Run: 1) ./fennec -graphicssystem raster -url http://gmail.com 2) type with keyboard username 3) click on password field (it will zoomin) 4) type password 5) click on "Sign in" button Remember password notification box appeared, gmail loading started, and then crash happening. Reproducible on desktop and maemo devices. Also found that problem start happen after first cairo update: 41339:e3e80935c165 - not reproducible on this revision, and reproducible later. I need to check more this case

Ok, this is definitely crashes on revision 41340:f236632a9747 /* Cairo Update */ and not crashes on 41339:e3e80935c165 Something wrong happen with cairo image surface in updated cairo... Should we update to latest cairo? #0 0xb77e88af in raise () from /lib/libpthread.so.0 #1 0xb660a436 in nsProfileLock::FatalSignalHandler (signo=11, info=0xbfa6635c, context=0xbfa663dc) at nsProfileLock.cpp:213 #2 <signal handler called> #3 pixman_fill_mmx (bits=0xabca5000, stride=3440, bpp=32, x=0, y=<value optimized out>, width=860, height=0, xor=4285044669) at gfx/cairo/libpixman/src/pixman-mmx.c:1960 #4 0xb731466a in mmx_fill (imp=0xaf9f5800, bits=0xabca5000, stride=860, bpp=32, x=0, y=-139, width=860, height=1, xor=4285044669) at gfx/cairo/libpixman/src/pixman-mmx.c:3360 #5 0xb730c0bd in _pixman_implementation_fill (imp=0xaf9f5800, bits=0xabca5000, stride=860, bpp=32, x=0, y=-139, width=860, height=1, xor=4285044669) at gfx/cairo/libpixman/src/pixman-implementation.c:266 #6 0xb730708c in _moz_pixman_fill (bits=0xabca5000, stride=860, bpp=32, x=0, y=-139, width=860, height=1, xor=4285044669) at gfx/cairo/libpixman/src/pixman.c:256 #7 0xb73076e0 in _moz_pixman_image_fill_rectangles (op=PIXMAN_OP_SRC, dest=0xab6738c0, color=0xbfa67054, n_rects=4, rects=0xbfa66854) at gfx/cairo/libpixman/src/pixman.c:376 #8 0xb72c3e07 in _cairo_image_surface_fill_rectangles (abstract_surface=0xaaf120c0, op=CAIRO_OPERATOR_OVER, color=0xbfa684b0, rects=0xbfa670fc, num_rects=4) at gfx/cairo/cairo/src/cairo-image-surface.c:1229 #9 0xb72db157 in _cairo_surface_fill_rectangles (surface=0xaaf120c0, op=CAIRO_OPERATOR_OVER, color=0xbfa684b0, rects=0xbfa670fc, num_rects=4) at gfx/cairo/cairo/src/cairo-surface.c:1977 #10 0xb72de8c1 in _fill_rectangles (dst=0xaaf120c0, op=CAIRO_OPERATOR_OVER, src=0xbfa68454, traps=0xbfa67ec4, clip=0x0) at gfx/cairo/cairo/src/cairo-surface-fallback.c:702 #11 0xb72de9f9 in _clip_and_composite_trapezoids (src=0xbfa68454, op=CAIRO_OPERATOR_OVER, dst=0xaaf120c0, traps=0xbfa67ec4, antialias=CAIRO_ANTIALIAS_DEFAULT, clip=0x0, extents=0xbfa68370) at gfx/cairo/cairo/src/cairo-surface-fallback.c:785 #12 0xb72df23b in _cairo_surface_fallback_stroke (surface=0xaaf120c0, op=CAIRO_OPERATOR_OVER, source=0xbfa68454, path=0xaaf3fa8c, ---Type <return> to continue, or q <return> to quit--- stroke_style=0xad4b8ad0, ctm=0xad4b8b5c, ctm_inverse=0xad4b8b8c, tolerance=0.10000000000000001, antialias=CAIRO_ANTIALIAS_DEFAULT, clip=0x0) at gfx/cairo/cairo/src/cairo-surface-fallback.c:1257 #13 0xb72dc27f in _cairo_surface_stroke (surface=0xaaf120c0, op=CAIRO_OPERATOR_OVER, source=0xbfa68454, path=0xaaf3fa8c, stroke_style=0xad4b8ad0, ctm=0xad4b8b5c, ctm_inverse=0xad4b8b8c, tolerance=0.10000000000000001, antialias=CAIRO_ANTIALIAS_DEFAULT, clip=0xbfa68534) at gfx/cairo/cairo/src/cairo-surface.c:2177 #14 0xb72c16fe in _cairo_gstate_stroke (gstate=0xad4b8ac0, path=0xaaf3fa8c) at gfx/cairo/cairo/src/cairo-gstate.c:1077 #15 0xb72b8d84 in *INT__moz_cairo_stroke_preserve (cr=0xaaf3f800) at gfx/cairo/cairo/src/cairo.c:2295 #16 0xb6831005 in nsCSSBorderRenderer::FillSolidBorder (this=0xbfa68a64, aOuterRect=..., aInnerRect=..., aBorderRadii=..., aBorderSizes=0xbfa686f0, aSides=15, aColor=...) at layout/base/nsCSSRenderingBorders.cpp:550 #17 0xb68327ae in nsCSSBorderRenderer::DrawBorderSides (this=0xbfa68a64, aSides=<value optimized out>) at layout/base/nsCSSRenderingBorders.cpp:901 #18 0xb6833169 in nsCSSBorderRenderer::DrawBorders (this=0xbfa68a64) at layout/base/nsCSSRenderingBorders.cpp:1070 #19 0xb682a5fc in nsCSSRendering::PaintBorderWithStyleBorder (aPresContext=0xb0342400, aRenderingContext=..., aForFrame=0xad42ce30, aDirtyRect=..., aBorderArea=..., aStyleBorder=..., aStyleContext=0xaca96650, aSkipSides=0) at layout/base/nsCSSRendering.cpp:697 #20 0xb682ad92 in nsCSSRendering::PaintBorder (aPresContext=0xb0342400, aRenderingContext=..., aForFrame=0xad42ce30, aDirtyRect=..., aBorderArea=..., aStyleContext=0xaca96650, aSkipSides=0) at layout/base/nsCSSRendering.cpp:556 #21 0xb68394bb in nsDisplayBorder::Paint (this=0xaaf408b4, aBuilder=0xbfa690b4, aCtx=0xab6feec0) at layout/base/nsDisplayList.cpp:1251 #22 0xb683aa70 in nsDisplayList::PaintThebesLayers (this=0xbfa693b0, aBuilder=0xbfa690b4, aLayers=...) ---Type <return> to continue, or q <return> to quit--- at layout/base/nsDisplayList.cpp:850 #23 0xb683d747 in nsDisplayList::Paint (this=0xbfa693b0, aBuilder=0xbfa690b4, aCtx=0x0, aFlags=<value optimized out>) at layout/base/nsDisplayList.cpp:778 #24 0xb684e011 in nsLayoutUtils::PaintFrame (aRenderingContext=0x0, aFrame=0xb034d6a0, aDirtyRegion=..., aBackstop=4291350740, aFlags=<value optimized out>) at layout/base/nsLayoutUtils.cpp:1257 #25 0xb6864ef2 in PresShell::Paint (this=0xb06eff50, aDisplayRoot=0xb0310d00, aViewToPaint=0xb0310d00, aWidgetToPaint=0xb06747a0, aDirtyRegion=..., aPaintDefaultBackground=0) at layout/base/nsPresShell.cpp:5629 #26 0xb6bcff8a in nsViewManager::RenderViews (this=0xb06bf4c0, aView=0xb0310d00, aWidget=0xb06747a0, aRegion=...) at view/src/nsViewManager.cpp:453 #27 0xb6bd2161 in nsViewManager::Refresh (this=0xb06bf4c0, aView=0xb0310d00, aWidget=0xb06747a0, aRegion=..., aUpdateFlags=1) at view/src/nsViewManager.cpp:426 #28 0xb6bd3a1a in nsViewManager::DispatchEvent (this=0xb06bf4c0, aEvent=0xbfa697ec, aView=0xb0310d00, aStatus=0xbfa69738) at view/src/nsViewManager.cpp:877 #29 0xb6bcebb6 in HandleEvent (aEvent=0xbfa697ec) at view/src/nsView.cpp:160 #30 0xb7084873 in nsWindow::DispatchEvent (this=0xb06747a0, aEvent=0xbfa697ec, aStatus=@0xbfa699a0) at widget/src/qt/nsWindow.cpp:2273 #31 0xb7087d1b in nsWindow::DispatchEvent (this=0xb06747a0, aPainter=0xbfa6b01c, aOption=0xb4213160) at widget/src/qt/nsWindow.h:210 #32 nsWindow::DoPaint (this=0xb06747a0, aPainter=0xbfa6b01c, aOption=0xb4213160) at widget/src/qt/nsWindow.cpp:1060 #33 0xb7091ff7 in MozQWidget::paint (this=0xb034a360, aPainter=0xbfa6b01c, aOption=0xb4213160, aWidget=0xb1389320) at widget/src/qt/mozqwidget.cpp:37 #34 0xb5ad7bb6 in _q_paintItem (item=<value optimized out>, painter=0xbfa6b01c, option=0xb4213160, widget=0xb1389320, useWindowOpacity=true, ---Type <return> to continue, or q <return> to quit--- painterStateProtection=true) at graphicsview/qgraphicsscene.cpp:4258 #35 0xb5adceab in QGraphicsScenePrivate::drawItemHelper (this=0xb4213000, item=0xb034a368, painter=0xbfa6b01c, option=0xb4213160, widget=0xb1389320, painterStateProtection=<value optimized out>) at graphicsview/qgraphicsscene.cpp:4327 #36 0xb5ae9508 in QGraphicsScenePrivate::draw (this=0xb4213000, item=0xb034a368, painter=0xbfa6b01c, viewTransform=0x0, transformPtr=0xb4272290, exposedRegion=0xb0771b64, widget=0xb1389320, opacity=1, effectTransform=0x0, wasDirtyParentSceneTransform=false, drawItem=true) at graphicsview/qgraphicsscene.cpp:4835 #37 0xb5aea267 in QGraphicsScenePrivate::drawSubtreeRecursive (this=0xb4213000, item=0xb034a368, painter=0xbfa6b01c, viewTransform=0x0, exposedRegion=0xb0771b64, widget=0xb1389320, parentOpacity=1, effectTransform=0x0) at graphicsview/qgraphicsscene.cpp:4757 #38 0xb5ae93f0 in QGraphicsScenePrivate::draw (this=0xb4213000, item=0xb0776ca8, painter=0xbfa6b01c, viewTransform=0x0, transformPtr=0x0, exposedRegion=0xb0771b64, widget=0xb1389320, opacity=1, effectTransform=0x0, wasDirtyParentSceneTransform=false, drawItem=false) at graphicsview/qgraphicsscene.cpp:4849 #39 0xb5aea267 in QGraphicsScenePrivate::drawSubtreeRecursive (this=0xb4213000, item=0xb0776ca8, painter=0xbfa6b01c, viewTransform=0x0, exposedRegion=0xb0771b64, widget=0xb1389320, parentOpacity=1, effectTransform=0x0) at graphicsview/qgraphicsscene.cpp:4757 #40 0xb5aeab1e in QGraphicsScenePrivate::drawItems (this=0xb4213000, painter=0xbfa6b01c, viewTransform=0x0, exposedRegion=0xb0771b64, widget=0xb1389320) at graphicsview/qgraphicsscene.cpp:4639 #41 0xb5b113d6 in QGraphicsView::paintEvent (this=0xb0776cc0, event=0xbfa6b744) at graphicsview/qgraphicsview.cpp:3387 #42 0xb548c109 in QWidget::event (this=0xb0776cc0, event=0xbfa6b744) at kernel/qwidget.cpp:8190 #43 0xb588bc2c in QFrame::event (this=0xb0776cc0, e=0xbfa6b744) at widgets/qframe.cpp:557 #44 0xb5923875 in QAbstractScrollArea::viewportEvent (this=0xb0776cc0, e=0x34) at widgets/qabstractscrollarea.cpp:1036 #45 0xb5b0f950 in QGraphicsView::viewportEvent (this=0xb0776cc0, event=0xbfa6b744) at graphicsview/qgraphicsview.cpp:2787 #46 0xb5926123 in QAbstractScrollAreaPrivate::viewportEvent (this=0xb0782250, o=0xb1389320, e=0xbfa6b744) at widgets/qabstractscrollarea_p.h:100 #47 QAbstractScrollAreaFilter::eventFilter (this=0xb0782250, o=0xb1389320, e=0xbfa6b744) at widgets/qabstractscrollarea_p.h:116 #48 0xb51e564d in QCoreApplicationPrivate::sendThroughObjectEventFilters (this=0xb42240e0, receiver=0xb1389320, event=0xbfa6b744) ---Type <return> to continue, or q <return> to quit--- at kernel/qcoreapplication.cpp:841 #49 0xb542d3f8 in QApplicationPrivate::notify_helper (this=0xb42240e0, receiver=0xb1389320, e=0xbfa6b744) at kernel/qapplication.cpp:4298 #50 0xb54348b7 in QApplication::notify (this=0xbfa6d0a8, receiver=0xb1389320, e=0xbfa6b744) at kernel/qapplication.cpp:4267 #51 0xb51e5ea8 in QCoreApplication::notifyInternal (this=0xbfa6d0a8, receiver=0xb1389320, event=0xbfa6b744) at kernel/qcoreapplication.cpp:726 #52 0xb5494ab9 in QCoreApplication::sendSpontaneousEvent (this=0xb4260e30, pdev=0xaca6ff40, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0xaf7bce50) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:218 #53 QWidgetPrivate::drawWidget (this=0xb4260e30, pdev=0xaca6ff40, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0xaf7bce50) at kernel/qwidget.cpp:5363 #54 0xb568be85 in QWidgetBackingStore::sync (this=0xaf7bce50) at painting/qbackingstore.cpp:1292 #55 0xb5484760 in QWidgetPrivate::syncBackingStore (this=0xb0771800) at kernel/qwidget.cpp:1688 #56 0xb548c3f6 in QWidget::event (this=0xb0776cc0, event=0xaaf16460) at kernel/qwidget.cpp:8337 #57 0xb588bc2c in QFrame::event (this=0xb0776cc0, e=0xaaf16460) at widgets/qframe.cpp:557 #58 0xb5924220 in QAbstractScrollArea::event (this=0xb0776cc0, e=0xaaf16460) at widgets/qabstractscrollarea.cpp:989 #59 0xb5b0d8e3 in QGraphicsView::event (this=0xb0776cc0, event=0xaaf16460) at graphicsview/qgraphicsview.cpp:2666 #60 0xb70833bb in MozQGraphicsView::event (this=0xb0776cc0, aEvent=0xaaf16460) at ../../../../../widget/src/qt/mozqwidget.h:162 #61 0xb542d409 in QApplicationPrivate::notify_helper (this=0xb42240e0, receiver=0xb0776cc0, e=0xaaf16460) at kernel/qapplication.cpp:4302 #62 0xb54348b7 in QApplication::notify (this=0xbfa6d0a8, receiver=0xb0776cc0, e=0xaaf16460) at kernel/qapplication.cpp:4267 #63 0xb51e5ea8 in QCoreApplication::notifyInternal (this=0xbfa6d0a8, receiver=0xb0776cc0, event=0xaaf16460) at kernel/qcoreapplication.cpp:726 #64 0xb51e6e38 in QCoreApplication::sendEvent (receiver=0xb0776cc0, event_type=77, data=0xb4218400) at kernel/qcoreapplication.h:215 #65 QCoreApplicationPrivate::sendPostedEvents (receiver=0xb0776cc0, event_type=77, data=0xb4218400) at kernel/qcoreapplication.cpp:1367 #66 0xb51e7147 in QCoreApplication::sendPostedEvents (receiver=0xb0776cc0, event_type=77) at kernel/qcoreapplication.cpp:1260 #67 0xb5af60b9 in QGraphicsViewPrivate::dispatchPendingUpdateRequests (this=0xb4213000) at ../../include/QtGui/private/../../../src/gui/graphicsview/qgraphicsview_p.h:184 ---Type <return> to continue, or q <return> to quit--- #68 QGraphicsScenePrivate::_q_processDirtyItems (this=0xb4213000) at graphicsview/qgraphicsscene.cpp:509 #69 0xb5af673f in QGraphicsScene::qt_metacall (this=0xb42178b0, _c=QMetaObject::InvokeMetaMethod, _id=14, _a=0xacadc66c) at .moc/debug-shared/moc_qgraphicsscene.cpp:130 #70 0xb51ecfa2 in QMetaObject::metacall (object=0xb42178b0, cl=QMetaObject::InvokeMetaMethod, idx=18, argv=0xacadc66c) at kernel/qmetaobject.cpp:237 #71 0xb51f70c9 in QMetaCallEvent::placeMetaCall (this=0xad329760, object=0xb42178b0) at kernel/qobject.cpp:561 #72 0xb51f78f9 in QObject::event (this=0xb42178b0, e=0xad329760) at kernel/qobject.cpp:1240 #73 0xb5aef02f in QGraphicsScene::event (this=0xb42178b0, event=0xad329760) at graphicsview/qgraphicsscene.cpp:3509 #74 0xb542d409 in QApplicationPrivate::notify_helper (this=0xb42240e0, receiver=0xb42178b0, e=0xad329760) at kernel/qapplication.cpp:4302 #75 0xb54348b7 in QApplication::notify (this=0xbfa6d0a8, receiver=0xb42178b0, e=0xad329760) at kernel/qapplication.cpp:4267 #76 0xb51e5ea8 in QCoreApplication::notifyInternal (this=0xbfa6d0a8, receiver=0xb42178b0, event=0xad329760) at kernel/qcoreapplication.cpp:726 #77 0xb51e6e38 in QCoreApplication::sendEvent (receiver=0x0, event_type=0, data=0xb4218400) at kernel/qcoreapplication.h:215 #78 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0xb4218400) at kernel/qcoreapplication.cpp:1367 #79 0xb51e7147 in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1260 #80 0xb5214e55 in QCoreApplication::sendPostedEvents (s=0xb4218480) at kernel/qcoreapplication.h:220 #81 postEventSourceDispatch (s=0xb4218480) at kernel/qeventdispatcher_glib.cpp:276 #82 0xb49eeacb in g_main_context_dispatch () from /lib/libglib-2.0.so.0 #83 0xb49f266c in ?? () from /lib/libglib-2.0.so.0 #84 0xb49f281d in g_main_context_iteration () from /lib/libglib-2.0.so.0 #85 0xb52149bf in QEventDispatcherGlib::processEvents (this=0xb42170c0, flags=...) at kernel/qeventdispatcher_glib.cpp:412 #86 0xb54ec4bb in QGuiEventDispatcherGlib::processEvents (this=0xb42170c0, flags=...) at kernel/qguieventdispatcher_glib.cpp:204 #87 0xb7083690 in nsAppShell::ProcessNextNativeEvent (this=0xb27a8bf0, mayWait=0) at widget/src/qt/nsAppShell.cpp:127 #88 0xb7094442 in nsBaseAppShell::DoProcessNextNativeEvent (this=0xb27a8bf8, mayWait=0) ---Type <return> to continue, or q <return> to quit--- at widget/src/xpwidgets/nsBaseAppShell.cpp:155 #89 0xb70946de in nsBaseAppShell::OnProcessNextEvent (this=0xb27a8bf8, thr=0xb42664c0, mayWait=0, recursionDepth=0) at widget/src/xpwidgets/nsBaseAppShell.cpp:293 #90 0xb71bc16d in nsThread::ProcessNextEvent (this=0xb42664c0, mayWait=0, result=0xbfa6cc70) at xpcom/threads/nsThread.cpp:508 #91 0xb717bb69 in NS_ProcessNextEvent_P (thread=0xabc30430, mayWait=0) at nsThreadUtils.cpp:250 #92 0xb70f6011 in mozilla::ipc::MessagePump::Run (this=0xb4202c10, aDelegate=0xb42690c0) at ipc/glue/MessagePump.cpp:118 #93 0xb720ffe9 in MessageLoop::RunInternal (this=0xb42690c0) at ipc/chromium/src/base/message_loop.cc:216 #94 0xb721001c in MessageLoop::RunHandler (this=0xb42690c0) at ipc/chromium/src/base/message_loop.cc:199 #95 0xb72100aa in MessageLoop::Run (this=0xb42690c0) at ipc/chromium/src/base/message_loop.cc:173 #96 0xb7094847 in nsBaseAppShell::Run (this=0xb27a8bf8) at widget/src/xpwidgets/nsBaseAppShell.cpp:174 #97 0xb6f2c9f0 in nsAppStartup::Run (this=0xb277db80) at toolkit/components/startup/src/nsAppStartup.cpp:182 #98 0xb6603dc5 in XRE_main (argc=6, argv=0xbfa6e248, aAppData=0xb42183c0) at toolkit/xre/nsAppRunner.cpp:3536 #99 0x0804a49d in main (argc=6, argv=0xbfa6e248) at xulrunner/app/nsXULRunnerApp.cpp:463

I have compiled mozilla-TIP with system cairo and it works fine.

Ok, I've tested with patch from bug 562746, and it seems to work fine. Can we get it in sooner?

Same behavior in SeaMonkey and Firefox builds: "Remember password notification box appeared, gmail loading started, and then crash happening." Source Built from http://hg.mozilla.org/mozilla-central/rev/84abb3a647d9 Build platform target x86_64-unknown-linux-gnu Build tools Compiler Version Compiler flags gcc gcc version 4.4.5 (Debian 4.4.5-2) -Wall -W -Wno-unused -Wpointer-arith -Wcast-align -W -pedantic -Wno-long-long -fno-strict-aliasing -pthread -pipe -DNDEBUG -DTRIMMED -Os -freorder-blocks -fomit-frame-pointer c++ gcc version 4.4.5 (Debian 4.4.5-2) -fno-rtti -fno-exceptions -Wall -Wpointer-arith -Woverloaded-virtual -Wsynth -Wno-ctor-dtor-privacy -Wno-non-virtual-dtor -Wcast-align -Wno-invalid-offsetof -Wno-variadic-macros -Werror=return-type -pedantic -Wno-long-long -fno-strict-aliasing -fshort-wchar -pthread -pipe -DNDEBUG -DTRIMMED -Os -freorder-blocks -fomit-frame-pointer Configure arguments --enable-application=suite --enable-optimize --disable-debug --enable-application=suite --enable-optimize --disable-debug --enable-application=../suite --disable-official-branding --with-branding=../suite/branding/nightly --cache-file=.././config.cache --srcdir=/home/henry/build/mozsrc/mozilla

In bug 1282866, I have removed the QT code from the Firefox tree with the approval of the active peer. That code is not currently maintained by any team. I have looked through the bugs in the Widget: Qt bugzilla component and I believe all of these are no longer relevant because the Qt code has been removed. If you believe that this bug is still valid, please move it to another more appropriate bugzilla component as you reopen it.