1035537 - crash in KiUserExceptionDispatcher

Status: RESOLVED INCOMPLETE

(Core :: DOM: Events, defect)

Description

[u279076]

This bug was filed from the Socorro interface and is 
report bp-a8bb01f8-2e75-4a05-b7d9-013502140701.
=============================================================
0 	ntdll.dll 	KiUserExceptionDispatcher 	
1 	xul.dll 	nsQueryReferent::nsQueryReferent(nsIWeakReference *,tag_nsresult *) 	obj-firefox/dist/include/nsIWeakReferenceUtils.h
2 	xul.dll 	mozilla::EventStateManager::DispatchMouseOrPointerEvent(mozilla::WidgetMouseEvent *,unsigned int,nsIContent *,nsIContent *) 	dom/events/EventStateManager.cpp
3 	xul.dll 	nsXULTooltipListener::HandleEvent(nsIDOMEvent *) 	layout/xul/nsXULTooltipListener.cpp
4 	xul.dll 	mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener *,nsIDOMEvent *,mozilla::dom::EventTarget *) 	dom/events/EventListenerManager.cpp
5 	xul.dll 	mozilla::EventListenerManager::HandleEventInternal(nsPresContext *,mozilla::WidgetEvent *,nsIDOMEvent * *,mozilla::dom::EventTarget *,nsEventStatus *) 	dom/events/EventListenerManager.cpp
6 	xul.dll 	mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem> &,mozilla::EventChainPostVisitor &,mozilla::EventDispatchingCallback *,mozilla::ELMCreationDetector &) 	dom/events/EventDispatcher.cpp
7 	xul.dll 	mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem> &,mozilla::EventChainPostVisitor &,mozilla::EventDispatchingCallback *,mozilla::ELMCreationDetector &) 	dom/events/EventDispatcher.cpp
8 	xul.dll 	mozilla::EventDispatcher::Dispatch(nsISupports *,nsPresContext *,mozilla::WidgetEvent *,nsIDOMEvent *,nsEventStatus *,mozilla::EventDispatchingCallback *,nsCOMArray<mozilla::dom::EventTarget> *) 	dom/events/EventDispatcher.cpp
9 	xul.dll 	mozilla::WidgetMouseEvent::WidgetMouseEvent(bool,unsigned int,nsIWidget *,mozilla::WidgetMouseEvent::reasonType,mozilla::WidgetMouseEvent::contextType) 	obj-firefox/dist/include/mozilla/MouseEvents.h
10 	xul.dll 	mozilla::EventStateManager::NotifyMouseOut(mozilla::WidgetMouseEvent *,nsIContent *) 	dom/events/EventStateManager.cpp
11 	xul.dll 	mozilla::EventStateManager::NotifyMouseOver(mozilla::WidgetMouseEvent *,nsIContent *) 	dom/events/EventStateManager.cpp
12 	xul.dll 	mozilla::EventStateManager::GenerateMouseEnterExit(mozilla::WidgetMouseEvent *) 	dom/events/EventStateManager.cpp
13 	xul.dll 	mozilla::EventStateManager::PreHandleEvent(nsPresContext *,mozilla::WidgetEvent *,nsIFrame *,nsEventStatus *) 	dom/events/EventStateManager.cpp
14 	xul.dll 	PresShell::HandleEventInternal(mozilla::WidgetEvent *,nsEventStatus *) 	layout/base/nsPresShell.cpp
15 		@0x12f7c8 
=============================================================	
More reports:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=KiUserExceptionDispatcher

This signature has been around for a long time but something is causing a spike on Beta since July 4. Prior to this it hovered between 0 and 10 crashes per million ADUs, now its up to 116.

In pure volume, it's not a topcrash (currently #40 on Beta), but I'm filing this to record the spike. Unfortunately the reports to provide me any details I can use to reproduce this.

Comment 1

[Sylvestre Ledru [:Sylvestre]]

Not a top crash, not tracking for now. However, please resubmit for tracking if it comes closer to the top #10. Thanks

Comment 2

[Robert Kaiser]

Given this also has Intel cards as the majority, it may be another side-effect of the gfx blocklisting malfunctions detected in bug 988549.

Comment 3

[(Away)]

This shares with bug 1015341 the trait that it's only affecting native-32-bit XP and Windows 7. I think the Intel gfx correlation is just fallout from the age and type of these machines, and is probably not part of the cause.

Unlike the other bug which is a real crash, these are all EXCEPTION_SINGLE_STEP which is very odd for us to see in crash reports. It means some code is trying to act as a debugger for FF and failing.

That "some code" is likely our friend the Movies Toolbar:
     50% (115/231) vs.   3% (1169/42620) safetynut.dll
     50% (115/231) vs.   3% (1184/42620) safetyldr.dll
     50% (116/231) vs.   5% (2018/42620) Datamngr.dll
     50% (116/231) vs.   5% (2048/42620) mgrldr.dll
     46% (107/231) vs.   3% (1200/42620) safetycrt.dll

Comment 4

[u279076]

This is currently the #9 topcrash in Firefox 31 and rising. It's also rising in Firefox 32 (#26) but dropping in Firefox 33 (#149).

Comment 5

[Sylvestre Ledru [:Sylvestre]]

Except if we have a huge spike, we won't do a dot release for this bug. Please resubmit if the bug is a problem in the 31 release.

Comment 6

[Robert Kaiser]

This and similar are connected to Bandoo, there's not much we can do on our side anyhow, and their developers are looking into the issue actively, aiming to ship updates to their software ASAP.

Comment 7

[u279076]

This crash has dropped off significantly with only 28 reports in the last week. I'm resolving this bug as incomplete since there's not much we can do about it at this point. Please reopen if this escalates to a topcrash.