Operating system: Android 0.0.0 Linux 3.0.8-perf-svn26240 #1 PREEMPT Mon Oct 8 01:19:17 HKT 2012 armv7l toro/full_unagi/unagi:4.0.4.0.4.0.4/OPENMASTER/eng.apusr.20130426.185459:eng/test-keys CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0x0 Thread 0 (crashed) 0 libxul.so!mozalloc_abort [mozalloc_abort.cpp : 30 + 0x4] r4 = 0xbeba0d7c r5 = 0x00000000 r6 = 0xffffffff r7 = 0xbeba0990 r8 = 0x40c84015 r9 = 0x00000001 r10 = 0xbeba0990 fp = 0x41243638 sp = 0xbeba0978 lr = 0x410fbf0f pc = 0x410fbf12 Found by: given as instruction pointer in context 1 libxul.so!NS_DebugBreak_P [nsDebugImpl.cpp : 423 + 0x5] r4 = 0xbeba0d7c r5 = 0x00000000 r6 = 0xffffffff r7 = 0xbeba0990 r8 = 0x40c84015 r9 = 0x00000001 r10 = 0xbeba0990 fp = 0x41243638 sp = 0xbeba0980 pc = 0x40c83dfd Found by: call frame info 2 libxul.so!mozilla::layers::ShadowLayersChild::ActorDestroy [ShadowLayersChild.cpp : 68 + 0x13] r4 = 0x43ebd0d0 r5 = 0xbeba0dc4 r6 = 0xbeba0dc4 r7 = 0x00000004 r8 = 0x00000004 r9 = 0x44259574 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0db0 pc = 0x40d023af Found by: call frame info 3 libxul.so!mozilla::layers::PLayersChild::DestroySubtree [PLayersChild.cpp : 673 + 0x9] r4 = 0x43ebd0d0 r5 = 0xbeba0dc4 r6 = 0xbeba0dc4 r7 = 0x00000004 r8 = 0x00000004 r9 = 0x44259574 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0dc0 pc = 0x40bfe24f Found by: call frame info 4 libxul.so!mozilla::layers::PCompositorChild::DestroySubtree [PCompositorChild.cpp : 886 + 0x5] r4 = 0x4394c6b0 r5 = 0x00000001 r6 = 0x00000004 r7 = 0x00000004 r8 = 0x00000001 r9 = 0x439db4f4 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0de8 pc = 0x40bf7d23 Found by: call frame info 5 libxul.so!mozilla::layers::PCompositorChild::OnChannelError [PCompositorChild.cpp : 775 + 0x3] r4 = 0x4394c6b0 r5 = 0x4394c6bc r6 = 0x00000000 r7 = 0xbeba1808 r8 = 0xbeba0e68 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e10 pc = 0x40bf7d5b Found by: call frame info 6 libxul.so!mozilla::ipc::AsyncChannel::NotifyMaybeChannelError [AsyncChannel.cpp : 547 + 0x5] r4 = 0x4394c6bc r5 = 0x4394c6bc r6 = 0x00000000 r7 = 0xbeba1808 r8 = 0xbeba0e68 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e18 pc = 0x40b70d87 Found by: call frame info 7 libxul.so!mozilla::ipc::AsyncChannel::OnNotifyMaybeChannelError [AsyncChannel.cpp : 512 + 0x5] r4 = 0x43935430 r5 = 0x4394c6bc r6 = 0x00000000 r7 = 0xbeba1808 r8 = 0xbeba0e68 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e20 pc = 0x40b7103d Found by: call frame info 8 libxul.so!RunnableMethod<IPC::ChannelProxy::Context, void (IPC::ChannelProxy::Context::*)(), Tuple0>::Run [tuple.h : 383 + 0x5] r4 = 0xbeba17fc r5 = 0x44259920 r6 = 0xbeba0e70 r7 = 0xbeba1808 r8 = 0xbeba0e68 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e40 pc = 0x40b57723 Found by: call frame info 9 libxul.so!MessageLoop::RunTask [message_loop.cc : 337 + 0x5] r4 = 0xbeba17fc r5 = 0x44259920 r6 = 0xbeba0e70 r7 = 0xbeba1808 r8 = 0xbeba0e68 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e48 pc = 0x40ca221d Found by: call frame info 10 libxul.so!MessageLoop::DeferOrRunPendingTask [message_loop.cc : 345 + 0x5] r4 = 0x00000001 r5 = 0xbeba0e60 r6 = 0xbeba0e70 r7 = 0xbeba1808 r8 = 0xbeba0e68 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e58 pc = 0x40ca304f Found by: call frame info 11 libxul.so!MessageLoop::DoWork [message_loop.cc : 445 + 0x7] r4 = 0xbeba17fc r5 = 0xbeba0e60 r6 = 0xbeba0e70 r7 = 0xbeba1808 r8 = 0xbeba0e68 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e60 pc = 0x40ca3c2d Found by: call frame info 12 libxul.so!mozilla::ipc::DoWorkRunnable::Run [MessagePump.cpp : 42 + 0x7] r4 = 0xbeba17fc r5 = 0x00000001 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbeba0ee7 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0e90 pc = 0x40b7419d Found by: call frame info 13 libxul.so!nsThread::ProcessNextEvent [nsThread.cpp : 620 + 0x5] r4 = 0x41bc88e0 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbeba0ee7 r9 = 0x41bc890c r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0ea0 pc = 0x40c7fb47 Found by: call frame info 14 libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 237 + 0xb] r4 = 0x00000000 r5 = 0xbeba17fc r6 = 0x41bc4350 r7 = 0x00000001 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0ee0 pc = 0x40c5ff0f Found by: call frame info 15 libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 82 + 0x7] r4 = 0x41bc4340 r5 = 0xbeba17fc r6 = 0x41bc4350 r7 = 0x00000001 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0ef0 pc = 0x40b742ad Found by: call frame info 16 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 231 + 0x7] r4 = 0xbeba17fc r5 = 0x41bc4340 r6 = 0xbeba17fc r7 = 0x00000001 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f18 pc = 0x40b7435f Found by: call frame info 17 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5] r4 = 0xbeba17fc r5 = 0x43986100 r6 = 0x41bc88e0 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f30 pc = 0x40ca21d9 Found by: call frame info 18 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5] r4 = 0xbeba17fc r5 = 0x43986100 r6 = 0x41bc88e0 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f38 pc = 0x40ca2283 Found by: call frame info 19 libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7] r4 = 0x00000000 r5 = 0x43986100 r6 = 0x41bc88e0 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f50 pc = 0x40afa4fd Found by: call frame info 20 libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 646 + 0x5] r4 = 0xbeba0f64 r5 = 0x41bc4340 r6 = 0x00000002 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f60 pc = 0x404921b9 Found by: call frame info 21 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 198 + 0x3] r4 = 0xbeba17fc r5 = 0x41bc4340 r6 = 0x00000002 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f78 pc = 0x40b7432d Found by: call frame info 22 libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5] r4 = 0xbeba17fc r5 = 0x41bcb600 r6 = 0x00000002 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f90 pc = 0x40ca21d9 Found by: call frame info 23 libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5] r4 = 0xbeba17fc r5 = 0x41bcb600 r6 = 0x00000002 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0f98 pc = 0x40ca2283 Found by: call frame info 24 libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 485 + 0xb] r4 = 0xbeba17fc r5 = 0x41bcb600 r6 = 0x00000002 r7 = 0x00000003 r8 = 0x41bdb000 r9 = 0x41be0000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba0fb0 pc = 0x4049255d Found by: call frame info 25 plugin-container!main [MozillaRuntimeMain.cpp : 60 + 0x5] r4 = 0xbeba1964 r5 = 0x00000005 r6 = 0xbeba1934 r7 = 0xbeba1980 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba1930 pc = 0x00008583 Found by: call frame info 26 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00008524 r5 = 0xbeba1964 r6 = 0x00000006 r7 = 0xbeba1980 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba1948 pc = 0x400a477b Found by: call frame info 27 0xb0001dc5 r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbeba1960 pc = 0xb0001dc7 Found by: call frame info

Hello Sotaro, This looks like bug 862097 which is already fixed. Can you help to take a look and decide whether we should mark this as a duplicated bug? Many thanks!

The abort is called when unrecoverable error is detected by gfx ipc module. From the logcat, b2g process opens too much file descriptors and failed IPC by that. It causes abort. ----------------------------------------------------- I/IdleService( 110): reset timer expiry to 676 msec from now E/Sensors ( 110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files) I/IdleService( 110): Get idle time: time since reset 102 msec I/IdleService( 110): Idle timer callback: current idle time 102 msec I/IdleService( 110): next timeout 897 msec from now I/IdleService( 110): SetTimerExpiryIfBefore: next timeout 897 msec from now I/IdleService( 110): reset timer expiry to 907 msec from now E/Sensors ( 110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files) E/Sensors ( 110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files) E/memalloc( 110): /dev/pmem: Failed to initialize pmem sub-heap: -1 W/memalloc( 110): Falling back to ashmem E/memalloc( 110): couldn't create ashmem (Too many open files) E/msm7627a.gralloc( 110): gralloc failed err=Too many open files W/GraphicBufferAllocator( 110): alloc(320, 24, 2, 00000133, ...) failed -24 (Too many open files) E/Sensors ( 110): SensorBase: write_attr failed to open /sys/class/compass/akm8962/accel (Too many open files) I/Gecko ( 110): [Parent 110] WARNING: Message needs unreceived descriptors channel:50ae0000 message-type:65533 header()->num_fds:1 num_fds:0 fds_i:0: file /home/apusr/B2G_Unagi/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 551 D/memalloc( 110): /dev/pmem: Freeing buffer base:0x4a8ed000 size:614400 offset:1843200 fd:877 D/memalloc( 110): /dev/pmem: Freeing buffer base:0x4aa19000 size:614400 offset:3072000 fd:923 I/Gecko ( 2505): [Child 2505] WARNING: pipe error (18): Connection reset by peer: file /home/apusr/B2G_Unagi/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 432 I/Gecko ( 2505): I/Gecko ( 2505): ###!!! [Child][SyncChannel] Error: Channel error: cannot send/recv I/Gecko ( 2505): I/Gecko ( 2505): I/Gecko ( 2505): ###!!! [Child][AsyncChannel] Error: Channel error: cannot send/recv I/Gecko ( 2505): I/Gecko ( 2505): [Child 2505] WARNING: FileDescriptorSet destroyed with unconsumed descriptors: file /home/apusr/B2G_Unagi/gecko/ipc/chromium/src/chrome/common/file_descriptor_set_posix.cc, line 20 I/Gecko ( 2505): I/Gecko ( 2505): ###!!! [Child][SyncChannel] Error: Channel error: cannot send/recv I/Gecko ( 2505): I/Gecko ( 2505): [Child 2505] ###!!! ABORT: ActorDestroy by IPC channel failure at ShadowLayersChild: file /home/apusr/B2G_Unagi/gecko/gfx/layers/ipc/ShadowLayersChild.cpp, line 68 E/Gecko ( 2505): mozalloc_abort: [Child 2505] ###!!! ABORT: ActorDestroy by IPC channel failure at ShadowLayersChild: file /home/apusr/B2G_Unagi/gecko/gfx/layers/ipc/ShadowLayersChild.cpp, line 68

I checked manifest of gonk-misc. It is older one than bug 862097. This bug is dupe of bug 862097. <project name="gonk-misc" remote="b2g" revision="ded7bc971be7f0543db3e7dcf8e2ff134739aef2"/>

fix of bug 862097 is 73bd5f975f28fb696f3e647c50ac4fe03464d582