1001927 - crash in nsDocLoader::OnProgress(nsIRequest*, nsISupports*, unsigned __int64, unsigned __int64)

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect, P3)

Description

[piotrszegda]

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 (Beta/Release)
Build ID: 20140421221237



Actual results:

https://crash-stats.mozilla.com/report/index/02043183-6fbe-4fb0-958f-4a1142140426

Comment 1

[Paul Silaghi, QA [:pauly]]

please provide steps to reproduce the problem

Comment 2

[User Dderss]

I have the same crash:
https://crash-stats.mozilla.com/report/index/4e5b74d2-6656-44d7-b839-886802140506

And there is no way to reproduce it as it has happened totally randomly at the moment I switched from one tab to another with YouTube video playback page -- I did it many times earlier in that session without a crash.

Comment 3

[Frank Zimmer]

I have the same crash happen quite frequently.
More or less I can reproduce it by open a new tab with :www.spiegel.de

Around 5 times the last 4 days

Comment 4

[piotrszegda]

In my case it has happened totally randomly so unfortunately i can't give a way to reproduce.

Comment 5

[Frank Zimmer]

again happend

see crash ID : ID: da716d69-cc49-4d15-aa13-f03102140515

opening in new tab :  www.spiegel.de and started scroll down before page was fully loaded

Comment 6

[Paul Silaghi, QA [:pauly]]

(In reply to Frank Zimmer from comment #5)
> opening in new tab :  www.spiegel.de and started scroll down before page was
> fully loaded
unable to reproduce, 32.0a1 (2014-05-18), win 7 x64

Comment 7

[Frank Zimmer]

Hm

seems no longer happening in 29.0.1

Tried to reproduce but no crash

Comment 8

[bobbyalexphilip]

https://crash-stats.mozilla.com/report/index/bf89d251-79ee-4dbb-aceb-db5182140526

Comment 9

[Liu Xing]

https://crash-stats.mozilla.com/report/index/110e87e8-aea0-445e-a063-11ddb2140612

Comment 10

[Wayne Mery (:wsmwk)]

 
Does the crash happen in safe mode?
see https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode#w_how-to-start-firefox-in-safe-mode


All crashes on crash-stats are windows.  30% are startup. No correlations listed.
Uptick in crash rate appears to have started in version 27.0.1 or 28.

bp-02043183-6fbe-4fb0-958f-4a1142140426
0	xul.dll	nsDocLoader::OnProgress(nsIRequest *,nsISupports *,unsigned __int64,unsigned __int64)	uriloader/base/nsDocLoader.cpp
1	xul.dll	mozilla::net::nsHttpChannel::OnTransportStatus(nsITransport *,tag_nsresult,unsigned __int64,unsigned __int64)	netwerk/protocol/http/nsHttpChannel.cpp
2	xul.dll	mozilla::net::nsHttpChannel::OnDataAvailable(nsIRequest *,nsISupports *,nsIInputStream *,unsigned __int64,unsigned int)	netwerk/protocol/http/nsHttpChannel.cpp
3	xul.dll	nsInputStreamPump::OnStateTransfer()	netwerk/base/src/nsInputStreamPump.cpp
4	xul.dll	nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream *)	netwerk/base/src/nsInputStreamPump.cpp

Comment 11

[Liu Xing]

I never use safe mode.
So did not face this problem in safe mode.

Comment 12

[Wayne Mery (:wsmwk)]

(In reply to Liu Xing from comment #11)
> I never use safe mode.
> So did not face this problem in safe mode.

(the reason I asked ...) If you are crashing frequently, it will be useful for us to know whether safe mode stops your crashing

Comment 13

[Liu Xing]

(In reply to Wayne Mery (:wsmwk) from comment #12)
> (In reply to Liu Xing from comment #11)
> > I never use safe mode.
> > So did not face this problem in safe mode.
> 
> (the reason I asked ...) If you are crashing frequently, it will be useful
> for us to know whether safe mode stops your crashing
OK.
I will try it next time.

Comment 14

[Flo C.]

Hi I'm joined the thread as I'm having dozens of this crash and it's driving me nuts.
I left my email address everytime Firefox crashes but I got any reply so I'm coming here.

Here are the last crashes
bp-fb03520f-b18c-478d-88ba-6774f2140626	26/06/2014	10:40
bp-2edb2580-3755-4f10-aa7c-d0e092140626	26/06/2014	10:24
bp-f83e1bb4-2844-4f02-989a-74f9e2140626	26/06/2014	09:21
bp-4fcf2fe2-cc34-4a5d-8829-795772140625	25/06/2014	20:05

As you can see it gets pretty intense sometimes and I don't need to wait a long time to get one.
As Wayne mentioned I would say 1/3rd happens at start. I don't really member when it started but v28 seems to correspond well.

I never tested the safe mode as I don't see the point of using it. Let's say it doesn't crash, then it probably means it's a plug-in or extension who causes the problem. 
However, I can't work using the safe mode as my extensions are part of my work. 
I don't want also to disable all extensions, enable them one by one and test in between as it would take hours. As it has been mentioned previously the crash can happen in seconds or hours. 
So don't you have a simple debug info that can help you find out directly which extension is causing this? 

Many thanks for your feedback.

Comment 15

[Paul Silaghi, QA [:pauly]]

(In reply to Flo C. from comment #14)
> I never tested the safe mode as I don't see the point of using it. Let's say
> it doesn't crash, then it probably means it's a plug-in or extension who
> causes the problem. 
> However, I can't work using the safe mode as my extensions are part of my
> work. 
If this is an addon problem, then it's the addon's developer job to fix it.

(In reply to Flo C. from comment #14)
> So don't you have a simple debug info that can help you find out directly
> which extension is causing this? 
Just one by one, as you said above.
Also, we need steps to reproduce the problem.

Comment 16

[Flo C.]

Hi Paul,
I completely understand that, however, how can we know which developer to contact if we don't know which add-on is causing a problem?
As mentioned there is no steps to reproduce this problem. It happens when we click on a tab, open a new one, load a favourite, open the browser, load a video, scroll in the page. It's completely random. 

I'm surprised the log recorded by firefox when it crashes doesn't tell from the problem comes from or at least give us a lead.

Comment 17

[[:Aleksej]]

(In reply to Flo C. from comment #16)
> I'm surprised the log recorded by firefox when it crashes doesn't tell from
> the problem comes from or at least give us a lead.

The better a log is, the more sensitive information it is likely to contain.

Comment 18

[Patrick McManus [:mcmanus]]

this is a stack from
https://crash-stats.mozilla.com/report/index/fb03520f-b18c-478d-88ba-6774f2140626

note the docloader and the httpchannel code are both called re-entrantly. I'm pretty sure they don't like that :) This is the main thread.


0 	xul.dll 	nsDocLoader::OnProgress(nsIRequest *,nsISupports *,unsigned __int64,unsigned __int64) 	uriloader/base/nsDocLoader.cpp
1 	xul.dll 	mozilla::net::nsHttpChannel::OnTransportStatus(nsITransport *,tag_nsresult,unsigned __int64,unsigned __int64) 	netwerk/protocol/http/nsHttpChannel.cpp
2 	xul.dll 	mozilla::net::nsHttpChannel::OnDataAvailable(nsIRequest *,nsISupports *,nsIInputStream *,unsigned __int64,unsigned int) 	netwerk/protocol/http/nsHttpChannel.cpp
3 	xul.dll 	nsInputStreamPump::OnStateTransfer() 	netwerk/base/src/nsInputStreamPump.cpp
4 	xul.dll 	nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream *) 	netwerk/base/src/nsInputStreamPump.cpp
5 	nss3.dll 	nss3.dll@0xa9e0 	
6 		@0x1 	
7 	xul.dll 	nsSocketTransportService::QueryInterface(nsID const &,void * *) 	netwerk/base/src/nsSocketTransportService2.cpp
8 	xul.dll 	nsComponentManagerImpl::GetServiceByContractID(char const *,nsID const &,void * *) 	xpcom/components/nsComponentManager.cpp
9 	xul.dll 	nsNSSHttpRequestSession::trySendAndReceiveFcn(PRPollDesc * *,unsigned short *,char const * *,char const * *,char const * *,unsigned int *) 	security/manager/ssl/src/nsNSSCallbacks.cpp
10 	xul.dll 	nsNSSHttpInterface::trySendAndReceiveFcn(void *,PRPollDesc * *,unsigned short *,char const * *,char const * *,char const * *,unsigned int *) 	security/manager/ssl/src/nsNSSCallbacks.h
11 	nss3.dll 	cert_FetchOCSPResponse 	security/nss/lib/certhigh/ocsp.c
12 	nss3.dll 	ocsp_GetOCSPStatusFromNetwork 	security/nss/lib/certhigh/ocsp.c
13 	nss3.dll 	CERT_CheckOCSPStatus 	security/nss/lib/certhigh/ocsp.c
14 	nss3.dll 	cert_VerifyCertWithFlags 	security/nss/lib/certhigh/certvfy.c
15 	nss3.dll 	CERT_VerifyCert 	security/nss/lib/certhigh/certvfy.c
16 	xul.dll 	mozilla::psm::ClassicVerifyCert 	security/certverifier/CertVerifier.cpp
17 	xul.dll 	mozilla::psm::CertVerifier::VerifyCert(CERTCertificateStr *,SECItemStr const *,__int64,__int64,void *,unsigned int,insanity::pkix::ScopedPtr<CERTCertListStr,&CERT_DestroyCertList(CERTCertListStr *)> *,SECOidTag *,CERTVerifyLogStr *) 	security/certverifier/CertVerifier.cpp
18 	xul.dll 	nsNSSCertificate::GetChain(nsIArray * *) 	security/manager/ssl/src/nsNSSCertificate.cpp
19 	xul.dll 	NS_InvokeByIndex 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp
20 	xul.dll 	XPC_WN_CallMethod(JSContext *,unsigned int,JS::Value *) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
21 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
22 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
23 	mozjs.dll 	js::jit::DoCallFallback 	js/src/jit/BaselineIC.cpp
24 		@0x1e5513d 	
25 		@0x179aed58 	
26 		@0x1e50839 	
27 	mozjs.dll 	EnterBaseline 	js/src/jit/BaselineJIT.cpp
28 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
29 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
30 	mozjs.dll 	js::jit::DoCallFallback 	js/src/jit/BaselineIC.cpp
31 		@0x1e5513d 	
32 		@0x8b52258 	
33 		@0x1e50839 	
34 	mozjs.dll 	EnterBaseline 	js/src/jit/BaselineJIT.cpp
35 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
36 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
37 	mozjs.dll 	JS_CallFunctionValue(JSContext *,JS::Handle<JSObject *>,JS::Handle<JS::Value>,JS::HandleValueArray const &,JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp
38 	xul.dll 	nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS *,unsigned short,XPTMethodDescriptor const *,nsXPTCMiniVariant *) 	js/xpconnect/src/XPCWrappedJSClass.cpp
39 	xul.dll 	nsXPCWrappedJS::CallMethod(unsigned short,XPTMethodDescriptor const *,nsXPTCMiniVariant *) 	js/xpconnect/src/XPCWrappedJS.cpp
40 	nss3.dll 	PR_ExitMonitor 	nsprpub/pr/src/threads/prmon.c
41 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp
42 	xul.dll 	nsDocLoader::DoFireOnStateChange(nsIWebProgress * const,nsIRequest * const,int &,tag_nsresult) 	uriloader/base/nsDocLoader.cpp
43 	xul.dll 	nsDocLoader::FireOnStateChange(nsIWebProgress *,nsIRequest *,int,tag_nsresult) 	uriloader/base/nsDocLoader.cpp
44 	xul.dll 	nsDocLoader::OnProgress(nsIRequest *,nsISupports *,unsigned __int64,unsigned __int64) 	uriloader/base/nsDocLoader.cpp
45 	xul.dll 	mozilla::net::nsHttpChannel::OnTransportStatus(nsITransport *,tag_nsresult,unsigned __int64,unsigned __int64) 	netwerk/protocol/http/nsHttpChannel.cpp
46 	xul.dll 	mozilla::net::nsHttpChannel::OnDataAvailable(nsIRequest *,nsISupports *,nsIInputStream *,unsigned __int64,unsigned int) 	netwerk/protocol/http/nsHttpChannel.cpp
47 	xul.dll 	nsInputStreamPump::OnStateTransfer() 	netwerk/base/src/nsInputStreamPump.cpp
48 	xul.dll 	nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream *) 	netwerk/base/src/nsInputStreamPump.cpp
49 	nss3.dll 	nss3.dll@0xa9e0 	
50 		@0x1 	
51 	nss3.dll 	nss3.dll@0xa9e0 	
52 	xul.dll 	nsRunnableMethodImpl<tag_nsresult ( nsIUrlClassifierDBServiceWorker::*)(void),void,1>::Run() 	obj-firefox/dist/include/nsThreadUtils.h
53 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
54 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	xpcom/glue/nsThreadUtils.cpp
55 	xul.dll 	nsThread::Shutdown() 	xpcom/threads/nsThread.cpp
56 	xul.dll 	nsRunnableMethodImpl<tag_nsresult ( nsIUrlClassifierDBServiceWorker::*)(void),void,1>::Run() 	obj-firefox/dist/include/nsThreadUtils.h
57 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
58 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	xpcom/glue/nsThreadUtils.cpp
59 	xul.dll 	nsThread::Shutdown() 	xpcom/threads/nsThread.cpp
60 	xul.dll 	nsRunnableMethodImpl<tag_nsresult ( nsIUrlClassifierDBServiceWorker::*)(void),void,1>::Run() 	obj-firefox/dist/include/nsThreadUtils.h
61 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
62 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	xpcom/glue/nsThreadUtils.cpp
63 	xul.dll 	nsThread::Shutdown() 	xpcom/threads/nsThread.cpp
64 	xul.dll 	nsRunnableMethodImpl<tag_nsresult ( nsIUrlClassifierDBServiceWorker::*)(void),void,1>::Run() 	obj-firefox/dist/include/nsThreadUtils.h
65 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
66 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	xpcom/glue/nsThreadUtils.cpp
67 	xul.dll 	nsThread::Shutdown() 	xpcom/threads/nsThread.cpp
68 	xul.dll 	nsRunnableMethodImpl<tag_nsresult ( nsIUrlClassifierDBServiceWorker::*)(void),void,1>::Run() 	obj-firefox/dist/include/nsThreadUtils.h
69 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
70 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	xpcom/glue/nsThreadUtils.cpp
71 	xul.dll 	nsThread::Shutdown() 	xpcom/threads/nsThread.cpp
72 	xul.dll 	nsRunnableMethodImpl<tag_nsresult ( nsIUrlClassifierDBServiceWorker::*)(void),void,1>::Run() 	obj-firefox/dist/include/nsThreadUtils.h
73 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
74 	xul.dll 	NS_InvokeByIndex 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp
75 	xul.dll 	XPC_WN_CallMethod(JSContext *,unsigned int,JS::Value *) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
76 		@0xe59d234 	
77 		@0xd60cac0 	
78 		@0xe59dc39 	
79 		@0xd6ae250 	
80 		@0xe59dc39 	
81 		@0x8e148e0 	
82 		@0x1e50839 	
83 	mozjs.dll 	EnterBaseline 	js/src/jit/BaselineJIT.cpp
84 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
85 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
86 	mozjs.dll 	SendToGenerator 	js/src/jsiter.cpp
87 	mozjs.dll 	NativeMethod<js::LegacyGeneratorObject,&legacy_generator_next> 	js/src/jsiter.cpp
88

Comment 19

[Patrick McManus [:mcmanus]]

while that crash is happening - the networking thread is blocked on a synchronous fetch from the main thread :( (no data can be transferred at that time)

0 	ntdll.dll 	ntdll.dll@0x3cd7c 	
1 	KERNELBASE.dll 	WaitForSingleObject 	
2 	nss3.dll 	_PR_MD_WAIT_CV 	nsprpub/pr/src/md/windows/w95cv.c
3 	nss3.dll 	_PR_WaitCondVar 	nsprpub/pr/src/threads/combined/prucv.c
4 	nss3.dll 	PR_WaitCondVar 	nsprpub/pr/src/threads/combined/prucv.c
5 	xul.dll 	mozilla::CondVar::Wait(unsigned int) 	obj-firefox/dist/include/mozilla/CondVar.h
6 	xul.dll 	mozilla::psm::SyncRunnableBase::DispatchToMainThreadAndWait() 	security/manager/ssl/src/PSMRunnable.cpp
7 	xul.dll 	nsNSSSocketInfo::GetPreviousCert(nsIX509Cert * *) 	security/manager/ssl/src/nsNSSIOLayer.cpp
8 	xul.dll 	HandshakeCallback(PRFileDesc *,void *) 	security/manager/ssl/src/nsNSSCallbacks.cpp
9 	nss3.dll 	ssl_FinishHandshake 	security/nss/lib/ssl/sslsecur.c
10 	nss3.dll 	ssl3_FinishHandshake 	security/nss/lib/ssl/ssl3con.c
11 	nss3.dll 	ssl3_HandleFinished 	security/nss/lib/ssl/ssl3con.c
12 	nss3.dll 	ssl3_HandleHandshakeMessage 	security/nss/lib/ssl/ssl3con.c
13 	nss3.dll 	ssl3_HandleHandshake 	security/nss/lib/ssl/ssl3con.c
14 	nss3.dll 	ssl3_HandleRecord 	security/nss/lib/ssl/ssl3con.c
15 	nss3.dll 	ssl3_GatherCompleteHandshake 	security/nss/lib/ssl/ssl3gthr.c
16 	nss3.dll 	ssl_GatherRecord1stHandshake 	security/nss/lib/ssl/sslcon.c
17 	nss3.dll 	ssl_Do1stHandshake 	security/nss/lib/ssl/sslsecur.c
18 	nss3.dll 	ssl_SecureRecv 	security/nss/lib/ssl/sslsecur.c
19 	nss3.dll 	ssl_Recv

Comment 20

[Patrick McManus [:mcmanus]]

the event loop is probably spinning from (somewhere around frame 8)

 http://hg.mozilla.org/releases/mozilla-release/annotate/529a45c94e5a/security/manager/ssl/src/nsNSSCallbacks.cpp#l445

which is in the vicinity of this comment
 // The result of running this on the main thread
 // is a series of small timeouts mixed with spinning the
 // event loop - this is always dangerous as there is so much main
 // thread code that does not expect to be called re-entrantly. Your
 // app really shouldn't do that.
  NS_WARNING("Security network blocking I/O on Main Thread"); 

I'm guessing an addon is using a synchronous api that really needs to be async?

Comment 21

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Looks like an addon calling nsIX509Cert.getChain:

18 	xul.dll 	nsNSSCertificate::GetChain(nsIArray * *) 	security/manager/ssl/src/nsNSSCertificate.cpp

This will cause a certificate verification to happen on the main thread, which can cause exactly this bad situation when we try to fetch revocation information. We've been trying to remove it (bug 867473) and all other main-thread certificate verification, but it's slow going. It would be nice to know what the JS stack is when GetChain gets called.

Comment 22

[Flo C.]

How do you guys suggest to proceed? What can I try or test to give you what you need, knowing that I have absolutely no idea what you are talking about.

Comment 23

[Robert Kaiser]

(In reply to Flo C. from comment #22)
> How do you guys suggest to proceed? What can I try or test to give you what
> you need, knowing that I have absolutely no idea what you are talking about.

As said before, the best thing you can do is *trying* to disable your add-ons one by one, starting with those that could do something with certificates (or secure web connections). This is not to stay with them deactivated forever, this is just so we can find out which add-on it is that is calling functions it should not call. Once we know that, we can contact the add-on developers to fix it.

Comment 24

[Patrick McManus [:mcmanus]]

david - obviously this failure mode is worse than the 'snappy' concerns of 867473..

offered as a thought: What do you think if we just temporarily declared OCSP driven from the main thread to be the same as failed to connect to the OCSP server. Would that plug this concern and buy enough time to fix it right?

I'm not sure the addon author is really doing anything wrong the way it is described. (or can be instructed to do something different)

Comment 25

[Dana Keeler (she/her) (use needinfo) [:keeler]]

That could work. I believe there's some sort of update mechanism that causes verification to happen on the main thread. That's definitely a place where we should be sure to get revocation information, so we would have to change it to off-main-thread.

Comment 26

[Flo C.]

Hi Guys,
So I've doing a bit of testing since my last message. Basically, I disabled one plugin at a time and waited to see if the crash were still there.

Now it's been 3 days I haven't experienced any crash after disabling HTTPS Everywhere 4.0dev17
That could be start for you.
I'll let you know if there are any chances

Comment 27

[piotrszegda]

Next a bit longer log:

W/ContextImpl(21393): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1371 android.content.ContextWrapper.sendBroadcast:372 
I/RemoteViews.Performance( 1185): com.htc.backup 2 2 11
D/PMS     ( 1093): releaseWL(42cd5f20): PARTIAL_WAKE_LOCK  com.htc.backup.task.ForegroundTaskService 0x1 null
W/ContextImpl(21393): Calling a method in the system process without a qualified user: android.app.ContextImpl.stopService:1733 android.content.ContextWrapper.stopService:506 com.htc.backup.task.ForegroundTaskService.stop:64 com.htc.backup.BackupRestoreManager.backupFinish:671 com.htc.backup.BackupRestoreManager.onHandleIntent:196 
V/NotificationService( 1093): batLight: Full, plugged
V/LightsService( 1093): setLight #8: color=#c8c800
D/qdlights( 1093): set_color_led color=13158400, mode=255, off_min=0, off_sec=0
D/qdlights( 1093): [LedInfo] without indicator attribute, red:c80000, green:c800, blue:0
V/LightsService( 1093): setLight #8: color=#c800
D/qdlights( 1093): set_color_led color=51200, mode=1, off_min=0, off_sec=0
D/qdlights( 1093): [LedInfo] without indicator attribute, red:0, green:c800, blue:0
D/qdlights( 1093): [LedInfo] write attr ok name=/sys/class/leds/amber/brightness string=0,len=1
D/qdlights( 1093): [LedInfo] write attr ok name=/sys/class/leds/amber/blink string=0,len=1
D/qdlights( 1093): [LedInfo] write attr ok name=/sys/class/leds/amber/off_timer string=0 0,len=3
D/qdlights( 1093): [LedInfo] write attr ok name=/sys/class/leds/green/brightness string=1,len=1
D/qdlights( 1093): [LedInfo] write attr ok name=/sys/class/leds/green/blink string=0,len=1
D/qdlights( 1093): [LedInfo] write attr ok name=/sys/class/leds/green/off_timer string=0 0,len=3
D/DotMatrix(15151): [NotificationService] onNotificationRemoved, pkgName: com.htc.backup, id: 42
D/DotMatrix(15151): [EventService] get3rdNotificationByPkgName, com.htc.backup does not support DotMatrix
I/htcbackup-core(21393): BackupRestoreManager: Backup Finish Complete
E/MP-Decision( 1685): Update arg 2
E/MP-Decision( 1685): Update arg 1
D/WifiNative-wlan0( 1093): doString: SIGNAL_POLL
W/WifiHW  ( 1093): QCOM Debug wifi_send_command "IFNAME=wlan0 SIGNAL_POLL"
I/wpa_supplicant( 1176): Recv Cmd 1: IFNAME=wlan0
E/wpa_supplicant( 1176): send_and_recv error 0 - cmd 17
E/wpa_supplicant( 1176): send_and_recv error 0 - cmd 5
D/wpa_supplicant( 1176): nl80211: survey data missing!
E/wpa_supplicant( 1176): send_and_recv error 0 - cmd 50
I/wpa_supplicant( 1176): environment dirty rate=0 [3][0][0]
D/WifiStateMachine( 1093): fetchRssiAndLinkSpeedNative RSSI = -41 abnormalRssiCnt = 0 newLinkSpeed = 72
D/WifiStateMachine( 1093): fetchRssiAndLinkSpeedNative mLinkspeedCount = 5, mLinkspeedSum: 360
D/WifiNative-wlan0( 1093): doBoolean: SignalStrength 49
W/WifiHW  ( 1093): QCOM Debug wifi_send_command "IFNAME=wlan0 SignalStrength 49"
I/wpa_supplicant( 1176): Recv Cmd 1: IFNAME=wlan0
D/wpa_supplicant( 1176): WiFioffload: SignalStrength: =49
D/WifiNative-wlan0( 1093):    returned true
D/WifiStateMachine( 1093): [ScoreAP] + current TXpacket:8268, mTXpacketCount:8113, avgLinkspeed:72,mAvgTxRate72
D/WifiStateMachine( 1093): [ScoreAP] + TX packet increase one time, don't update TX rate in DB
I/SensorManager( 1093): mEventCount = 294300
I/InputMethodManager(23470): org.mozilla.fennec_aurora called startInputInner(Do not restart input for non input field, ic=null) from android.view.inputmethod.InputMethodManager.restartInput(InputMethodManager.java:1135) <- org.mozilla.gecko.GeckoInputConnection.restartInput(GeckoInputConnection.java:418)
D/GeckoTabs(23470): handleMessage: Content:StateChange
D/GeckoToolbar(23470): onTabChanged: MENU_UPDATED
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: MENU_UPDATED
D/GeckoToolbar(23470): onTabChanged: START
I/GeckoToolbarDisplayLayout(23470): zerdatime 82716771 - Throbber start
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: START
D/PMS     ( 1093): acquireWL(43404730): PARTIAL_WAKE_LOCK  AlarmManager 0x1 1093 1000 WorkSource{1000}
V/AlarmManager( 1093): sending alarm PendingIntent{42776398: PendingIntentRecord{42b95980 android broadcastIntent}}, i=android.content.syncmanager.SYNC_ALARM, t=2, cnt=1, w=173319373, Int=0
D/PMS     ( 1093): acquireWL(43397268): PARTIAL_WAKE_LOCK  SyncManagerHandleSyncAlarm 0x1 1093 1000 null
D/PMS     ( 1093): releaseWL(43404730): PARTIAL_WAKE_LOCK  AlarmManager 0x1 WorkSource{1000}
D/ConnectivityService( 1093): getActiveNetworkInfo called by  (1093/1000)
D/PMS     ( 1093): acquireWL(431a3970): PARTIAL_WAKE_LOCK  SyncLoopWakeLock 0x1 1093 1000 null
D/PMS     ( 1093): releaseWL(43397268): PARTIAL_WAKE_LOCK  SyncManagerHandleSyncAlarm 0x1 null
D/PMS     ( 1093): releaseWL(431a3970): PARTIAL_WAKE_LOCK  SyncLoopWakeLock 0x1 null
D/GeckoTabs(23470): handleMessage: SessionHistory:New
D/GeckoTabs(23470): handleMessage: Content:LocationChange
D/GeckoToolbar(23470): onTabChanged: TITLE
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: TITLE
D/GeckoTabs(23470): handleMessage: Content:SecurityChange
D/GeckoToolbar(23470): onTabChanged: MENU_UPDATED
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: MENU_UPDATED
D/GeckoToolbar(23470): onTabChanged: LOCATION_CHANGE
D/GeckoToolbarDisplayLayout(23470): updateFavicon(null)
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: LOCATION_CHANGE
D/GeckoToolbar(23470): onTabChanged: SECURITY_CHANGE
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: SECURITY_CHANGE
D/GeckoToolbar(23470): onTabChanged: MENU_UPDATED
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: MENU_UPDATED
I/InputMethodManager(23470): org.mozilla.fennec_aurora called startInputInner(Do not restart input for non input field, ic=null) from android.view.inputmethod.InputMethodManager.restartInput(InputMethodManager.java:1135) <- org.mozilla.gecko.GeckoInputConnection.restartInput(GeckoInputConnection.java:418)
D/GeckoTabs(23470): handleMessage: DOMTitleChanged
D/GeckoToolbar(23470): onTabChanged: TITLE
D/GeckoBrowserApp(23470): BrowserApp.onTabChanged: 3: TITLE
D/WifiStateMachine( 1093): get mPhoneStateListener
D/TelephonyCallback( 1185): SignalStrength: 4
D/TelephonyRegistry( 1093): This is not dual project
D/SIGNAL_ICON( 1185): level=4/5
D/StatusBar.NetworkController( 1185): dumpIcon[(gone) stat_sys_5signal_4|null stat_sys_wifi_signal_inandout_4 (gone) F]
D/WifiNative-wlan0( 1093): doString: SIGNAL_POLL
W/WifiHW  ( 1093): QCOM Debug wifi_send_command "IFNAME=wlan0 SIGNAL_POLL"
I/wpa_supplicant( 1176): Recv Cmd 1: IFNAME=wlan0
E/wpa_supplicant( 1176): send_and_recv error 0 - cmd 17
E/wpa_supplicant( 1176): send_and_recv error 0 - cmd 5
D/wpa_supplicant( 1176): nl80211: survey data missing!
E/wpa_supplicant( 1176): send_and_recv error 0 - cmd 50
I/wpa_supplicant( 1176): environment dirty rate=0 [104][1][0]
D/WifiStateMachine( 1093): fetchRssiAndLinkSpeedNative RSSI = -43 abnormalRssiCnt = 0 newLinkSpeed = 72
D/WifiStateMachine( 1093): fetchRssiAndLinkSpeedNative mLinkspeedCount = 1, mLinkspeedSum: 72
D/WifiNative-wlan0( 1093): doBoolean: SignalStrength 47
W/WifiHW  ( 1093): QCOM Debug wifi_send_command "IFNAME=wlan0 SignalStrength 47"
I/wpa_supplicant( 1176): Recv Cmd 1: IFNAME=wlan0
D/wpa_supplicant( 1176): WiFioffload: SignalStrength: =47
D/WifiNative-wlan0( 1093):    returned true
E/libc    (23470): mmap fail (pid 23470, tid 23485, size 2207744, flags 0x1, errno 12(Out of memory))
I/libc    (23470): Issue command 'echo 2014-11-15 08:12:25 > /data/htclog/dump.maps.23470.23485;cat /proc/23470/status >> /data/htclog/dump.maps.23470.23485;procmem 23470 >> /data/htclog/dump.maps.23470.23485;cat /proc/23470/maps >> /data/htclog/dump.maps.23470.23485'....
E/libc    (23470): fail with error 256
W/Adreno-GSL(23470): <sharedmem_gpumem_alloc_id:1489>: sharedmem_gpumem_alloc: mmap failed errno 12 Out of memory
E/Adreno-GSL(23470): <ioctl_kgsl_sharedmem_alloc:1590>: ioctl_kgsl_sharedmem_alloc: FATAL ERROR : (null)
D/PMS     ( 1093): acquireWL(42ad7d00): PARTIAL_WAKE_LOCK  AlarmManager 0x1 1093 1000 WorkSource{1000}
V/AlarmManager( 1093): sending alarm PendingIntent{427df238: PendingIntentRecord{43307f40 android broadcastIntent}}, i=com.android.internal.wifi.data-stall, t=3, cnt=1, w=173321232, Int=0
D/WifiDataStallTracker( 1093): onReceive: action=com.android.internal.wifi.data-stall
D/WifiDataStallTracker( 1093): onActionIntentDataStallAlarm: action=com.android.internal.wifi.data-stall
D/WifiDataStallTracker( 1093): updateDataStallInfo: mDataStallTxRxSum={txSum=386920 rxSum=504739} preTxRxSum={txSum=386879 rxSum=504708}
D/WifiDataStallTracker( 1093): updateDataStallInfo: IN/OUT
D/WifiDataStallTracker( 1093): onDataStallAlarm: tag=43669 Sent 0 pkts since last received, < watchdogTrigger=5
D/WifiDataStallTracker( 1093): startDataStallAlarm: tag=43670 delay=5s
D/PMS     ( 1093): releaseWL(42ad7d00): PARTIAL_WAKE_LOCK  AlarmManager 0x1 WorkSource{1000}
I/ActivityManager( 1093): Recipient 23470
D/MediaRouterService( 1093): Client org.mozilla.fennec_aurora (pid 23470): Died!
D/WifiService( 1093): Client connection lost with reason: 4
I/WindowState( 1093): WIN DEATH: Window{422418d8 u0 org.mozilla.fennec_aurora/org.mozilla.fennec_aurora.App}
I/MediaRouterService( 1093): UpdateDiscoveryRequest.
I/DisplayManagerService( 1093): stopWifiDisplayScanLocked(): mWifiDisplayScanRequested = false, mWifiDisplayScanRequestCount = 0
I/ActivityManager( 1093): Process org.mozilla.fennec_aurora (pid 23470) has died.
W/WindowManager( 1093): Force-removing child win Window{422dedd0 u0 SurfaceView} from container Window{422418d8 u0 org.mozilla.fennec_aurora/org.mozilla.fennec_aurora.App}
V/UPolicy ( 1093): [Eng]canLogUserProfiling, TellHtc Ui Mode is: normal
W/ActivityManager( 1093): Force removing ActivityRecord{41f02828 u0 org.mozilla.fennec_aurora/.App t134}: app died, no saved state
W/WindowManager( 1093): Failed looking up window
W/WindowManager( 1093): java.lang.IllegalArgumentException: Requested window android.os.BinderProxy@428cb2d8 does not exist
W/WindowManager( 1093):         at com.android.server.wm.WindowManagerService.windowForClientLocked(WindowManagerService.java:8463)
W/WindowManager( 1093):         at com.android.server.wm.WindowManagerService.windowForClientLocked(WindowManagerService.java:8454)
W/WindowManager( 1093):         at com.android.server.wm.WindowState$DeathRecipient.binderDied(WindowState.java:1052)
W/WindowManager( 1093):         at android.os.BinderProxy.sendDeathNotice(Binder.java:501)
W/WindowManager( 1093):         at dalvik.system.NativeStart.run(Native Method)
E/MP-Decision( 1685): Update arg "0 380 380 380".
I/WindowState( 1093): WIN DEATH: null
E/MP-Decision( 1685): Update arg "0 400 400 400".
W/ActivityManager( 1093): handleTopAppChanged(): The previous AP is died unexpectedly.
I/Adreno-EGL(19818): <qeglDrvAPI_eglInitialize:410>: EGL 1.4 QUALCOMM build: LNXBUILD_AU_LINUX_ANDROID_LNX.LA.3.5.2_RB1.04.04.04.065.063+PATCH[ES]_msm8974_LNX.LA.3.5.2_RB1__release_ENGG ()
I/Adreno-EGL(19818): OpenGL ES Shader Compiler Version: E031.24.00.15
I/Adreno-EGL(19818): Build Date: 08/20/14 Wed
I/Adreno-EGL(19818): Local Branch: 
I/Adreno-EGL(19818): Remote Branch: quic/LNX.LA.3.5.2_RB1.1
I/Adreno-EGL(19818): Local Patches: fa67edb65fbf69cb5234ae2bcc538eb1f8b3106f Merge "Merge 8321506a9621bb2db22bbee0437ee305ff48d56b on remote branch"
I/Adreno-EGL(19818):                  8068589ab0e151c6affde21602927413d2468099 Merge 8321506a9621bb2db22bbee0437ee305ff48d56b on remote bran
D/Zygote  (  384): Process 23470 terminated by signal (11)
I/Zygote  (  384): Process 23470 dumped core
W/InputMethodManagerService( 1093): Got RemoteException sending setActive(false) notification to pid 23470 uid 10160
W/Binder  (15164): Caught a RuntimeException from the binder stub implementation.
W/Binder  (15164): java.lang.NullPointerException
W/Binder  (15164):      at android.inputmethodservice.IInputMethodWrapper.setSessionEnabled(IInputMethodWrapper.java:280)
W/Binder  (15164):      at com.android.internal.view.IInputMethod$Stub.onTransact(IInputMethod.java:129)
W/Binder  (15164):      at android.os.Binder.execTransact(Binder.java:412)
W/Binder  (15164):      at de.robv.android.xposed.XposedBridge.invokeOriginalMethodNative(Native Method)
W/Binder  (15164):      at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:631)
W/Binder  (15164):      at android.os.Binder.execTransact(Native Method)
W/Binder  (15164):      at dalvik.system.NativeStart.run(Native Method)
I/InputMethodManagerService( 1093): Enable input method client, pid=19818
D/WifiStateMachine( 1093): get mPhoneStateListener
D/TelephonyCallback( 1185): SignalStrength: 4
D/TelephonyRegistry( 1093): This is not dual project
D/SIGNAL_ICON( 1185): level=4/5
I/Launcher(19818): updateWallpaperVisibility: false
D/StatusBar.NetworkController( 1185): dumpIcon[(gone) stat_sys_5signal_4|null stat_sys_wifi_signal_inandout_4 (gone) F]
D/WIFI_ICON( 1185): WifiActivity: 0
D/StatusBar.NetworkController( 1185): dumpIcon[(gone) stat_sys_5signal_4|null stat_sys_wifi_signal_connected_4 (gone) F]
D/ConnectivityService( 1093): getNetworkInfo networkType=1 called by com.amazon.kindle (17725/10211)
D/WifiNative-wlan0( 1093): doString: SIGNAL_POLL
W/WifiHW  ( 1093): QCOM Debug wifi_send_command "IFNAME=wlan0 SIGNAL_POLL"
I/wpa_supplicant( 1176): Recv Cmd 1: IFNAME=wlan0
E/wpa_supplicant( 1176): send_and_recv error 0 - cmd 17

Comment 28

[Dana Keeler (she/her) (use needinfo) [:keeler]]

I'm not seeing any recent crashes that appear to be due to PSM code.