0x5]
     r4 = 0xbebf5e0c    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbebf5a20
     r8 = 0x4073affd    r9 = 0x00000001   r10 = 0xbebf5a20    fp = 0x4183f7b3
     sp = 0xbebf5a10    pc = 0x4073ade7
    Found by: call frame info
 2  libxul.so!mozilla::layers::CompositorChild::ActorDestroy(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [CompositorChild.cpp : 120 + 0x13]
     r4 = 0x42d52d20    r5 = 0x42d52d20    r6 = 0x00000000    r7 = 0x41ddfd30
     r8 = 0x00000004    r9 = 0x00000004   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5e40    pc = 0x409e228f
    Found by: call frame info
 3  libxul.so!mozilla::layers::PCompositorChild::DestroySubtree(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [PCompositorChild.cpp : 914 + 0x9]
     r4 = 0x00000000    r5 = 0x42d52d20    r6 = 0x00000000    r7 = 0x41ddfd30
     r8 = 0x00000004    r9 = 0x00000004   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5e70    pc = 0x408b8931
    Found by: call frame info
 4  libxul.so!mozilla::layers::PCompositorChild::OnChannelError() [PCompositorChild.cpp : 818 + 0x3]
     r4 = 0x42d52d20    r5 = 0x42d52d50    r6 = 0x00000000    r7 = 0xbebf6888
     r8 = 0xbebf5ef0    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5e98    pc = 0x408b8943
    Found by: call frame info
 5  libxul.so!mozilla::ipc::MessageChannel::NotifyMaybeChannelError() [MessageChannel.cpp : 1523 + 0x5]
     r4 = 0x42d52d50    r5 = 0x42d52d50    r6 = 0x00000000    r7 = 0xbebf6888
     r8 = 0xbebf5ef0    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5ea0    pc = 0x4088875b
    Found by: call frame info
 6  libxul.so!mozilla::ipc::MessageChannel::OnNotifyMaybeChannelError() [MessageChannel.cpp : 1552 + 0x5]
     r4 = 0x42dcf220    r5 = 0x42d52d50    r6 = 0x00000000    r7 = 0xbebf6888
     r8 = 0xbebf5ef0    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5ea8    pc = 0x40888fd7
    Found by: call frame info
 7  libxul.so!RunnableMethod<WebCore::ReverbConvolver, void (WebCore::ReverbConvolver::*)(), Tuple0>::Run() [tuple.h : 383 + 0x5]
     r4 = 0xbebf687c    r5 = 0x40301e00    r6 = 0xbebf5ef8    r7 = 0xbebf6888
     r8 = 0xbebf5ef0    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5ec8    pc = 0x408885c7
    Found by: call frame info
 8  libxul.so!MessageLoop::RunTask(Task*) [message_loop.cc : 340 + 0x5]
     r4 = 0xbebf687c    r5 = 0x40301e00    r6 = 0xbebf5ef8    r7 = 0xbebf6888
     r8 = 0xbebf5ef0    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5ed0    pc = 0x40881af5
    Found by: call frame info
 9  libxul.so!MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) [message_loop.cc : 348 + 0x5]
     r4 = 0x00000001    r5 = 0xbebf5ee8    r6 = 0xbebf5ef8    r7 = 0xbebf6888
     r8 = 0xbebf5ef0    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5ee0    pc = 0x4088285f
    Found by: call frame info
10  libxul.so!MessageLoop::DoWork() [message_loop.cc : 448 + 0x7]
     r4 = 0xbebf687c    r5 = 0xbebf5ee8    r6 = 0xbebf5ef8    r7 = 0xbebf6888
     r8 = 0xbebf5ef0    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5ee8    pc = 0x4088341d
    Found by: call frame info
11  libxul.so!mozilla::ipc::DoWorkRunnable::Run() [MessagePump.cpp : 45 + 0x7]
     r4 = 0xbebf687c    r5 = 0x00000001    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbebf5f6f    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5f18    pc = 0x4088b9c9
    Found by: call frame info
12  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 612 + 0x5]
     r4 = 0x4032d400    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbebf5f6f    r9 = 0x4032d42c   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5f28    pc = 0x407602b5
    Found by: call frame info
13  libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 263 + 0xb]
     r4 = 0x00000000    r5 = 0xbebf687c    r6 = 0x403028f0    r7 = 0x00000001
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5f68    pc = 0x40733041
    Found by: call frame info
14  libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 85 + 0x7]
     r4 = 0x403028e0    r5 = 0xbebf687c    r6 = 0x403028f0    r7 = 0x00000001
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5f78    pc = 0x4088bb11
    Found by: call frame info
15  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 250 + 0x7]
     r4 = 0xbebf687c    r5 = 0x403028e0    r6 = 0xbebf687c    r7 = 0x00000001
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5fa0    pc = 0x4088bbdf
    Found by: call frame info
16  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5]
     r4 = 0xbebf687c    r5 = 0x42dd8e20    r6 = 0x4032d400    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5fb8    pc = 0x40881ab9
    Found by: call frame info
17  libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5]
     r4 = 0xbebf687c    r5 = 0x42dd8e20    r6 = 0x4032d400    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5fc0    pc = 0x40881b37
    Found by: call frame info
18  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 161 + 0x7]
     r4 = 0x00000000    r5 = 0x42dd8e20    r6 = 0x4032d400    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5fd8    pc = 0x40c448ed
    Found by: call frame info
19  libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 679 + 0x5]
     r4 = 0x80004005    r5 = 0x403028e0    r6 = 0x4033cc00    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5fe8    pc = 0x4124ba7b
    Found by: call frame info
20  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 217 + 0x3]
     r4 = 0xbebf687c    r5 = 0x403028e0    r6 = 0x4033cc00    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf5ff8    pc = 0x4088bbad
    Found by: call frame info
21  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5]
     r4 = 0xbebf687c    r5 = 0xbebf698c    r6 = 0x4033cc00    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf6010    pc = 0x40881ab9
    Found by: call frame info
22  libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5]
     r4 = 0xbebf687c    r5 = 0xbebf698c    r6 = 0x4033cc00    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf6018    pc = 0x40881b37
    Found by: call frame info
23  libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 516 + 0x9]
     r4 = 0xbebf6998    r5 = 0xbebf698c    r6 = 0x4033cc00    r7 = 0x00000003
     r8 = 0xbebf6a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf6030    pc = 0x4124bee9
    Found by: call frame info
24  plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5]
     r4 = 0x00000001    r5 = 0xbebf6a14    r6 = 0x00000008    r7 = 0x00008803
     r8 = 0x00000009    r9 = 0xbebf6a34   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf69d8    pc = 0x00008761
    Found by: call frame info
25  libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
     r4 = 0x00008684    r5 = 0xbebf6a14    r6 = 0x00000009    r7 = 0xbebf6a3c
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf69f8    pc = 0x40095a57
    Found by: call frame info
26  0xb0001dc5
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbebf6a10    pc = 0xb0001dc7
    Found by: call frame info
Depends on: 983022
blocking-b2g: - → 1.3T?
James, is the frequency of this really high enough that we would not ship with it under any circumstances? Is this the highest frequently crash during monkey testing?
I checked attachment 8391846 [details]. I noticed two things.
[1] a lot of "[Gralloc-ERROR]" in the log.
[2] many "Connection reset by peer" logs

[1] seems spreadtrum specific gralloc error. Recent b2g does not have a gralloc buffer problem on qcom's chipset until tiling is enabled.

[2] could cause the crash in Comment 16. It says that child side does not respond to parent side and pipe connection is broken. Parent side shutdown IPC channel after the message. See Bug 946720 Comment 37.
Hi James, based on comment 19, could you revisit this issue? thanks
Flags: needinfo?(james.zhang)
Ying, please check it.
Flags: needinfo?(james.zhang)
(In reply to Andreas Gal :gal from comment #18)
> James, is the frequency of this really high enough that we would not ship
> with it under any circumstances? Is this the highest frequently crash during
> monkey testing?

Not very high. We met it twice.
Can we get a precise STR and/or video file to test this?
If this was hit only twice, we should probably not block on this. Maybe a screenshot will at some point give us more to go on. Until then I would recommend not blocking on this since its so rare (unlikely to interfere with MFBT goals). James, do you agree?
(In reply to Andreas Gal :gal from comment #24)
> If this was hit only twice, we should probably not block on this. Maybe a
> screenshot will at some point give us more to go on. Until then I would
> recommend not blocking on this since its so rare (unlikely to interfere with
> MFBT goals). James, do you agree?

Currently I have a WIP path in bug 983022 Comment 12 which can do a screenshot when crash happens. Our partner can run test with this WIP.
Even with that I would unblock here until we have STR.
let's not block on this before we have more information
blocking-b2g: 1.3T? → -
Flags: needinfo?(ying.xu)
Mass resolving WFM: signature(s) hasn't(/haven't) reported in past 28 days.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: