Closed Bug 846319 Opened 12 years ago Closed 4 years ago

crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width <n>, aRect.height <m>"

Categories

(Core :: Graphics, defect)

Product:
Core
Component:
Graphics
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox20 --- affected
firefox22 --- affected
firefox23 --- affected

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Keywords: crash, Whiteboard: [native-crash])

Crash Data

This bug was filed from the Socorro interface and is report bp-cc877b35-e658-416a-a66d-506c52130228 . =============================================================
Sorry. Hit too soon. It's similar to bug 705641 but with null values. Signature mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f More Reports Search UUID cc877b35-e658-416a-a66d-506c52130228 Date Processed 2013-02-28 12:55:32 Uptime 1381 Last Crash 4.9 days before submission Install Age 26.2 minutes since version was first installed. Install Time 2013-02-28 12:29:13 Product FennecAndroid Version 22.0a1 Build ID 20130228030852 Release Channel nightly OS Android OS Version 0.0.0 Linux 3.1.10-00003-gb0003ba #1 SMP PREEMPT Fri Dec 28 17:34:31 CST 2012 armv7l asus/JP_epad/TF300T:4.1.1/JRO03C/JP_epad-10.4.2.20-20121228:user/release-keys Build Architecture arm Build Architecture Info Crash Reason SIGSEGV Crash Address 0x0 App Notes AdapterDescription: 'NVIDIA Corporation -- NVIDIA Tegra 3 -- OpenGL ES 2.0 14.01002 -- Model: ASUS Pad TF300T, Product: JP_epad, Manufacturer: asus, Hardware: cardhu' EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ xpcom_runtime_abort(###!!! ABORT: Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0: file ../../../gfx/layers/opengl/LayerManagerOGL.cpp, line 1545) asus ASUS Pad TF300T asus/JP_epad/TF300T:4.1.1/JRO03C/JP_epad-10.4.2.20-20121228:user/release-keys Processor Notes sp-processor02.phx1.mozilla.com_20347:2008; exploitablity tool: ERROR: unable to analyze dump EMCheckCompatibility True Adapter Vendor ID NVIDIA Corporation Adapter Device ID NVIDIA Tegra 3 Device asus ASUS Pad TF300T Android API Version 16 (REL) Android CPU ABI armeabi-v7a Frame Module Signature Source 0 libmozalloc.so mozalloc_abort mozalloc_abort.cpp:30 1 libxul.so NS_DebugBreak_P nsDebugImpl.cpp:422 2 dalvik-bitmap-2 (deleted) dalvik-bitmap-2 @0x2bd11f 3 dalvik-mark-stack (deleted) dalvik-mark-stack @0x28e2f40 4 dalvik-heap (deleted) dalvik-heap @0x824d1e 5 dalvik-mark-stack (deleted) dalvik-mark-stack @0x9d002a 6 dalvik-heap (deleted) dalvik-heap @0xa832f70 7 browser.db (deleted) browser.db @0xc202a 8 libxul.so gfxMatrix::Translate gfxMatrix.cpp:37 9 libxul.so mozilla::layers::Layer::SnapTransformTranslation gfx/layers/Layers.cpp:597 10 libxul.so nsACString_internal::AppendFunc nsTSubstring.h:407 11 libnspr4.so FuncStuff prprf.c:1043 12 libnspr4.so libnspr4.so@0xa0ab 13 libnspr4.so fill_n prprf.c:205 14 libxul.so nsACString_internal::ReplaceASCII nsTSubstring.cpp:507 15 libxul.so nsACString_internal::AppendFunc nsTSubstring.h:407 16 libnspr4.so FuncStuff prprf.c:1043 17 libnspr4.so libnspr4.so@0xa0ab 18 libnspr4.so dosprintf prprf.c:1028 19 libxul.so mozilla::layers::ImageLayer::ComputeEffectiveTransforms ImageLayers.cpp:48 20 libxul.so mozilla::layers::CanvasLayer::ComputeEffectiveTransforms Layers.h:1649 21 dalvik-heap (deleted) dalvik-heap @0x21c509c 22 dalvik-heap (deleted) dalvik-heap @0x2fb35ef 23 libGLESv2_tegra_impl.so libGLESv2_tegra_impl.so@0x1228a 24 libmozglue.so arena_malloc jemalloc.c:4159 25 libmozglue.so __wrap_malloc jemalloc.c:4239 ...
status-firefox22: --- → affected
Summary: crash i → crash with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0"
Whiteboard: [native-crash]
Version: 19 Branch → Trunk
Hardware: All → ARM
Summary: crash with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0" → crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0"
Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] → [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ]
Depends on: 858926
Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] → [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ]
status-firefox23: --- → affected
Summary: crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width 0, aRect.height 0" → crash in LayerManagerOGL::CreateFBOWithTexture with abort message: "Framebuffer not complete -- error 0x0, mFBOTextureTarget 0xde1, aRect.width <n>, aRect.height <m>"
Depends on: 764756
Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] → [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak | imgRequest::RemoveFromCache() ] [@ mozal…
It's #132 crasher in 20.0.1. Here is a non buggy stack trace: Frame Module Signature Source 0 libmozalloc.so mozalloc_abort memory/mozalloc/mozalloc_abort.cpp:30 1 libxul.so NS_DebugBreak_P xpcom/base/nsDebugImpl.cpp:422 2 libxul.so mozilla::layers::LayerManagerOGL::CreateFBOWithTexture gfx/layers/opengl/LayerManagerOGL.cpp:1534 3 libxul.so mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> gfx/layers/opengl/ContainerLayerOGL.cpp:236 4 libxul.so mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> gfx/layers/opengl/ContainerLayerOGL.cpp:274 5 libxul.so mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> gfx/layers/opengl/ContainerLayerOGL.cpp:274 6 libxul.so mozilla::layers::ContainerRender<mozilla::layers::ShadowContainerLayerOGL> gfx/layers/opengl/ContainerLayerOGL.cpp:274 7 libxul.so mozilla::layers::LayerManagerOGL::Render gfx/layers/opengl/LayerManagerOGL.cpp:1120 8 libxul.so mozilla::layers::LayerManagerOGL::EndTransaction gfx/layers/opengl/LayerManagerOGL.cpp:788 9 libxul.so mozilla::layers::LayerManagerOGL::EndEmptyTransaction gfx/layers/opengl/LayerManagerOGL.cpp:729 10 libxul.so mozilla::layers::CompositorParent::Composite gfx/layers/ipc/CompositorParent.cpp:620 11 libxul.so mozilla::layers::CompositorParent::ResumeComposition gfx/layers/ipc/CompositorParent.cpp:355 12 libxul.so RunnableMethod<mozilla::ipc::AsyncChannel, void ipc/chromium/src/base/tuple.h:400 13 libxul.so MessageLoop::RunTask ipc/chromium/src/base/message_loop.cc:333 14 libxul.so MessageLoop::DeferOrRunPendingTask ipc/chromium/src/base/message_loop.cc:341 15 libxul.so MessageLoop::DoWork ipc/chromium/src/base/message_loop.cc:441 16 libxul.so base::MessagePumpDefault::Run ipc/chromium/src/base/message_pump_default.cc:23 17 libxul.so MessageLoop::RunInternal ipc/chromium/src/base/message_loop.cc:215 18 libxul.so MessageLoop::Run ipc/chromium/src/base/message_loop.cc:208 19 libxul.so base::Thread::ThreadMain ipc/chromium/src/base/thread.cc:156 20 libxul.so ThreadFunc ipc/chromium/src/base/platform_thread_posix.cc:39 21 libc.so libc.so@0x11a8e 22 libc.so libc.so@0x11652 More reports at: https://crash-stats.mozilla.com/report/list?signature=mozalloc_abort%28char+const*%29+|+NS_DebugBreak_P+|+mozilla%3A%3Alayers%3A%3ALayerManagerOGL%3A%3ACreateFBOWithTexture%28nsIntRect+const%26%2C+mozilla%3A%3Alayers%3A%3ALayerManagerOGL%3A%3AInitMode%2C+unsigned+int%2C+unsigned+int*%2C+unsigned+int*%29
Crash Signature: [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak | imgRequest::RemoveFromCache() ] [@ mozal… → [@ mozalloc_abort(char const*) | NS_DebugBreak_P | mozilla::layers::LayerManagerOGL::CreateFBOWithTexture(nsIntRect const&, mozilla::layers::LayerManagerOGL::InitMode, unsigned int, unsigned int*, unsigned int*) ] [@ mozalloc_abort(char const*) | NS_Deb…
status-firefox20: --- → affected
Crash Signature: , unsigned int*) ] [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak |, unsigned int) ] [@… → , unsigned int*) ] [@ mozalloc_abort(char const*) | NS_DebugBreak_P | dalvik-bitmap-2 (deleted)@0x2bd11f] [@ mozalloc_abort(char const*) | NS_DebugBreak ] [@ libmozalloc.so@0x9e2 ] [@ mozalloc_abort(char const*) | NS_DebugBreak |, unsigned int) ] [@ …

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.