1061106 - Crash during shutdown after running mochitest

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: Bluetooth, defect)

Description

[Ting-Yu Lin [:TYLin] (PDT, UTC-7)]

After running ./mach mochitest-remote dom/tests/mochitest/bugs/ on b2g emulator, the following callstack is observed.

3009 INFO UNKNOWN [libxul.so +0x0036F946]
3010 INFO UNKNOWN [libxul.so +0x0100D294]
3011 INFO UNKNOWN [libxul.so +0x0100D368]
3012 INFO UNKNOWN [libxul.so +0x0100BE5E]
3013 INFO UNKNOWN [libxul.so +0x0033BA32]
3014 INFO UNKNOWN [libxul.so +0x0036F330]
3015 INFO UNKNOWN [libxul.so +0x0036F3A0]
3016 INFO UNKNOWN [libxul.so +0x003A0F38]
3017 INFO UNKNOWN [libxul.so +0x003A1636]
3018 INFO UNKNOWN [libxul.so +0x0036CBD0]
3019 INFO UNKNOWN [libxul.so +0x003A8F1C]
3020 INFO NS_ShutdownXPCOM+0x00000005 [libxul.so +0x003A9426]
3021 INFO UNKNOWN [libxul.so +0x016DFA20]
3022 INFO UNKNOWN [libxul.so +0x016E45F6]
3023 INFO XRE_main+0x0000004B [libxul.so +0x016E4778]
3024 INFO UNKNOWN [/system/b2g/b2g +0x0000A90A]
3025 INFO UNKNOWN [/system/b2g/b2g +0x0000A50C]
3026 INFO __libc_init+0x00000029 [libc.so +0x00016742]

After using addr2line to decipher the stack, I got the following which seems related to bluetooth.

$ addr2line -C -f -e objdir-gecko/dist/bin/libxul.so 0x0036F946 0x0100D294 0x0100D368 0x0100BE5E 0x0033BA32 0x0036F330 0x0036F3A0 0x003A0F38 0x003A1636 0x0036CBD0 0x003A8F1C 0x003A9426 0x016DFA20 0x016E45F6 0x016E4778 0x0000A90A 0x0000A50C 0x00016742

nsObserverService::RemoveObserver(nsIObserver*, char const*)
/home/tlin/Projects/gecko-dev/xpcom/ds/nsObserverService.cpp:282
~BluetoothOppManager
/home/tlin/Projects/b2g-emulator/objdir-gecko/dom/bluetooth/../../dist/include/nsError.h:185
operator delete
/home/tlin/Projects/b2g-emulator/objdir-gecko/dom/bluetooth/../../dist/include/mozilla/mozalloc.h:225
mozilla::dom::bluetooth::BluetoothOppManager::Release()
/home/tlin/Projects/gecko-dev/dom/bluetooth/bluez/BluetoothOppManager.cpp:1593
~nsCOMPtr
/home/tlin/Projects/b2g-emulator/objdir-gecko/dom/bluetooth/../../dist/include/nsCOMPtr.h:524
nsTArray_Impl<ObserverRef, nsTArrayInfallibleAllocator>::DestructRange(unsigned int, unsigned int)
/home/tlin/Projects/b2g-emulator/objdir-gecko/xpcom/ds/../../dist/include/nsTArray.h:1641
~nsTArray_Impl
/home/tlin/Projects/b2g-emulator/objdir-gecko/xpcom/ds/../../dist/include/nsTArray.h:741
PLDHashTable::RawRemove(PLDHashEntryHdr*)
/home/tlin/Projects/gecko-dev/xpcom/glue/pldhash.cpp:679
PLDHashTable::Enumerate(PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*)
/home/tlin/Projects/gecko-dev/xpcom/glue/pldhash.cpp:726
nsObserverService::Shutdown()
/home/tlin/Projects/gecko-dev/xpcom/ds/nsObserverService.cpp:219
~nsRefPtr
/home/tlin/Projects/gecko-dev/xpcom/build/../base/nsAutoPtr.h:851
NS_ShutdownXPCOM
/home/tlin/Projects/gecko-dev/xpcom/build/nsXPComInit.cpp:780
~ScopedXPCOMStartup
/home/tlin/Projects/gecko-dev/toolkit/xre/nsAppRunner.cpp:1206
operator delete
/home/tlin/Projects/b2g-emulator/objdir-gecko/toolkit/xre/../../dist/include/mozilla/mozalloc.h:225
XRE_main
/home/tlin/Projects/gecko-dev/toolkit/xre/nsAppRunner.cpp:4343
??
??:0
??
??:0
??
??:0

Note: All the green mochitest results on mozilla-central have this callstack as well. For example:
https://tbpl.mozilla.org/php/getParsedLog.php?id=47148471&tree=Mozilla-Central&full=1