Closed Bug 1323351 Opened 3 years ago Closed 3 years ago

Crash in linker@0x1fb92

Categories

(Firefox for Android :: General, defect, critical)

Unspecified
Android
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
fennec + ---
firefox50 --- wontfix
firefox51 - wontfix
firefox52 + wontfix
firefox53 + fixed
firefox54 + wontfix

People

(Reporter: kbrosnan, Assigned: jchen)

References

(Blocks 1 open bug)

Details

(Keywords: crash, platform)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-2f37c20f-cca6-4b18-b88a-191ad2161214.
=============================================================

This strikes me as similar to bug 1286307. Filing as a separate bug as this has a widely distributed uptime range where as 1286307 is a startup crash. Both seem to exclusively affect the Galaxy S6.

https://crash-stats.mozilla.com/search/?signature=~linker&product=FennecAndroid
Crash Signature: [@ linker@0x1fb92] → [@ linker@0x1fb92] [@ linker@0x1ed9a] [@ linker@0x1db82]
Tracking 53+ as there are enough combined signatures to warrant more investigation for this bug.
I see a bunch of other linker signatures that I didn't add to this bug, but they are not Galaxy S6 crashes.
So this crash only affects the North American S6

Mfg.        Model          And. API    CPU ABI     #      
samsung  SM-G920V          23 (REL)  armeabi-v7a  609  15.4%
samsung  SM-N910V          23 (REL)  armeabi-v7a  391   9.9%
samsung  SM-G920P          23 (REL)  armeabi-v7a  220   5.6%
samsung  SM-N920V          23 (REL)  armeabi-v7a  212   5.4%
samsung  SAMSUNG-SM-N910A  23 (REL)  armeabi-v7a  197   5.0%
Blocks: 1323883
From all reports, I only see 1 crash in 51. Track 51- for now, feel free to nominate again.
tracking-fennec: ? → +
Crash Signature: [@ linker@0x1fb92] [@ linker@0x1ed9a] [@ linker@0x1db82] → [@ linker@0x1fb92] [@ linker@0x1ed9a] [@ linker@0x1db82] [@ linker@0x1fb7a] [@ linker@0x1eb7a]
Did we manage to reproduce this crash on a galaxy s6, or are we still stuck on this one?
(In reply to Julien Cristau [:jcristau] from comment #5)
> Did we manage to reproduce this crash on a galaxy s6, or are we still stuck
> on this one?

I wouldn't be surprised this is bug 1286307. The fix is going to land soonish. If that is in the tree for some time we will be able to decide if this is the same bug or not.
Hence the meta bug 1323883. I did not want to assume that the various common Galaxy S6/S7 crashes would have the same fix. Though given the developments of bug 1286307 it seems likely it will address the set of bugs and more in 1323883.
This may still be a problem and I'm not sure who is actively investigating. Sebastian, can you help find an owner? I gave h4writer a shout in one of the related bugs. Since we seem to have an overall crashiness problem on Galaxy hardware this issue may need more resources.
Flags: needinfo?(s.kaspari)
Redirecting to snorp (this seems to be far away from "frontend land").
Flags: needinfo?(s.kaspari) → needinfo?(snorp)
In reports that have logs, I found some stuff similar to this, which indicates we are doing something bad with JNI. Leaking class references to GeckoAppShell I guess? -> jchen

03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127] JNI ERROR (app bug): global reference table overflow (max=51200)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127] global reference table dump:
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]   Last 10 entries (of 51200):
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51199: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51198: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51197: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51196: 0x335cf040 org.mozilla.gecko.gfx.LayerRenderer$Frame
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51195: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51194: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51193: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51192: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51191: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     51190: 0x32c09800 java.lang.Class<org.mozilla.gecko.GeckoAppShell>
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]   Summary:
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of org.mozilla.gecko.GeckoEditable
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         2 of org.mozilla.gecko.gfx.GeckoLayerClient (1 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.ViewRootImpl$AccessibilityInteractionConnection
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of org.mozilla.gecko.gfx.LayerRenderer$Frame
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of org.mozilla.gecko.gfx.GLController
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.media.MediaRouter$Static$1
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.media.MediaRouter$Static$Client
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]       233 of org.mozilla.gecko.gfx.NativePanZoomController (1 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of org.mozilla.gecko.gfx.StackScroller
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.support.v7.media.RegisteredMediaRouteProvider$Connection
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.SurfaceView$MyWindow
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         3 of android.media.SoundPool$1 (3 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]     50811 of java.lang.Class (224 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]        33 of java.lang.String (33 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         4 of dalvik.system.PathClassLoader (2 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of dalvik.system.VMRuntime
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         2 of java.lang.ThreadGroup (2 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]        54 of java.lang.ref.WeakReference (54 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of byte[] (9216 elements)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         2 of byte[] (36864 elements) (2 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of byte[] (65536 elements)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of byte[] (68644 elements)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of float[] (16 elements)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         2 of android.opengl.EGLDisplay (1 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.os.MessageQueue
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.Surface
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.ViewRootImpl$W
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.WindowManagerGlobal$1
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.accessibility.AccessibilityManager$1
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.inputmethod.InputMethodManager$1
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.view.inputmethod.InputMethodManager$ControlledInputConnectionWrapper
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.app.ActivityThread$ApplicationThread
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]        11 of android.app.LoadedApk$ReceiverDispatcher$InnerReceiver (11 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.app.LoadedApk$ServiceDispatcher$DeathMonitor
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.app.LoadedApk$ServiceDispatcher$InnerConnection
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.content.AbstractThreadedSyncAdapter$ISyncAdapterImpl
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         8 of android.content.ContentProvider$Transport (8 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         2 of android.database.ContentObserver$Transport (2 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.hardware.display.DisplayManagerGlobal$DisplayManagerCallback
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         2 of android.opengl.EGLContext (1 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         2 of android.opengl.EGLSurface (1 unique instances)
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.os.Handler$MessengerImpl
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.os.Binder
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127]         1 of android.nfc.NfcActivityManager
03-27 20:48:13.221  2193  2193 F art     : art/runtime/indirect_reference_table.cc:127] 
03-27 20:48:13.221  2193  2193 F art     : art/runtime/runtime.cc:368] Runtime aborting...
Assignee: nobody → nchen
Flags: needinfo?(snorp) → needinfo?(nchen)
I think the JNI crash was fixed in 51 by bug 1292323. The few crashes from 52 don't look like the same crash.
Status: NEW → RESOLVED
Closed: 3 years ago
Flags: needinfo?(nchen)
Resolution: --- → WORKSFORME
Per comment #12, mark 54 won't fix.
You need to log in before you can comment on or make changes to this bug.