1125806 - [7715ea_v2.1][ dolphin] monkey test crash at libxul.so!mozilla::layers::OverscrollHandoffChain::IndexOf

Status: RESOLVED DUPLICATE of bug 1119120

(Firefox OS Graveyard :: Stability, defect)

Description

[ben.song]

backtrace:

0  libxul.so!mozilla::layers::OverscrollHandoffChain::IndexOf(mozilla::layers::AsyncPanZoomController const*) const [_vector.h : 192 + 0x0]
1  libxul.so!mozilla::layers::OverscrollHandoffChain::CanBePanned(mozilla::layers::AsyncPanZoomController const*) const [OverscrollHandoffState.cpp : 131 + 0x3]
2  libxul.so!mozilla::layers::AsyncPanZoomController::ArePointerEventsConsumable(mozilla::layers::TouchBlockState*, unsigned int) [AsyncPanZoomController.cpp : 841 + 0xd]
3  libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent(mozilla::InputData const&) [AsyncPanZoomController.cpp : 911 + 0x9]
4  libxul.so!mozilla::layers::APZCTreeManager::ProcessTouchInput(mozilla::MultiTouchInput&, mozilla::layers::ScrollableLayerGuid*) [APZCTreeManager.cpp : 675 + 0x7]
5  libxul.so!mozilla::layers::APZCTreeManager::ReceiveInputEvent(mozilla::WidgetInputEvent&, mozilla::layers::ScrollableLayerGuid*) [APZCTreeManager.cpp : 769 + 0x9]
6  libxul.so!mozilla::dom::TabParent::SendRealTouchEvent(mozilla::WidgetTouchEvent&) [TabParent.cpp : 999 + 0x3]
7  libxul.so!mozilla::dom::TabParent::TryCapture(mozilla::WidgetGUIEvent const&) [TabParent.cpp : 1056 + 0x7]
8  libxul.so!nsWindow::DispatchInputEvent(mozilla::WidgetGUIEvent&, bool*) [nsWindow.cpp : 227 + 0x5]
9  libxul.so!mozilla::GeckoTouchDispatcher::DispatchTouchEvent(mozilla::MultiTouchInput&) [GeckoTouchDispatcher.cpp : 367 + 0x9]
10  libxul.so!mozilla::DispatchSingleTouchMainThread::Run() [GeckoTouchDispatcher.cpp : 110 + 0x7]
11  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 823 + 0x5]
12  libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 265 + 0xb]
13  libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 99 + 0x7]
14  libxul.so!MessageLoop::RunInternal() [message_loop.cc : 234 + 0x5]
15  libxul.so!MessageLoop::Run() [message_loop.cc : 227 + 0x5]
16  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 164 + 0x7]
17  libxul.so!nsAppStartup::Run() [nsAppStartup.cpp : 280 + 0x5]
18  libxul.so!XREMain::XRE_mainRun() [nsAppRunner.cpp : 4128 + 0x5]
19  libxul.so!XREMain::XRE_main(int, char**, nsXREAppData const*) [nsAppRunner.cpp : 4201 + 0x5]
20  libxul.so!XRE_main [nsAppRunner.cpp : 4415 + 0x3]
21  b2g!do_main [nsBrowserApp.cpp : 165 + 0xf]
22  b2g!b2g_main(int, char const**) [nsBrowserApp.cpp : 291 + 0x5]
23  b2g!main [B2GLoader.cpp : 225 + 0x7]
24  libc.so!__libc_init [libc_init_dynamic.cpp : 112 + 0x7]
25  b2g + 0x2be2
26  linker!set_soinfo_pool_protection [linker.cpp : 291 + 0xb]
27  0xbedaeb5c

Comment 1

[ben.song]

Dear Rex, Danny,

Does this code as below have any problem while mChain[i] not equal with aApzc forever ?

uint32_t
OverscrollHandoffChain::IndexOf(const AsyncPanZoomController* aApzc) const
{
  uint32_t i;
  for (i = 0; i < Length(); ++i) {
    if (mChain[i] == aApzc) {
      break;
    }
  }
  return i;
}

Comment 2

[Rex Hung[:rhung]]

Hi, Ben,

Could you run "check_versions.sh" to provide us the completed SW version of your source tree first?
Thank you.

Comment 3

[ben.song]

(In reply to Rex Hung from comment #2)
> Hi, Ben,
> 
> Could you run "check_versions.sh" to provide us the completed SW version of
> your source tree first?
> Thank you.

Dear Rex,

Where is the file of 'check_versions.sh' load, I couldn't find it.

Thanks.

Comment 4

[Rex Hung[:rhung]]

Please refer to the following steps:
1. git clone https://github.com/Mozilla-TWQA/B2G-flash-tool
2. cd B2G-flash-tool/
3. Connect USB cable to your device and make sure adb works well.
4. Run ./check_version.sh

You should get some output with the following format. Please post them on the bug.
========================================================
Gaia-Rev        3c9bb36d9ade1a0acd5e1d6cbb5057be7f512345
Gecko-Rev       1a8c9ca21c1a6b4eac22dac4c8557712907abcde
Build-ID        20150105185555
Version         32.0
Device-Name     flame
FW-Release      4.4.2
FW-Incremental  eng.buildmachine.20150105.184516
FW-Date         一  1月  5 18:45:33 CST 2015
Bootloader      L1TC00011880

Comment 5

[ben.song]

(In reply to Rex Hung from comment #4)
> Please refer to the following steps:
> 1. git clone https://github.com/Mozilla-TWQA/B2G-flash-tool
> 2. cd B2G-flash-tool/
> 3. Connect USB cable to your device and make sure adb works well.
> 4. Run ./check_version.sh
> 
> You should get some output with the following format. Please post them on
> the bug.
> ========================================================
> Gaia-Rev        3c9bb36d9ade1a0acd5e1d6cbb5057be7f512345
> Gecko-Rev       1a8c9ca21c1a6b4eac22dac4c8557712907abcde
> Build-ID        20150105185555
> Version         32.0
> Device-Name     flame
> FW-Release      4.4.2
> FW-Incremental  eng.buildmachine.20150105.184516
> FW-Date         一  1月  5 18:45:33 CST 2015
> Bootloader      L1TC00011880


Dear Rex,

The completed SW version of my source tree as below:

Device-Name     scx15_sp7715ea
FW-Release      4.4.2
FW-Incremental  eng.bensong.20150116.200938
FW-Date         Fri Jan 16 20:24:59 CST 2015

Thanks.

Comment 6

[Rex Hung[:rhung]]

Hi, Ben,

Do you see any error messages before the SW information you provided in Comment 5?
You are supposed to see last gaia and gecko commit ID, build ID, and version number.
> Gaia-Rev        3c9bb36d9ade1a0acd5e1d6cbb5057be7f512345
> Gecko-Rev       1a8c9ca21c1a6b4eac22dac4c8557712907abcde
> Build-ID        20150105185555
> Version         32.0

Comment 7

[ben.song]

(In reply to Rex Hung from comment #6)
> Hi, Ben,
> 
> Do you see any error messages before the SW information you provided in
> Comment 5?
> You are supposed to see last gaia and gecko commit ID, build ID, and version
> number.
> > Gaia-Rev        3c9bb36d9ade1a0acd5e1d6cbb5057be7f512345
> > Gecko-Rev       1a8c9ca21c1a6b4eac22dac4c8557712907abcde
> > Build-ID        20150105185555
> > Version         32.0

Dear Rex,

The SW information which has reproduce this bug as below:

Gaia-Rev        2055fc40a8bd2af1908979cb45da6b7d1c4ced0b
Gecko-Rev       117b02783b5fb93e122ff8bd5791501dbc966f4f
Build-ID        20150122152411
Version         34.0
Device-Name     scx15_sp7715ea
FW-Release      4.4.2
FW-Incremental  93
FW-Date         Thu Jan 22 15:21:20 CST 2015

Thanks.

Comment 8

[shawn ku [:sku]]

Vincent/Wenyuan:
 Please help offload some task from Danny/Rex.
Check if anything we can help then.

Comment 9

[Steven Yang [:styang]]

Frequently hit. blocking...

Comment 10

[Vincent Liu[:vliu]]

Hi ben.song,

Could you please attach more log info for deeper analysis? Thanks

Comment 11

[ben.song]

Dear Vincent,

I have added some log about it, the corresponding log has been uploaded at:

In the log also contains others crash.

ftp://ftp.spreadtrum.com/7715/1125806/

username:mouzhi
password:mouZHI$$61

Comment 12

[Vincent Liu[:vliu]]

(In reply to ben.song from comment #11)
> Dear Vincent,
> 
> I have added some log about it, the corresponding log has been uploaded at:
> 
> In the log also contains others crash.
> 
> ftp://ftp.spreadtrum.com/7715/1125806/
> 
> username:mouzhi
> password:mouZHI$$61

Hi ben,

Could you please specify which .extra file is the right one to look into? Thanks

Comment 13

[ben.song]

Dear Vincent,

I have added some log about it, the corresponding log has been uploaded at:

ftp://ftp.spreadtrum.com/7715/1125806/1125806_log_2.tar.gz

Base on my analysis We find this crash appears at 01-27 14:29:27.260.

username:mouzhi
password:mouZHI$$61

Thanks.

Comment 14

[ben.song]

Dear Vincent,

File of 5fe20338-7037-6d64-20b84538-1f0c465a.extra is the right .extra file of this crash.

Thanks.

Comment 15

[Danny Liang [:dliang]]

(In reply to Vincent Liu[:vliu] from comment #12)
> (In reply to ben.song from comment #11)
> > Dear Vincent,
> > 
> > I have added some log about it, the corresponding log has been uploaded at:
> > 
> > In the log also contains others crash.
> > 
> > ftp://ftp.spreadtrum.com/7715/1125806/
> > 
> > username:mouzhi
> > password:mouZHI$$61
> 
> Hi ben,
> 
> Could you please specify which .extra file is the right one to look into?
> Thanks

Hi Ben,
The log you provided included 10+ crashes, we might need your help to point out the right one and we can do further analysis. Moreover, could you also provide complete and readable crash reporter include crash reason and address? they are all clues. 

One more thing, we also try to reproduce the crash issue you reported, but it's hard to reproduce. Is it possible you can provide your owned patches and we can check if there is any relationship. That might be help.
Thanks,

Comment 16

[ben.song]

(In reply to Danny Liang [:dliang] from comment #15)
> (In reply to Vincent Liu[:vliu] from comment #12)
> > (In reply to ben.song from comment #11)
> > > Dear Vincent,
> > > 
> > > I have added some log about it, the corresponding log has been uploaded at:
> > > 
> > > In the log also contains others crash.
> > > 
> > > ftp://ftp.spreadtrum.com/7715/1125806/
> > > 
> > > username:mouzhi
> > > password:mouZHI$$61
> > 
> > Hi ben,
> > 
> > Could you please specify which .extra file is the right one to look into?
> > Thanks
> 
> Hi Ben,
> The log you provided included 10+ crashes, we might need your help to point
> out the right one and we can do further analysis. Moreover, could you also
> provide complete and readable crash reporter include crash reason and
> address? they are all clues. 
> 
> One more thing, we also try to reproduce the crash issue you reported, but
> it's hard to reproduce. Is it possible you can provide your owned patches
> and we can check if there is any relationship. That might be help.
> Thanks,

Dear Danny,

The reproduce of this crash in 1125806_log.tar.gz happens at about 01-31 07:57:57 or 07:57:59.

I would upload sprd patch files and information of two reproduce of this crash.

Thanks.

Comment 17

[ben.song]

Attachment: two_crash_information.tar.gz

Here is crash information of file 1125806_log.tar.gz and 1125806_log_2.tar.gz.

Thanks.

Comment 18

[ben.song]

Attachment: sp7715_FFOS_patch.tar.gz

Here is local patches of sprd7715_v2.1 so far.

Thanks.

Comment 19

[Vincent Liu[:vliu]]

(In reply to ben.song from comment #13)
> Dear Vincent,
> 
> I have added some log about it, the corresponding log has been uploaded at:
> 
> ftp://ftp.spreadtrum.com/7715/1125806/1125806_log_2.tar.gz
> 
> Base on my analysis We find this crash appears at 01-27 14:29:27.260.
> 
> username:mouzhi
> password:mouZHI$$61
> 
> Thanks.

From your log report, we can't figure out what the really problem is. We will try to discuss internally if we can add more log to look into this issue.

Comment 20

[ben.song]

(In reply to Vincent Liu[:vliu] from comment #19)
> (In reply to ben.song from comment #13)
> > Dear Vincent,
> > 
> > I have added some log about it, the corresponding log has been uploaded at:
> > 
> > ftp://ftp.spreadtrum.com/7715/1125806/1125806_log_2.tar.gz
> > 
> > Base on my analysis We find this crash appears at 01-27 14:29:27.260.
> > 
> > username:mouzhi
> > password:mouZHI$$61
> > 
> > Thanks.
> 
> From your log report, we can't figure out what the really problem is. We
> will try to discuss internally if we can add more log to look into this
> issue.

Dear Vincent,

We have started monkey test of clean version, if you want to add some log of this problem, i would push it into sprd clean version to do monkey test. If this crash reproduce, i would apply new logs.

Thanks.

Comment 21

[Vance Chen [:vchen][skype:vance.lucida][[e-mail]]]

Hi Song Ben -

So the clean version means the version that directly build from 2.1(or 2.1s) without any SPRD patches?

Thanks

Comment 22

[ben.song]

(In reply to Vance Chen [:vchen][[e-mail]] from comment #21)
> Hi Song Ben -
> 
> So the clean version means the version that directly build from 2.1(or 2.1s)
> without any SPRD patches?
> 
> Thanks

Dear Vance,

Yes, clean version is the version directly build from 2.1 except some log about crash problems.

Thanks.

Comment 23

[Vance Chen [:vchen][skype:vance.lucida][[e-mail]]]

(In reply to ben.song from comment #22)
> (In reply to Vance Chen [:vchen][[e-mail]] from comment #21)
> > Hi Song Ben -
> > 
> > So the clean version means the version that directly build from 2.1(or 2.1s)
> > without any SPRD patches?
> > 
> > Thanks
> 
> Dear Vance,
> 
> Yes, clean version is the version directly build from 2.1 except some log
> about crash problems.
> 
> Thanks.

Thanks, Since here in our office we just cannot reproduce these Monkey issues with our own clean build. It would be very helpful to know if you also cannot reproduce these high frequency monkey issues with the clean version.

Comment 24

[ben.song]

(In reply to Vance Chen [:vchen][[e-mail]] from comment #23)
> (In reply to ben.song from comment #22)
> > (In reply to Vance Chen [:vchen][[e-mail]] from comment #21)
> > > Hi Song Ben -
> > > 
> > > So the clean version means the version that directly build from 2.1(or 2.1s)
> > > without any SPRD patches?
> > > 
> > > Thanks
> > 
> > Dear Vance,
> > 
> > Yes, clean version is the version directly build from 2.1 except some log
> > about crash problems.
> > 
> > Thanks.
> 
> Thanks, Since here in our office we just cannot reproduce these Monkey
> issues with our own clean build. It would be very helpful to know if you
> also cannot reproduce these high frequency monkey issues with the clean
> version.

Dear Vance,

Today we have reproduce some high frequency monkey issues with clean version, but without this crash problem. We would upload these logs to their corresponding moz bug and continue do monkey test with clean version.

Thanks.

Comment 25

[ben.song]

Dear Danny,

I have uploaded the logs reproduced nine times today.

ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_log_2.tar.bz2
ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_log.tar.bz2
ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_log.parse

username:mouzhi
password:mouZHI$$61

Thanks.

Comment 26

[Wenyuan Chi [:wchi]]

Hi ben

I got the log. Thank you.

There are 3 different backtraces in the log.
It looks like there is threading problem.
I will prepare a patch to confirm that.

thanks.

=====
 0  libxul.so!mozilla::layers::OverscrollHandoffChain::IndexOf(mozilla::layers::AsyncPanZoomController const*) const [_vector.h : 192 + 0x0]
 1  libxul.so!mozilla::layers::OverscrollHandoffChain::CanBePanned(mozilla::layers::AsyncPanZoomController const*) const [OverscrollHandoffState.cpp : 131 + 0x3]
 2  libxul.so!mozilla::layers::AsyncPanZoomController::ArePointerEventsConsumable(mozilla::layers::TouchBlockState*, unsigned int) [AsyncPanZoomController.cpp : 842 + 0xd]
 3  libxul.so!mozilla::layers::AsyncPanZoomController::ReceiveInputEvent(mozilla::InputData const&) [AsyncPanZoomController.cpp : 912 + 0x9]
 4  libxul.so!mozilla::layers::APZCTreeManager::ProcessTouchInput(mozilla::MultiTouchInput&, mozilla::layers::ScrollableLayerGuid*) [APZCTreeManager.cpp : 675 + 0x7]
 5  libxul.so!mozilla::layers::APZCTreeManager::ReceiveInputEvent(mozilla::WidgetInputEvent&, mozilla::layers::ScrollableLayerGuid*) [APZCTreeManager.cpp : 769 + 0x9]
 6  libxul.so!mozilla::dom::TabParent::SendRealTouchEvent(mozilla::WidgetTouchEvent&) [TabParent.cpp : 999 + 0x3]
 7  libxul.so!mozilla::EventStateManager::HandleCrossProcessEvent(mozilla::WidgetEvent*, nsEventStatus*) [EventStateManager.cpp : 1267 + 0xb]
 8  libxul.so!mozilla::EventStateManager::PostHandleEvent(nsPresContext*, mozilla::WidgetEvent*, nsIFrame*, nsEventStatus*) [EventStateManager.cpp : 2679 + 0x7]
 9  libxul.so!PresShell::HandleEventInternal(mozilla::WidgetEvent*, nsEventStatus*) [nsPresShell.cpp : 7806 + 0x13]
=====
 0  libxul.so!nsTArray_Impl<mozilla::SingleTouchData, nsTArrayInfallibleAllocator>::~nsTArray_Impl() [nsTArray.h : 328 + 0x0]
 1  libxul.so!nsTArray_Impl<mozilla::MultiTouchInput, nsTArrayInfallibleAllocator>::RemoveElementsAt(unsigned int, unsigned int) [nsTArray.h : 1716 + 0x3]
 2  libxul.so!mozilla::layers::TouchBlockState::RemoveFirstEvent() [nsTArray.h : 1344 + 0x9]
 3  libxul.so!mozilla::layers::AsyncPanZoomController::ProcessPendingInputBlocks() [AsyncPanZoomController.cpp : 2731 + 0x7]
 4  libxul.so!mozilla::layers::APZCTreeManager::ContentReceivedTouch(mozilla::layers::ScrollableLayerGuid const&, bool) [APZCTreeManager.cpp : 803 + 0x5]
 5  libxul.so!mozilla::dom::TabParent::RecvContentReceivedTouch(mozilla::layers::ScrollableLayerGuid const&, bool const&) [TabParent.cpp : 2049 + 0x7]
 6  libxul.so!mozilla::dom::PBrowserParent::OnMessageReceived(IPC::Message const&) [PBrowserParent.cpp : 2023 + 0xd]
=====
0  libxul.so!mozilla::layers::TouchBlockState::HasEvents() const [InputBlockState.cpp : 142 + 0x0]
1  libxul.so!mozilla::layers::AsyncPanZoomController::ProcessPendingInputBlocks() [AsyncPanZoomController.cpp : 2730 + 0x5]
2  libxul.so!mozilla::layers::APZCTreeManager::ContentReceivedTouch(mozilla::layers::ScrollableLayerGuid const&, bool) [APZCTreeManager.cpp : 803 + 0x5]
3  libxul.so!mozilla::dom::TabParent::RecvContentReceivedTouch(mozilla::layers::ScrollableLayerGuid const&, bool const&) [TabParent.cpp : 2049 + 0x7]
4  libxul.so!mozilla::dom::PBrowserParent::OnMessageReceived(IPC::Message const&) [PBrowserParent.cpp : 2023 + 0xd]
=====

Comment 27

[Wenyuan Chi [:wchi]]

Attachment: turn_on_assert.patch

Patch for catching treading problem.

Hi Ben,
Please apply this patch and run test again.

Thanks

Comment 28

[ben.song]

(In reply to wchi from comment #27)
> Created attachment 8560242 [details] [diff] [review]
> turn_on_assert.patch
> 
> Patch for catching treading problem.
> 
> Hi Ben,
> Please apply this patch and run test again.
> 
> Thanks

Dear wchi,

I would apply this patch into sprd clean version, and if this crash problem reproduce i would apply the logs.

Thanks.

Comment 29

[Wenyuan Chi [:wchi]]

Attachment: turn_on_assert.patch

turn on more log
please use this patch instead.

thanks

Comment 30

[Vance Chen [:vchen][skype:vance.lucida][[e-mail]]]

Hi Song Ben, please help to use the patch in Comment#29 and then run the monkey again

Thanks

Comment 31

[ben.song]

(In reply to Vance Chen [:vchen][[e-mail]] from comment #30)
> Hi Song Ben, please help to use the patch in Comment#29 and then run the
> monkey again
> 
> Thanks

Dear Vance, Wchi,

I have applied this last patch, and this problem has reproduced several times. I have uploaded logs at:

ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_new_log.tar.bz2
ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_new_log_2.tar.bz2
ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_new_log_3.tar.bz2
ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_new_log.parse
ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_new_log_2.parse
ftp://ftp.spreadtrum.com/7715/1125806/1125806_clean_new_log_3.parse

username:mouzhi
password:mouZHI$$61

Thanks.

Comment 32

[Wenyuan Chi [:wchi]]

Hi Ben,

Those log helps!
Thanks.

Comment 33

[Wenyuan Chi [:wchi]]

Hi Kats,

Can you take a look at this issue and give me some advise?

From what I saw, it looks like this object, mTouchBlockQueue, is damaged during the monkey test.
I'm wondering that if APZ is thread-safe in v2.1?

I try to get some clue from central branch.
But the APZ code is quite different.
If there is really a threading issue in v2.1, how do I fix it?

Comment 34

[Wenyuan Chi [:wchi]]

Attachment: partial log from 1125806_clean_new_log.tar.bz2

Crash around "07-22 12:28:54.210", line 4465.

Comment 35

[Kartikaya Gupta (email:[e-mail])]

Let's look at bug 1119120 first. There are all probably the same bug and spreading the investigation over multiple bugs will just take longer and make it more confusing. I'll look at the logs in this bug along with the logs in that one and post my findings in that bug.

Comment 36

[Wenyuan Chi [:wchi]]

Hi Ben,

Please take patch in Bug 1119120 and give it a try.
Several crash reported in monkey tests are the same root cause.
To save testing effort, maybe you can contact with yaoyao.wu first.

Thanks

Comment 37

[Vance Chen [:vchen][skype:vance.lucida][[e-mail]]]

Hi Siiaceon, Ben -

Since the patch of Bug#1119120 might help to solve some critical monkey crash issues, it would be nice if your team can help to setup some monkey test as earlier as this noon to verify the patch(also please add the debugging log mentioned in these bugs as well).

Since Kats is in different timezone than us, it would be nice if we can have some test results or logs before COB today, then maybe Kats can help checking these logs again later tonight(his morning)

Thanks

Comment 38

[ben.song]

(In reply to Vance Chen [:vchen][[e-mail]] from comment #37)
> Hi Siiaceon, Ben -
> 
> Since the patch of Bug#1119120 might help to solve some critical monkey
> crash issues, it would be nice if your team can help to setup some monkey
> test as earlier as this noon to verify the patch(also please add the
> debugging log mentioned in these bugs as well).
> 
> Since Kats is in different timezone than us, it would be nice if we can have
> some test results or logs before COB today, then maybe Kats can help
> checking these logs again later tonight(his morning)
> 
> Thanks

Dear Vance, wchi, 

We have applied the patch given by Kats, and we are ready for verified of these crash problem.

If these problem reproduce, we would upload logs as soon as possible. If not reproduce, we would give you feedback three days later.

Thanks.

Comment 39

[siiaceon]

keep ni of Ben until result out

Comment 40

[siiaceon]

ni me too

Comment 41

[ben.song]

Dear Vance,  Kartikaya,

We have verified the patch from bug1119120, and this crash problem haven't reproduced.

Thanks.

Comment 42

[Kartikaya Gupta (email:[e-mail])]

Thanks; duping this bug over then.

Comment 43

[Danny Liang [:dliang]]

Clear NI due to Kartikaya is checking on this.