Closed Bug 1205467 Opened 10 years ago Closed 10 years ago

crash in WaitForSingleObjectEx | je_arena_malloc | mozilla::CondVar::Wait(unsigned int)

Categories

(Core :: IPC, defect)

Product:
Core
Component:
IPC
Version:
43 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: alex_mayorga, Unassigned)

References

Details

(Keywords: crash)

This bug was filed from the Socorro interface and is report bp-6e4ce1ce-f3c6-4f49-84c8-fd1e02150916. ============================================================= Crashing Thread Frame Module Signature Source 0 ntdll.dll ZwWaitForSingleObject 1 kernelbase.dll WaitForSingleObjectEx 2 mozglue.dll je_arena_malloc memory/jemalloc/src/include/jemalloc/internal/arena.h 3 @0xfffffffe 4 xul.dll mozilla::CondVar::Wait(unsigned int) xpcom/glue/CondVar.h 5 xul.dll mozilla::ipc::MessageChannel::WaitForSyncNotify() ipc/glue/WindowsMessageLoop.cpp 6 xul.dll mozilla::ipc::MessageChannel::Send(IPC::Message*, IPC::Message*) ipc/glue/MessageChannel.cpp 7 xul.dll mozilla::dom::PContentChild::SendGetGraphicsFeatureStatus(int const&, int*, bool*) obj-firefox/ipc/ipdl/PContentChild.cpp 8 xul.dll mozilla::widget::GfxInfoBase::GetFeatureStatus(int, int*) widget/GfxInfoBase.cpp 9 xul.dll InitLayersAccelerationPrefs() gfx/thebes/gfxPlatform.cpp 10 xul.dll gfxPlatform::Init() gfx/thebes/gfxPlatform.cpp 11 xul.dll gfxPlatform::GetPlatform() gfx/thebes/gfxPlatform.cpp 12 xul.dll mozilla::dom::ContentProcess::Init() dom/ipc/ContentProcess.cpp 13 xul.dll XRE_InitChildProcess toolkit/xre/nsEmbedFunctions.cpp 14 plugin-container.exe wmain toolkit/xre/nsWindowsWMain.cpp 15 plugin-container.exe __tmainCRTStartup f:/dd/vctools/crt/crtw32/startup/crt0.c:255 16 kernel32.dll BaseThreadInitThunk 17 ntdll.dll RtlUserThreadStart Seems to be a 64-bit only crash 24% of them are startup crashes if I'm interpreting this correctly... https://crash-stats.mozilla.com/report/list?product=Firefox&range_unit=days&range_value=28&signature=WaitForSingleObjectEx+|+je_arena_malloc+|+mozilla%3A%3ACondVar%3A%3AWait%28unsigned+int%29
Still a thing on 44... Closed a private window and it crashed all tabs on the not private window =( bp-7395a88f-c02a-412a-b932-759672151008 08/10/2015 05:07 p.m. Crashing Thread Frame Module Signature Source 0 ntdll.dll ZwWaitForSingleObject 1 kernelbase.dll WaitForSingleObjectEx 2 mozglue.dll je_arena_malloc memory/jemalloc/src/include/jemalloc/internal/arena.h 3 xul.dll mozilla::CondVar::Wait(unsigned int) xpcom/glue/CondVar.h 4 xul.dll mozilla::ipc::MessageChannel::WaitForSyncNotify() ipc/glue/WindowsMessageLoop.cpp 5 xul.dll mozilla::ipc::MessageChannel::Send(IPC::Message*, IPC::Message*) ipc/glue/MessageChannel.cpp 6 xul.dll mozilla::dom::PBrowserChild::SendRpcMessage(nsString const&, mozilla::dom::ClonedMessageData const&, nsTArray<mozilla::jsipc::CpowEntry> const&, IPC::Principal const&, nsTArray<mozilla::dom::ipc::StructuredCloneData>*) obj-firefox/ipc/ipdl/PBrowserChild.cpp 7 xul.dll mozilla::dom::TabChild::DoSendBlockingMessage(JSContext*, nsAString_internal const&, mozilla::dom::ipc::StructuredCloneData&, JS::Handle<JSObject*>, nsIPrincipal*, nsTArray<mozilla::dom::ipc::StructuredCloneData>*, bool) dom/ipc/TabChild.cpp 8 xul.dll nsFrameMessageManager::SendMessage(nsAString_internal const&, JS::Handle<JS::Value>, JS::Handle<JS::Value>, nsIPrincipal*, JSContext*, unsigned char, JS::MutableHandle<JS::Value>, bool) dom/base/nsFrameMessageManager.cpp 9 xul.dll nsFrameMessageManager::SendRpcMessage(nsAString_internal const&, JS::Handle<JS::Value>, JS::Handle<JS::Value>, nsIPrincipal*, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) dom/base/nsFrameMessageManager.cpp 10 xul.dll mozilla::dom::TabChildGlobal::SendRpcMessage(nsAString_internal const&, JS::Handle<JS::Value>, JS::Handle<JS::Value>, nsIPrincipal*, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) dom/ipc/TabChild.h 11 xul.dll XPTC__InvokebyIndex xpcom/reflect/xptcall/md/win32/xptcinvoke_asm_x86_64.asm 12 @0x1dbb607 13 xul.dll XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) js/xpconnect/src/XPCWrappedNativeJSOps.cpp 14 xul.dll js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 15 xul.dll Interpret js/src/vm/Interpreter.cpp 16 xul.dll js::RunScript(JSContext*, js::RunState&) js/src/vm/Interpreter.cpp 17 xul.dll js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 18 xul.dll js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 19 xul.dll js::DirectProxyHandler::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/proxy/DirectProxyHandler.cpp 20 xul.dll js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/proxy/CrossCompartmentWrapper.cpp 21 xul.dll js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 22 xul.dll js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 23 xul.dll JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) js/src/jsapi.cpp 24 xul.dll mozilla::jsipc::WrapperAnswer::RecvCallOrConstruct(mozilla::jsipc::ObjectId const&, nsTArray<mozilla::jsipc::JSParam>&&, bool const&, mozilla::jsipc::ReturnStatus*, mozilla::jsipc::JSVariant*, nsTArray<mozilla::jsipc::JSParam>*) js/ipc/WrapperAnswer.cpp 25 xul.dll mozilla::jsipc::JavaScriptBase<mozilla::jsipc::PJavaScriptParent>::RecvCallOrConstruct(unsigned __int64 const&, nsTArray<mozilla::jsipc::JSParam>&&, bool const&, mozilla::jsipc::ReturnStatus*, mozilla::jsipc::JSVariant*, nsTArray<mozilla::jsipc::JSParam>*) js/ipc/JavaScriptBase.h 26 xul.dll mozilla::jsipc::PJavaScriptChild::OnMessageReceived(IPC::Message const&, IPC::Message*&) obj-firefox/ipc/ipdl/PJavaScriptChild.cpp 27 xul.dll mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&, IPC::Message*&) obj-firefox/ipc/ipdl/PCompositorChild.cpp 28 xul.dll mozilla::ipc::MessageChannel::DispatchSyncMessage(IPC::Message const&, IPC::Message*&) ipc/glue/MessageChannel.cpp 29 xul.dll mozilla::ipc::MessageChannel::DispatchMessageW(IPC::Message const&) ipc/glue/MessageChannel.cpp 30 xul.dll mozilla::ipc::MessageChannel::OnMaybeDequeueOne() ipc/glue/MessageChannel.cpp 31 xul.dll RunnableMethod<mozilla::ipc::MessageChannel, bool ( mozilla::ipc::MessageChannel::*)(void), Tuple0>::Run() ipc/chromium/src/base/task.h 32 xul.dll MessageLoop::DoWork() ipc/chromium/src/base/message_loop.cc 33 xul.dll mozilla::ipc::DoWorkRunnable::Run() ipc/glue/MessagePump.cpp 34 xul.dll nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp 35 xul.dll mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 36 xul.dll mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 37 xul.dll MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc 38 xul.dll MessageLoop::Run() ipc/chromium/src/base/message_loop.cc 39 xul.dll nsBaseAppShell::Run() widget/nsBaseAppShell.cpp 40 xul.dll nsAppShell::Run() widget/windows/nsAppShell.cpp 41 xul.dll XRE_RunAppShell toolkit/xre/nsEmbedFunctions.cpp 42 xul.dll mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 43 xul.dll MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc 44 xul.dll MessageLoop::Run() ipc/chromium/src/base/message_loop.cc 45 xul.dll XRE_InitChildProcess toolkit/xre/nsEmbedFunctions.cpp 46 plugin-container.exe wmain toolkit/xre/nsWindowsWMain.cpp 47 plugin-container.exe __tmainCRTStartup f:/dd/vctools/crt/crtw32/startup/crt0.c:255 48 kernel32.dll BaseThreadInitThunk 49 ntdll.dll RtlUserThreadStart 122 crashes in the past 28 days, 40.16% on Windows 10 and 100% 64-bit per https://crash-stats.mozilla.com/report/list?product=Firefox&range_unit=days&range_value=28&signature=WaitForSingleObjectEx+|+je_arena_malloc+|+mozilla%3A%3ACondVar%3A%3AWait%28unsigned+int%29
status-firefox44: --- → affected
Crash Signature: [@ WaitForSingleObjectEx | je_arena_malloc | mozilla::CondVar::Wait(unsigned int)] → [@ WaitForSingleObjectEx | je_arena_malloc | mozilla::CondVar::Wait(unsigned int)] [@ WaitForSingleObjectEx | je_arena_malloc | mozilla::CondVar::Wait]
(In reply to alex_mayorga from comment #1) > Still a thing on 44... > > Closed a private window and it crashed all tabs on the not private window =( > > bp-7395a88f-c02a-412a-b932-759672151008 > 08/10/2015 05:07 p.m. > > Crashing Thread > Frame Module Signature Source > 0 ntdll.dll ZwWaitForSingleObject > 1 kernelbase.dll WaitForSingleObjectEx > 2 mozglue.dll je_arena_malloc > memory/jemalloc/src/include/jemalloc/internal/arena.h > 3 xul.dll mozilla::CondVar::Wait(unsigned int) xpcom/glue/CondVar.h > 4 xul.dll mozilla::ipc::MessageChannel::WaitForSyncNotify() > ipc/glue/WindowsMessageLoop.cpp > 5 xul.dll mozilla::ipc::MessageChannel::Send(IPC::Message*, IPC::Message*) > ipc/glue/MessageChannel.cpp > 6 xul.dll mozilla::dom::PBrowserChild::SendRpcMessage(nsString const&, > mozilla::dom::ClonedMessageData const&, nsTArray<mozilla::jsipc::CpowEntry> > const&, IPC::Principal const&, > nsTArray<mozilla::dom::ipc::StructuredCloneData>*) > obj-firefox/ipc/ipdl/PBrowserChild.cpp > 7 xul.dll mozilla::dom::TabChild::DoSendBlockingMessage(JSContext*, > nsAString_internal const&, mozilla::dom::ipc::StructuredCloneData&, > JS::Handle<JSObject*>, nsIPrincipal*, > nsTArray<mozilla::dom::ipc::StructuredCloneData>*, bool) > dom/ipc/TabChild.cpp > 8 xul.dll nsFrameMessageManager::SendMessage(nsAString_internal const&, > JS::Handle<JS::Value>, JS::Handle<JS::Value>, nsIPrincipal*, JSContext*, > unsigned char, JS::MutableHandle<JS::Value>, bool) > dom/base/nsFrameMessageManager.cpp > 9 xul.dll nsFrameMessageManager::SendRpcMessage(nsAString_internal const&, > JS::Handle<JS::Value>, JS::Handle<JS::Value>, nsIPrincipal*, JSContext*, > unsigned char, JS::MutableHandle<JS::Value>) > dom/base/nsFrameMessageManager.cpp > 10 xul.dll mozilla::dom::TabChildGlobal::SendRpcMessage(nsAString_internal > const&, JS::Handle<JS::Value>, JS::Handle<JS::Value>, nsIPrincipal*, > JSContext*, unsigned char, JS::MutableHandle<JS::Value>) dom/ipc/TabChild.h > 11 xul.dll XPTC__InvokebyIndex > xpcom/reflect/xptcall/md/win32/xptcinvoke_asm_x86_64.asm > 12 @0x1dbb607 > 13 xul.dll XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) > js/xpconnect/src/XPCWrappedNativeJSOps.cpp > 14 xul.dll js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) > js/src/vm/Interpreter.cpp > 15 xul.dll Interpret js/src/vm/Interpreter.cpp > 16 xul.dll js::RunScript(JSContext*, js::RunState&) > js/src/vm/Interpreter.cpp > 17 xul.dll js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) > js/src/vm/Interpreter.cpp > 18 xul.dll js::Invoke(JSContext*, JS::Value const&, JS::Value const&, > unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) > js/src/vm/Interpreter.cpp > 19 xul.dll js::DirectProxyHandler::call(JSContext*, JS::Handle<JSObject*>, > JS::CallArgs const&) js/src/proxy/DirectProxyHandler.cpp > 20 xul.dll js::CrossCompartmentWrapper::call(JSContext*, > JS::Handle<JSObject*>, JS::CallArgs const&) > js/src/proxy/CrossCompartmentWrapper.cpp > 21 xul.dll js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) > js/src/vm/Interpreter.cpp > 22 xul.dll js::Invoke(JSContext*, JS::Value const&, JS::Value const&, > unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) > js/src/vm/Interpreter.cpp > 23 xul.dll JS::Call(JSContext*, JS::Handle<JS::Value>, > JS::Handle<JS::Value>, JS::HandleValueArray const&, > JS::MutableHandle<JS::Value>) js/src/jsapi.cpp > 24 xul.dll > mozilla::jsipc::WrapperAnswer::RecvCallOrConstruct(mozilla::jsipc::ObjectId > const&, nsTArray<mozilla::jsipc::JSParam>&&, bool const&, > mozilla::jsipc::ReturnStatus*, mozilla::jsipc::JSVariant*, > nsTArray<mozilla::jsipc::JSParam>*) js/ipc/WrapperAnswer.cpp > 25 xul.dll > mozilla::jsipc::JavaScriptBase<mozilla::jsipc::PJavaScriptParent>:: > RecvCallOrConstruct(unsigned __int64 const&, > nsTArray<mozilla::jsipc::JSParam>&&, bool const&, > mozilla::jsipc::ReturnStatus*, mozilla::jsipc::JSVariant*, > nsTArray<mozilla::jsipc::JSParam>*) js/ipc/JavaScriptBase.h > 26 xul.dll > mozilla::jsipc::PJavaScriptChild::OnMessageReceived(IPC::Message const&, > IPC::Message*&) obj-firefox/ipc/ipdl/PJavaScriptChild.cpp > 27 xul.dll mozilla::dom::PContentChild::OnMessageReceived(IPC::Message > const&, IPC::Message*&) obj-firefox/ipc/ipdl/PCompositorChild.cpp > 28 xul.dll mozilla::ipc::MessageChannel::DispatchSyncMessage(IPC::Message > const&, IPC::Message*&) ipc/glue/MessageChannel.cpp > 29 xul.dll mozilla::ipc::MessageChannel::DispatchMessageW(IPC::Message > const&) ipc/glue/MessageChannel.cpp > 30 xul.dll mozilla::ipc::MessageChannel::OnMaybeDequeueOne() > ipc/glue/MessageChannel.cpp > 31 xul.dll RunnableMethod<mozilla::ipc::MessageChannel, bool ( > mozilla::ipc::MessageChannel::*)(void), Tuple0>::Run() > ipc/chromium/src/base/task.h > 32 xul.dll MessageLoop::DoWork() ipc/chromium/src/base/message_loop.cc > 33 xul.dll mozilla::ipc::DoWorkRunnable::Run() ipc/glue/MessagePump.cpp > 34 xul.dll nsThread::ProcessNextEvent(bool, bool*) > xpcom/threads/nsThread.cpp > 35 xul.dll mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) > ipc/glue/MessagePump.cpp > 36 xul.dll > mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) > ipc/glue/MessagePump.cpp > 37 xul.dll MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc > 38 xul.dll MessageLoop::Run() ipc/chromium/src/base/message_loop.cc > 39 xul.dll nsBaseAppShell::Run() widget/nsBaseAppShell.cpp > 40 xul.dll nsAppShell::Run() widget/windows/nsAppShell.cpp > 41 xul.dll XRE_RunAppShell toolkit/xre/nsEmbedFunctions.cpp > 42 xul.dll > mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) > ipc/glue/MessagePump.cpp > 43 xul.dll MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc > 44 xul.dll MessageLoop::Run() ipc/chromium/src/base/message_loop.cc > 45 xul.dll XRE_InitChildProcess toolkit/xre/nsEmbedFunctions.cpp > 46 plugin-container.exe wmain toolkit/xre/nsWindowsWMain.cpp > 47 plugin-container.exe __tmainCRTStartup > f:/dd/vctools/crt/crtw32/startup/crt0.c:255 > 48 kernel32.dll BaseThreadInitThunk > 49 ntdll.dll RtlUserThreadStart > > 122 crashes in the past 28 days, 40.16% on Windows 10 and 100% 64-bit per > https://crash-stats.mozilla.com/report/ > list?product=Firefox&range_unit=days&range_value=28&signature=WaitForSingleOb > jectEx+|+je_arena_malloc+|+mozilla%3A%3ACondVar%3A%3AWait%28unsigned+int%29 way less now. only 5 crashes in 28 days. And they are all nightly builds - none aurora or beta. - https://crash-stats.mozilla.com/report/list?range_unit=days&range_value=28&signature=WaitForSingleObjectEx+%7C+je_arena_malloc+%7C+mozilla%3A%3ACondVar%3A%3AWait#tab-reports close WFM?
Flags: needinfo?(alex_mayorga)
¡Hola Wayne! I see 4 crashes in the past month at https://crash-stats.mozilla.com/report/list?range_unit=days&range_value=28&signature=WaitForSingleObjectEx+|+je_arena_malloc+|+mozilla%3A%3ACondVar%3A%3AWait#tab-sigsummary 3 on 43.0a1 and 1 on 44.0a1 I've personally not witnessed the crash since my last comment. Your call if you want to WFM this. ¡Gracias!
Flags: needinfo?(alex_mayorga) → needinfo?(vseerror)
right. I don't see a good reason to keep this open
Status: NEW → RESOLVED
Closed: 10 years ago
Flags: needinfo?(vseerror)
Resolution: --- → WORKSFORME
Updating crash signature to reflect changes to signature generation made in bug 1269817 (although reports older than a week will not be reprocessed), and adding dependency to ShutDownKill metabug. (These probably shouldn't all be separate bugs, but I'm not going to fix that up in a mass-change.)
Blocks: shutdownkill
Crash Signature: [@ WaitForSingleObjectEx | je_arena_malloc | mozilla::CondVar::Wait(unsigned int)] [@ WaitForSingleObjectEx | je_arena_malloc | mozilla::CondVar::Wait] → [@ IPCError-browser | ShutDownKill ]
You need to log in before you can comment on or make changes to this bug.