Closed Bug 1259221 Opened 9 years ago Closed 5 years ago

crash in mozilla::net::nsHttpTransaction::Release

Categories

(Core :: Networking: HTTP, defect, P3)

Product:
Core
Component:
Networking: HTTP
Version:
45 Branch
Platform:
x86
Windows 7
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox45 --- affected
firefox46 --- affected
firefox48 --- affected

People

(Reporter: alex_mayorga, Unassigned)

Details

(Keywords: crash, Whiteboard: [necko-backlog])

Crash Data

This bug was filed from the Socorro interface and is report bp-7177fc52-c157-457b-a218-1f4db2160320. ============================================================= ¡Hola! Found this crash from https://support.mozilla.org/en-US/questions/1114853#answer-858611 28 crashes (9 startup) in the past month per https://crash-stats.mozilla.com/report/list?product=Firefox&range_unit=days&range_value=28&signature=mozilla%3A%3Anet%3A%3AnsHttpTransaction%3A%3ARelease ¡Gracias! Alex Crashing Thread (0) Frame Module Signature Source 0 @0xe5e5e5e5 1 xul.dll mozilla::net::nsHttpTransaction::Release() netwerk/protocol/http/nsHttpTransaction.cpp 2 xul.dll RefPtr<mozilla::net::nsHttpTransaction>::assign_assuming_AddRef(mozilla::net::nsHttpTransaction*) mfbt/RefPtr.h 3 xul.dll mozilla::net::nsHttpChannel::OnStopRequest(nsIRequest*, nsISupports*, nsresult) netwerk/protocol/http/nsHttpChannel.cpp 4 xul.dll nsInputStreamPump::OnStateStop() netwerk/base/nsInputStreamPump.cpp 5 xul.dll nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) netwerk/base/nsInputStreamPump.cpp 6 xul.dll nsInputStreamReadyEvent::Run() xpcom/io/nsStreamUtils.cpp 7 xul.dll nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp 8 xul.dll mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 9 xul.dll MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc 10 firefox.exe firefox.exe@0x151cb 11 @0xa464ef 12 xul.dll nsAString_internal::ReplacePrep(unsigned int, unsigned int, unsigned int) xpcom/string/nsTSubstring.cpp 13 xul.dll nsLocalFile::AppendInternal(nsString const&, bool) xpcom/io/nsLocalFileWin.cpp 14 xul.dll nsLocalFile::Append(nsAString_internal const&) xpcom/io/nsLocalFileWin.cpp
Valentin, I seem to remember you dealing with nsHttpTransaction crashes - does this look like something similar that we can dupe, or is it something else? (I'm putting it in the backlog for now.)
Flags: needinfo?(valentin.gosu)
Whiteboard: [necko-backlog]
It may have similar causes, but this seems to be a different issue from bug 1153929
Flags: needinfo?(valentin.gosu)
There are some crashes( not a lot of them) in nsHttpConnectionMgr and nsHttpTransaction involving nsHttpTransaction (or nsHttpConnection) being freed. I was looking through the code and only strange part are the manual referencing in nsHttpConnecionMgr. I have spent some time looking at it, trying to spot a bug, no luck. e.g.: https://crash-stats.mozilla.com/signature/?version=48.0a1&version=47.0a2&version=47.0a1&version=46.0b&version=46.0b6&version=46.0b5&version=46.0b4&version=46.0b2&version=46.0b1&version=46.0a2&version=46.0a1&version=45.0.1&version=45.0b&version=45.0&version=45.0b99&version=45.0b10&version=45.0b9&version=45.0b8&version=45.0b7&version=45.0b6&version=45.0b5&version=45.0b4&version=45.0b3&version=45.0b2&version=45.0b1&version=45.0a2&version=45.0a1&date=%3E2016-01-01&signature=mozilla%3A%3Anet%3A%3AnsHttpTransaction%3A%3AWriteSegments&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1#reports https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Anet%3A%3AnsHttpConnectionMgr%3A%3AnsHalfOpenSocket%3A%3AOnOutputStreamReady&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1#reports https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Anet%3A%3AnsHttpConnectionMgr%3A%3AGetSpdyPreferredEnt&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1#reports https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Anet%3A%3AnsHttpConnectionMgr%3A%3APruneDeadConnectionsCB&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1#reports https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Anet%3A%3AnsHttpConnectionMgr%3A%3ATryDispatchTransaction&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1#reports https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Anet%3A%3AnsHttpConnectionMgr%3A%3ATimeoutTickCB&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1#reports https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Anet%3A%3AnsHttpConnectionMgr%3A%3AProcessPendingQForEntry&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1#reports Accessing nsHttpConnectionMgr from different thread could cause some of them too, but all necessary functions have an asserted to be on the socketthread. Maybe bug 905460 could help with this.
¡Hola! 7 crashes in the past week at https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Anet%3A%3AnsHttpTransaction%3A%3ARelease 3 from Release. ¡Gracias! Alex
status-firefox48: --- → affected
OS: Windows NT → Windows 7
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: -- → P1
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: P1 → P3

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.