---------------------------------Related
Information:----------------------------------
OS version:          2.3.5
Affection module: Surfaceflinger
Occurrence ratio: 100%
Test way: Monkey test
Test Phone memory size: 1GB

Reproduction procedure:
1  Set Settings->Display->Screen Timeout->Never timeout;
    Configured phone to one WiFi hotspot in case some data call test
case needed.
2. Set below flex in /system/build.prop:
   Append below line to the last of /system/build.prop.
   libc.debug.malloc=10
3 Reboot phone, connect to PC, run below monkey tests:
   Put phone at IDLE center home panel, unlocked status, run below
monkey test:
   adb shell monkey --hprof --throttle 50 -s 1 -v 999999999 >
monkeytest.txt
---------------------------------------------------------------------------------------------------
Description:
Phone will have system server crash very soon (less than 5 minutes
most of the time)
Then we can see the monkey log below:

********************************************
09-02 15:24:01.625 316 324 I SurfaceFlinger: SurfaceFlinger's main
thread ready to run. Initializing graphics H/W...
09-02 15:24:01.914 316 324 W IMGSRV : framebuffer.c:741:
framebuffer_device_alloc: Leased frame buffer 0 (of 2) for usage
FHWR=0x1000
09-02 15:24:01.914 316 324 W IMGSRV : framebuffer.c:741:
framebuffer_device_alloc: Leased frame buffer 1 (of 2) for usage
FHWR=0x1000
09-02 15:24:01.945 316 324 D libEGL : loaded /system/lib/egl/
libGLES_android.so
09-02 15:24:01.953 316 324 D libEGL : loaded /system/lib/egl/
libEGL_POWERVR_SGX540_120.so
09-02 15:24:02.031 316 324 D libEGL : loaded /system/lib/egl/
libGLESv1_CM_POWERVR_SGX540_120.so
09-02 15:24:02.031 316 324 D libEGL : loaded /system/lib/egl/
libGLESv2_POWERVR_SGX540_120.so
09-02 15:24:02.093 316 324 E libEGL : eglSetSwapRectangleANDROID:1877
error 3008 (EGL_BAD_DISPLAY)
09-02 15:24:02.093 316 324 I SurfaceFlinger: EGL informations:
09-02 15:24:02.093 316 324 I SurfaceFlinger: # of configs : 36
09-02 15:24:02.093 316 324 I SurfaceFlinger: vendor : Android
09-02 15:24:02.093 316 324 I SurfaceFlinger: version : 1.4 Android
META-EGL
09-02 15:24:02.093 316 324 I SurfaceFlinger: extensions: EGL_KHR_image
EGL_KHR_image_base EGL_KHR_image_pixmap
EGL_ANDROID_image_native_buffer EGL_ANDROID_swap_rectangle
09-02 15:24:02.093 316 324 I SurfaceFlinger: Client API: OpenGL ES
09-02 15:24:02.093 316 324 I SurfaceFlinger: EGLSurface: 8-8-8-8,
config=0x1
09-02 15:24:02.093 316 324 I SurfaceFlinger: OpenGL informations:
09-02 15:24:02.093 316 324 I SurfaceFlinger: vendor : Imagination
Technologies
09-02 15:24:02.093 316 324 I SurfaceFlinger: renderer : PowerVR SGX
540
09-02 15:24:02.093 316 324 I SurfaceFlinger: version : OpenGL ES-CM
1.1
09-02 15:24:02.093 316 324 I SurfaceFlinger: extensions:
GL_OES_byte_coordinates GL_OES_fixed_point GL_OES_single_precision
GL_OES_matrix_get GL_OES_read_format
GL_OES_compressed_paletted_texture GL_OES_point_sprite
GL_OES_point_size_array GL_OES_matrix_palette GL_OES_draw_texture
GL_OES_query_matrix GL_OES_texture_env_crossbar
GL_OES_texture_mirrored_repeat GL_OES_texture_cube_map
GL_OES_blend_subtract GL_OES_blend_func_separate
GL_OES_blend_equation_separate GL_OES_stencil_wrap
GL_OES_extended_matrix_palette GL_OES_framebuffer_object
GL_OES_rgb8_rgba8 GL_OES_depth24 GL_OES_stencil8
GL_OES_compressed_ETC1_RGB8_texture GL_OES_mapbuffer GL_OES_EGL_image
GL_EXT_multi_draw_arrays GL_OES_required_internalformat
GL_IMG_read_format GL_IMG_texture_compression_pvrtc
GL_IMG_texture_format_BGRA8888 GL_EXT_texture_format_BGRA8888
GL_IMG_texture_stream GL_OES_egl_sync GL_IMG_vertex_array_object
09-02 15:24:02.093 316 324 I SurfaceFlinger: GL_MAX_TEXTURE_SIZE =
2048
09-02 15:24:02.093 316 324 I SurfaceFlinger: GL_MAX_VIEWPORT_DIMS =
2048
09-02 15:24:02.093 316 324 I SurfaceFlinger: flags = 00210000
#####################################################################
09-02 15:24:02.171 316 324 E SurfaceFlinger: eglSwapBuffers: EGL error
0x3008 (EGL_BAD_DISPLAY)

09-02 15:25:32.687 316 324 E libc : *** FREE CHECK: buffer 0x68c9f8
corrupted 16 bytes before allocation
#####################################################################
09-02 15:25:32.687 316 324 E libc : call stack:
09-02 15:25:32.687 316 324 E libc : 0: 8000dc92
09-02 15:25:32.687 316 324 E libc : 1: 8000dd40
09-02 15:25:32.687 316 324 E libc : 2: 8000dd84
09-02 15:25:32.687 316 324 E libc : 3: 8000dde0
09-02 15:25:32.687 316 324 E libc : 4: afd145d0
09-02 15:25:32.687 316 324 E libc : 5: afc009d6
09-02 15:25:32.687 316 324 E libc : 6: a8114d82
09-02 15:25:32.687 316 324 E libc : 7: ac51dc9c
09-02 15:25:32.687 316 324 E libc : 8: ac51ddb8
09-02 15:25:32.687 316 324 E libc : 9: ac51cfda
09-02 15:25:32.687 316 324 E libc : 10: ac51cff8
09-02 15:25:32.687 316 324 E libc : 11: ac52424e
09-02 15:25:32.687 316 324 E libc : 12: ac525408
09-02 15:25:32.687 316 324 E libc : 13: a811cc4a
09-02 15:25:32.687 316 324 E libc : 14: a811d1a8
09-02 15:25:32.687 316 324 E libc : 15: afd11994
09-02 15:25:32.687 316 324 E libc : 16: afd11560
***************************************************************
and the main log shows below:
#01  pc 0000dd60  /system/lib/libc_malloc_debug_leak.so-->abort()
#02  pc 0000dda0  /system/lib/libc_malloc_debug_leak.so
#03  pc 0000ddfc  /system/lib/libc_malloc_debug_leak.so-->dlmalloc()
#04  pc 0001458a  /system/lib/libc.so-->malloc()
#05  pc 000009c4  /system/lib/libstdc++.so
#06  pc 00014c1c  /system/lib/libutils.so
#07  pc 0001e41e  /system/lib/libsurfaceflinger.so
#08  pc 0001e538  /system/lib/libsurfaceflinger.so
#09  pc 0001d72a  /system/lib/libsurfaceflinger.so
#10  pc 0001d748  /system/lib/libsurfaceflinger.so
#11  pc 00025674  /system/lib/libsurfaceflinger.so
#12 pc 000268f4  /system/lib/libsurfaceflinger.so
#13  pc 0001c828  /system/lib/libutils.so
#14  pc 0001cd86  /system/lib/libutils.so
#15  pc 00011994  /system/lib/libc.so
#16  pc 00011560  /system/lib/libc.so

I highly doubt this issue may be caused by the surfaceflinger codes in
2.3.5. While I reverted the related codes to 2.3.4 about
surfaceflinger and refbase, this issue could not be reproduced.

Dose anyone have the best suggestion?






-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to