My favorites | Sign in
Project Home Downloads Wiki Issues Code Search
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 43797: Browser crash in CGLGetPixelFormatRetainCount()
3 people starred this issue and may be notified of changes. Back to list
Status:  WontFix
Owner:  avi@chromium.org
Closed:  Sep 2010
Cc:  thakis@chromium.org, pinkerton@chromium.org
M-8

Restricted
  • Only users with EditIssue permission may comment.


Sign in to add a comment
 
Project Member Reported by shess@chromium.org, May 10, 2010
No Chrome on the stack!  Assigning to random avi, feel free to punt.

http://crash/reportdetail?reportid=0bc7f5e852550d50

Thread 18 *CRASHED* ( EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE @ 0x00000034 )

0x9133ff0a	 [OpenGL	 + 0x0000af0a]	CGLGetPixelFormatRetainCount
0x913369c0	 [OpenGL	 + 0x000019c0]	CGLChoosePixelFormat
0x933112e2	 [QuartzCore	 + 0x0005e2e2]	view_draw(_CAView*, double, CVTimeStamp const*, bool)
0x93310cf8	 [QuartzCore	 + 0x0005dcf8]	view_display_link(double, CVTimeStamp const*, void*)
0x93310c4a	 [QuartzCore	 + 0x0005dc4a]	link_callback
0x9369cfc7	 [CoreVideo	 + 0x00002fc7]	CVDisplayLink::performIO(CVTimeStamp*)
0x9369bbfb	 [CoreVideo	 + 0x00001bfb]	CVDisplayLink::runIOThread()
0x9369b829	 [CoreVideo	 + 0x00001829]	startIOThread(void*)
0x96aa6a18	 [libSystem.B.dylib	 + 0x0002ea18]	_pthread_start
0x96aa689d	 [libSystem.B.dylib	 + 0x0002e89d]	thread_start

http://crash/reportdetail?reportid=bdeb5685af8c7463

0x95efff0a	 [OpenGL	 + 0x0000af0a]	CGLGetPixelFormatRetainCount
0x95ef69c0	 [OpenGL	 + 0x000019c0]	CGLChoosePixelFormat
0x91f6a414	 [QuartzCore	 + 0x00282414]	-[CAOpenGLLayer copyCGLPixelFormatForDisplayMask:]
0x91f69a96	 [QuartzCore	 + 0x00281a96]	CAOpenGLLayerDraw(CAOpenGLLayer*, double, CVTimeStamp const*, unsigned int)
0x91f6a628	 [QuartzCore	 + 0x00282628]	-[CAOpenGLLayer _display]
0x91cf25a8	 [QuartzCore	 + 0x0000a5a8]	CALayerDisplayIfNeeded
0x91cf1975	 [QuartzCore	 + 0x00009975]	CA::Context::commit_transaction(CA::Transaction*)
0x91cf15bb	 [QuartzCore	 + 0x000095bb]	CA::Transaction::commit()
0x964e88b9	 [AppKit	 + 0x001b98b9]	-[NSView(NSLayerKitGlue) _drawRectAsLayerTree:]
0x9644b3f1	 [AppKit	 + 0x0011c3f1]	-[NSView _drawRect:clip:]
0x9644ad96	 [AppKit	 + 0x0011bd96]	-[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
0x9644b0cb	 [AppKit	 + 0x0011c0cb]	-[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
0x9644b0cb	 [AppKit	 + 0x0011c0cb]	-[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
0x9644b0cb	 [AppKit	 + 0x0011c0cb]	-[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
0x9644b0cb	 [AppKit	 + 0x0011c0cb]	-[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
0x964492b5	 [AppKit	 + 0x0011a2b5]	-[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
0x9644a22a	 [AppKit	 + 0x0011b22a]	-[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
0x9644a22a	 [AppKit	 + 0x0011b22a]	-[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
0x96448e2a	 [AppKit	 + 0x00119e2a]	-[NSThemeFrame _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
0x96445770	 [AppKit	 + 0x00116770]	-[NSView _displayRectIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:]
0x963a63ed	 [AppKit	 + 0x000773ed]	-[NSView displayIfNeeded]
0x9636f6eb	 [AppKit	 + 0x000406eb]	-[NSWindow displayIfNeeded]
0x963a0c25	 [AppKit	 + 0x00071c25]	_handleWindowNeedsDisplay
0x98b0c2e1	 [CoreFoundation	 + 0x000802e1]	__CFRunLoopDoObservers
0x98ac8a1c	 [CoreFoundation	 + 0x0003ca1c]	__CFRunLoopRun
0x98ac80f3	 [CoreFoundation	 + 0x0003c0f3]	CFRunLoopRunSpecific
0x98ac7f20	 [CoreFoundation	 + 0x0003bf20]	CFRunLoopRunInMode
0x9194a0fb	 [HIToolbox	 + 0x000350fb]	RunCurrentEventLoopInMode
0x91949eb0	 [HIToolbox	 + 0x00034eb0]	ReceiveNextEventCommon
0x91949d35	 [HIToolbox	 + 0x00034d35]	BlockUntilNextEventMatchingListInMode
0x96377134	 [AppKit	 + 0x00048134]	_DPSNextEvent
0x96376975	 [AppKit	 + 0x00047975]	-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
0x96338bee	 [AppKit	 + 0x00009bee]	-[NSApplication run]
0x006bf2cc	 [Google Chrome Framework	 - message_pump_mac.mm:677]	base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*)
0x006bea55	 [Google Chrome Framework	 - message_pump_mac.mm:213]	base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*)
0x006e0f03	 [Google Chrome Framework	 - message_loop.cc:204]	MessageLoop::Run()
0x00129f7b	 [Google Chrome Framework	 - browser_main.cc:183]	BrowserMain(MainFunctionParams const&)
0x0000a708	 [Google Chrome Framework	 - chrome_dll_main.cc:814]	ChromeMain
0x00001ff7	 [Google Chrome	 - chrome_exe_main.mm:16]	main
0x00001fb5	 [Google Chrome	 + 0x00000fb5]	
0x00000001			

May 10, 2010
#1 avi@chromium.org
This appears to be a reproducible OS crash, as per the note at
http://www.mail-archive.com/quartzcomposer-dev@lists.apple.com/msg04287.html .
May 11, 2010
#2 shess@chromium.org
This is our highest Mac-specific browser crash.  And it's rather new.  So marking it TopCrash.
Labels: Crash-TopCrash
May 11, 2010
#3 shess@chromium.org
(No comment was entered for this change.)
Labels: -Crash-TopCrash Crash-TopCrasher
May 12, 2010
#4 kr...@chromium.org
This is worth looking into to see if we can avoid triggering this.
Status: Assigned
Labels: -Pri-2 Pri-1 Mstone-6
Jun 10, 2010
#5 avi@chromium.org
An Apple engineer suspects this is a known race condition due to a bad share context passed into OpenGL. It happens on systems with two monitors. More detail to follow.
Jun 10, 2010
#6 avi@chromium.org
Our report is rdar:8080913, which is a suspected duplicate of the original rdar:7587324.
Status: ExternalDependency
Jun 11, 2010
#7 shess@chromium.org
Do we have any ideas on why we're tickling this now but weren't before?
Jun 11, 2010
#8 avi@chromium.org
No, I don't.
Jul 8, 2010
#9 hbridge@google.com
(No comment was entered for this change.)
Labels: -Crash-TopCrasher Crash-TopFixed
Jul 27, 2010
#10 lafo...@chromium.org
(No comment was entered for this change.)
Labels: -Mstone-6 Mstone-X
Aug 18, 2010
#11 mikesm...@chromium.org
(No comment was entered for this change.)
Labels: -Mstone-X -Crash-TopFixed Mstone-8 Crash-TopCrasher
Aug 24, 2010
#12 avi@chromium.org
Just got pushback from Apple saying this is our fault. I'm lost as to how/why.
Aug 24, 2010
#13 avi@chromium.org
So...

This is 10.6 only. There are usually two threads in CGLGetPixelFormatRetainCount, one the main thread drawing, and one the CVDisplayLink thread. This feels like bad sync on Apple's part. I'm trying to find answers.
Aug 31, 2010
#14 pinkerton@chromium.org
Thakis had a bug recently with crashes in the CVDisplayLink thread, maybe he can shed some light on this one.

Pulling back to our side of the fence while we continue to investigate.
Status: Assigned
Cc: tha...@chromium.org pinker...@chromium.org
Aug 31, 2010
#15 thakis@google.com
Looks like this is in CoreAnimation, back from when we used CoreAnimation to draw IOSurfaces. Do we still see this?
Aug 31, 2010
#16 avi@chromium.org
We're seeing this ... let's see ... through 6.0.472.51. It's not clear to me why you're ruling out our use of CA to do UI animations as a possible trigger.
Aug 31, 2010
#17 thakis@chromium.org
Because caopengllayer is on the stack. We don't use that anywhere else.
Sep 28, 2010
#18 avi@chromium.org
Last reports of this are in 6.0.472.63. Based on comments by thakis, closing.
Status: WontFix
Sep 28, 2010
#19 shess@chromium.org
Don't see any hits for this in 7.0 releases.  Avi FTW!
Sep 28, 2010
#20 avi@chromium.org
Yay me? I didn't do anything. Yay for KILL MOAR CODE
Oct 5, 2010
#21 hbridge@google.com
(No comment was entered for this change.)
Labels: -Crash-TopCrasher Crash-TopFixed
Mar 18, 2011
#22 lafo...@chromium.org
(No comment was entered for this change.)
Labels: -Crash bulkmove Stability-Crash
Oct 12, 2012
#23 bugdroid1@chromium.org
This issue has been closed for some time. No one will pay attention to new comments.
If you are seeing this bug or have new data, please click New Issue to start a new bug.
Labels: Restrict-AddIssueComment-Commit
Mar 10, 2013
#24 bugdroid1@chromium.org
(No comment was entered for this change.)
Labels: -Area-UI -Mstone-8 M-8 Cr-UI
Mar 13, 2013
#25 bugdroid1@chromium.org
(No comment was entered for this change.)
Labels: -Restrict-AddIssueComment-Commit Restrict-AddIssueComment-EditIssue
Sign in to add a comment

Powered by Google Project Hosting