Closed
Bug 979107
Opened 10 years ago
Closed 8 years ago
[tarako][1.3t]app process crash Notes=xpcom_runtime_abort([Child 1401] ###!!! ABORT: ActorDestroy by IPC channel failure at CompositorChild: file .../CompositorChild.cpp, line 120) URL={{template}}
Categories
(Core :: Graphics: Layers, defect)
Tracking
()
People
(Reporter: ying.xu, Unassigned)
References
Details
(Keywords: crash, Whiteboard: [b2g-crash])
Crash Data
Attachments
(2 files)
video playing, sometimes video app crash gaia:d0ad97604dc7cbd230433eef5bd228b46d7154bb gecko:752d353161d5e4d742920f7c91c920787e2b10c3 Notes=xpcom_runtime_abort([Child 1401] ###!!! ABORT: ActorDestroy by IPC channel failure at CompositorChild: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/gfx/layers/ipc/CompositorChild.cpp, line 120) URL={{template}} Operating system: Android 0.0.0 Linux 3.0.8+ #1 PREEMPT Tue Feb 11 14:30:19 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/107:userdebug/test-keys CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0x0 Thread 0 (crashed) 0 libxul.so!mozalloc_abort(char const*) [mozalloc_abort.cpp : 30 + 0x4] r4 = 0xbea48e0c r5 = 0x00000000 r6 = 0xffffffff r7 = 0xbea48a20 r8 = 0x4073accd r9 = 0x00000001 r10 = 0xbea48a20 fp = 0x4183d1cd sp = 0xbea48a08 lr = 0x4172c48f pc = 0x4172c492 Found by: given as instruction pointer in context 1 libxul.so!NS_DebugBreak [nsDebugImpl.cpp : 425 + 0x5] r4 = 0xbea48e0c r5 = 0x00000000 r6 = 0xffffffff r7 = 0xbea48a20 r8 = 0x4073accd r9 = 0x00000001 r10 = 0xbea48a20 fp = 0x4183d1cd sp = 0xbea48a10 pc = 0x4073aab7 Found by: call frame info 2 libxul.so!mozilla::layers::CompositorChild::ActorDestroy(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [CompositorChild.cpp : 120 + 0x13] r4 = 0x42d17d20 r5 = 0x42d17d20 r6 = 0x00000000 r7 = 0x41ddd4c8 r8 = 0x00000004 r9 = 0x00000004 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48e40 pc = 0x409e1217 Found by: call frame info 3 libxul.so!mozilla::layers::PCompositorChild::DestroySubtree(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [PCompositorChild.cpp : 914 + 0x9] r4 = 0x00000000 r5 = 0x42d17d20 r6 = 0x00000000 r7 = 0x41ddd4c8 r8 = 0x00000004 r9 = 0x00000004 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48e70 pc = 0x408b88e1 Found by: call frame info 4 libxul.so!mozilla::layers::PCompositorChild::OnChannelError() [PCompositorChild.cpp : 818 + 0x3] r4 = 0x42d17d20 r5 = 0x42d17d50 r6 = 0x00000000 r7 = 0xbea49888 r8 = 0xbea48ef0 r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48e98 pc = 0x408b88f3 Found by: call frame info 5 libxul.so!mozilla::ipc::MessageChannel::NotifyMaybeChannelError() [MessageChannel.cpp : 1523 + 0x5] r4 = 0x42d17d50 r5 = 0x42d17d50 r6 = 0x00000000 r7 = 0xbea49888 r8 = 0xbea48ef0 r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48ea0 pc = 0x40888803 Found by: call frame info 6 libxul.so!mozilla::ipc::MessageChannel::OnNotifyMaybeChannelError() [MessageChannel.cpp : 1552 + 0x5] r4 = 0x42d992b0 r5 = 0x42d17d50 r6 = 0x00000000 r7 = 0xbea49888 r8 = 0xbea48ef0 r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48ea8 pc = 0x4088907f Found by: call frame info 7 libxul.so!RunnableMethod<WebCore::ReverbConvolver, void (WebCore::ReverbConvolver::*)(), Tuple0>::Run() [tuple.h : 383 + 0x5] r4 = 0xbea4987c r5 = 0x40301ea0 r6 = 0xbea48ef8 r7 = 0xbea49888 r8 = 0xbea48ef0 r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48ec8 pc = 0x4088866f Found by: call frame info 8 libxul.so!MessageLoop::RunTask(Task*) [message_loop.cc : 340 + 0x5] r4 = 0xbea4987c r5 = 0x40301ea0 r6 = 0xbea48ef8 r7 = 0xbea49888 r8 = 0xbea48ef0 r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48ed0 pc = 0x40881b9d Found by: call frame info 9 libxul.so!MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) [message_loop.cc : 348 + 0x5] r4 = 0x00000001 r5 = 0xbea48ee8 r6 = 0xbea48ef8 r7 = 0xbea49888 r8 = 0xbea48ef0 r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48ee0 pc = 0x40882907 Found by: call frame info 10 libxul.so!MessageLoop::DoWork() [message_loop.cc : 448 + 0x7] r4 = 0xbea4987c r5 = 0xbea48ee8 r6 = 0xbea48ef8 r7 = 0xbea49888 r8 = 0xbea48ef0 r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48ee8 pc = 0x408834c5 Found by: call frame info 11 libxul.so!mozilla::ipc::DoWorkRunnable::Run() [MessagePump.cpp : 45 + 0x7] r4 = 0xbea4987c r5 = 0x00000001 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbea48f6f r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48f18 pc = 0x4088ba71 Found by: call frame info 12 libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 612 + 0x5] r4 = 0x40316880 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbea48f6f r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48f28 pc = 0x40760505 Found by: call frame info 13 libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 263 + 0xb] r4 = 0x00000000 r5 = 0xbea4987c r6 = 0x40302ad0 r7 = 0x00000001 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48f68 pc = 0x40732d11 Found by: call frame info 14 libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 85 + 0x7] r4 = 0x40302ac0 r5 = 0xbea4987c r6 = 0x40302ad0 r7 = 0x00000001 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48f78 pc = 0x4088bbb9 Found by: call frame info 15 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 250 + 0x7] r4 = 0xbea4987c r5 = 0x40302ac0 r6 = 0xbea4987c r7 = 0x00000001 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48fa0 pc = 0x4088bc87 Found by: call frame info 16 libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5] r4 = 0xbea4987c r5 = 0x42d9f2e0 r6 = 0x40316880 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48fb8 pc = 0x40881b61 Found by: call frame info 17 libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5] r4 = 0xbea4987c r5 = 0x42d9f2e0 r6 = 0x40316880 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48fc0 pc = 0x40881bdf Found by: call frame info 18 libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 161 + 0x7] r4 = 0x00000000 r5 = 0x42d9f2e0 r6 = 0x40316880 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48fd8 pc = 0x40c4243d Found by: call frame info 19 libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 679 + 0x5] r4 = 0x80004005 r5 = 0x40302ac0 r6 = 0x4033dc00 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48fe8 pc = 0x41249ea3 Found by: call frame info 20 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 217 + 0x3] r4 = 0xbea4987c r5 = 0x40302ac0 r6 = 0x4033dc00 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea48ff8 pc = 0x4088bc55 Found by: call frame info 21 libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5] r4 = 0xbea4987c r5 = 0xbea4998c r6 = 0x4033dc00 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea49010 pc = 0x40881b61 Found by: call frame info 22 libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5] r4 = 0xbea4987c r5 = 0xbea4998c r6 = 0x4033dc00 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea49018 pc = 0x40881bdf Found by: call frame info 23 libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 516 + 0x9] r4 = 0xbea49998 r5 = 0xbea4998c r6 = 0x4033dc00 r7 = 0x00000003 r8 = 0xbea49a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea49030 pc = 0x4124a311 Found by: call frame info 24 plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5] r4 = 0x00000001 r5 = 0xbea49a14 r6 = 0x00000008 r7 = 0x000087f3 r8 = 0x00000009 r9 = 0xbea49a34 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea499d8 pc = 0x00008751 Found by: call frame info 25 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00008674 r5 = 0xbea49a14 r6 = 0x00000009 r7 = 0xbea49a3c r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea499f8 pc = 0x4012ba57 Found by: call frame info 26 0xb0001dc5 r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea49a10 pc = 0xb0001dc7 Found by: call frame info b2g main process did not crash ,neither the media server process
Comment 3•10 years ago
|
||
I've talked to Graphics team. Peter will take a first look since it crashes at CompositorChild.
Flags: needinfo?(echou)
Comment 4•10 years ago
|
||
ying, this abort was caused by the following line and it means somewhere the IPC channel had problem. I tried to search the log from attachment 8385065 [details], but I couldn't find anything about IPC pipe error. I only saw the crash report about CompositorChild::ActorDestroy. http://dxr.mozilla.org/mozilla-central/source/gfx/layers/ipc/CompositorChild.cpp#134 Please help to provide logcat with IPC log enabled. By the way, how about the reproduce steps and reproduce rate?
Flags: needinfo?(ying.xu)
Comment 5•10 years ago
|
||
FYI: I personally use attachment 8385539 [details] [diff] [review] in Bug 951712 to enable ipc log. Other ways are also possible.
Updated•10 years ago
|
Component: General → IPC
Product: Firefox OS → Core
Updated•10 years ago
|
Component: IPC → Graphics: Layers
i'm not sure how to reproduce this bug. The original bug says the reproduce rate is 1/50
Flags: needinfo?(ming.li)
Comment 8•10 years ago
|
||
I checked attachment 8385065 [details]. But I can not find a log that seems directly related the problem. Then I try to write my assumptions. IIRC, IPC channel is closed by the following. - [1] when IPC protocol detect an error. - [2] When IPC sync transaction takes too long time. I noticed [2] in Bug 946720 Comment 35. I feel that in this bug's case [2] seems more possible. IPC channel could be closed by parent side when child side does not respond quickly. IPC channel could be closed by child side when parent does not does not respond quickly. From this point of view, I re-checked attachment 8385065 [details]. There is a following log. It is not directly related to the crash, but such error happened on tarako. > 02-15 15:45:44.090 81 81 I Gecko : [Parent 81] WARNING: waitpid failed pid:1249 errno:10: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/ipc/chromium/src/base/process_util_posix.cc, line 254 > 02-15 15:45:44.090 1249 1249 E Sandbox : install_syscall_filter() failed IIRC, when it happens, an application seems to freeze some duration. Sample example is Bug 946479 Comment 7 and Bug 945268 Comment 21. "install_syscall_filter() failed" is actually in the log. It might better to think about a possibility of IPC stop because of "install_syscall_filter()" problem.
Flags: needinfo?(sotaro.ikeda.g)
Comment 10•10 years ago
|
||
(In reply to Sotaro Ikeda [:sotaro] from comment #8) > > 02-15 15:45:44.090 81 81 I Gecko : [Parent 81] WARNING: waitpid failed pid:1249 errno:10: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/ipc/chromium/src/base/process_util_posix.cc, line 254 This is bug 943174. Our use of waitpid was broken before Nuwa (we'd wait on a process multiple times, which doesn't work) and it's even more broken with Nuwa (the main process tries to wait on Nuwa's children, which also doesn't work). > > 02-15 15:45:44.090 1249 1249 E Sandbox : install_syscall_filter() failed This *should* be harmless — it's logged on devices without kernel support for seccomp-bpf. (Also, this log message is no longer present on m-c and 1.3.) > IIRC, when it happens, an application seems to freeze some duration. Sample > example is Bug 946479 Comment 7 and Bug 945268 Comment 21. I think this is coincidence, unless there's proof that we're spending a significant amount of time in SetCurrentProcessSandbox.
Flags: needinfo?(jld)
Comment 11•10 years ago
|
||
Thanks for the comment. If we want to investigate more about the problem. We need a IPC logout enabled log.
Comment 12•10 years ago
|
||
ying, can you do test with attachment 8385539 [details] [diff] [review] applied?
Flags: needinfo?(ying.xu)
Comment 13•10 years ago
|
||
(In reply to Sotaro Ikeda [:sotaro] from comment #12) > ying, can you do test with attachment 8385539 [details] [diff] [review] > applied? And we need logcat when the problem happens. Though the log could be large...
Reporter | ||
Comment 14•10 years ago
|
||
ok, I will run monkey test with this patch
Flags: needinfo?(ying.xu)
Comment 15•10 years ago
|
||
since the reproduction rate is 1/50 and you already testing with a patch, please renominate 1.3T? if this is a true blocker for you. thanks
blocking-b2g: 1.3T? → -
Flags: needinfo?(ying.xu)
Comment 16•10 years ago
|
||
We met this crash again and no tombstone with native server. We need minidump screen shot. B2G_OS_Version=1.3.0.0-prerelease Android_Device=sp6821a_gonk Android_Manufacturer=Spreadtrum ProductName=B2G Android_Board=sp6821a Android_CPU_ABI=armeabi-v7a Vendor=Mozilla InstallTime=1988991369 Notes=GL Layers! EGL? EGL+ GL Context? GL Context+ GL Layers+ ReleaseChannel=default Android_CPU_ABI2=armeabi Version=28.0 Android_Brand=Spreadtrum ServerURL=https://crash-reports.mozilla.com/submit?id={3c2e2abc-06d4-11e1-ac3b-374f68613e61}&version=28.0&buildid=20140315032342 Android_Hardware=sp8810 useragent_locale=en-US BuildID=20140315032342 ProductID={3c2e2abc-06d4-11e1-ac3b-374f68613e61} Android_Version=15(AOSP) Android_Model=sp6821a CrashTime=1988999597 StartupTime=1988999596 ProcessType= Notes=xpcom_runtime_abort([Child 10921] ###!!! ABORT: ActorDestroy by IPC channel failure at CompositorChild: file /android/builder/repo/sp6821a_gonk4.0/B2G/gecko/gfx/layers/ipc/CompositorChild.cpp, line 120) URL={{template}} Operating system: Android 0.0.0 Linux 3.0.8+ #1 PREEMPT Sat Mar 15 03:22:11 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/171:userdebug/test-keys CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0x0 Thread 0 (crashed) 0 libxul.so!mozalloc_abort(char const*) [mozalloc_abort.cpp : 30 + 0x4] r4 = 0xbebf5e0c r5 = 0x00000000 r6 = 0xffffffff r7 = 0xbebf5a20 r8 = 0x4073affd r9 = 0x00000001 r10 = 0xbebf5a20 fp = 0x4183f7b3 sp = 0xbebf5a08 lr = 0x4172e47f pc = 0x4172e482 Found by: given as instruction pointer in context 1 libxul.so!NS_DebugBreak [nsDebugImpl.cpp : 425 + 0x5] r4 = 0xbebf5e0c r5 = 0x00000000 r6 = 0xffffffff r7 = 0xbebf5a20 r8 = 0x4073affd r9 = 0x00000001 r10 = 0xbebf5a20 fp = 0x4183f7b3 sp = 0xbebf5a10 pc = 0x4073ade7 Found by: call frame info 2 libxul.so!mozilla::layers::CompositorChild::ActorDestroy(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [CompositorChild.cpp : 120 + 0x13] r4 = 0x42d52d20 r5 = 0x42d52d20 r6 = 0x00000000 r7 = 0x41ddfd30 r8 = 0x00000004 r9 = 0x00000004 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5e40 pc = 0x409e228f Found by: call frame info 3 libxul.so!mozilla::layers::PCompositorChild::DestroySubtree(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) [PCompositorChild.cpp : 914 + 0x9] r4 = 0x00000000 r5 = 0x42d52d20 r6 = 0x00000000 r7 = 0x41ddfd30 r8 = 0x00000004 r9 = 0x00000004 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5e70 pc = 0x408b8931 Found by: call frame info 4 libxul.so!mozilla::layers::PCompositorChild::OnChannelError() [PCompositorChild.cpp : 818 + 0x3] r4 = 0x42d52d20 r5 = 0x42d52d50 r6 = 0x00000000 r7 = 0xbebf6888 r8 = 0xbebf5ef0 r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5e98 pc = 0x408b8943 Found by: call frame info 5 libxul.so!mozilla::ipc::MessageChannel::NotifyMaybeChannelError() [MessageChannel.cpp : 1523 + 0x5] r4 = 0x42d52d50 r5 = 0x42d52d50 r6 = 0x00000000 r7 = 0xbebf6888 r8 = 0xbebf5ef0 r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5ea0 pc = 0x4088875b Found by: call frame info 6 libxul.so!mozilla::ipc::MessageChannel::OnNotifyMaybeChannelError() [MessageChannel.cpp : 1552 + 0x5] r4 = 0x42dcf220 r5 = 0x42d52d50 r6 = 0x00000000 r7 = 0xbebf6888 r8 = 0xbebf5ef0 r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5ea8 pc = 0x40888fd7 Found by: call frame info 7 libxul.so!RunnableMethod<WebCore::ReverbConvolver, void (WebCore::ReverbConvolver::*)(), Tuple0>::Run() [tuple.h : 383 + 0x5] r4 = 0xbebf687c r5 = 0x40301e00 r6 = 0xbebf5ef8 r7 = 0xbebf6888 r8 = 0xbebf5ef0 r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5ec8 pc = 0x408885c7 Found by: call frame info 8 libxul.so!MessageLoop::RunTask(Task*) [message_loop.cc : 340 + 0x5] r4 = 0xbebf687c r5 = 0x40301e00 r6 = 0xbebf5ef8 r7 = 0xbebf6888 r8 = 0xbebf5ef0 r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5ed0 pc = 0x40881af5 Found by: call frame info 9 libxul.so!MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) [message_loop.cc : 348 + 0x5] r4 = 0x00000001 r5 = 0xbebf5ee8 r6 = 0xbebf5ef8 r7 = 0xbebf6888 r8 = 0xbebf5ef0 r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5ee0 pc = 0x4088285f Found by: call frame info 10 libxul.so!MessageLoop::DoWork() [message_loop.cc : 448 + 0x7] r4 = 0xbebf687c r5 = 0xbebf5ee8 r6 = 0xbebf5ef8 r7 = 0xbebf6888 r8 = 0xbebf5ef0 r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5ee8 pc = 0x4088341d Found by: call frame info 11 libxul.so!mozilla::ipc::DoWorkRunnable::Run() [MessagePump.cpp : 45 + 0x7] r4 = 0xbebf687c r5 = 0x00000001 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbebf5f6f r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5f18 pc = 0x4088b9c9 Found by: call frame info 12 libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 612 + 0x5] r4 = 0x4032d400 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbebf5f6f r9 = 0x4032d42c r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5f28 pc = 0x407602b5 Found by: call frame info 13 libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 263 + 0xb] r4 = 0x00000000 r5 = 0xbebf687c r6 = 0x403028f0 r7 = 0x00000001 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5f68 pc = 0x40733041 Found by: call frame info 14 libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 85 + 0x7] r4 = 0x403028e0 r5 = 0xbebf687c r6 = 0x403028f0 r7 = 0x00000001 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5f78 pc = 0x4088bb11 Found by: call frame info 15 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 250 + 0x7] r4 = 0xbebf687c r5 = 0x403028e0 r6 = 0xbebf687c r7 = 0x00000001 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5fa0 pc = 0x4088bbdf Found by: call frame info 16 libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5] r4 = 0xbebf687c r5 = 0x42dd8e20 r6 = 0x4032d400 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5fb8 pc = 0x40881ab9 Found by: call frame info 17 libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5] r4 = 0xbebf687c r5 = 0x42dd8e20 r6 = 0x4032d400 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5fc0 pc = 0x40881b37 Found by: call frame info 18 libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 161 + 0x7] r4 = 0x00000000 r5 = 0x42dd8e20 r6 = 0x4032d400 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5fd8 pc = 0x40c448ed Found by: call frame info 19 libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 679 + 0x5] r4 = 0x80004005 r5 = 0x403028e0 r6 = 0x4033cc00 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5fe8 pc = 0x4124ba7b Found by: call frame info 20 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 217 + 0x3] r4 = 0xbebf687c r5 = 0x403028e0 r6 = 0x4033cc00 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf5ff8 pc = 0x4088bbad Found by: call frame info 21 libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5] r4 = 0xbebf687c r5 = 0xbebf698c r6 = 0x4033cc00 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf6010 pc = 0x40881ab9 Found by: call frame info 22 libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5] r4 = 0xbebf687c r5 = 0xbebf698c r6 = 0x4033cc00 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf6018 pc = 0x40881b37 Found by: call frame info 23 libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 516 + 0x9] r4 = 0xbebf6998 r5 = 0xbebf698c r6 = 0x4033cc00 r7 = 0x00000003 r8 = 0xbebf6a18 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf6030 pc = 0x4124bee9 Found by: call frame info 24 plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5] r4 = 0x00000001 r5 = 0xbebf6a14 r6 = 0x00000008 r7 = 0x00008803 r8 = 0x00000009 r9 = 0xbebf6a34 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf69d8 pc = 0x00008761 Found by: call frame info 25 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00008684 r5 = 0xbebf6a14 r6 = 0x00000009 r7 = 0xbebf6a3c r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf69f8 pc = 0x40095a57 Found by: call frame info 26 0xb0001dc5 r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbebf6a10 pc = 0xb0001dc7 Found by: call frame info
Depends on: 983022
Comment 17•10 years ago
|
||
Updated•10 years ago
|
blocking-b2g: - → 1.3T?
Comment 18•10 years ago
|
||
James, is the frequency of this really high enough that we would not ship with it under any circumstances? Is this the highest frequently crash during monkey testing?
Comment 19•10 years ago
|
||
I checked attachment 8391846 [details]. I noticed two things. [1] a lot of "[Gralloc-ERROR]" in the log. [2] many "Connection reset by peer" logs [1] seems spreadtrum specific gralloc error. Recent b2g does not have a gralloc buffer problem on qcom's chipset until tiling is enabled. [2] could cause the crash in Comment 16. It says that child side does not respond to parent side and pipe connection is broken. Parent side shutdown IPC channel after the message. See Bug 946720 Comment 37.
Comment 20•10 years ago
|
||
Hi James, based on comment 19, could you revisit this issue? thanks
Flags: needinfo?(james.zhang)
Comment 22•10 years ago
|
||
(In reply to Andreas Gal :gal from comment #18) > James, is the frequency of this really high enough that we would not ship > with it under any circumstances? Is this the highest frequently crash during > monkey testing? Not very high. We met it twice.
Comment 23•10 years ago
|
||
Can we get a precise STR and/or video file to test this?
Comment 24•10 years ago
|
||
If this was hit only twice, we should probably not block on this. Maybe a screenshot will at some point give us more to go on. Until then I would recommend not blocking on this since its so rare (unlikely to interfere with MFBT goals). James, do you agree?
Comment 25•10 years ago
|
||
(In reply to Andreas Gal :gal from comment #24) > If this was hit only twice, we should probably not block on this. Maybe a > screenshot will at some point give us more to go on. Until then I would > recommend not blocking on this since its so rare (unlikely to interfere with > MFBT goals). James, do you agree? Currently I have a WIP path in bug 983022 Comment 12 which can do a screenshot when crash happens. Our partner can run test with this WIP.
Comment 26•10 years ago
|
||
Even with that I would unblock here until we have STR.
Comment 27•10 years ago
|
||
let's not block on this before we have more information
blocking-b2g: 1.3T? → -
Updated•10 years ago
|
Mass resolving WFM: signature(s) hasn't(/haven't) reported in past 28 days.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•