https://tbpl.mozilla.org/php/getParsedLog.php?id=24598542&tree=Graphics#error0 21:33:29 WARNING - TEST-UNEXPECTED-FAIL | /tests/content/base/test/test_bug590812.html | application timed out after 330 seconds with no output 21:33:29 INFO - INFO | automation.py | Application ran for: 0:33:19.251484 21:33:29 INFO - INFO | zombiecheck | Reading PID log: /tmp/tmpKY3Naupidlog 21:33:31 INFO - mozcrash INFO | Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/b2g/tinderbox-builds/graphics-ics_armv7a_gecko/1372214659/b2g-25.0a1.en-US.android-arm.crashreporter-symbols.zip 21:33:31 INFO - checking for crashes in '/data/local/tests/profile/minidumps' 21:33:31 INFO - Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/b2g/tinderbox-builds/graphics-ics_armv7a_gecko/1372214659/b2g-25.0a1.en-US.android-arm.crashreporter-symbols.zip 21:33:53 WARNING - PROCESS-CRASH | /tests/content/base/test/test_bug590812.html | application crashed [@ mozilla::dom::CanvasRenderingContext2D::EnsureErrorTarget()] 21:33:53 INFO - Crash dump filename: /tmp/tmpI9gf1W/4d639411-d287-8cca-0aa22415-3a689053.dmp 21:33:53 INFO - Operating system: Android 21:33:53 INFO - 0.0.0 Linux 2.6.29-00294-g701690d #1 Mon May 20 22:43:07 CST 2013 armv7l Android/full/generic:4.0.4.0.4.0.4/OPENMASTER/1893:eng/test-keys 21:33:53 INFO - CPU: arm 21:33:53 INFO - 0 CPUs 21:33:53 INFO - Crash reason: SIGSEGV 21:33:53 INFO - Crash address: 0x4 21:33:53 INFO - Thread 0 (crashed) 21:33:53 INFO - 0 libxul.so!mozilla::dom::CanvasRenderingContext2D::EnsureErrorTarget() [RefPtr.h:b47995bcf303 : 72 + 0x0] 21:33:53 INFO - r4 = 0x41a6ec88 r5 = 0x40e4d451 r6 = 0x00000000 r7 = 0x00000000 21:33:53 INFO - r8 = 0x00000000 r9 = 0x43ad8c00 r10 = 0x00000000 fp = 0x40600000 21:33:53 INFO - sp = 0xbec11550 lr = 0x40e4d42d pc = 0x406f2d0a 21:33:53 INFO - Found by: given as instruction pointer in context 21:33:53 INFO - 1 libxul.so!mozilla::dom::CanvasRenderingContext2D::EnsureTarget() [CanvasRenderingContext2D.cpp:b47995bcf303 : 850 + 0x3] 21:33:53 INFO - r4 = 0x43ad8c00 r5 = 0x43a0cea0 r6 = 0x00000000 r7 = 0x00000000 21:33:53 INFO - r8 = 0x00000000 r9 = 0x43ad8c00 r10 = 0x00000000 fp = 0x40600000 21:33:53 INFO - sp = 0xbec11570 pc = 0x406f4755 21:33:53 INFO - Found by: call frame info 21:33:53 INFO - 2 libxul.so!mozilla::dom::CanvasRenderingContext2D::DrawWindow(nsIDOMWindow*, double, double, double, double, nsAString_internal const&, unsigned int, mozilla::ErrorResult&) [CanvasRenderingContext2D.cpp:b47995bcf303 : 3163 + 0x5] 21:33:53 INFO - r4 = 0x433b38d0 r5 = 0x43ad8c00 r6 = 0x433b38d0 r7 = 0x00000000 21:33:53 INFO - r8 = 0xbec11728 r9 = 0x43ad8c00 r10 = 0x00000000 fp = 0x40600000 21:33:53 INFO - sp = 0xbec115a8 pc = 0x406f6eaf 21:33:53 INFO - Found by: call frame info 21:33:53 INFO - 3 libxul.so!mozilla::dom::CanvasRenderingContext2DBinding::drawWindow [CanvasRenderingContext2DBinding.cpp:b47995bcf303 : 3079 + 0x25] 21:33:53 INFO - r4 = 0x444a8190 r5 = 0xbec117ac r6 = 0x433b38d0 r7 = 0xbec11728 21:33:53 INFO - r8 = 0x433b38d0 r9 = 0x43ad8c00 r10 = 0x00000000 fp = 0x40600000 21:33:53 INFO - sp = 0xbec11700 pc = 0x40c50e07 21:33:53 INFO - Found by: call frame info 21:33:53 INFO - 4 libxul.so!mozilla::dom::CanvasRenderingContext2DBinding::genericMethod [CanvasRenderingContext2DBinding.cpp:b47995bcf303 : 4015 + 0x3] 21:33:53 INFO - r4 = 0x40c50c1d r5 = 0x444a8190 r6 = 0x43ad8c00 r7 = 0x456a7280 21:33:53 INFO - r8 = 0x418597b4 r9 = 0xbec11c08 r10 = 0x41a632ac fp = 0xbec11bf0 21:33:53 INFO - sp = 0xbec117a0 pc = 0x40c4f375 21:33:53 INFO - Found by: call frame info 21:33:53 INFO - 5 libxul.so!js::Invoke [jscntxtinlines.h:b47995bcf303 : 321 + 0x5] 21:33:53 INFO - r4 = 0x00000000 r5 = 0x444a8190 r6 = 0xbec117f0 r7 = 0x418c1c3c 21:33:53 INFO - r8 = 0x00000000 r9 = 0xbec11c08 r10 = 0x41a632ac fp = 0xbec11bf0 21:33:53 INFO - sp = 0xbec117d8 pc = 0x411bee15 21:33:53 INFO - Found by: call frame info 21:33:53 INFO - 6 libxul.so!Interpret [Interpreter.cpp:b47995bcf303 : 2298 + 0xd]

The stack frame 1 shows that EnsureTarget destroyed the existing mTarget and failed to create a new one. It is a bit stupid, then, that this be the moment that we choose to try to create the Error target! The whole error target seems a bit wrong tbh, especially it having an actual surface, even if it's a 1x1 surface.

Er, rather, EnsureTarget saw that we didn't have a target, tried to create one, failed.