### ENV Buri pvt m-c build Gaia 59b89715c92d0383fb3d09941db93af5dfd05bc8 Gecko http://hg.mozilla.org/mozilla-central/rev/0fdbcbffc79e BuildID 20131215040201 Version 29.0a1 ro.build.version.incremental=eng.archermind.20131114.105818 ro.build.date=Thu Nov 14 10:58:33 CST 2013 ### STR 1. launch Browser app 2. access http://m.youtube.com/watch?v=5MzuGWFIfio 3. click Play icon ### Expected video start to paly ### Actual crashed

click other Suggested Videos also crashed

There are some error message in logcat, hope it helpful. --------- beginning of /dev/log/main E/GeckoConsole( 587): [JavaScript Warning: "Error in parsing value for 'background'. Declaration dropped." {file: "http://m.youtube.com/watch?v=5MzuGWFIfio" line: 13 column: 12887 source: " ._msm,._mom,._mrm{margin-left:23px}._mtm{line-height:122%;color:#333}._mom{line-height:122%;color:#333;min-height:1.3em}._mqm{font-weight:bold}._mpm{float:left;margin-left:3px;margin-top:5px;width:10px;height:10px;background:#6f9cbc;border-radius:5px}._mrm{color:#999;font-size:12px}._msm ._mne{margin-right:12px}._met ._meq{background:rgba(0,0,0,0.5)}._mgt{padding-top:25px}._md ._mht{padding:50px}._mo ._meab{display:none}._mo ._mrb{height:45px}._mft{color:#fff;padding:8px;background:rgba(0,0,0,0.6)}._mqt{display:inline-block;width:50%;-moz-box-sizing:border-box;box-sizing:border-box}._mrt{border-right:1px solid #999}._mut{color:#fff;display:table-cell;vertical-align:middle}._mst{color:#fff;display:table-cell;vertical-align:middle;height:40px;width:40px}._mst span{margin:0 auto;display:block}._mpt{width:100%;position:absolute;left:0;bottom E/GeckoConsole( 587): [JavaScript Warning: "Error in parsing value for 'background-image'. Declaration dropped." {file: "http://m.youtube.com/watch?v=5MzuGWFIfio" line: 13 column: 14086 source: " ._msm,._mom,._mrm{margin-left:23px}._mtm{line-height:122%;color:#333}._mom{line-height:122%;color:#333;min-height:1.3em}._mqm{font-weight:bold}._mpm{float:left;margin-left:3px;margin-top:5px;width:10px;height:10px;background:#6f9cbc;border-radius:5px}._mrm{color:#999;font-size:12px}._msm ._mne{margin-right:12px}._met ._meq{background:rgba(0,0,0,0.5)}._mgt{padding-top:25px}._md ._mht{padding:50px}._mo ._meab{display:none}._mo ._mrb{height:45px}._mft{color:#fff;padding:8px;background:rgba(0,0,0,0.6)}._mqt{display:inline-block;width:50%;-moz-box-sizing:border-box;box-sizing:border-box}._mrt{border-right:1px solid #999}._mut{color:#fff;display:table-cell;vertical-align:middle}._mst{color:#fff;display:table-cell;vertical-align:middle;height:40px;width:40px}._mst span{margin:0 auto;display:block}._mpt{width:100%;position:absolute;left:0;

I can reproduce this crash and earlier I filed Bug 950747 to address other crashes we are seeing with the same stack - https://crash-stats.mozilla.com/report/index/1445438c-e9dd-4634-8895-47ce22131216 is my crash report.

This issue started to occur on the Buri Master Build ID: 20131214040201 Gaia 4795e1f663b26e03268cfd8e1a168f413b2bd396 SourceStamp 9d593727eb94 BuildID 20131214040201 Version 29.0a1 Last working Buri Master Build ID: 20131213040203 Gaia 390b313a254a947d12e3cdbcde19d7d1619ff63c SourceStamp 8b5875dc7e31 BuildID 20131213040203 Version 29.0a1

Adding Morris since Bug 893304 is in the regression time period and seems to be a bug that touched this area.

Does this reproduce on 1.3?

This issue does not repro on the latest Buri 1.3 Build ID: 20131216004002 BuildID: 20131216004002 Gaia: 1752e9e8f2b84b9db5d96ae5940596957fc8ed6c Gecko: 2ec5a40f544e Version: 28.0a2

In the gfx push log, I'm seeing two distinct bugs that landed here: * bug 893304 * bug 929513 Milan - Can someone from gfx weigh in one which bug caused this crash?

I confirm bug 893304 cause this crash. I'll look into this bug.

(In reply to Morris Tseng [:mtseng] from comment #14) > I confirm bug 893304 cause this crash. I'll look into this bug. Morris - Can we backout bug 893304 then to unblock smoketests? Some of our daily manual smoketests & UI automated tests are failing due to this bug, so a backout would help unblock us quickly.

Backout is fine for me.

(In reply to Morris Tseng [:mtseng] from comment #16) > Backout is fine for me. Okay - I've pinged the sheriffs over email for a backout.

From the crash log, it seems possible to delete already deleted SharedSurface_Gralloc. SharedSurface is not reference counted, such kind thing could happens.

Bug 893304 backed out. https://hg.mozilla.org/integration/b2g-inbound/rev/b4ccf273d273

This passes now on my Inari: Gecko http://hg.mozilla.org/mozilla-central/rev/d58545aaeab9 Gaia 5123f0dc6f4712c60b4714579b7cc6a9644c8542 BuildID 20131217084757 Version 29.0a1 I gave it a 11 times run and got no fail: https://pastebin.mozilla.org/3802155

Looks like this is on m-c http://hg.mozilla.org/mozilla-central/rev/b4ccf273d273 Closing as fixed by backout.