crash in jemalloc_crash | arena_dalloc | je_free | free | moz_free | XPCNativeInterface::DestroyInstance(XPCNativeInterface*)

NEW
Unassigned

Status

()

Core
XPConnect
--
critical
4 years ago
2 years ago

People

(Reporter: nhirata, Unassigned)

Tracking

({crash})

29 Branch
All
Gonk (Firefox OS)
crash
Points:
---

Firefox Tracking Flags

(b2g-v2.1 affected)

Details

(Whiteboard: [b2g-crash], crash signature)

This bug was filed from the Socorro interface and is 
report bp-e2fd6bae-cec5-45a9-88f3-9701a2140612.
=============================================================
Frame 	Module 	Signature 	Source
0 	libmozglue.so 	jemalloc_crash 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c:1570
1 	libmozglue.so 	arena_dalloc 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c:4444
2 	libmozglue.so 	je_free 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c:6502
3 	libmozglue.so 	free 	/home/geeksphone/FOS/peak/gecko/memory/build/replace_malloc.c:200
4 	libxul.so 	moz_free 	/home/geeksphone/FOS/peak/gecko/memory/mozalloc/mozalloc.cpp:46
5 	libxul.so 	XPCNativeInterface::DestroyInstance(XPCNativeInterface*) 	/home/geeksphone/FOS/peak/objdir-gecko/js/xpconnect/src/../../../dist/include/mozilla/mozalloc.h:237
6 	libxul.so 	NativeInterfaceSweeper 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCJSRuntime.cpp:110
7 	libxul.so 	PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*) 	/home/geeksphone/FOS/peak/gecko/xpcom/glue/pldhash.cpp:662
8 	libxul.so 	XPCJSRuntime::FinalizeCallback(JSFreeOp*, JSFinalizeStatus, bool, void*) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCMaps.h:271
9 	libxul.so 	js::gc::GCRuntime::endSweepPhase(js::JSGCInvocationKind, bool) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4284
10 	libxul.so 	js::gc::GCRuntime::incrementalCollectSlice(long long, JS::gcreason::Reason, js::JSGCInvocationKind) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4745
11 	libxul.so 	js::gc::GCRuntime::gcCycle(bool, long long, js::JSGCInvocationKind, JS::gcreason::Reason) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4862
12 	libxul.so 	js::gc::GCRuntime::collect(bool, long long, js::JSGCInvocationKind, JS::gcreason::Reason) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4995
13 	libxul.so 	js::gc::GCIfNeeded(JSContext*) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:5046
14 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:409
15 	libxul.so 	js::Invoke 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:511
16 	libxul.so 	js::jit::DoCallFallback 	/home/geeksphone/FOS/peak/gecko/js/src/jit/BaselineIC.cpp:8140
17 		@0x42e00166 	

Note:
1. crashes seem to start from 20140612041620
It looks like it's not just geeksphone : 
https://crash-stats.mozilla.com/report/index/9a63cb01-756a-45ec-a637-26d182140714

I think this might be a buri/hamachi start up that failed.

Updated

2 years ago
Crash Signature: [@ jemalloc_crash | arena_dalloc | je_free | free | moz_free | XPCNativeInterface::DestroyInstance(XPCNativeInterface*)] → [@ jemalloc_crash | arena_dalloc | je_free | free | moz_free | XPCNativeInterface::DestroyInstance(XPCNativeInterface*)] [@ jemalloc_crash | arena_dalloc | je_free | free | moz_free | XPCNativeInterface::DestroyInstance]
You need to log in before you can comment on or make changes to this bug.