Crash occurs when opening a new camera fails. (gdb) bt #0 0x4176dbf2 in mozalloc_abort (msg=<value optimized out>) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/memory/mozalloc/mozalloc_abort.cpp:30 #1 0x4176dc0a in abort () at /home/mikeh/dev/mozilla/m-c/b2g-inbound/memory/mozalloc/mozalloc_abort.cpp:39 #2 0x40dbc7ae in mozilla::nsDOMCameraControl::DOMCameraConfiguration::Release (this=0x432be310, aDOMCameraControl=0x43269bf0) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/dom/camera/DOMCameraControl.h:126 #3 ~nsRefPtr (this=0x432be310, aDOMCameraControl=0x43269bf0) at ../../dist/include/nsAutoPtr.h:900 #4 RunCallback (this=0x432be310, aDOMCameraControl=0x43269bf0) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/dom/camera/DOMCameraControlListener.cpp:191 #5 0x40dbc6ec in mozilla::DOMCameraControlListener::DOMCallback::Run (this=0x432be310) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/dom/camera/DOMCameraControlListener.cpp:34 #6 0x406da454 in nsThread::ProcessNextEvent (this=0x403c5f60, mayWait=true, result=0xbebf9edf) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/xpcom/threads/nsThread.cpp:643 #7 0x406aa49c in NS_ProcessNextEvent (thread=0x46, mayWait=true) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/xpcom/glue/nsThreadUtils.cpp:263 #8 0x40812584 in mozilla::ipc::MessagePump::Run (this=0x40301af0, aDelegate=0xbebfa7ec) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/glue/MessagePump.cpp:136 #9 0x408125fe in mozilla::ipc::MessagePumpForChildProcess::Run (this=0x40301af0, aDelegate=0xbebfa7ec) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/glue/MessagePump.cpp:283 #10 0x408081a0 in MessageLoop::RunInternal (this=0x1000001) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/chromium/src/base/message_loop.cc:226 #11 0x4080821e in MessageLoop::RunHandler (this=0xbebfa7ec) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/chromium/src/base/message_loop.cc:219 #12 MessageLoop::Run (this=0xbebfa7ec) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/chromium/src/base/message_loop.cc:193 #13 0x40c56b94 in nsBaseAppShell::Run (this=0x435faa60) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/widget/xpwidgets/nsBaseAppShell.cpp:161 #14 0x4127231a in XRE_RunAppShell () at /home/mikeh/dev/mozilla/m-c/b2g-inbound/toolkit/xre/nsEmbedFunctions.cpp:679 #15 0x408125cc in mozilla::ipc::MessagePumpForChildProcess::Run (this=0x40301af0, aDelegate=0xbebfa7ec) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/glue/MessagePump.cpp:253 #16 0x408081a0 in MessageLoop::RunInternal (this=0x435faa60) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/chromium/src/base/message_loop.cc:226 #17 0x4080821e in MessageLoop::RunHandler (this=0xbebfa7ec) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/chromium/src/base/message_loop.cc:219 #18 MessageLoop::Run (this=0xbebfa7ec) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/chromium/src/base/message_loop.cc:193 #19 0x412727a4 in XRE_InitChildProcess (aArgc=-1094735480, aArgv=0xbebfa8fc, aProcess=1077210112) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/toolkit/xre/nsEmbedFunctions.cpp:516 #20 0x000087a0 in main (argc=8, argv=0xbebfa984) at /home/mikeh/dev/mozilla/m-c/b2g-inbound/ipc/app/MozillaRuntimeMain.cpp:137 STR: 0. flash Helix with bug 909542 and bug 958200 patches 1. open Camera app 2. switch to front (user-facing) camera Expected: seamless switch to other camera Observed: above crash. DOMCameraControl.h:126 in the patched code is: NS_INLINE_DECL_REFCOUNTING(DOMCameraConfiguration)

Is bug 974919 duplicated with this?

(In reply to Kai-Zhen Li from comment #2) > > Is bug 974919 duplicated with this? It's possible, but I don't have a Nexus 5 to test. Please see bug 974919 comment 3.