135789 - Trunk crashes [@ ntdll.dll + 0x3941 - SETUPAPI.DLL]

Status: VERIFIED WORKSFORME

(Core :: DOM: Editor, defect)

Description

[Jay Patel [:jay]]

In the past couple of weeks, the Trunk has been plagued by lots and lots of
crashes being reported under the ntdll.dll stack signature.  Talkback is not
giving us a nice stack and user comments vary greatly...here is just one set of
crashes being reported:

Count   Offset    Real Signature
[ 31   ntdll.dll + 0x3941 (0x77f83941) 5b08771c - SETUPAPI.DLL + 0x30c24
(0x778b0c24) ]
 
     Crash date range: 2002-03-26 to 2002-04-04
     Min/Max Seconds since last crash: 27 - 240883
     Min/Max Runtime: 172 - 241013
     Keyword List : mail(4),  
     Count   Platform List 
     31   Windows NT 5.0 build 2195
 
     Count   Build Id List 
     4   2002040110
     4   2002033111
     3   2002032711
     3   2002032610
     2   2002040210
     2   2002040106
     2   2002032918
     2   2002032810
     2   2002032806
     2   2002032605
     2   2002032510
     1   2002040406
     1   2002040306
     1   2002032505
 
     No of Unique Users        26
 
 Stack trace(Frame) 

	 ntdll.dll + 0x3941 (0x77f83941)  
	 ntdll.dll + 0x38c6 (0x77f838c6)  
	 SETUPAPI.DLL + 0x30c24 (0x778b0c24)   
 
     (4833370)	Comments: using a site with lots of javascript pop-ups...
     (4831263)	Comments: sufin' porn ofcourse :)
     (4796640)	Comments: Clicked OK out of the Link dlg in composer
     (4789422)	URL: ftp://ftp.rfc-editor.org/in-notes/rfc3252.txt
     (4756787)	Comments: Adding a folder to the personal toolbar
     (4726261)	URL: http://www.rbc.ru
     (4700046)	URL: http://belushi.mcom.com/NASApp/kb/Login
     (4658633)	Comments: opening new tab  enlarging JPG file
     (4625830)	URL: linuxdevices.com
     (4625830)	Comments: Clicked on 'Accept cookie' for .linuxdevices.com  with 'Remember
this decision' also checked.
     (4622555)	Comments: Sending email
     (4616677)	URL: http://www.benefits.ml.com
     (4616677)	Comments: Just clicked on newsgroup "netscape.public.mozilla.crash-data" in
mailnews.  How ironic!
     (4596235)	URL: ftp.idsoftware.com
     (4589573)	Comments: Installing the Calendar XPI
     (4586793)	Comments: Closing blank page in composer. Chose "Don't Save" option and crashed.
     (4570417)	Comments: After logging into mail.  SSL.  
     (4539020)	URL: http://www.fuckedcompany.com
     (4539020)	Comments: hitting "next" in mail
     (4535018)	Comments: Opened composer.  Pressed the image button. entered in foo.gif 
entered in some alt text.  Pressed okay.  Bam!
     (4532823)	URL: https://akoim1.us.army.mil/login.cfm
     (4502340)	Comments: Submitting form.

I'm setting the component to Editor: Composer since most of the comments for
these crashes mention working in composer. There are clearly other users
crashing in the browser and mail, so not sure what to do.

Comment 1

[Syd Logan]

I don't have much to go on here. Can we get duplication in a debug build
perhaps? Is there any indication of steps existing that consistently lead to
this problem?

Comment 2

[Jay Patel [:jay]]

Lisa has been crashing with this stack sig + offset...and has been working on
steps to reproduce.  Hopefully she'll update this bug soon with more info.

Comment 3

[lchiang]

Jay - what is the first day where this crash (majority of reports) starting
happening?

Comment 4

[lchiang]

Still no luck in reproducing.
Is there a way to get a better stack trace than just ntdll.dll?  What does this 
file do?

Comment 5

[lchiang]

One commonality from most of the above comments are that a window/dlg has just 
closed (ie. send mail/compose window closes, click OK in dlgs, logged into mail, 
popups on sites).  There are some URLs listed, but it's unclear whether those 
users were closing popups that can come up from those sites and then crashing 
and they just pasted the URL into the talkback report.

The other commonality is refreshing a window.  For example, next in mail, 
submitting a form, updating a folder.

Comment 6

[Syd Logan]

It's contains functionality for Windows NT-like systems. It is part of NT, not
something we wrote. We are doing something so awful to memory or to the stack
that it is unable to cope. The fact that we can't get good stack traces is
perhaps also evidence that we are causing major havoc.

Comment 7

[Syd Logan]

We can't possibly be doing anything in mail news, compose, or elsewhere at least
at the level of pushing a button that would cause such a crash. closing windows,
hrmm, going to reassign to saari for an assessment. 

Comment 8

[lchiang]

Isn't http://bugzilla.mozilla.org/show_bug.cgi?id=133857 similar to this?  That 
bug has a reproducible case.

Comment 9

[Suresh]

I see this crash most of the time when I start the app from the debugger. 

Comment 10

[saari (gone)]

The other bug with the test case has been closed as WFM. Is this also WFM?

Comment 11

[Jay Patel [:jay]]

The other bug was for a specific testcase when opening a web location in a new
window...this bug for some other crash (or crashes).  However, for whatever
reason, I don't see any crashes for ntdll.dll that have SETUPAPI.DLL in the
stack anymore...so marking this worksforme.

I'll make sure to not log such a vague topcrash bug next time.

Comment 12

[Jay Patel [:jay]]

verifying...we need to log more specific crashes for the ntdll.dll stack
signature now that we are getting nice stack traces for those crashes.