mash: ash process crash on startup in SkFindAndPlaceGlyph::ArbitraryPositions::nextPoint() |
|||||||||||
Issue descriptionSee https://uberchromegw.corp.google.com/i/chromeos.chrome/builders/peach_pit-tot-chrome-pfq-informational?numbuilds=100 Starts flaking here: https://uberchromegw.corp.google.com/i/chromeos.chrome/builders/peach_pit-tot-chrome-pfq-informational/builds/5845 However, it's hard to be sure because there were other failures in builds just before that one.
,
Apr 17 2017
+graphics people. The ash process is crashing on startup in skia text drawing code from CC. Ideas?
Crash reason: SIGBUS
Crash address: 0x0
Thread 0 (crashed)
0 chrome!SkFindAndPlaceGlyph::ArbitraryPositions::nextPoint() [SkFindAndPlaceGlyph.h : 271 + 0x0]
1 chrome!void SkFindAndPlaceGlyph::ProcessPosText<DrawOneGlyph&>(SkPaint::TextEncoding, char const*, unsigned int, SkPoint, SkMatrix const&, float const*, int, SkPaint::Align, SkGlyphCache*, DrawOneGlyph&) [SkFindAndPlaceGlyph.h : 686 + 0x3]
2 chrome!SkDraw::drawPosText(char const*, unsigned int, float const*, int, SkPoint const&, SkPaint const&, SkSurfaceProps const*) const [SkDraw.cpp : 1665 + 0x5]
3 chrome!SkBitmapDevice::drawPosText(void const*, unsigned int, float const*, int, SkPoint const&, SkPaint const&) [SkBitmapDevice.cpp : 375 + 0x11]
4 chrome!SkCanvas::onDrawPosText(void const*, unsigned int, SkPoint const*, SkPaint const&) [SkCanvas.cpp : 2541 + 0x1b]
5 chrome!SkCanvas::drawPosText(void const*, unsigned int, SkPoint const*, SkPaint const&) [SkCanvas.cpp : 2634 + 0x13]
6 chrome!cc::$_16::__invoke(cc::PaintOp const*, SkCanvas*, SkMatrix const&) [paint_op_buffer.cc : 283 + 0x7]
7 chrome!cc::PaintOpBuffer::playback(SkCanvas*) const [paint_op_buffer.cc : 354 + 0x9]
8 chrome!cc::(anonymous namespace)::RasterItem(cc::DisplayItem const&, SkCanvas*, SkPicture::AbortCallback*) [display_item_list.cc : 108 + 0x7]
9 chrome!cc::DisplayItemList::Raster(SkCanvas*, SkPicture::AbortCallback*) const [display_item_list.cc : 244 + 0x9]
10 chrome!cc::RasterSource::PlaybackToCanvas(SkCanvas*, gfx::ColorSpace const&, cc::RasterSource::PlaybackSettings const&) const [raster_source.cc : 218 + 0x7]
11 chrome!cc::RasterSource::PlaybackToCanvas(SkCanvas*, gfx::ColorSpace const&, gfx::Rect const&, gfx::Rect const&, gfx::AxisTransform2d const&, cc::RasterSource::PlaybackSettings const&) const [raster_source.cc : 84 + 0xd]
12 chrome!cc::RasterBufferProvider::PlaybackToMemory(void*, cc::ResourceFormat, gfx::Size const&, unsigned int, cc::RasterSource const*, gfx::Rect const&, gfx::Rect const&, gfx::AxisTransform2d const&, gfx::ColorSpace const&, cc::RasterSource::PlaybackSettings const&) [raster_buffer_provider.cc : 85 + 0xf]
13 chrome!cc::(anonymous namespace)::RasterBufferImpl::Playback(cc::RasterSource const*, gfx::Rect const&, gfx::Rect const&, unsigned long long, gfx::AxisTransform2d const&, cc::RasterSource::PlaybackSettings const&) [zero_copy_raster_buffer_provider.cc : 52 + 0x17]
14 chrome!cc::(anonymous namespace)::RasterTaskImpl::RunOnWorkerThread() [tile_manager.cc : 130 + 0x5]
15 chrome!cc::SingleThreadTaskGraphRunner::RunTaskWithLockAcquired() [single_thread_task_graph_runner.cc : 154 + 0x1]
16 chrome!non-virtual thunk to cc::SingleThreadTaskGraphRunner::Run() [single_thread_task_graph_runner.cc : 117 + 0x5]
17 chrome!base::SimpleThread::ThreadMain() [simple_thread.cc : 68 + 0x7]
18 chrome!base::(anonymous namespace)::ThreadFunc(void*) [platform_thread_posix.cc : 71 + 0x7]
19 libpthread-2.23.so!start_thread [pthread_create.c : 335 + 0xb]
20 libc-2.23.so!clone + 0x5a
Then the window server (?) process crashes during shutdown:
Crash reason: SIGSEGV
Crash address: 0x0
Thread 0 (crashed)
0 chrome!ui::DrmOverlayManager::~DrmOverlayManager() [drm_overlay_manager.cc : 36 + 0x2]
1 chrome!ui::(anonymous namespace)::OzonePlatformGbm::~OzonePlatformGbm() [unique_ptr.h : 76 + 0x7]
2 chrome!std::_Rb_tree<OAuth2TokenService::RequestParameters, std::pair<OAuth2TokenService::RequestParameters const, OAuth2TokenService::CacheEntry>, std::_Select1st<std::pair<OAuth2TokenService::RequestParameters const, OAuth2TokenService::CacheEntry> >, std::less<OAuth2TokenService::RequestParameters>, std::allocator<std::pair<OAuth2TokenService::RequestParameters const, OAuth2TokenService::CacheEntry> > >::_M_begin() [ozone_platform_gbm.cc : 87 + 0x3]
3 chrome!ui::Service::~Service() [service.cc : 99 + 0x3]
4 chrome!std::allocator_traits<std::allocator<std::__detail::_Hash_node<std::pair<WTF::String const, WTF::String>, true> > >::deallocate(std::allocator<std::__detail::_Hash_node<std::pair<WTF::String const, WTF::String>, true> >&, std::__detail::_Hash_node<std::pair<WTF::String const, WTF::String>, true>*, unsigned int) [service.cc : 92 + 0x3]
5 chrome!service_manager::ServiceContext::~ServiceContext() [unique_ptr.h : 76 + 0x7]
6 chrome!service_manager::ServiceContext::~ServiceContext() [service_context.cc : 41 + 0x3]
7 chrome!mash::MashPackagedService::~MashPackagedService() [unique_ptr.h : 76 + 0x7]
8 chrome!std::allocator_traits<std::allocator<WTF::String> >::allocate(std::allocator<WTF::String>&, unsigned int) [mash_packaged_service.cc : 42 + 0x3]
9 chrome!service_manager::ServiceContext::~ServiceContext() [unique_ptr.h : 76 + 0x7]
10 chrome!MashRunner::StartChildApp(mojo::InterfaceRequest<service_manager::mojom::Service>) [mash_runner.cc : 286 + 0x5]
11 chrome!base::internal::Invoker<base::internal::BindState<base::internal::IgnoreResultHelper<content::WebBluetoothServiceImpl* (content::RenderFrameHostImpl::*)(mojo::InterfaceRequest<blink::mojom::WebBluetoothService>)>, base::internal::UnretainedWrapper<content::RenderFrameHostImpl> >, void (mojo::InterfaceRequest<blink::mojom::WebBluetoothService>)>::Run(base::internal::BindStateBase*, mojo::InterfaceRequest<blink::mojom::WebBluetoothService>&&) + 0x3d
12 chrome!service_manager::RunStandaloneService(base::Callback<void (mojo::InterfaceRequest<service_manager::mojom::Service>), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&) [callback.h : 80 + 0x1]
13 chrome!MashRunner::RunChild() [mash_runner.cc : 266 + 0x3]
14 chrome!MashRunner::Run() [mash_runner.cc : 178 + 0x5]
15 chrome!MashMain() [mash_runner.cc : 327 + 0x3]
16 chrome!ChromeMain [chrome_main.cc : 115 + 0x3]
17 libc-2.23.so!__libc_start_main [libc-start.c : 289 + 0xb]
18 chrome!_start + 0x32
19 chrome!__libc_csu_init [elf-init.c : 87 + 0x11]
sp = 0xbe99f13c pc = 0xb6720641
20 ld-2.23.so!_dl_sort_fini + 0x1aa
sp = 0xbe99f140 pc = 0xb1b3bf3d
There's nothing interesting in the chrome log:
[15544:15551:0417/035249.011564:1978938958:INFO:service_process_launcher.cc(196)] Launched child process pid=15552, instance=, name=content_packaged_services, user_id=815d1365-246a-4013-a885-a934299e3537
[15544:15551:0417/035249.015788:1978942800:INFO:service_process_launcher.cc(196)] Launched child process pid=15553, instance=0f908553-07e3-4532-954e-ef104cdd09b5, name=chrome_mash, user_id=505C0EE9-3013-43C0-82B0-A84F50CF8D84
[15544:15551:0417/035249.019585:1978946590:INFO:service_process_launcher.cc(196)] Launched child process pid=15554, instance=b56cf12f-36bd-4500-a0ed-9ecbd6a1fe61, name=chrome_mash, user_id=505C0EE9-3013-43C0-82B0-A84F50CF8D84
[15544:15551:0417/035249.023248:1978950254:INFO:service_process_launcher.cc(196)] Launched child process pid=15555, instance=102e4311-da3c-49b9-89e2-703ce2eaae89, name=chrome_mash, user_id=0d2ed065-8077-4e4f-8eda-1605c02fb145
[15544:15549:0417/035249.094512:1979021501:ERROR:instance.cc(71)] Unable to locate service manifest for tracing
[15544:15549:0417/035249.095813:1979022800:ERROR:service_manager.cc(884)] Failed to resolve service name: tracing
[15544:15549:0417/035249.100287:1979027273:ERROR:instance.cc(71)] Unable to locate service manifest for tracing
[15544:15549:0417/035249.100392:1979027375:ERROR:service_manager.cc(884)] Failed to resolve service name: tracing
[15555:15555:0417/035249.103921:1979031044:VERBOSE1:drm_device_handle.cc(83)] Succeeded authenticating /dev/dri/card0 in 0 ms with 1 attempt(s)
[15555:15555:0417/035249.104426:1979031410:VERBOSE1:drm_util.cc(334)] Failed to get EDID blob for connector 20
device-enumerator: scan all dirs
device-enumerator: scanning /sys/bus
device-enumerator: scanning /sys/class
[15555:15555:0417/035249.126354:1979053342:VERBOSE1:drm_display_host_manager.cc(243)] Got display event ADD for /dev/dri/card0
[15555:15571:0417/035249.171553:1979098542:VERBOSE1:drm_util.cc(334)] Failed to get EDID blob for connector 20
[15555:15555:0417/035249.171883:1979098869:VERBOSE1:display_configurator.cc(951)] Display snapshots invalidated.
[15555:15555:0417/035249.172038:1979099024:VERBOSE1:update_display_configuration_task.cc(74)] OnDisplaysUpdated: new_display_state=SINGLE new_power_state=ALL_ON flags=1 force_configure=1 display_count=1
[15555:15555:0417/035249.172222:1979099207:VERBOSE1:display_configurator.cc(217)] EnterState: display=SINGLE power=ALL_ON
[15555:15571:0417/035249.172389:1979099374:VERBOSE1:drm_display.cc(102)] DRM configuring: device=/sys/devices/platform/exynos-drm/drm/card0 crtc=27 connector=20 origin=0,0 size=1366x768
[15555:15555:0417/035249.336549:1979263545:VERBOSE1:display_configurator.cc(1061)] OnConfigured: success=1 new_display_state=SINGLE new_power_state=ALL_ON
[15555:15555:0417/035249.337122:1979264112:ERROR:screen_manager_ozone_internal.cc(321)] Not implemented reached in virtual void display::ScreenManagerOzoneInternal::CloseMirroringDisplayIfNotNecessary()
[15544:15551:0417/035249.360007:1979287022:INFO:service_process_launcher.cc(196)] Launched child process pid=15588, instance=d1355917-8c7d-4d2c-9e89-1d616f8a1bc3, name=chrome_mash, user_id=505C0EE9-3013-43C0-82B0-A84F50CF8D84
device-enumerator: scan all dirs
device-enumerator: scanning /sys/bus
device-enumerator: scanning /sys/class
[15555:15568:0417/035249.380934:1979307928:ERROR:texture_manager.cc(3225)] [GroupMarkerNotSet( crbug.com/242999 )!:689E5DB8]GL ERROR :GL_INVALID_FRAMEBUFFER_OPERATION : glTexImage2D: <- error from previous GL command
[15544:15549:0417/035249.454394:1979381381:ERROR:instance.cc(71)] Unable to locate service manifest for tracing
[15544:15549:0417/035249.454513:1979381497:ERROR:service_manager.cc(884)] Failed to resolve service name: tracing
[15544:15549:0417/035249.470293:1979397280:ERROR:instance.cc(71)] Unable to locate service manifest for tracing
[15544:15549:0417/035249.470410:1979397394:ERROR:service_manager.cc(884)] Failed to resolve service name: tracing
[15553:15553:0417/035249.481943:1979408929:ERROR:shell_delegate_mus.cc(130)] Not implemented reached in virtual std::unique_ptr<PaletteDelegate> ash::ShellDelegateMus::CreatePaletteDelegate()
[15553:15553:0417/035249.482319:1979409305:ERROR:shell_port_mash.cc(351)] Not implemented reached in virtual void ash::mus::ShellPortMash::AddDisplayObserver(ash::WmDisplayObserver *)
[15553:15553:0417/035249.482492:1979409475:ERROR:shell_delegate_mus.cc(86)] Not implemented reached in virtual void ash::ShellDelegateMus::PreInit()
[15553:15553:0417/035249.483909:1979410895:ERROR:shell_port_mash.cc(252)] Not implemented reached in virtual void ash::mus::ShellPortMash::RecordUserMetricsAction(ash::UserMetricsAction)
[15553:15553:0417/035249.484960:1979411946:ERROR:shell_delegate_mus.cc(120)] Not implemented reached in virtual ash::SessionStateDelegate *ash::ShellDelegateMus::CreateSessionStateDelegate()
[15553:15553:0417/035249.559364:1979486351:ERROR:shell_port_mash.cc(197)] Not implemented reached in virtual bool ash::mus::ShellPortMash::IsInUnifiedMode() const
[15555:15568:0417/035249.595240:1979522229:ERROR:gles2_cmd_decoder.cc(2510)] [GroupMarkerNotSet( crbug.com/242999 )!:68995DB8]GL ERROR :GL_INVALID_FRAMEBUFFER_OPERATION : BackFramebuffer::Create: <- error from previous GL command
[15553:15553:0417/035249.599093:1979526081:ERROR:layer_tree_host_impl.cc(2287)] Forcing zero-copy tile initialization as worker context is missing
[15553:15553:0417/035249.617061:1979544045:ERROR:device_event_log_impl.cc(156)] [03:52:49.617] Network: network_handler_callbacks.cc:84 not-supported: /device/mlan0: org.chromium.flimflam.Error.NotSupported: This WiFi device does not support MAC address randomization
[15553:15553:0417/035249.761139:1979688128:ERROR:shell_port_mash.cc(75)] Not implemented reached in virtual bool ash::mus::(anonymous namespace)::SessionStateDelegateStub::ShouldShowAvatar(ash::WmWindow *) const
[15553:15553:0417/035249.770726:1979697715:ERROR:shell_delegate_mus.cc(76)] Not implemented reached in virtual bool ash::ShellDelegateMus::CanShowWindowForUser(ash::WmWindow *) const
[15554:15554:0417/035249.786575:1979713720:ERROR:layer_tree_host_impl.cc(2287)] Forcing zero-copy tile initialization as worker context is missing
[15544:15544:0417/035250.594932:1980521919:ERROR:mash_runner.cc(162)] Main process exiting because service ash quit unexpectedly.
,
Apr 17 2017
Sadrul, can you take this? I tried to pull a core file (instead of minidump) from the failure, but couldn't get it to symbolize. The stacks above are all I've got for now.
,
Apr 17 2017
There is a crash with this signature in it here: 712336 . I'm not sure if mus or skia is too blame here. +reed
,
Apr 19 2017
ping, can someone look at this? I took our hardware test off the waterfall and I can't put it back until this is fixed.
,
Apr 19 2017
+ some skia font people
,
Apr 19 2017
I think the following bug is related to this bug.... https://bugs.chromium.org/p/chromium/issues/detail?id=712336
,
Apr 24 2017
Yes, it seems quite likely to be the same issue. That patch was reverted in r465196.
,
Apr 24 2017
Marking fixed since patch was reverted.
,
May 30 2017
,
Aug 1 2017
,
Jan 22 2018
,
Feb 26 2018
|
|||||||||||
►
Sign in to add a comment |
|||||||||||
Comment 1 by bugdroid1@chromium.org
, Apr 17 2017