992099 - [tarako] monkey test crash at libc.so + 0xe444

Status: RESOLVED DUPLICATE of bug 976656

(Core :: General, defect)

Description

[yaoyao.wu]

Operating system: Android
                  0.0.0 Linux 3.0.8 #1 PREEMPT Wed Apr 2 20:29:36 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/226:userdebug/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x438ca000

Thread 0 (crashed)
 0  libc.so + 0xe444
     r4 = 0x00000280    r5 = 0x000000a0    r6 = 0x438c9f00    r7 = 0x438b01e0
     r8 = 0x000000a3    r9 = 0x00019f00   r10 = 0x000000a6    fp = 0x00000460
     sp = 0xbe957fd4    lr = 0x409be671    pc = 0x40089444
    Found by: given as instruction pointer in context
 1  libxul.so!nsRegion::RgnRect::operator new(unsigned int) [nsRegion.cpp : 229 + 0x5]
     sp = 0xbe957fe8    pc = 0x409882ab
    Found by: stack scanning
 2  libOpenSLES.so + 0x2ffe
     r4 = 0xbe95826c    sp = 0xbe957ff0    pc = 0x438b0000
    Found by: call frame info
 3  libxul.so!mozilla::gfx::DrawTargetCairo::CreateSourceSurfaceFromNativeSurface(mozilla::gfx::NativeSurface const&) const [DrawTargetCairo.cpp : 1110 + 0x7]
     sp = 0xbe958014    pc = 0x413c59cd
    Found by: stack scanning
 4  0x4013e042
     r4 = 0x000000a0    r5 = 0x000000a3    r6 = 0x4013ea60    r7 = 0x4013e040
     r8 = 0x00000400    r9 = 0xbe958268    sp = 0xbe958044    pc = 0x4013e044
    Found by: call frame info
 5  libmozglue.so!__wrap_pthread_mutex_lock [Nuwa.cpp : 1075 + 0x5]
     sp = 0xbe9580a0    pc = 0x40109d73
    Found by: stack scanning

Comment 1

[Robert Kaiser]

Is this a duplicate of bug 992098? It has the same location in frame 0 and the same crash address, and both have libxul.so!mozilla::gfx::DrawTargetCairo::CreateSourceSurfaceFromNativeSurface in the stack.

Comment 2

[Peipei Cheng (needinfo if you need my action)]

This should have been fixed.