Closed Bug 1253253 Opened 8 years ago Closed 7 years ago

Intermittent PROCESS-CRASH | runner.py | application crashed [@ RefPtr<mozilla::dom::NodeInfo>::operator->() const]

Categories

(Core :: DOM: Core & HTML, defect, P5)

Product:
Core
Component:
DOM: Core & HTML
Version:
47 Branch
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox47 --- affected

People

(Reporter: whimboo, Unassigned)

Details

(Keywords: crash, intermittent-failure)

Crash Data

Two crashes with this signature yesterday for firefox-ui-tests in e10s and non-e10s mode:

https://treeherder.mozilla.org/#/jobs?repo=mozilla-inbound&filter-searchStr=Firefox%20UI&filter-tier=2&filter-tier=3&selectedJob=22928136&fromchange=93c0e8939efa

Stack with first 10 frames:

 09:15:03     INFO - Operating system: Linux

 09:15:03     INFO -                   0.0.0 Linux 3.13.0-79-generic #123-Ubuntu SMP Fri Feb 19 14:27:58 UTC 2016 x86_64

 09:15:03     INFO - CPU: amd64

 09:15:03     INFO -      family 6 model 62 stepping 4

 09:15:03     INFO -      1 CPU

 09:15:03     INFO - 

 09:15:03     INFO - Crash reason:  SIGSEGV

 09:15:03     INFO - Crash address: 0x20

 09:15:03     INFO - 

 09:15:03     INFO - Thread 0 (crashed)

 09:15:03     INFO -  0  libxul.so!RefPtr<mozilla::dom::NodeInfo>::operator->() const [RefPtr.h:8b0b020feaf6 : 296 + 0x0]

 09:15:03     INFO -     rbx = 0x00007fc0e3e422e0   r12 = 0x0000000000000001

 09:15:03     INFO -     r13 = 0x00007fc0e3e4f200   r14 = 0x00007ffee26fe118

 09:15:03     INFO -     r15 = 0x00007fc0e3e4f220   rip = 0x00007fc0ef2a1f5c

 09:15:03     INFO -     rsp = 0x00007ffee26fe048   rbp = 0x00007ffee26fe060

 09:15:03     INFO -     Found by: given as instruction pointer in context

 09:15:03     INFO -  1  libxul.so!nsIContent::IsHTMLElement(nsIAtom*) const [nsIContent.h:8b0b020feaf6 : 261 + 0x4]

 09:15:03     INFO -     rbx = 0x00007fc0e3e422e0   r12 = 0x0000000000000001

 09:15:03     INFO -     r13 = 0x00007fc0e3e4f200   r14 = 0x00007ffee26fe118

 09:15:03     INFO -     r15 = 0x00007fc0e3e4f220   rip = 0x00007fc0efc31e94

 09:15:03     INFO -     rsp = 0x00007ffee26fe050   rbp = 0x00007ffee26fe060

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  2  libxul.so!mozilla::dom::HTMLOptionElement::GetSelect() [HTMLOptionElement.cpp:8b0b020feaf6 : 363 + 0xe]

 09:15:03     INFO -     rbx = 0x0000000000000000   r12 = 0x0000000000000001

 09:15:03     INFO -     r13 = 0x00007fc0e3e4f200   r14 = 0x00007ffee26fe118

 09:15:03     INFO -     r15 = 0x00007fc0e3e4f220   rip = 0x00007fc0f061ea1d

 09:15:03     INFO -     rsp = 0x00007ffee26fe070   rbp = 0x00007ffee26fe080

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  3  libxul.so!mozilla::dom::HTMLOptionElement::BeforeSetAttr(int, nsIAtom*, nsAttrValueOrString*, bool) [HTMLOptionElement.cpp:8b0b020feaf6 : 210 + 0x4]

 09:15:03     INFO -     rbx = 0x00007fc0dbefab00   r12 = 0x0000000000000001

 09:15:03     INFO -     r13 = 0x00007fc0e3e4f200   r14 = 0x00007ffee26fe118

 09:15:03     INFO -     r15 = 0x00007fc0e3e4f220   rip = 0x00007fc0f061f28c

 09:15:03     INFO -     rsp = 0x00007ffee26fe090   rbp = 0x00007ffee26fe0d0

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  4  libxul.so!mozilla::dom::Element::SetAttr(int, nsIAtom*, nsIAtom*, nsAString_internal const&, bool) [Element.cpp:8b0b020feaf6 : 2270 + 0x19]

 09:15:03     INFO -     rbx = 0x00007fc0dbefab00   r12 = 0x0000000000000000

 09:15:03     INFO -     r13 = 0x00007fc0e3e4f220   r14 = 0x00007fc0b5ff6360

 09:15:03     INFO -     r15 = 0x0000000000000000   rip = 0x00007fc0efcd7fb0

 09:15:03     INFO -     rsp = 0x00007ffee26fe0e0   rbp = 0x00007ffee26fe170

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  5  libxul.so!nsGenericHTMLElement::SetAttr(int, nsIAtom*, nsIAtom*, nsAString_internal const&, bool) [nsGenericHTMLElement.cpp:8b0b020feaf6 : 910 + 0x12]

 09:15:03     INFO -     rbx = 0x00007fc0dbefab00   r12 = 0x0000000000000000

 09:15:03     INFO -     r13 = 0x00007fc0b5ff6360   r14 = 0x0000000000000000

 09:15:03     INFO -     r15 = 0x0000000000000000   rip = 0x00007fc0f066e911

 09:15:03     INFO -     rsp = 0x00007ffee26fe180   rbp = 0x00007ffee26fe1d0

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  6  libxul.so!nsHtml5TreeOperation::CreateElement(int, nsIAtom*, nsHtml5HtmlAttributes*, mozilla::dom::FromParser, nsNodeInfoManager*, nsHtml5DocumentBuilder*) [nsHtml5TreeOperation.cpp:8b0b020feaf6 : 440 + 0x26]

 09:15:03     INFO -     rbx = 0x00007fc0dbefab00   r12 = 0x00007fc0e3e42340

 09:15:03     INFO -     r13 = 0x00007fc0dc5029d0   r14 = 0x0000000000000000

 09:15:03     INFO -     r15 = 0x0000000000000000   rip = 0x00007fc0efa16200

 09:15:03     INFO -     rsp = 0x00007ffee26fe1e0   rbp = 0x00007ffee26fe380

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  7  libxul.so!nsHtml5TreeBuilder::createElement(int, nsIAtom*, nsHtml5HtmlAttributes*, void*) [nsHtml5TreeBuilderCppSupplement.h:8b0b020feaf6 : 100 + 0x13]

 09:15:03     INFO -     rbx = 0x00007fc0dc5029d0   r12 = 0x00007fc0dc5029d0

 09:15:03     INFO -     r13 = 0x00007fc0c71f9bf0   r14 = 0x00007fc0e3e42340

 09:15:03     INFO -     r15 = 0x000000000000001c   rip = 0x00007fc0ef9fc642

 09:15:03     INFO -     rsp = 0x00007ffee26fe390   rbp = 0x00007ffee26fe410

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  8  libxul.so!nsHtml5TreeBuilder::appendToCurrentNodeAndPushElement(nsHtml5ElementName*, nsHtml5HtmlAttributes*) [nsHtml5TreeBuilder.cpp:8b0b020feaf6 : 4003 + 0x7]

 09:15:03     INFO -     rbx = 0x00007fc0c71f9bf0   r12 = 0x00007fc0dc5029d0

 09:15:03     INFO -     r13 = 0x00007fc0e3e87920   r14 = 0x00007fc0b0bf0260

 09:15:03     INFO -     r15 = 0x000000000000001c   rip = 0x00007fc0ef9fd5fa

 09:15:03     INFO -     rsp = 0x00007ffee26fe420   rbp = 0x00007ffee26fe440

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO -  9  libxul.so!nsHtml5TreeBuilder::startTag(nsHtml5ElementName*, nsHtml5HtmlAttributes*, bool) [nsHtml5TreeBuilder.cpp:8b0b020feaf6 : 1617 + 0xd]

 09:15:03     INFO -     rbx = 0x00007fc0c71f9bf0   r12 = 0x00007fc0dc5029d0

 09:15:03     INFO -     r13 = 0x00007fc0e3e87920   r14 = 0x00007fc0e3e42340

 09:15:03     INFO -     r15 = 0x000000000000001c   rip = 0x00007fc0efa0626c

 09:15:03     INFO -     rsp = 0x00007ffee26fe450   rbp = 0x00007ffee26fe4d0

 09:15:03     INFO -     Found by: call frame info

 09:15:03     INFO - 10  libxul.so!nsHtml5Tokenizer::emitCurrentTagToken(bool, int) [nsHtml5Tokenizer.cpp:8b0b020feaf6 : 306 + 0x11]

 09:15:03     INFO -     rbx = 0x00007fc0c8af1ec0   r12 = 0x00007fc0dc5029d0

 09:15:03     INFO -     r13 = 0x0000000000000000   r14 = 0x0000000000000000

 09:15:03     INFO -     r15 = 0x000000000000003e   rip = 0x00007fc0efa0705c

 09:15:03     INFO -     rsp = 0x00007ffee26fe4e0   rbp = 0x00007ffee26fe500


The crash got triggered by test_browser_window.py:test_addons_manager which opens and closes the add-on manager.
Bulk assigning P3 to all open intermittent bugs without a priority set in Firefox components per bug 1298978.
Priority: -- → P3
Priority: P3 → P5
No more crashes in the last year. So I doubt that this bug is still helpful.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.