1397140 - Crash in RtlEnterCriticalSection | xul.dll@0x2f755c3 | mozilla::dom::AutoJSAPI::ReportException

Status: RESOLVED DUPLICATE of bug 1395938

(Core :: Networking: Cache, defect)

Description

[Kan-Ru Chen [:kanru] (UTC+9)]

This bug was filed from the Socorro interface and is 
report bp-6c2c7c9e-1961-489f-a2d4-d195b0170905.
=============================================================

#16 top crash for 20170904 nightly.

Minidump shows that in mozilla::net::CacheStorageService::CacheQueueSize thread is nullptr.

It looks like the service is used after CacheFileIOManager shutdown.

google_breakpad::ExceptionHandler::WriteMinidumpOnHandlerThread(struct _EXCEPTION_POINTERS * exinfo = 0x00000000`0034c050, struct MDRawAssertionInfo * assertion = 0x00000000`00000000)+0x7a [src\toolkit\crashreporter\breakpad-client\windows\handler\exception_handler.cc @ 719] 
google_breakpad::ExceptionHandler::HandleException(struct _EXCEPTION_POINTERS * exinfo = 0x00000000`0034c050)+0x86 [src\toolkit\crashreporter\breakpad-client\windows\handler\exception_handler.cc @ 510] 
CrashReporter::JitExceptionHandler(void * exceptionRecord = <Value unavailable error>, void * context = <Value unavailable error>)+0x19 [src\toolkit\crashreporter\nsexceptionhandler.cpp @ 394] 
l!RtlpExecuteHandlerForException+0xd
l!RtlDispatchException+0x45a
l!KiUserExceptionDispatch+0x2e
l!RtlEnterCriticalSection+0x6
mozilla::OffTheBooksMutex::Lock+0x9 [include\mozilla\mutex.h @ 65] 
mozilla::Monitor::Lock+0x9 [include\mozilla\monitor.h @ 35] 
mozilla::MonitorAutoLock::{ctor}+0x9 [include\mozilla\monitor.h @ 78] 
mozilla::net::CacheIOThread::QueueSize+0xd [src\netwerk\cache2\cacheiothread.cpp @ 359] 
mozilla::net::CacheStorageService::CacheQueueSize(bool highPriority = false)+0x3c [src\netwerk\cache2\cachestorageservice.cpp @ 2039] 
mozilla::net::nsHttpChannel::OpenCacheEntry(void)+0x46c [src\netwerk\protocol\http\nshttpchannel.cpp @ 3964] 
mozilla::net::nsHttpChannel::ConnectOnTailUnblock(void)+0x65 [src\netwerk\protocol\http\nshttpchannel.cpp @ 584] 
mozilla::net::nsHttpChannel::OnTailUnblock(nsresult rv = NS_OK (0n0))+0xfc [src\netwerk\protocol\http\nshttpchannel.cpp @ 9472] 
mozilla::net::RequestContext::ProcessTailQueue+0x79fc55 [src\netwerk\base\requestcontextservice.cpp @ 398] 
mozilla::net::RequestContext::Notify(class nsITimer * timer = 0x00000000`1f354af0)+0xc3 [src\netwerk\base\requestcontextservice.cpp @ 325] 
nsTimerImpl::Fire(int aGeneration = 0n1)+0x27f [src\xpcom\threads\nstimerimpl.cpp @ 517] 
nsTimerEvent::Run(void)+0x36 [src\xpcom\threads\timerthread.cpp @ 289] 
nsThread::ProcessNextEvent(bool aMayWait = false, bool * aResult = 0x00000000`0034e180)+0x8fc [src\xpcom\threads\nsthread.cpp @ 1040] 
XPTC__InvokebyIndex(void)+0x72 [src\xpcom\reflect\xptcall\md\win32\xptcinvoke_asm_x86_64.asm @ 99] 
NS_InvokeByIndex+0x10 [src\xpcom\reflect\xptcall\md\win32\xptcinvoke_x86_64.cpp @ 57] 
CallMethodHelper::Invoke+0x18 [src\js\xpconnect\src\xpcwrappednative.cpp @ 1996] 
CallMethodHelper::Call+0x2e5 [src\js\xpconnect\src\xpcwrappednative.cpp @ 1315] 
XPCWrappedNative::CallMethod+0x309 [src\js\xpconnect\src\xpcwrappednative.cpp @ 1282] 
XPC_WN_CallMethod(struct JSContext * cx = <Value unavailable error>, unsigned int argc = <Value unavailable error>, class JS::Value * vp = <Value unavailable error>)+0x501 [src\js\xpconnect\src\xpcwrappednativejsops.cpp @ 928]

Comment 1

[Shian-Yow Wu [:swu]]

Not sure if it's related to bug 1395938.  Valentin, could you take a look at it?

Comment 2

[Shian-Yow Wu [:swu]]

It happened before bug 1395938 landed, should be a dupe.