Closed Bug 826824 Opened 12 years ago Closed 8 years ago

Android crash on MarkArraySlots when creating an Array

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: terrence, Unassigned)

References

Details

I hit the following crash on tinderbox today, which seems to indicate a real, un-filed bug. Somewhere in these 96 stack frames, someone is using an AutoGCRooter to root an Array that contains an invalid (uninitialized?) Value. Tracking this down should be easy, but lots of work, so I'm filing it to do later.

Operating system: Android
                  0.0.0 Linux 2.6.32.9-00002-gd8084dc-dirty #1 SMP PREEMPT Wed Feb 2 11:32:06 PST 2011 armv7l nvidia/harmony/harmony/harmony:2.2/FRF91/20110202.102810:eng/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x4

Thread 4 (crashed)
 0  libxul.so!js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c
     r4 = 0x50225114    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x54407418
     r8 = 0x00000000    r9 = 0xffffff87   r10 = 0x00000121    fp = 0x000000ba
     sp = 0x4e103eb8    lr = 0x5402a138    pc = 0x5402fab4
    Found by: given as instruction pointer in context
 1  libxul.so!JS::AutoGCRooter::traceAll(JSTracer*) [RootMarking.cpp : 648 + 0x12]
     r4 = 0x4e104124    r5 = 0x50225114    r6 = 0x50225000    r7 = 0x5a8e26e8
     r8 = 0x54595f58    r9 = 0x502251c0   r10 = 0x5a8e26e8    fp = 0x000000ba
     sp = 0x4e103ee0    pc = 0x5402a138
    Found by: call frame info
 2  libxul.so!js::gc::MarkRuntime(JSTracer*, bool) [RootMarking.cpp : 708 + 0x6]
     r4 = 0x50225114    r5 = 0x5a8e26e8    r6 = 0x50225000    r7 = 0x5a8e26e8
     r8 = 0x54595f58    r9 = 0x502251c0   r10 = 0x5a8e26e8    fp = 0x000000ba
     sp = 0x4e103f20    pc = 0x5402a290
    Found by: call frame info
 3  libxul.so!IncrementalCollectSlice [jsgc.cpp : 2634 + 0xa]
     r4 = 0x50225000    r5 = 0x548ed8cc    r6 = 0x00000000    r7 = 0x50225000
     r8 = 0x5a8e26e8    r9 = 0x502251c0   r10 = 0x5a8e26e8    fp = 0x000000ba
     sp = 0x4e103f70    pc = 0x53ebb684
    Found by: call frame info
 4  libxul.so!GCCycle [jsgc.cpp : 4160 + 0x1e]
     r4 = 0x50225000    r5 = 0x543fedb0    r6 = 0x00000000    r7 = 0x50225a50
     r8 = 0x50225000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0x4e104000    pc = 0x53ebd174
    Found by: call frame info
 5  libxul.so!Collect [jsgc.cpp : 4278 + 0x16]
     r4 = 0x50225000    r5 = 0x502251c0    r6 = 0x00000004    r7 = 0x00000000
     r8 = 0x00000002    r9 = 0x00000000   r10 = 0x00000000    fp = 0x547ea710
     sp = 0x4e104038    pc = 0x53ebd570
    Found by: call frame info
 6  libxul.so!js::gc::ArenaLists::refillFreeList(JSContext*, js::gc::AllocKind) [jsgc.cpp : 4301 + 0x16]
     r4 = 0x00000003    r5 = 0x52318000    r6 = 0x54595f58    r7 = 0x52318024
     r8 = 0x50225000    r9 = 0x57b03000   r10 = 0x50b651a0    fp = 0x547ea710
     sp = 0x4e104068    pc = 0x53ebdaa0
    Found by: call frame info
 7  libxul.so!js::NewDenseCopiedArray(JSContext*, unsigned int, JS::Value const*, JSObject*) [jsgcinlines.h : 527 + 0xe]
     r4 = 0x00000000    r5 = 0x547ea710    r6 = 0x50239b38    r7 = 0x00000000
     r8 = 0x00000121    r9 = 0x57b03000   r10 = 0x50b651a0    fp = 0x50b71e80
     sp = 0x4e1040c0    pc = 0x53e76b30
    Found by: call frame info
 8  libxul.so!JS_NewArrayObject(JSContext*, int, JS::Value*) [jsapi.cpp : 4741 + 0x2]
     r4 = 0x00000000    r5 = 0x00000121    r6 = 0x547ea710    r7 = 0x00000121
     r8 = 0x00000007    r9 = 0x547ea710   r10 = 0x4e1041f0    fp = 0x00000121
     sp = 0x4e104120    pc = 0x53e67f34
    Found by: call frame info
 9  libxul.so!XPCConvert::NativeArray2JS(XPCLazyCallContext&, JS::Value*, void const**, nsXPTType const&, nsID const*, unsigned int, tag_nsresult*) [XPCConvert.cpp : 1415 + 0xe]
     r4 = 0x4e104368    r5 = 0x4e104204    r6 = 0x4e104438    r7 = 0x00000121
     r8 = 0x00000007    r9 = 0x547ea710   r10 = 0x4e1041f0    fp = 0x00000121
     sp = 0x4e104148    pc = 0x536b189c
    Found by: call frame info
10  libxul.so!XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) [XPCWrappedNative.cpp : 2607 + 0x16]
     r4 = 0x00000001    r5 = 0x00000001    r6 = 0x00000000    r7 = 0x00000121
     r8 = 0x4e104368    r9 = 0x00000094   r10 = 0x00000001    fp = 0x00000002
     sp = 0x4e1041c8    pc = 0x536cce30
    Found by: call frame info
11  libxul.so!XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) [XPCWrappedNativeJSOps.cpp : 1488 + 0xa]
     r4 = 0x547ea710    r5 = 0x5a669520    r6 = 0x00000001    r7 = 0x504002f0
     r8 = 0x00000001    r9 = 0x00000000   r10 = 0x5a669520    fp = 0x4e104998
     sp = 0x4e104410    pc = 0x536d1b88
    Found by: call frame info
12  libxul.so!js::InvokeKernel(JSContext*, JS::CallArgs, js::MaybeConstruct) [jscntxtinlines.h : 373 + 0xa]
     r4 = 0x50400300    r5 = 0x547ea710    r6 = 0x00000000    r7 = 0x4e1044c8
     r8 = 0x545ebd48    r9 = 0x00000000   r10 = 0x5a669520    fp = 0x4e104998
     sp = 0x4e1044b8    pc = 0x53ee3fc8
    Found by: call frame info
13  libxul.so!js::Interpret(JSContext*, js::StackFrame*, js::InterpMode) [jsinterp.cpp : 2368 + 0x6]
     r4 = 0x00000001    r5 = 0x54595f58    r6 = 0x00000000    r7 = 0xffffff87
     r8 = 0x00000001    r9 = 0x00038102   r10 = 0xffffffe8    fp = 0x4e104998
     sp = 0x4e104548    pc = 0x53ed9218
    Found by: call frame info
14  libxul.so!js::RunScript(JSContext*, JS::Handle<JSScript*>, js::StackFrame*) [jsinterp.cpp : 348 + 0xa]
     r4 = 0x547ea710    r5 = 0x50400040    r6 = 0x00000000    r7 = 0x4e104a0c
     r8 = 0x4e104a44    r9 = 0x00000001   r10 = 0x00000000    fp = 0x54624278
     sp = 0x4e1049c0    pc = 0x53ee3e28
    Found by: call frame info
15  libxul.so!js::InvokeKernel(JSContext*, JS::CallArgs, js::MaybeConstruct) [jsinterp.cpp : 406 + 0xe]
     r4 = 0x00000001    r5 = 0x547ea710    r6 = 0x00000000    r7 = 0x4e104a00
     r8 = 0x4e104a44    r9 = 0x00000001   r10 = 0x00000000    fp = 0x54624278
     sp = 0x4e1049f0    pc = 0x53ee3f84
    Found by: call frame info
16  libxul.so!js::Invoke [jsinterp.h : 112 + 0x2]
     r4 = 0x00000001    r5 = 0x50400038    r6 = 0x547ea710    r7 = 0x50400028
     r8 = 0x4e104a98    r9 = 0x50e15000   r10 = 0x50400018    fp = 0x54624278
     sp = 0x4e104a80    pc = 0x53ee4634
    Found by: call frame info
17  libxul.so!js::BaseProxyHandler::call(JSContext*, JSObject*, unsigned int, JS::Value*) [jsproxy.cpp : 266 + 0x12]
     r4 = 0x50400010    r5 = 0x55e5e010    r6 = 0x547ea710    r7 = 0x00000001
     r8 = 0x50400010    r9 = 0x50e15000   r10 = 0x55e5e010    fp = 0x54624278
     sp = 0x4e104ad0    pc = 0x53f234d4
    Found by: call frame info
18  libxul.so!js::Wrapper::call(JSContext*, JSObject*, unsigned int, JS::Value*) [jswrapper.cpp : 298 + 0x16]
     r4 = 0x54624278    r5 = 0x55e5e010    r6 = 0x547ea710    r7 = 0x00000001
     r8 = 0x50400010    r9 = 0x50e15000   r10 = 0x55e5e010    fp = 0x54624278
     sp = 0x4e104b08    pc = 0x53f8995c
    Found by: call frame info
19  libxul.so!js::CrossCompartmentWrapper::call(JSContext*, JSObject*, unsigned int, JS::Value*) [jswrapper.cpp : 631 + 0x16]
     r4 = 0x547ea710    r5 = 0x50400028    r6 = 0x00000001    r7 = 0x00000001
     r8 = 0x50400010    r9 = 0x50e15000   r10 = 0x55e5e010    fp = 0x54624278
     sp = 0x4e104b30    pc = 0x53f8aea0
    Found by: call frame info
20  libxul.so!proxy_Call [jsproxy.cpp : 2438 + 0x16]
     r4 = 0x54624278    r5 = 0x547ea710    r6 = 0x00000000    r7 = 0x4e104b88
     r8 = 0x545ebd48    r9 = 0x4e104e18   r10 = 0x55e5e010    fp = 0x00000001
     sp = 0x4e104b60    pc = 0x53f24144
    Found by: call frame info
21  libxul.so!js::InvokeKernel(JSContext*, JS::CallArgs, js::MaybeConstruct) [jscntxtinlines.h : 373 + 0xa]
     r4 = 0x50400020    r5 = 0x547ea710    r6 = 0x00000000    r7 = 0x4e104b88
     r8 = 0x545ebd48    r9 = 0x4e104e18   r10 = 0x55e5e010    fp = 0x00000001
     sp = 0x4e104b78    pc = 0x53ee3fc8
    Found by: call frame info
22  libxul.so!js::Invoke [jsinterp.h : 112 + 0x2]
     r4 = 0x00000001    r5 = 0x50400020    r6 = 0x547ea710    r7 = 0x4e104e20
     r8 = 0x4e104c20    r9 = 0x4e104e18   r10 = 0x4e104c68    fp = 0x00000001
     sp = 0x4e104c08    pc = 0x53ee4634
    Found by: call frame info
23  libxul.so!JS_CallFunctionValue(JSContext*, JSObject*, JS::Value, unsigned int, JS::Value*, JS::Value*) [jsapi.cpp : 5804 + 0x22]
     r4 = 0x547ea710    r5 = 0x80004005    r6 = 0x00000001    r7 = 0x4e5e0050
     r8 = 0x547ea710    r9 = 0x4e104e18   r10 = 0x00102008    fp = 0x00000001
     sp = 0x4e104c58    pc = 0x53e645e4
    Found by: call frame info
24  libxul.so!nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS*, unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) [XPCWrappedJSClass.cpp : 1432 + 0x32]
     r4 = 0x54944d00    r5 = 0x80004005    r6 = 0x00000001    r7 = 0x4e5e0050
     r8 = 0x547ea710    r9 = 0x4e104e18   r10 = 0x00102008    fp = 0x00000001
     sp = 0x4e104c80    pc = 0x536c74c8
    Found by: call frame info
25  libxul.so!nsXPCWrappedJS::CallMethod(unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) [XPCWrappedJS.cpp : 580 + 0x1a]
     r4 = 0x5608dd40    r5 = 0x4e5e0050    r6 = 0x00000003    r7 = 0x4e104f48
     r8 = 0x4e104fec    r9 = 0x549c1c08   r10 = 0x00000001    fp = 0x4e105108
     sp = 0x4e104f10    pc = 0x536c2a4c
    Found by: call frame info
26  libxul.so!PrepareAndDispatch [xptcstubs_arm.cpp : 105 + 0x1e]
     r4 = 0x4e104f48    r5 = 0x56073670    r6 = 0x00000003    r7 = 0x4e104f48
     r8 = 0x4e104fec    r9 = 0x549c1c08   r10 = 0x00000001    fp = 0x4e105108
     sp = 0x4e104f40    pc = 0x53b0dc98
    Found by: call frame info
27  libxul.so + 0xe923ce
     r4 = 0x56073670    r5 = 0x58884310    r6 = 0x00000000    r7 = 0x4e105118
     r8 = 0x524616f0    r9 = 0x549c1c08   r10 = 0x56566f60    fp = 0x4e105108
     sp = 0x4e104fe8    pc = 0x53b0d3d0
    Found by: call frame info
28  libxul.so!nsEventListenerManager::HandleEventSubType(nsListenerStruct*, nsIDOMEventListener*, nsIDOMEvent*, nsIDOMEventTarget*, nsCxPusher*) [nsEventListenerManager.cpp : 922 + 0xa]
     r4 = 0x56073670    r5 = 0x58884310    r6 = 0x00000000    r7 = 0x4e105118
     r8 = 0x524616f0    r9 = 0x549c1c08   r10 = 0x56566f60    fp = 0x4e105108
     sp = 0x4e104ff8    pc = 0x532f0094
    Found by: call frame info
29  libxul.so!nsEventListenerManager::HandleEventInternal(nsPresContext*, nsEvent*, nsIDOMEvent**, nsIDOMEventTarget*, nsEventStatus*, nsCxPusher*) [nsEventListenerManager.cpp : 989 + 0x16]
     r4 = 0x58d7c800    r5 = 0x549c1d08    r6 = 0x00000010    r7 = 0x4e105118
     r8 = 0x524616f0    r9 = 0x549c1c08   r10 = 0x56566f60    fp = 0x4e105108
     sp = 0x4e105008    pc = 0x532f029c
    Found by: call frame info
30  libxul.so!nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor&, bool, nsCxPusher*) [nsEventListenerManager.h : 279 + 0xe]
     r4 = 0x56566f60    r5 = 0x4e105110    r6 = 0x00000004    r7 = 0x4e105108
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000ad6    fp = 0x5027f080
     sp = 0x4e105068    pc = 0x5330626c
    Found by: call frame info
31  libxul.so!nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor&, nsDispatchingCallback*, bool, nsCxPusher*) [nsEventDispatcher.cpp : 286 + 0xe]
     r4 = 0x4e105110    r5 = 0x5027f160    r6 = 0x4e105108    r7 = 0x545fe95c
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000ad6    fp = 0x5027f080
     sp = 0x4e105090    pc = 0x5330650c
    Found by: call frame info
32  libxul.so!nsEventDispatcher::Dispatch(nsISupports*, nsPresContext*, nsEvent*, nsIDOMEvent*, nsEventStatus*, nsDispatchingCallback*, nsCOMArray<nsIDOMEventTarget>*) [nsEventDispatcher.cpp : 681 + 0x16]
     r4 = 0x58d7c800    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x5027f100
     r8 = 0x00000000    r9 = 0x4e105108   r10 = 0x5027f080    fp = 0x4e105100
     sp = 0x4e1050c8    pc = 0x53307094
    Found by: call frame info
33  libxul.so!nsEventDispatcher::DispatchDOMEvent(nsISupports*, nsEvent*, nsIDOMEvent*, nsPresContext*, nsEventStatus*) [nsEventDispatcher.cpp : 742 + 0x1a]
     r4 = 0x4e655fa8    r5 = 0x58884310    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x58d7c800    r9 = 0x4e655fa8   r10 = 0x00000000    fp = 0x54bf5c30
     sp = 0x4e105178    pc = 0x533073a8
    Found by: call frame info
34  libxul.so!nsDocument::DispatchPageTransition(nsIDOMEventTarget*, nsAString_internal const&, bool) [nsDocument.cpp : 7402 + 0x16]
     r4 = 0x4e1051c0    r5 = 0x00000001    r6 = 0x553c5000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x4e655fa8   r10 = 0x00000000    fp = 0x54bf5c30
     sp = 0x4e1051b0    pc = 0x532561fc
    Found by: call frame info
35  libxul.so!nsDocument::OnPageShow(bool, nsIDOMEventTarget*) [nsDocument.cpp : 7461 + 0xe]
     r4 = 0x4e105204    r5 = 0x553c5000    r6 = 0x00000001    r7 = 0x4e1051f7
     r8 = 0x54b29984    r9 = 0x54bf5c30   r10 = 0x00000000    fp = 0x54bf5c30
     sp = 0x4e1051f0    pc = 0x53258624
    Found by: call frame info
36  libxul.so!nsDocumentViewer::LoadComplete(tag_nsresult) [nsDocumentViewer.cpp : 1060 + 0xe]
     r4 = 0x4e53a710    r5 = 0x580f8e20    r6 = 0x4e655f40    r7 = 0x00000001
     r8 = 0x54b29984    r9 = 0x54bf5c30   r10 = 0x00000000    fp = 0x54bf5c30
     sp = 0x4e105238    pc = 0x530a9690
    Found by: call frame info
37  libxul.so!nsDocShell::EndPageLoad(nsIWebProgress*, nsIChannel*, tag_nsresult) [nsDocShell.cpp : 6504 + 0xe]
     r4 = 0x54b29800    r5 = 0x00000000    r6 = 0x54bf5c30    r7 = 0x00000001
     r8 = 0x54b29984    r9 = 0x54bf5c30   r10 = 0x00000000    fp = 0x54bf5c30
     sp = 0x4e105298    pc = 0x53728334
    Found by: call frame info
38  libxul.so!nsDocShell::OnStateChange(nsIWebProgress*, nsIRequest*, unsigned int, tag_nsresult) [nsDocShell.cpp : 6332 + 0x1a]
     r4 = 0x54b29800    r5 = 0x4e1054f0    r6 = 0x4e1054f4    r7 = 0x00000000
     r8 = 0x56548ad0    r9 = 0x54bf5c30   r10 = 0x54b29814    fp = 0x54bf5c30
     sp = 0x4e1054a0    pc = 0x5372d608
    Found by: call frame info
39  libxul.so!nsDocLoader::DoFireOnStateChange(nsIWebProgress*, nsIRequest*, int&, tag_nsresult) [nsDocLoader.cpp : 1305 + 0x1e]
     r4 = 0x4e1055c0    r5 = 0x00000000    r6 = 0x54b29834    r7 = 0x4e105580
     r8 = 0x56548ad0    r9 = 0x54bf5c30   r10 = 0x54b29814    fp = 0x00000002
     sp = 0x4e105570    pc = 0x53734470
    Found by: call frame info
40  libxul.so!nsDocLoader::doStopDocumentLoad(nsIRequest*, tag_nsresult) [nsDocLoader.cpp : 885 + 0x16]
     r4 = 0x00000000    r5 = 0x54bf5c30    r6 = 0x00000000    r7 = 0x4e1055c0
     r8 = 0x54b29800    r9 = 0x00000000   r10 = 0x54b29814    fp = 0x00297f20
     sp = 0x4e1055b8    pc = 0x5373560c
    Found by: call frame info
41  libxul.so!nsDocLoader::DocLoaderIsEmpty(bool) [nsDocLoader.cpp : 775 + 0xe]
     r4 = 0x54b29800    r5 = 0x4e105614    r6 = 0x00000000    r7 = 0x4e105620
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105610    pc = 0x53735878
    Found by: call frame info
42  libxul.so!nsDocLoader::OnStopRequest(nsIRequest*, nsISupports*, tag_nsresult) [nsDocLoader.cpp : 659 + 0xa]
     r4 = 0x54b29800    r5 = 0x4e105650    r6 = 0x5bad7160    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105648    pc = 0x53735aa0
    Found by: call frame info
43  libxul.so!nsLoadGroup::RemoveRequest(nsIRequest*, nsISupports*, tag_nsresult) [nsLoadGroup.cpp : 676 + 0x16]
     r4 = 0x54b1c500    r5 = 0x5bad7160    r6 = 0x00000000    r7 = 0x4e105698
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105680    pc = 0x52f356b0
    Found by: call frame info
44  libxul.so!nsDocument::DoUnblockOnload() [nsDocument.cpp : 7361 + 0x16]
     r4 = 0x553c5000    r5 = 0x55f02000    r6 = 0x543522c0    r7 = 0x5427f7d0
     r8 = 0x5427ff10    r9 = 0x00000000   r10 = 0x58d7bec0    fp = 0x00297f20
     sp = 0x4e1056d0    pc = 0x53257f6c
    Found by: call frame info
45  libxul.so!nsDocument::DispatchContentLoadedEvents() [nsDocument.cpp : 4280 + 0x12]
     r4 = 0x553c5000    r5 = 0x55f02000    r6 = 0x543522c0    r7 = 0x5427f7d0
     r8 = 0x5427ff10    r9 = 0x00000000   r10 = 0x58d7bec0    fp = 0x00297f20
     sp = 0x4e1056e0    pc = 0x53257de0
    Found by: call frame info
46  libxul.so!nsRunnableMethodImpl<tag_nsresult (mozilla::net::BackgroundFileSaver::*)(), true>::Run() + 0x2a
     r4 = 0x4e651460    r5 = 0x00000000    r6 = 0x4e105774    r7 = 0x00000001
     r8 = 0x00000001    r9 = 0x4e65148c   r10 = 0x4e1057a7    fp = 0x00297f20
     sp = 0x4e105758    pc = 0x52f25a0c
    Found by: call frame info
47  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 627 + 0xa]
     r4 = 0x4e651460    r5 = 0x00000000    r6 = 0x4e105774    r7 = 0x00000001
     r8 = 0x00000001    r9 = 0x4e65148c   r10 = 0x4e1057a7    fp = 0x00297f20
     sp = 0x4e105760    pc = 0x53af9fe0
    Found by: call frame info
48  libxul.so!NS_ProcessNextEvent_P(nsIThread*, bool) [nsThreadUtils.cpp : 237 + 0x12]
     r4 = 0x00000001    r5 = 0x00000000    r6 = 0x5a0e8700    r7 = 0x00000000
     r8 = 0x00000001    r9 = 0x4e65148c   r10 = 0x4e10581f    fp = 0x00297f20
     sp = 0x4e1057a0    pc = 0x53ac9254
    Found by: call frame info
49  libxul.so!nsThread::Shutdown() [nsThread.cpp : 474 + 0xa]
     r4 = 0x58a368e0    r5 = 0x00000000    r6 = 0x5a0e8700    r7 = 0x00000000
     r8 = 0x00000001    r9 = 0x4e65148c   r10 = 0x4e10581f    fp = 0x00297f20
     sp = 0x4e1057b0    pc = 0x53afa848
    Found by: call frame info
50  libxul.so!nsRunnableMethodImpl<tag_nsresult (mozilla::net::BackgroundFileSaver::*)(), true>::Run() + 0x2a
     r4 = 0x4e651460    r5 = 0x00000000    r6 = 0x4e1057ec    r7 = 0x00000000
     r8 = 0x00000001    r9 = 0x4e65148c   r10 = 0x4e10581f    fp = 0x00297f20
     sp = 0x4e1057d0    pc = 0x52f25a0c
    Found by: call frame info
51  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 627 + 0xa]
     r4 = 0x4e651460    r5 = 0x00000000    r6 = 0x4e1057ec    r7 = 0x00000000
     r8 = 0x00000001    r9 = 0x4e65148c   r10 = 0x4e10581f    fp = 0x00297f20
     sp = 0x4e1057d8    pc = 0x53af9fe0
    Found by: call frame info
52  libxul.so!NS_ProcessNextEvent_P(nsIThread*, bool) [nsThreadUtils.cpp : 237 + 0x12]
     r4 = 0x00000000    r5 = 0x4e6870c0    r6 = 0x4e636500    r7 = 0x00000001
     r8 = 0x00000000    r9 = 0x4e1058a4   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105818    pc = 0x53ac9254
    Found by: call frame info
53  libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 82 + 0xa]
     r4 = 0x4e6364f0    r5 = 0x4e6870c0    r6 = 0x4e636500    r7 = 0x00000001
     r8 = 0x00000000    r9 = 0x4e1058a4   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105828    pc = 0x5392939c
    Found by: call frame info
54  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 215 + 0xa]
     r4 = 0x4e6870c0    r5 = 0x4e64f6b0    r6 = 0x4e651460    r7 = 0x4e1058a8
     r8 = 0x4e105add    r9 = 0x4e1058a4   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105850    pc = 0x53b2d4b8
    Found by: call frame info
55  libxul.so!MessageLoop::Run() [message_loop.cc : 208 + 0x6]
     r4 = 0x4e6870c0    r5 = 0x4e64f6b0    r6 = 0x4e651460    r7 = 0x4e1058a8
     r8 = 0x4e105add    r9 = 0x4e1058a4   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105858    pc = 0x53b2d634
    Found by: call frame info
56  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 163 + 0x6]
     r4 = 0x00000000    r5 = 0x4e64f6b0    r6 = 0x4e651460    r7 = 0x4e1058a8
     r8 = 0x4e105add    r9 = 0x4e1058a4   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105870    pc = 0x53876cf4
    Found by: call frame info
57  libxul.so!nsAppStartup::Run() [nsAppStartup.cpp : 288 + 0xa]
     r4 = 0x5029d970    r5 = 0x4e1059ec    r6 = 0x4e1058b8    r7 = 0x4e1058a8
     r8 = 0x4e105add    r9 = 0x4e1058a4   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105880    pc = 0x53781e5c
    Found by: call frame info
58  libxul.so!XREMain::XRE_mainRun() [nsAppRunner.cpp : 3823 + 0xa]
     r4 = 0x4e105944    r5 = 0x4e1059ec    r6 = 0x4e1058b8    r7 = 0x4e1058a8
     r8 = 0x4e105add    r9 = 0x4e1058a4   r10 = 0x00000000    fp = 0x00297f20
     sp = 0x4e105888    pc = 0x52f0bb7c
    Found by: call frame info
59  libxul.so!XREMain::XRE_main(int, char**, nsXREAppData const*) [nsAppRunner.cpp : 3890 + 0x6]
     r4 = 0x4e1059ec    r5 = 0x4e1059c3    r6 = 0x00000000    r7 = 0x4e661048
     r8 = 0x4e662000    r9 = 0x44938f88   r10 = 0x00005000    fp = 0x00297f20
     sp = 0x4e1059c0    pc = 0x52f0d568
    Found by: call frame info
60  libxul.so!XRE_main [nsAppRunner.cpp : 4093 + 0x2]
     r4 = 0x80c33a58    r5 = 0x4e661048    r6 = 0x0000000c    r7 = 0x00000000
     r8 = 0x541ceea8    r9 = 0x44938f88   r10 = 0x44938f74    fp = 0x00297f20
     sp = 0x4e1059e8    pc = 0x52f0d7b4
    Found by: call frame info
61  libxul.so!GeckoStart [nsAndroidStartup.cpp : 73 + 0x16]
     r4 = 0x54603f78    r5 = 0x00298400    r6 = 0x80c33a58    r7 = 0x00000000
     r8 = 0x541ceea8    r9 = 0x44938f88   r10 = 0x44938f74    fp = 0x00297f20
     sp = 0x4e105af8    pc = 0x52f12808
    Found by: call frame info
62  libmozglue.so!Java_org_mozilla_gecko_GeckoAppShell_nativeRun [APKOpen.cpp : 669 + 0x6]
     r4 = 0x00298400    r5 = 0x0000017e    r6 = 0x52f1271c    r7 = 0x000bffa0
     r8 = 0x4846cf50    r9 = 0x44938f88   r10 = 0x44938f74    fp = 0x00297f20
     sp = 0x4e105b28    pc = 0x80c16980
    Found by: call frame info
63  libdvm.so + 0x16e36
     r4 = 0x4e105b68    r5 = 0x00000000    r6 = 0x483d99c0    r7 = 0x44938f90
     r8 = 0x4e105b48    r9 = 0x44938f88   r10 = 0x44938f74    fp = 0x00297f20
     sp = 0x4e105b48    pc = 0x80816e38
    Found by: call frame info
64  dalvik-LinearAlloc (deleted) + 0x21821e
     sp = 0x4e105b50    pc = 0x432e4220
    Found by: stack scanning
65  2 (deleted) + 0x539be
     sp = 0x4e105b54    pc = 0x483d99c0
    Found by: stack scanning
66  libdvm.so + 0x16ffe
     sp = 0x4e105b5c    pc = 0x80817000
    Found by: stack scanning
67  libdvm.so + 0x45199
     sp = 0x4e105b68    pc = 0x8084519b
    Found by: stack scanning
68  data@app@org.mozilla.fennec-1.apk@classes.dex + 0x193dcd
     sp = 0x4e105b70    pc = 0x4dcc1dcf
    Found by: stack scanning
69  libmozglue.so!report_mapping [APKOpen.cpp : 416 + 0x2a]
     sp = 0x4e105b74    pc = 0x80c168fc
    Found by: stack scanning
70  0x44938f86
     r4 = 0x00000004    r5 = 0x44938f88    r6 = 0x00000001    r7 = 0x4e105c28
     r8 = 0x0005b788    r9 = 0x4e105c28   r10 = 0x432e4220    fp = 0x00297f20
     sp = 0x4e105b9c    pc = 0x44938f88
    Found by: call frame info
71  libdvm.so + 0x3dbb7
     sp = 0x4e105ba0    pc = 0x8083dbb9
    Found by: stack scanning
72  dalvik-LinearAlloc (deleted) + 0x21821e
     sp = 0x4e105ba4    pc = 0x432e4220
    Found by: stack scanning
73  libdvm.so + 0xa23f2
     sp = 0x4e105ba8    pc = 0x808a23f4
    Found by: stack scanning
74  2 (deleted) + 0x539be
     sp = 0x4e105bac    pc = 0x483d99c0
    Found by: stack scanning
75  libmozglue.so!report_mapping [APKOpen.cpp : 416 + 0x2a]
     sp = 0x4e105bb0    pc = 0x80c168fc
    Found by: stack scanning
76  data@app@org.mozilla.fennec-1.apk@classes.dex + 0xdd7b6
     r4 = 0x8084a86d    r5 = 0x00000001    r6 = 0x0012e748    r7 = 0x00002968
     r8 = 0x44938f88    r9 = 0x4e105c28   r10 = 0x00297f20    fp = 0x44938e80
     sp = 0x4e105bd8    pc = 0x4dc0b7b8
    Found by: call frame info
77  2 (deleted) + 0x539be
     sp = 0x4e105be4    pc = 0x483d99c0
    Found by: stack scanning
78  libdvm.so + 0x1bd9a
     sp = 0x4e105be8    pc = 0x8081bd9c
    Found by: stack scanning
79  0 (deleted) + 0x1df6ffd
     sp = 0x4e105bec    pc = 0x41dfffff
    Found by: stack scanning
80  libdvm.so + 0x2271a
     sp = 0x4e105bf8    pc = 0x8082271c
    Found by: stack scanning
81  libdvm.so + 0xa6f96
     sp = 0x4e105c00    pc = 0x808a6f98
    Found by: stack scanning
82  libdvm.so + 0x4f8fb
     sp = 0x4e105c04    pc = 0x8084f8fd
    Found by: stack scanning
83  libdvm.so + 0x2278e
     sp = 0x4e105c10    pc = 0x80822790
    Found by: stack scanning
84  libdvm.so + 0x21622
     sp = 0x4e105c18    pc = 0x80821624
    Found by: stack scanning
85  system@framework@framework.jar@classes.dex + 0x21fb04
     sp = 0x4e105c24    pc = 0x44264b06
    Found by: stack scanning
86  dalvik-LinearAlloc (deleted) + 0x218b42
     sp = 0x4e105c34    pc = 0x432e4b44
    Found by: stack scanning
87  libdvm.so + 0x1bae2
     sp = 0x4e105c78    pc = 0x8081bae4
    Found by: stack scanning
88  libdvm.so + 0x1bb1e
     sp = 0x4e105c7c    pc = 0x8081bb20
    Found by: stack scanning
89  libdvm.so + 0x1ba06
     sp = 0x4e105c80    pc = 0x8081ba08
    Found by: stack scanning
90  libdvm.so + 0x1ba2e
     sp = 0x4e105c84    pc = 0x8081ba30
    Found by: stack scanning
91  libdvm.so + 0x1ba5e
     sp = 0x4e105c88    pc = 0x8081ba60
    Found by: stack scanning
92  libdvm.so + 0x1ba82
     sp = 0x4e105c8c    pc = 0x8081ba84
    Found by: stack scanning
93  libdvm.so + 0x7b5ef
     sp = 0x4e105c90    pc = 0x8087b5f1
    Found by: stack scanning
94  system@framework@core.jar@classes.dex + 0xf7cea
     sp = 0x4e105c9c    pc = 0x438d2cec
    Found by: stack scanning
95  system@framework@core.jar@classes.dex + 0xf7cea
     sp = 0x4e105ca0    pc = 0x438d2cec
    Found by: stack scanning
96  system@framework@core.jar@classes.dex + 0xf7cf2
     sp = 0x4e105cac    pc = 0x438d2cf4
    Found by: stack scanning
Blocks: 827062
Assignee: general → nobody
This never reproduced again, so either fixed in the meantime or was the victim of a bitflip.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.