696358 - [meta] Crash in mozalloc_abort(char const* const) | _RTC_Terminate

Status: RESOLVED INCOMPLETE

(Core :: General, defect)

Description

[Scoobidiver (away)]

It's a new crash signature that first appeared in 9.0a1/20110830.
It's #21 top crasher in 9.0a2.

The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=33031c875984&tochange=e6591ea9b27b

Stack traces are various:
Frame 	Module 	Signature [Expand] 	Source
0 	mozalloc.dll 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:77
1 	msvcr80.dll 	_RTC_Terminate 	
2 	nspr4.dll 	nspr4.dll@0x29cf 	
3 	xul.dll 	mozilla::plugins::PluginModuleChild::ShouldContinueFromReplyTimeout 	dom/plugins/ipc/PluginModuleChild.cpp:531
4 	xul.dll 	mozilla::ipc::SyncChannel::ShouldContinueFromTimeout 	ipc/glue/SyncChannel.cpp:264
5 	xul.dll 	mozilla::ipc::RPCChannel::Call 	ipc/glue/RPCChannel.cpp:210
6 	xul.dll 	mozilla::plugins::PPluginScriptableObjectChild::CallNPN_Evaluate 	obj-firefox/ipc/ipdl/PPluginScriptableObjectChild.cpp:122
7 	xul.dll 	mozilla::plugins::PluginScriptableObjectChild::Evaluate 	dom/plugins/ipc/PluginScriptableObjectChild.cpp:1098
8 	xul.dll 	mozilla::plugins::child::_evaluate 	dom/plugins/ipc/PluginModuleChild.cpp:1422
...

0 	mozalloc.dll 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:77
1 	msvcr80.dll 	_RTC_Terminate 	
2 	msvcr80.dll 	setvbuf 	f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\setvbuf.c:151
3 	xul.dll 	mozilla::ipc::RPCChannel::DebugAbort 	ipc/glue/RPCChannel.cpp:683
4 	xul.dll 	mozilla::ipc::RPCChannel::Call 	ipc/glue/RPCChannel.cpp:251
5 	xul.dll 	mozilla::plugins::PPluginInstanceParent::CallNPP_HandleEvent 	obj-firefox/ipc/ipdl/PPluginInstanceParent.cpp:496
6 	xul.dll 	mozilla::plugins::PluginInstanceParent::NPP_HandleEvent 	dom/plugins/ipc/PluginInstanceParent.cpp:1310
7 	xul.dll 	mozilla::plugins::PluginModuleParent::NPP_HandleEvent 	dom/plugins/ipc/PluginModuleParent.cpp:552
8 	xul.dll 	nsNPAPIPluginInstance::HandleEvent 	dom/plugins/base/nsNPAPIPluginInstance.cpp:587
9 	xul.dll 	nsPluginInstanceOwner::ProcessEvent 	dom/plugins/base/nsPluginInstanceOwner.cpp:2234
10 	xul.dll 	nsPluginInstanceOwner::DispatchMouseToPlugin 	dom/plugins/base/nsPluginInstanceOwner.cpp:1879
11 	xul.dll 	nsPluginInstanceOwner::HandleEvent 	dom/plugins/base/nsPluginInstanceOwner.cpp:1924
...

More reports at:
https://crash-stats.mozilla.com/report/list?range_value=30&range_unit=days&signature=mozalloc_abort%28char%20const*%20const%29%20|%20_RTC_Terminate

Comment 1

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

A bunch of TI and also backout of bug 90268 are in the regression range.  Neither looks particularly suspicious.

The two crashes in comment 0 are different things.  The first is an abort from a hang.  The second is a failing assertion:

            RPC_ASSERT(mPending.empty(),
                       "other side should have been blocked");

There's a bug open for that, but I don't recall the number off-hand.

Comment 2

[Scoobidiver (away)]

(In reply to Chris Jones [:cjones] [:warhammer] from comment #1)
> There's a bug open for that, but I don't recall the number off-hand.
It's bug 637596.
The first stack trace in comment 0 is bug 681385.

In fact, it's a meta bug as there are other various stack traces:
* Related to the SharePoint Workspace plugin:
Frame 	Module 	Signature [Expand] 	Source
0 	mozalloc.dll 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:77
1 	msvcr80.dll 	_RTC_Terminate 	
2 	GROOVEEX.DLL 	GROOVEEX.DLL@0x2a2039 	
3 	xul.dll 	mozilla::plugins::PluginModuleParent::StreamCast 	dom/plugins/ipc/PluginModuleParent.cpp:685
4 	xul.dll 	mozilla::plugins::PluginModuleParent::NPP_WriteReady 	dom/plugins/ipc/PluginModuleParent.cpp:504
5 	xul.dll 	nsNPAPIPluginStreamListener::OnDataAvailable 	dom/plugins/base/nsNPAPIPluginStreamListener.cpp:578
6 	xul.dll 	nsPluginStreamListenerPeer::OnDataAvailable 	dom/plugins/base/nsPluginStreamListenerPeer.cpp:986
7 	xul.dll 	nsForceXMLListener::OnDataAvailable 	content/base/src/nsXMLHttpRequest.cpp:284
8 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102
9 	xul.dll 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1629
...

* Related to Geolocation:
Frame 	Module 	Signature [Expand] 	Source
0 	mozalloc.dll 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:77
1 	msvcr80.dll 	_RTC_Terminate 	
2 	WindowsCodecs.dll 	owniConvert_8u16u_A6 	
3 	xul.dll 	AbortIfOffMainThreadIfCheckFast 	xpcom/base/nsCycleCollector.cpp:1273
4 	xul.dll 	nsCycleCollectingAutoRefCnt::decr 	obj-firefox/dist/include/nsISupportsImpl.h:196
5 	xul.dll 	nsBaseContentList::Release 	content/base/src/nsContentList.cpp:103
6 	xul.dll 	nsRefPtr<nsGeolocation>::~nsRefPtr<nsGeolocation> 	obj-firefox/dist/include/nsAutoPtr.h:907
7 	xul.dll 	nsDOMStorage2::~nsDOMStorage2 	
8 	xul.dll 	nsDOMStorage2::`scalar deleting destructor' 	
9 	xul.dll 	nsDOMStorage2::Release 	dom/src/storage/nsDOMStorage.cpp:1752
10 	xul.dll 	nsCOMPtr_base::~nsCOMPtr_base 	obj-firefox/dist/include/nsAutoPtr.h:907
11 	xul.dll 	nsBaseHashtableET<nsCStringHashKey,nsCOMPtr<nsIDOMStorage> >::~nsBaseHashtableET<nsCStringHashKey,nsCOMPtr<nsIDOMStorage> > 	obj-firefox/dist/include/nsBaseHashtable.h:330
12 	xul.dll 	nsBaseHashtableET<nsCStringHashKey,nsCOMPtr<nsIWeakReference> >::`scalar deleting destructor' 	
13 	xul.dll 	nsTHashtable<nsBaseHashtableET<nsCStringHashKey,nsCOMPtr<nsIUrlClassifierHashCompleter> > >::s_ClearEntry 	obj-firefox/dist/include/nsTHashtable.h:397
14 	xul.dll 	PL_DHashTableFinish 	obj-firefox/xpcom/build/pldhash.cpp:410
15 	xul.dll 	nsDocShell::~nsDocShell 	docshell/base/nsDocShell.cpp:814
...

* Related to the spell checker:
Frame 	Module 	Signature [Expand] 	Source
0 	mozalloc.dll 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:77
1 	msvcr80.dll 	_RTC_Terminate 	
2 	ntmarta.dll 	ConvertStringToSid 	
3 	xul.dll 	AbortIfOffMainThreadIfCheckFast 	xpcom/base/nsCycleCollector.cpp:1273
4 	xul.dll 	nsCycleCollectingAutoRefCnt::incr 	obj-firefox/dist/include/nsISupportsImpl.h:172
5 	nspr4.dll 	nspr4.dll@0x29cf 	
6 	nspr4.dll 	nspr4.dll@0x2b0f 	
7 	xul.dll 	mozHunspell::AddRef 	extensions/spellcheck/src/mozPersonalDictionary.cpp:71
8 	xul.dll 	nsThread::Dispatch 	xpcom/threads/nsThread.cpp:435
9 	xul.dll 	NS_DispatchToMainThread_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:169
10 	xul.dll 	mozilla::crashreporter::LSPAnnotationGatherer::Run 	widget/src/windows/LSPAnnotator.cpp:129
11 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
12 	xul.dll 	nsThreadStartupEvent::Run 	xpcom/threads/nsThread.cpp:201
...

* Related to extensions:
Frame 	Module 	Signature [Expand] 	Source
0 	mozalloc.dll 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:77
1 	msvcr80.dll 	_RTC_Terminate 	
2 	shell32.dll 	SdbInitDatabase 	
3 	xul.dll 	Initialize 	
4 	xul.dll 	nsComponentManagerImpl::KnownModule::Load 	xpcom/components/nsComponentManager.cpp:960
5 	xul.dll 	nsFactoryEntry::GetFactory 	xpcom/components/nsComponentManager.cpp:1973
6 	xul.dll 	nsComponentManagerImpl::CreateInstanceByContractID 	xpcom/components/nsComponentManager.cpp:1295
7 	xul.dll 	nsComponentManagerImpl::GetServiceByContractID 	xpcom/components/nsComponentManager.cpp:1701
8 	xul.dll 	nsGetServiceByContractIDWithError::operator 	obj-firefox/xpcom/build/nsComponentManagerUtils.cpp:288
9 	xul.dll 	nsAppStartupNotifier::Observe 	embedding/components/appstartup/src/nsAppStartupNotifier.cpp:100
...

Comment 3

[Scoobidiver (away)]

_RTC_Terminate is now in the skiplist. Let's close it as incomplete.