Closed Bug 991992 Opened 10 years ago Closed 10 years ago

[tarako] monkey test crash at libc.so + 0xdd4c

Categories

(Core :: Graphics, defect)

ARM
Gonk (Firefox OS)
defect
Not set
major

Tracking

()

RESOLVED DUPLICATE of bug 970007
blocking-b2g -
Tracking Status
b2g-v1.3T --- affected

People

(Reporter: yaoyao.wu, Unassigned)

Details

(Keywords: crash, Whiteboard: [b2g-crash])

Attachments

(1 file)

Operating system: Android
                  0.0.0 Linux 3.0.8 #1 PREEMPT Wed Apr 2 18:26:35 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/225:userdebug/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x44201000

Thread 0 (crashed)
 0  libc.so + 0xdd4c
     r4 = 0x00000288    r5 = 0x0000005c    r6 = 0x44201278    r7 = 0x441bfd78
     r8 = 0x00000000    r9 = 0x00040dd0   r10 = 0x0000019a    fp = 0x000004a8
     sp = 0xbefbffd0    lr = 0x40abe65f    pc = 0x40029d4c
    Found by: given as instruction pointer in context
 1  libxul.so!BufferUnrotate(unsigned char*, int, int, int, int, int) [BufferUnrotate.cpp : 44 + 0xd]
     sp = 0xbefbffd8    pc = 0x40abe65f
    Found by: stack scanning
 2  libxul.so!mozilla::layers::RotatedContentBuffer::BeginPaint(mozilla::layers::ThebesLayer*, gfxContentType, unsigned int) [RotatedBuffer.cpp : 555 + 0x7]
     r4 = 0x404cf9f0    r5 = 0xbefc0268    r6 = 0x404cf9fc    r7 = 0x414c59cd
     r8 = 0x0000012a    r9 = 0x00000280   r10 = 0x00000140    fp = 0x00001000
     sp = 0xbefc0028    pc = 0x40ac6be3
    Found by: call frame info
 3  libxul.so!mozilla::layers::ContentClientBasic::BeginPaintBuffer(mozilla::layers::ThebesLayer*, gfxContentType, unsigned int) + 0xf
     r4 = 0xbefc0268    r5 = 0x40acf4c1    r6 = 0x00001000    r7 = 0xbefc0268
     r8 = 0xbefc029c    r9 = 0x4314e400   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc0248    pc = 0x40acf4d1
    Found by: call frame info
 4  libxul.so!mozilla::layers::ClientThebesLayer::PaintThebes() [ClientThebesLayer.cpp : 61 + 0x9]
     r4 = 0x42d336c0    r5 = 0x40acf4c1    r6 = 0x00001000    r7 = 0xbefc0268
     r8 = 0xbefc029c    r9 = 0x4314e400   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc0258    pc = 0x40acd643
    Found by: call frame info
 5  libxul.so!mozilla::layers::ClientThebesLayer::RenderLayer() [ClientThebesLayer.cpp : 107 + 0x5]
     r4 = 0x42d336c0    r5 = 0x404cf9a0    r6 = 0x00000000    r7 = 0xbefc046c
     r8 = 0x4314e628    r9 = 0x4314e400   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc0320    pc = 0x40acd793
    Found by: call frame info
 6  libxul.so!mozilla::layers::ClientContainerLayer::RenderLayer() [ClientContainerLayer.h : 81 + 0x5]
     r4 = 0xbefc0340    r5 = 0x41ec8c44    r6 = 0x00000000    r7 = 0xbefc046c
     r8 = 0x4314e628    r9 = 0x4314e400   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc0338    pc = 0x40acc61d
    Found by: call frame info
 7  libxul.so!mozilla::layers::ClientContainerLayer::RenderLayer() [ClientContainerLayer.h : 81 + 0x5]
     r4 = 0xbefc03dc    r5 = 0x41ec8c44    r6 = 0x00000001    r7 = 0xbefc046c
     r8 = 0x4314e628    r9 = 0x4314e400   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc03d0    pc = 0x40acc61d
    Found by: call frame info
 8  libxul.so!mozilla::layers::ClientLayerManager::EndTransactionInternal(void (*)(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) [ClientLayerManager.cpp : 188 + 0x9]
     r4 = 0x404243e0    r5 = 0x00000000    r6 = 0x40acc349    r7 = 0xbefc046c
     r8 = 0x4314e628    r9 = 0x4314e400   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc0468    pc = 0x40accff9
    Found by: call frame info
 9  libxul.so!mozilla::layers::ClientLayerManager::EndTransaction(void (*)(mozilla::layers::ThebesLayer*, gfxContext*, nsIntRegion const&, mozilla::layers::DrawRegionClip, nsIntRegion const&, void*), void*, mozilla::layers::LayerManager::EndTransactionFlags) [ClientLayerManager.cpp : 211 + 0xb]
     r4 = 0x404243e0    r5 = 0x00000002    r6 = 0xbefc06a4    r7 = 0x4111b359
     r8 = 0x4314e400    r9 = 0x00000000   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc04d0    pc = 0x40acd339
    Found by: call frame info
10  libxul.so!nsDisplayList::PaintForFrame(nsDisplayListBuilder*, nsRenderingContext*, nsIFrame*, unsigned int) const [nsDisplayList.cpp : 1301 + 0x7]
     r4 = 0x404243e0    r5 = 0x433c2900    r6 = 0xbefc06a4    r7 = 0x42d55e80
     r8 = 0x4314e400    r9 = 0x00000000   r10 = 0x4362b800    fp = 0x41ec8c44
     sp = 0xbefc04e8    pc = 0x4113e867
    Found by: call frame info
11  libxul.so!nsDisplayList::PaintRoot(nsDisplayListBuilder*, nsRenderingContext*, unsigned int) const [nsDisplayList.cpp : 1155 + 0xd]
     r4 = 0x00000000    r5 = 0xbefc06a4    r6 = 0xbefc0a28    r7 = 0x0000001d
     r8 = 0xbefc09f8    r9 = 0x00000000   r10 = 0xbefc0998    fp = 0x00000004
     sp = 0xbefc0648    pc = 0x4113e9f5
    Found by: call frame info
12  libxul.so!nsLayoutUtils::PaintFrame(nsRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) [nsLayoutUtils.cpp : 2348 + 0x5]
     r4 = 0x42e8e298    r5 = 0x00000704    r6 = 0x00000000    r7 = 0xbefc06a4
     r8 = 0xbefc09f8    r9 = 0x00000000   r10 = 0xbefc0998    fp = 0x00000004
     sp = 0xbefc0670    pc = 0x411474cf
    Found by: call frame info
13  libxul.so!PresShell::Paint(nsView*, nsRegion const&, unsigned int) [nsPresShell.cpp : 5898 + 0xd]
     r4 = 0x404243e0    r5 = 0x42e40d60    r6 = 0x00000001    r7 = 0x00000001
     r8 = 0x42e8e298    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00020630
     sp = 0xbefc0ad8    pc = 0x41111457
    Found by: call frame info
14  libxul.so!nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*) [nsViewManager.cpp : 455 + 0x19]
     r4 = 0x00000000    r5 = 0x404cd140    r6 = 0x42edfce0    r7 = 0xbefc0c40
     r8 = 0x431b0430    r9 = 0x41111159   r10 = 0x42e40d60    fp = 0x00000003
     sp = 0xbefc0c40    pc = 0x40e9fdc9
    Found by: call frame info
15  libxul.so!nsViewManager::ProcessPendingUpdatesForView(nsView*, bool) [nsViewManager.cpp : 396 + 0x7]
     r4 = 0x00000000    r5 = 0x404cd140    r6 = 0x00000001    r7 = 0x431b0430
     r8 = 0xbefc0d70    r9 = 0xbefc0e74   r10 = 0x00000000    fp = 0x00000003
     sp = 0xbefc0c90    pc = 0x40e9fe65
    Found by: call frame info
16  libxul.so!nsViewManager::ProcessPendingUpdates() [nsViewManager.cpp : 1087 + 0x9]
     r4 = 0x431b0430    r5 = 0x431b0430    r6 = 0xbefc0e50    r7 = 0x404d1238
     r8 = 0xbefc0d70    r9 = 0xbefc0e74   r10 = 0x00000000    fp = 0x00000003
     sp = 0xbefc0cb0    pc = 0x40e9fed9
    Found by: call frame info
17  libxul.so!nsRefreshDriver::Tick(long long, mozilla::TimeStamp) [nsRefreshDriver.cpp : 1208 + 0x5]
     r4 = 0x404d11e0    r5 = 0x431b0430    r6 = 0xbefc0e50    r7 = 0x404d1238
     r8 = 0xbefc0d70    r9 = 0xbefc0e74   r10 = 0x00000000    fp = 0x00000003
     sp = 0xbefc0cb8    pc = 0x41114233
    Found by: call frame info
18  libxul.so!mozilla::RefreshDriverTimer::TimerTick(nsITimer*, void*) [nsRefreshDriver.cpp : 168 + 0xb]
     r4 = 0x00000000    r5 = 0x00001d59    r6 = 0x78da3c40    r7 = 0x00000001
     r8 = 0xbefc0f6f    r9 = 0x404168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0ec8    pc = 0x411144cb
    Found by: call frame info
19  libxul.so!nsTimerImpl::Fire() [nsTimerImpl.cpp : 551 + 0x5]
     r4 = 0x43602c70    r5 = 0x41114475    r6 = 0x00000002    r7 = 0x00000001
     r8 = 0xbefc0f6f    r9 = 0x404168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0ef8    pc = 0x40862797
    Found by: call frame info
20  libxul.so!nsTimerEvent::Run() [nsTimerImpl.cpp : 635 + 0x5]
     r4 = 0x40416880    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbefc0f6f    r9 = 0x404168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0f20    pc = 0x40862847
    Found by: call frame info
21  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 612 + 0x5]
     r4 = 0x40416880    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000001
     r8 = 0xbefc0f6f    r9 = 0x404168ac   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0f28    pc = 0x40860eb5
    Found by: call frame info
22  libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 263 + 0xb]
     r4 = 0x00000000    r5 = 0xbefc187c    r6 = 0x40402ad0    r7 = 0x00000001
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0f68    pc = 0x40833c41
    Found by: call frame info
23  libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 85 + 0x7]
     r4 = 0x40402ac0    r5 = 0xbefc187c    r6 = 0x40402ad0    r7 = 0x00000001
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0f78    pc = 0x4098c711
    Found by: call frame info
24  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 250 + 0x7]
     r4 = 0xbefc187c    r5 = 0x40402ac0    r6 = 0xbefc187c    r7 = 0x00000001
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0fa0    pc = 0x4098c7df
    Found by: call frame info
25  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5]
     r4 = 0xbefc187c    r5 = 0x42ec32e0    r6 = 0x40416880    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0fb8    pc = 0x409826b9
    Found by: call frame info
26  libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5]
     r4 = 0xbefc187c    r5 = 0x42ec32e0    r6 = 0x40416880    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0fc0    pc = 0x40982737
    Found by: call frame info
27  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 161 + 0x7]
     r4 = 0x00000000    r5 = 0x42ec32e0    r6 = 0x40416880    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0fd8    pc = 0x40d46505
    Found by: call frame info
28  libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 679 + 0x5]
     r4 = 0x80004005    r5 = 0x40402ac0    r6 = 0x4043e800    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0fe8    pc = 0x41354eeb
    Found by: call frame info
29  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 217 + 0x3]
     r4 = 0xbefc187c    r5 = 0x40402ac0    r6 = 0x4043e800    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc0ff8    pc = 0x4098c7ad
    Found by: call frame info
30  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5]
     r4 = 0xbefc187c    r5 = 0xbefc198c    r6 = 0x4043e800    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc1010    pc = 0x409826b9
    Found by: call frame info
31  libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5]
     r4 = 0xbefc187c    r5 = 0xbefc198c    r6 = 0x4043e800    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc1018    pc = 0x40982737
    Found by: call frame info
32  libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 516 + 0x9]
     r4 = 0xbefc1998    r5 = 0xbefc198c    r6 = 0x4043e800    r7 = 0x00000003
     r8 = 0xbefc1a18    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc1030    pc = 0x41355359
    Found by: call frame info
33  plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5]
     r4 = 0x00000001    r5 = 0xbefc1a14    r6 = 0x00000008    r7 = 0x000087f3
     r8 = 0x00000009    r9 = 0xbefc1a34   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc19d8    pc = 0x00008751
    Found by: call frame info
34  libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
     r4 = 0x00008674    r5 = 0xbefc1a14    r6 = 0x00000009    r7 = 0xbefc1a3c
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc19f8    pc = 0x40032a57
    Found by: call frame info
35  0xb0001dc5
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefc1a10    pc = 0xb0001dc7
    Found by: call frame info
This seems dup of Bug 970007.
Component: General → Graphics
Product: Firefox OS → Core
unless the reproducible rate is high in daily stability testing, lets not block on this. thanks
blocking-b2g: 1.3T? → -
Please give more relative info; for ex. logcat, procrank, ... etc.  I even don't tell what process had crashed from this bug.
Status: UNCONFIRMED → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: