Closed Bug 759674 Opened 12 years ago Closed 12 years ago

crash in XPCWrappedNativeScope::SuspectAllWrappers @ JS_DHashTableEnumerate

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Version:
14 Branch
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox14 --- fixed
blocking-fennec1.0 --- .N+
fennec 15+ ---

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Keywords: crash, topcrash, Whiteboard: [native-crash])

Crash Data

About half of crashes with this crash signature happen with that stack making it #6 top crasher in 14.0b3.

Signature 	JS_DHashTableEnumerate More Reports Search
UUID	3070570e-a35e-4d1a-86fc-d901d2120530
Date Processed	2012-05-30 06:57:31
Uptime	4066
Install Age	1.1 hours since version was first installed.
Install Time	2012-05-30 05:49:07
Product	FennecAndroid
Version	14.0
Build ID	20120524133102
Release Channel	beta
OS	Linux
OS Version	0.0.0 Linux 2.6.35.7-CL982987 #1 PREEMPT Tue Feb 21 19:06:23 KST 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x8
App Notes 	
AdapterVendorID: latona, AdapterDeviceID: GT-I9003.
AdapterDescription: 'Model: 'GT-I9003', Product: 'GT-I9003', Manufacturer: 'samsung', Hardware: 'latona''.
samsung GT-I9003
samsung/GT-I9003/GT-I9003:2.3.6/GINGERBREAD/JPKPH:user/release-keys
Processor Notes 	
EMCheckCompatibility	True

Frame 	Module 	Signature 	Source
0 	libxul.so 	JS_DHashTableEnumerate 	js/src/jsdhash.cpp:738
1 	libxul.so 	XPCWrappedNativeScope::SuspectAllWrappers 	js/xpconnect/src/XPCMaps.h:173
2 	libxul.so 	XPCJSRuntime::AddXPConnectRoots 	js/xpconnect/src/XPCJSRuntime.cpp:557
3 	libxul.so 	nsXPConnect::BeginCycleCollection 	js/xpconnect/src/nsXPConnect.cpp:593
4 	libxul.so 	nsCycleCollector::BeginCollection 	xpcom/base/nsCycleCollector.cpp:3175
5 	libxul.so 	nsCycleCollectorRunner::Run 	xpcom/base/nsCycleCollector.cpp:3910
6 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:656
7 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
8 	libxul.so 	nsThread::ThreadFunc 	xpcom/threads/nsThread.cpp:289
9 	libnspr4.so 	_pt_root 	nsprpub/pr/src/pthreads/ptthread.c:187
10 	libc.so 	__thread_entry 	
11 	libc.so 	pthread_create

More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=JS_DHashTableEnumerate
qawanted to get the list of URLs and the list of phones and crash frequency for phones.

Also could really use STR.
Keywords: qawanted
URLs:
7 	about:blank
4 	https://safe.bankofamerica.com/login/sign-in/validateChallengeAnswer.go
3 	http://farmerama.bigpoint.com/?action=internalGame
3 	http://www.adobe.com/software/flash/about/
2 	http://vk.com/audio
2 	http://ts6.travian.net/dorf1.php
2 	http://www.gorillavid.in/cnb/9wdmitj69azf
2 	http://www.hotnewhiphop.com/rick-ross-bag-of-money-prod-by-beat-billionaire-song
2 	http://www.blackplanet.com/home/index.html
1 	http://www.animefreak.tv/watch/hack-legend-twilight-bracelet-english-dubbed-onli
1 	http://www.hotnewhiphop.com/50-cent-the-lost-tape-hosted-by-dj-drama-mixtape.543
1 	http://www.livesample.com/?relevantID=29D9A2D1-67CD-46D5-A5A6-820177D66F59&afID=
1 	http://www.hotnewhiphop.com/sb-scaff-beezy-count-it-up-song.649701.html
1 	http://uploaded.to/file/tuejexaq
1 	http://www.blogtv.com/people/lardo444
1 	http://www.filebox.com/jq30krc4xq00
1 	http://www.youtube.com/watch?v=uzudCn6U_TU
1 	http://badoo.com/search/
1 	http://www.coco.fr/chat/#
1 	http://www.tvnwarszawa.pl/informacje,news,euro-w-komunikacji-objazdy-nowe-linie-
1 	http://200.126.170.140:85/monitoreo/sistema/inicio.asp
1 	http://www.pof.com/inbox.aspx#in
1 	https://apps.facebook.com/cafeworld/index.php?ref=community
1 	http://www.ustream.tv/channel/the-almost#utm_campaign=unknown&utm_source=1106125
1 	http://www.bikebandit.com/
1 	http://www.metacafe.com/watch/cb-_HdWnnZTWXjJEPmafKbZgCoDNfoUrYpl/the_big_bang_t
1 	http://www.linkedin.com/groups/How-can-I-add-external-76373%2ES%2E118489945?qid=
1 	https://apps.facebook.com/thesimssocial/?
1 	http://www.rfm.fr/#/c-est-quoi-ce-titre/1338149400
1 	http://www.trialpay.com/campaign/?c=ecee747&cat=-1
1 	http://nicosound.anyap.info/sound/sm527446
1 	http://webkinznewz.ganzworld.com/
1 	http://www.megashare.com/4140844
1 	http://www.miniclip.com/games/boxo/en/
1 	https://www.onlineaccess.ca/NASApp/NetAccess/challengeQA.action
1 	http://7f4yj.333332.com/main.aspx
1 	http://seattletimes.nwsource.com/html/seahawks/2018281722_hawk25.html
1 	https://play.google.com/store/music/collection/series_overview_theme_2011_10_29
1 	http://us1.badoo.com/messages/
1 	http://www.rhymeswithsnitch.com/
1 	http://blog.tubemate.net/1
1 	http://store.handmark.com/ringers
1 	http://www.pof.com/inbox.aspx
1 	http://www.blackplanet.com/user_search/index.html?tracking=global_nav
1 	http://blog.rockcreek.com/archives/2012-scenic-city-trail-marathon-winner-johnny
1 	http://www.mixcloud.com/ABTrancy/pure-trance-sessions-episode-21/
1 	http://video.pbs.org/video/2234656643
1 	http://www.hotnewhiphop.com/miguel-adorn-song.686147.html
1 	http://www.slotomania.com/
1 	http://www.mediafire.com/?0brke666oo63xzf
1 	http://thegoldvideo.com/VSL-2/?a_aid=4fb65e6171873
1 	http://www.elgenero.com/
1 	http://www.adobe.com/shockwave/welcome/
1 	http://www.kboing.com.br/mamonas-assassinas/1-44386/
1 	http://www.peliculas-flv.com/us/pelicula/0000899/ver-the-amazing-spider-man-onli
1 	http://www.newgrounds.com/portal/view/595868
1 	http://www.firstrowsports.eu/watch/124723/1/watch-v.-williams-vs-ormaechea-(cour
1 	http://www.pbs.org/wgbh/masterpiece/watch/sherlock_belgravia.html
1 	http://www.comicrelief.com/
1 	https://play.google.com/store/search?q=pname:com.pandora.android
1 	http://www.kijiji.ca/
1 	http://gorillavid.in/lwxx2n4sy6t1
1 	https://apps.facebook.com/thesimssocial/
1 	http://www.livechat.fi/?e=1
1 	https://auth.alipay.com/login/index.htm?goto=https%3A%2F%2Flab.alipay.com%2Fuser
1 	https://settings.adobe.com/flashplayer/mobile/en/help/troubleshooting.html
1 	https://www.netbranch.app.fiserv.com/capedfcu/Default.aspx
1 	http://www.hotnewhiphop.com/t-i-love-this-life-song.763897.html
1 	http://atdhenet.tv/47475/watch-oklahoma-city-thunder-vs-san-antonio-spurs
1 	http://www.espncricinfo.com/
1 	http://www.facebook.com/about/timeline
1 	https://play.google.com/store
1 	http://www.amazon.co.uk/deals-offers-savings/b/ref=cs_top_nav_gb27?ie=UTF8&node=
1 	http://www.pandora.com/station/play/208413142135439174
1 	http://xqjfo.333332.com/main.aspx
1 	https://play.google.com/store/search?q=freight+software&c=apps
1 	https://safe.bankofamerica.com/myaccounts/signin/signIn.go?isSecureMobile=false&
1 	https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&errmsg=8&pUserId=d&co_partnerId=
1 	https://play.google.com/store/search?q=pname:imoblife.memorybooster.lite
Problem is that JS_DHashTableEnumerate needs to get separated more.

See bug 759534
Adding blake, too. JP says conversation with dmandelin suggests that these are coming from xpcom, can Bobby or Blake give us any thoughts on what's causing these crashes, and how to fix them?
mccr8 has been looking at these over in bug 759680.
Some of these crashes are from XPCWrappedNativeScope::TraceJS, not SuspectAllWrappers, but they both involve the class Native2WrappedNativeMap.  These are all crashes at address 0x8.

Based on a random sample of ten crashes, these seem to be crashes on this line (in both places the crashes come from):
  capacity = JS_DHASH_TABLE_SIZE(table);

This suggests that the table is null.  The field TABLE_SIZE looks at is probably going to be at an offset of 0x8, as it is after 2 pointer fields, so that's consistent.  mTable is initialized in the constructor, so I'd guess that this is another instance where JS_NewDHashTable is failing due to OOM, and that isn't being handled in the class that wraps it.

In other words, this is the same thing as bug 759680, except with Native2WrappedNativeMap, instead of ClassInfo2WrappedNativeProtoMap.
Depends on: 761249
tracking-fennec: --- → 15+
blocking-fennec1.0: ? → .N+
Crash Signature: [@ JS_DHashTableEnumerate] → [@ JS_DHashTableEnumerate] [@ JS_DHashTableEnumerate | XPCWrappedNativeScope::SuspectAllWrappers]
Devices listed : 
Samsung GT-I9100 	53
Motorola DROID RAZR 	39
Motorola DROID BIONIC 	21
Sony Ericsson LT26i 	21
Samsung SPH-D710 	16
Samsung SCH-I500 	15
Samsung GT-N7000 	14
Samsung GT-I9100G 	14
HTC PC36100 	13
Samsung SGH-I717 	13
HTC PG86100 	12
HTC Desire HD 	12
Samsung SGH-T989 	12
Samsung GT-I9000 	10
Samsung GT-I8150 	9
HTC EVO 3D X515m 	9
Samsung GT-I9001 	8
Samsung GT-P1000 	8
HTC ADR6425LVW 	6
Motorola MB865 	6
HTC ADR6400L 	6
Motorola XT910 	6
Samsung SGH-I777 	6
HTC Desire HD A9191 	6
ZTE N860 	5
HTC ISW12HT 	5
HTC Sensation 4G 	5
Samsung SGH-I727 	5
Motorola DROIDX 	4
Samsung SCH-I510 	4
HTC EVO 3D X515a 	4
HTC ADR6350 	4
HTC Glacier 	4
Samsung SC-05D 	4
HTC Sensation Z710e 	4
Motorola MB526 	3
Samsung GT-I9100T 	3
Samsung SGH-T679 	3
Samsung YP-G70 	3
HTC Sensation XE with Beats Audio Z715e 	3
Samsung GT-I9003 	3
LGE LG-P970 	3
Samsung SC-02C 	3
Sony Ericsson SO-02D 	3
HTC Incredible S 	3
HTC Desire S 	2
Samsung SGH-I997 	2
Samsung SGH-I847 	2
Samsung SGH-I727R 	2
Sony Ericsson LT15i 	2
Sony Ericsson SK17a 	2
Sony Ericsson R800i 	2
Sony Ericsson ST25i 	2
Sony Ericsson WT19i 	2
Xiaomi MI-ONE Plus 	2
Sony Ericsson MT15a 	2
Sony Ericsson MT11i 	2
Samsung SCH-I405 	2
Sony Ericsson LT18i 	2
Sony Ericsson LT22i 	2
Dell Inc 001DL 	2
Samsung SPH-D700 	2
HTC Sensation XL with Beats Audio X315e 	2
HTC Explorer A310e 	2
Amazon Kindle Fire 	2
PANTECH IM-A780L 	2
LGE LG-P925g 	2
HTC Desire 	2
Samsung GT-I9100M 	2
HTC HD2 	2
Samsung GT-S7500 	2
Samsung Nexus S 	2
HTC Vision 	2
Sony Ericsson ST18i 	1
Samsung SC-02B 	1
Sony Ericsson ST15i 	1
Sony Ericsson SO-03D 	1
Sony Ericsson SK17i 	1
Sony Ericsson SO-01C 	1
Motorola DROID2 	1
HTC T-Mobile G2 	1
Telechips PAT712W 	1
LGE VS910 4G 	1
HTC PG06100 	1
Unknown Yan 8.1 Android 4.0 	1
Unknown N50GT_A 	1
Unknown A15(E6C2) 	1
Unknown AN10G2 	1
Motorola DROID3 	1
Motorola MB525 	1
Samsung SHW-M250S 	1
Samsung SPH-D600 	1
Samsung SHW-M190S 	1
LENOVO A1_07 	1
Samsung SGH-T839 	1
Samsung SGH-T959V 	1
HTC ADR6300 	1
Samsung GT-I9000T 	1
LGE LG-MS910 	1
HUAWEI M886 	1
LGE LG-MS695 	1
Samsung SGH-I717M 	1
LGE LG-LS855 	1
HTC ADR6325 	1
LGE LG-P925
Is there any way to get the memory in these devices or how much memory is available?  I saw somebody talking about another OOM crash that they suspected was actually some kind of memory corruption that was just causing the allocator to fail.  Given that these allocations are fairly small, I wonder if something may be going on here too.
QA still hasnt found STRs for this yet.
There are no crashes in 14.0b7, probably fixed by bug 756253.
So this bug can be marked WORKSFORME, right, Scoobidiver?
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
I'm having the same problem on two links. I'm suspecting is that access memory devices.

http://www.ouvirmusicasgratis.tk
http://www.sonora.fm
David Rav you already solved your problem?
I am experiencing the same problem on two links:
www.musicasparaouvironline.com
www.musicaparaouvironline.com
(In reply to romario-.-costa from comment #13)
> David Rav you already solved your problem?
> I am experiencing the same problem on two links:
> http://www.musicasparaouvironline.com
> http://www.musicaparaouvironline.com
@romario: Did you ever get your problem fixed? I'm also receiving the error, although it's with the following:
http://www.animerelief.com/
http://www.hentairelief.com/

Yes they're 2 similar sites using the same CMS but I was wondering if there was something there causing it? Can anyone else confirm for me please? Thank you! :)
Flags: needinfo?(ntinh797)
Flags: needinfo?(intelezsolution1)
Flags: needinfo?(chris)
Restrict Comments: true

Not sure why this bug is pulling in spam, but let's put a stop to that.

You need to log in before you can comment on or make changes to this bug.