Closed Bug 1059254 Opened 10 years ago Closed 9 years ago

Intermittent size-1.html | application crashed [@ unsigned int nsTArray_Impl<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, nsTArrayInfallibleAllocator>::IndexOfFirstElementGt<mozilla::DeadlockDetector<mozilla::BlockingResourceB

Categories

(Core :: DOM: HTML Parser, defect)

Product:
Core
Component:
DOM: HTML Parser
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: cbook, Unassigned)

References

(
URL
)

Details

(Keywords: crash, intermittent-failure)

Attachments

(1 file)

Full stack trace (all threads) from the log for posterity
277.49 KB, text/plain
Details 
Android 4.0 Panda mozilla-inbound debug test plain-reftest-5 on 2014-08-27 01:18:01 PDT for push 1b883c791174

slave: panda-0333

https://tbpl.mozilla.org/php/getParsedLog.php?id=46840279&tree=Mozilla-Inbound#error0

01:32:51  WARNING -  PROCESS-CRASH | http://10.26.130.23:30333/tests/layout/reftests/forms/input/text/size-1.html | application crashed [@ unsigned int nsTArray_Impl<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, nsTArrayInfallibleAllocator>::IndexOfFirstElementGt<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, nsDefaultComparator<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*> >(mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry* const&, nsDefaultComparator<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*> const&) const]
01:32:51     INFO -  Crash dump filename: /tmp/tmpC_Ummd/5e2d830b-6f0e-18ef-7f353167-13c3105d.dmp
01:32:51     INFO -  Operating system: Android
01:32:51     INFO -                    0.0.0 Linux 3.2.0+ #2 SMP PREEMPT Thu Nov 29 08:06:57 EST 2012 armv7l pandaboard/pandaboard/pandaboard:4.0.4/IMM76I/5:eng/test-keys
01:32:51     INFO -  CPU: arm
01:32:51     INFO -       2 CPUs
01:32:51     INFO -  Crash reason:  SIGSEGV
01:32:51     INFO -  Crash address: 0x7
01:32:51     INFO -  Thread 39 (crashed)
01:32:51     INFO -   0  libxul.so!unsigned int nsTArray_Impl<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, nsTArrayInfallibleAllocator>::IndexOfFirstElementGt<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, nsDefaultComparator<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*> >(mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry* const&, nsDefaultComparator<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*> const&) const [nsTArray.h:1b883c791174 : 328 + 0x0]
01:32:51     INFO -       r4 = 0x00000007    r5 = 0x5c301c10    r6 = 0x6bdffdf4    r7 = 0x00000007
01:32:51     INFO -       r8 = 0x00000001    r9 = 0x6bdffe2f   r10 = 0x00000000    fp = 0x6b93a864
01:32:51     INFO -       sp = 0x6bdffc88    lr = 0x62a70f77    pc = 0x62a7090a
01:32:51     INFO -      Found by: given as instruction pointer in context
01:32:51     INFO -   1  libxul.so!mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry** nsTArray_Impl<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*, nsTArrayInfallibleAllocator>::InsertElementSorted<mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry*>(mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::OrderingEntry* const&) [nsTArray.h:1b883c791174 : 1244 + 0x3]
01:32:51     INFO -       r4 = 0x00000007    r5 = 0x5c301c10    r6 = 0x6bdffdf4    r7 = 0x6bdffcdc
01:32:51     INFO -       r8 = 0x00000001    r9 = 0x6bdffe2f   r10 = 0x00000000    fp = 0x6b93a864
01:32:51     INFO -       sp = 0x6bdffca0    pc = 0x62a70f77
01:32:51     INFO -      Found by: call frame info
01:32:51     INFO -   2  libxul.so!mozilla::DeadlockDetector<mozilla::BlockingResourceBase>::CheckAcquisition(mozilla::BlockingResourceBase const*, mozilla::BlockingResourceBase const*) [DeadlockDetector.h:1b883c791174 : 277 + 0x9]
01:32:51     INFO -       r4 = 0x6b1e0f5c    r5 = 0x5c301c10    r6 = 0x6bdffdf4    r7 = 0x00000001
01:32:51     INFO -       r8 = 0x00000001    r9 = 0x6bdffe2f   r10 = 0x00000000    fp = 0x6b93a864
01:32:51     INFO -       sp = 0x6bdffcc8    pc = 0x62a710ef
01:32:51     INFO -      Found by: call frame info
01:32:51     INFO -   3  libxul.so!mozilla::BlockingResourceBase::CheckAcquire() [BlockingResourceBase.cpp:1b883c791174 : 296 + 0x5]
01:32:51     INFO -       r4 = 0x6bdffd58    r5 = 0x649f5948    r6 = 0x6bdffdf4    r7 = 0x00000001
01:32:51     INFO -       r8 = 0x00000001    r9 = 0x6bdffe2f   r10 = 0x00000000    fp = 0x6b93a864
01:32:51     INFO -       sp = 0x6bdffcf8    pc = 0x62a7117f
01:32:51     INFO -      Found by: call frame info
01:32:51     INFO -   4  libxul.so!mozilla::OffTheBooksMutex::Lock() [BlockingResourceBase.cpp:1b883c791174 : 397 + 0x3]
01:32:51     INFO -       r4 = 0x6b1e0fc0    r5 = 0x6b201c0c    r6 = 0x6bdffdf4    r7 = 0x00000001
01:32:51     INFO -       r8 = 0x00000001    r9 = 0x6bdffe2f   r10 = 0x00000000    fp = 0x6b93a864
01:32:51     INFO -       sp = 0x6bdffd70    pc = 0x62a712e1
01:32:51     INFO -      Found by: call frame info
01:32:51     INFO -   5  libxul.so!mozilla::BaseAutoLock<mozilla::Mutex>::BaseAutoLock(mozilla::Mutex&, mozilla::detail::GuardObjectNotifier const&) [Mutex.h:1b883c791174 : 164 + 0x5]
01:32:51     INFO -       r4 = 0x6bdffd90    r5 = 0x6b201c0c    r6 = 0x6bdffdf4    r7 = 0x00000001
01:32:51     INFO -       r8 = 0x00000001    r9 = 0x6bdffe2f   r10 = 0x00000000    fp = 0x6b93a864
01:32:51     INFO -       sp = 0x6bdffd78    pc = 0x62a19099
01:32:51     INFO -      Found by: call frame info
01:32:51     INFO -   6  libxul.so!nsHtml5StreamParser::IsTerminatedOrInterrupted() [nsHtml5StreamParser.h:1b883c791174 : 264 + 0x3]
Component: Layout → HTML: Parser
This is just OOM, right?
If the nsTArray at the top of the stack is infallible then I would expect a more explicit
OOM crash, i.e. mozalloc_abort et al, at the top of the stack.

Frame #2 is around here:
http://hg.mozilla.org/mozilla-central/annotate/3366c0fcf9c2/xpcom/glue/DeadlockDetector.h#l276

"Crash address: 0x7" seems like a null-pointer access?

FWIW, note that thread 33 is also inside DeadlockDetector, blocked waiting for the lock.

Next time this occurs we should look for assertions in the log.

OTOH, since it hasn't occurred in 3 months we could just write it off as a random
Panda-board HW failure because this hardware is not very robust it seems.
Inactive; closing (see bug 1180138).
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: