613314 - Firefox/4.0b8pre crash in [@ nsWindow::IPCWindowProcHandler(unsigned int&, unsigned int&, long&) ] mainly on Windows XP

Status: RESOLVED FIXED

(Core :: Widget: Win32, defect)

Description

[Marcia Knous [:marcia]]

Seen while reviewing crash stats - low volume crash which started showing up in crash stats using 2010111100 build. http://tinyurl.com/2w2ajxs links to the crashes so far which are Win XP only.

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsWindow::IPCWindowProcHandler 	
1 	xul.dll 	nsWindow::WindowProcInternal 	widget/src/windows/nsWindow.cpp:4353
2 	uxtheme.dll 	CThemeWnd::Release 	
3 	xul.dll 	nsIMM32Handler::ProcessMessage 	widget/src/windows/nsIMM32Handler.cpp:401
4 	xul.dll 	xul.dll@0x3574ad

Comment 1

[Scoobidiver (away)]

Crash volume is not so low as it is now #32 top crasher in 4.0b8pre for the last week.
Captlib.dll is present in 86% of theses crashes vs 1% for every crashes. It is a ddl from Babylone translation software.

Comment 2

[Scoobidiver (away)]

It is now #23 top crasher in 4.0b11 over the last week.
I don't see any longer correlations with Captlib.dll.
According to comments, it seems to be related to plugins.

Now the beginning of stack traces looks like:
Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsWindow::IPCWindowProcHandler 	
1 	xul.dll 	nsWindow::WindowProcInternal 	widget/src/windows/nsWindow.cpp:4569
2 	xul.dll 	nsWindow::WindowProc 	widget/src/windows/nsWindow.cpp:4536
3 	user32.dll 	InternalCallWinProc 	
4 	user32.dll 	UserCallWinProcCheckWow 	
5 	user32.dll 	DispatchClientMessage 	
6 	user32.dll 	__fnDWORD 	
7 	ntdll.dll 	KiUserCallbackDispatcher 	

More reports at:
https://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=nsWindow%3A%3AIPCWindowProcHandler%28unsigned%20int%26%2C%20unsigned%20int%26%2C%20long%26%29

Comment 3

[Sheila Mooney]

This is climbing up for Beta11. It's now at #14. We probably want to keep an eye on it and see what happens in Beta12.

Comment 4

[Johnny Stenback (:jst)]

Yes, we need to keep an eye on this, but not holding the release.

Comment 5

[chris hofmann]

also getting close to 400 crashes per day on betas.

         nsWindow::IPCWindowProcHandler.unsigned.int.,.unsigned.int.,.long..

date     total    breakdown by build
         crashes  count build, count build, ...
 
20110218 315  	291 4.0b112011020314, 
        		17 4.0b102011012116, 	4 4.0b82010121417, 
        		1 4.0b92011011019, 	1 4.0b62010091408, 
        		1 4.0b112011020214, 
20110219 310  	286 4.0b112011020314, 
        		13 4.0b102011012116, 	6 4.0b92011011019, 
        		3 4.0b82010121417, 	1 3.6.132010120307, 
        		1 3.6.122010102621, 
20110220 270  	241 4.0b112011020314, 
        		24 4.0b102011012116, 	2 4.0b92011011019, 
        		2 4.0b82010121417, 	1 3.6.132010120307, 
20110221 415  	381 4.0b112011020314, 
        		20 4.0b102011012116, 	6 4.0b82010121417, 
        		4 4.0b92011011019, 	4 3.6.132010120307,

Comment 6

[Sheila Mooney]

Nominating so we look at it during the triage meeting.

Comment 7

[Jim Mathies [:jimm]]

I see this in crash stats in betas up to beat 11, but I can't find a single crash with this signature in beta12pre post the 20110204030345 build. Looks like it may have been fixed.

https://crash-stats.mozilla.com/report/list?product=Firefox&version=Firefox%3A4.0b12pre&platform=windows&query_search=signature&query_type=contains&query=nsWindow%3A%3AIPCWindowProcHandler&date=02%2F22%2F2011%2012%3A31%3A56&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=nsWindow%3A%3AIPCWindowProcHandler%28unsigned%20int%26%2C%20unsigned%20int%26%2C%20long%26%29

Comment 8

[Benjamin Smedberg]

This crash was almost certainly fixed by disabling the SEH handling in bug 631002. We should probably be seeing new crashes within our IPC code to offset this. I'm going to mark this one FIXED, and we should be watching nightlies for new crashes/spikes which appeared at the time bug 631002 landed.