Closed Bug 1125220 Opened 11 years ago Closed 9 years ago

mozilla::ipc::FatalError crash in mozilla::jsipc::PJavaScriptChild::Read

Categories

(Core :: IPC, defect, P3)

All
Windows NT
defect

Tracking

()

RESOLVED WORKSFORME
Tracking Status
e10s + ---
firefox38 --- affected

People

(Reporter: alex_mayorga, Assigned: billm)

References

Details

(Keywords: crash, meta, topcrash, Whiteboard: [e10s-45-uplift])

Crash Data

This bug was filed from the Socorro interface and is report bp-8ead4ae8-bdc2-470c-b9fd-1d6982150123. =============================================================
Version: 37 Branch → Trunk
Crash Signature: [@ mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::ipc::FatalError(char const*, char const*, void*, bool) | mozilla::jsipc::PJavaScriptChild::Read(mozilla::jsipc::JSVariant*, IPC::Message const*, void**)] → [@ mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::ipc::FatalError(char const*, char const*, void*, bool) | mozilla::jsipc::PJavaScriptChild::Read(mozilla::jsipc::JSVariant*, IPC::Message const*, void**)] [@ mozalloc_abort | NS_DebugBreak | …
There seem to be a decent number of these crashes... although they seem to have gotten substantially more common in nightly around 2015-12-14: https://crash-stats.mozilla.com/signature/?product=Firefox&release_channel=nightly&date=%3E%3D2015-08-01&signature=mozalloc_abort+|+NS_DebugBreak+|+mozilla%3A%3Aipc%3A%3AFatalError+|+mozilla%3A%3Ajsipc%3A%3APJavaScriptChild%3A%3ARead#aggregations It's not clear to me whether it's worth separating the spike on December 14 into a separate bug -- or even how we distinguish different sorts of problems in these crash reports.
Product: Firefox → Core
Component: General → XPConnect
Keywords: topcrash
Component: XPConnect → IPC
Bug 1210821 comment #4 may be relevant. I'm not sure if it makes much difference whether the PJavaScript{Child,Parent}::Read -> FatalError call is about an unexpected end of message or a bad enum discriminant (which are the two calls I see there) — either way, there's a sync IPC call that got a response not of the expected type, meaning that the IPC message layer got message ordering wrong and violated the IPDL layer's type safety. Trying to find the cause beyond that from crash data may not be possible; I don't know that the code representing the root cause would still be on a stack at that point.
Summary: crash in mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::ipc::FatalError(char const*, char const*, void*, bool) | mozilla::jsipc::PJavaScriptChild::Read(mozilla::jsipc::JSVariant*, IPC::Message const*, void**) → mozilla::ipc::FatalError crash in mozilla::jsipc::PJavaScriptChild::Read
Bill, is this strictly add-on CPOW related?
Flags: needinfo?(wmccloskey)
Yes, this is one of the IPC bugs I'm hoping to fix soon.
Flags: needinfo?(wmccloskey)
Whiteboard: [e10s-45-uplift]
QA Contact: wmccloskey
Assignee: nobody → wmccloskey
QA Contact: wmccloskey
Crash Signature: , void**)] [@ mozalloc_abort | NS_DebugBreak | mozilla::ipc::FatalError | mozilla::jsipc::PJavaScriptChild::Read] → , void**)] [@ mozalloc_abort | NS_DebugBreak | mozilla::ipc::FatalError | mozilla::jsipc::PJavaScriptChild::Read] [@ mozalloc_abort | NS_DebugBreak | mozilla::ipc::FatalError | mozilla::dom::PContentChild::FatalError | mozilla::dom::PContentChild::SendS…
Keywords: meta
Priority: -- → P1
Priority: P1 → P3
¡Hola! None of the signatures on this bug has crashes in the past week, resolving. ¡Gracias! Alex
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.