1187953 - Crashes on Motorola RAZRi with no usable stack

Status: RESOLVED WONTFIX

(Toolkit :: Crash Reporting, defect)

Description

[Gian-Carlo Pascutto [:gcp]]

This bug was filed from the Socorro interface and is 
report bp-401e58fb-df2a-4b56-a102-550ce2150727.
=============================================================

Comment 1

[Gian-Carlo Pascutto [:gcp]]

I'm seeing this often when browsing with Aurora on a Motorola RaZRi, Android 4.1.x, x86.

Unfortunately no stacks, nothing in the log, and the crash address varies :-(

Comment 2

[Gian-Carlo Pascutto [:gcp]]

https://crash-stats.mozilla.com/report/index/1a72476a-2932-4394-9baf-8372d2150808
https://crash-stats.mozilla.com/report/index/7c22b75a-56f4-47d6-8c96-397e62150806
https://crash-stats.mozilla.com/report/index/78a071e0-e483-4ce4-b3ce-a94652150801
https://crash-stats.mozilla.com/report/index/1df4234b-2c91-4125-9b13-533892150801
https://crash-stats.mozilla.com/report/index/6176b248-4970-4729-8519-3e81b2150801

Fennec is almost unusable on this device.

Comment 3

[Kevin Brosnan [Ex-Mozilla]]

Ted or Kairo are we uploading the x86 Android build debug symbols? If you don't know please forward to someone on the build infrastructure team.

Comment 4

[(not currently active) Ted Mielczarek]

This isn't about symbols, this report is showing that is has no modules (check the modules tab), so it can't even associate code addresses with code modules.

Comment 5

[(not currently active) Ted Mielczarek]

stderr from minidump_stackwalk shows:
2015-08-11 07:06:22: minidump.cc:2557: ERROR: MinidumpModuleList could not store module 186/188, libnss3.so, 0x57f27000+0x287000

...which indicates that we've got a problem with the entries in the module list here.

Comment 6

[Mike Hommey [:glandium]]

Try to set MOZ_LINKER_ONDEMAND to 0 in the environment and see if that still happens then.

Comment 7

[(not currently active) Ted Mielczarek]

From /proc/self/maps inside the minidump (you can see this with minidump_dump):
57c3c000-57f27000 rw-s 00000000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
57f27000-57f63000 r-xs 00000000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
57f63000-57f67000 ---s 0003c000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
57f67000-57fab000 r-xs 00040000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
57fab000-57faf000 ---s 00084000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
57faf000-57fbf000 r-xs 00088000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
57fbf000-57fc3000 ---s 00098000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
57fc3000-5800b000 r-xs 0009c000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
5800b000-5800f000 ---s 000e4000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
5800f000-58077000 r-xs 000e8000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
58077000-5807f000 ---s 00150000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
5807f000-5808f000 r-xs 00158000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
5808f000-58093000 ---s 00168000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
58093000-580df000 r-xs 0016c000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
580df000-580e3000 ---s 001b8000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
580e3000-580ef000 r-xs 001bc000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
580ef000-5819d000 ---s 001c8000 00:04 49004      /dev/ashmem/libnss3.so (deleted)
5819e000-581ab000 rw-s 00276000 00:04 49004      /dev/ashmem/libnss3.so (deleted)

It's barfing on adding libnss3 after the /dev/ashmem mapping:
133,/dev/ashmem/libnss3.so (deleted),0x57c3c000,0x561000
186,libnss3.so,0x57f27000,0x287000

Humorously, Breakpad has a special-case for /dev/ashmem mappings, but it only works the other way (if an ashmem mapping conflicts with an existing mapping):
https://code.google.com/p/google-breakpad/source/browse/trunk/src/processor/minidump.cc#2550

Comment 8

[Mike Hommey [:glandium]]

Breakpad is supposed to be fed with report_mapping for those.
https://dxr.mozilla.org/mozilla-central/source/mozglue/linker/CustomElf.cpp#222

Comment 9

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.

Comment 10

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.