Closed Bug 1499627 Opened 7 years ago Closed 7 years ago

Crash in libxul.so@0x31de8c | libnspr4.so@0x42af7

Categories

(Core :: General, defect, P3)

Product:
Core
Component:
General
Version:
63 Branch
Platform:
x86
Linux
Type:
defect

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: matt.fagnani, Unassigned)

References

Details

Crash Data

Attachments

(1 file)

gdb full trace of all threads using coredumpctl debug for the last shutdown crash
170.57 KB, text/plain
Details
This bug was filed from the Socorro interface and is report bp-414e549f-1126-4e35-ac67-227130181017. ============================================================= Top 7 frames of crashing thread: 0 libxul.so libxul.so@0x31de8c 1 libnspr4.so libnspr4.so@0x42af7 2 libnspr4.so libnspr4.so@0x28487 3 libdl-2.28.so libdl-2.28.so@0x18aa 4 firefox firefox@0xeedc 5 libpthread-2.28.so libpthread-2.28.so@0x1efff 6 @0x947dbc87 ============================================================= Summary: Crashes involving libxul.so when closing Firefox Description: I've been seeing shutdown crashes involving libxul.so about <5% that I close Firefox 62.0.3 and recent versions in Fedora 28-29. These crashes seem to have occurred somewhat more frequently in Firefox 62 than in previous versions. The crashes occurred with various sites loaded. I sometimes see a spinning circle in tabs after clicking on the close button in the top right of the window before the crash reporter appears. The crashes involve the Shutdown Hang Terminator thread. I got the following core dump information including the full trace with firefox and glibc debug packages installed using coredumpctl debug and gdb which shows a segmentation fault in mozilla::ipc::MessageChannel::OnChannelErrorFromLink at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/glue/MessageChannel.cpp:2548 with the error message "Aborting on channel error." coredumpctl debug PID: 8722 (Web Content) UID: 1000 (matt) GID: 1000 (matt) Signal: 11 (SEGV) Timestamp: Tue 2018-10-16 21:15:08 EDT (4h 19min ago) Command Line: /usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 37308 -schedulerPrefs 0001,2 -parentBuildID 20181009141620 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 8554 true tab Executable: /usr/lib/firefox/firefox Control Group: /user.slice/user-1000.slice/session-2.scope Unit: session-2.scope Slice: user-1000.slice Session: 2 Owner UID: 1000 (matt) Boot ID: 51633327097a449c9c795e0f41063aac Machine ID: 68c534516091436b931b8f2dd87b8100 Hostname: dimension Storage: /var/lib/systemd/coredump/core.Web\x20Content.1000.51633327097a449c9c795e0f41063aac.8722.1539738908000000.lz4 Message: Process 8722 (Web Content) of user 1000 dumped core. Stack trace of thread 8726: #0 0x00000000af463b1e _ZN7mozilla3ipc14MessageChannel22OnChannelErrorFromLinkEv.cold.785 (libxul.so) #1 0x00000000afa04ccb _ZN7mozilla3ipc11ProcessLink14OnChannelErrorEv (libxul.so) #2 0x00000000af9eaae4 event_process_active_single_queue.isra.125 (libxul.so) #3 0x00000000af9eb2c1 event_base_loop (libxul.so) #4 0x00000000af9d07f0 _ZN4base19MessagePumpLibevent3RunEPNS_11MessagePump8DelegateE (libxul.so) #5 0x00000000af9d2713 _ZN11MessageLoop3RunEv (libxul.so) #6 0x00000000af9e0cb8 _ZN4base6Thread10ThreadMainEv (libxul.so) #7 0x00000000af9d0421 _ZL10ThreadFuncPv (libxul.so) #8 0x00000000b7f3f5de start_thread (libpthread.so.0) #9 0x00000000b7bf072a __clone (libc.so.6) Stack trace of thread 8722: #0 0x00000000b7fbbd41 __kernel_vsyscall (linux-gate.so.1) #1 0x00000000b7be6853 __GI___poll (libc.so.6) #2 0x00000000b6516254 poll (libglib-2.0.so.0) #3 0x00000000b16230da _ZL11PollWrapperP8_GPollFDji (libxul.so) #4 0x00000000b6506913 g_main_context_poll (libglib-2.0.so.0) #5 0x00000000b6506a5b g_main_context_iteration (libglib-2.0.so.0) #6 0x00000000b161dd20 _ZN10nsAppShell22ProcessNextNativeEventEb (libxul.so) #7 0x00000000b15e4339 _ZN14nsBaseAppShell24DoProcessNextNativeEventEb (libxul.so) #8 0x00000000b15e44f0 _ZN14nsBaseAppShell18OnProcessNextEventEP17nsIThreadInternalb (libxul.so) #9 0x00000000af58c0ad _ZN8nsThread16ProcessNextEventEbPb (libxul.so) #10 0x00000000af5894f3 _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so) #11 0x00000000afa014ed _ZN7mozilla3ipc11MessagePump3RunEPN4base11MessagePump8DelegateE (libxul.so) #12 0x00000000af9d2713 _ZN11MessageLoop3RunEv (libxul.so) #13 0x00000000b15e0aac _ZN14nsBaseAppShell3RunEv (libxul.so) #14 0x00000000b25182ed _Z15XRE_RunAppShellv (libxul.so) #15 0x00000000af9d2713 _ZN11MessageLoop3RunEv (libxul.so) #16 0x00000000b251882e _Z20XRE_InitChildProcessiPPcPK12XREChildData (libxul.so) #17 0x00000000004bca13 _Z20content_process_mainPN7mozilla9BootstrapEiPPc (firefox) #18 0x00000000004bc376 main (firefox) #19 0x00000000b7b1ec09 __libc_start_main (libc.so.6) #20 0x00000000004bc657 _start (firefox) ... Core was generated by `/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 37308'. Program terminated with signal SIGSEGV, Segmentation fault. #0 mozilla::ipc::MessageChannel::OnChannelErrorFromLink (this=0xb788f0c4) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/glue/MessageChannel.cpp:2548 2548 MOZ_CRASH("Aborting on channel error."); [Current thread is 1 (Thread 0xaeb47b40 (LWP 8726))] ... gdb) bt full #0 0xaf463b1e in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() (this=0xb788f0c4) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/glue/MessageChannel.cpp:2548 #1 0xafa04ccb in mozilla::ipc::ProcessLink::OnChannelError() (this=0xb78e9660) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/glue/MessageLink.cpp:393 lock = {mMonitor = 0xb78e73d0} #2 0xaf9eaae4 in event_persist_closure (ev=<optimized out>, base=0xb786a200) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1580 evcb_callback = <optimized out> evcb_fd = <optimized out> evcb_res = 2 evcb_arg = 0xb788c000 ev = <optimized out> evcb = <optimized out> count = <optimized out> #3 0xaf9eaae4 in event_process_active_single_queue (base=base@entry=0xb786a200, max_to_process=max_to_process@entry=2147483647, endtime=0x0, activeq=<optimized out>) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1639 ev = <optimized out> evcb = <optimized out> count = <optimized out> #4 0xaf9eb2c1 in event_process_active (base=0xb786a200) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1738 --Type <RET> for more, q to quit, c to continue without paging--c activeq = <optimized out> i = 0 c = 0 tv = {tv_sec = 0, tv_usec = -1208738303} maxcb = 2147483647 endtime = 0x0 limit_after_prio = 2147483647 n = <optimized out> evsel = 0xb5a08f60 <epollops> tv = {tv_sec = 0, tv_usec = 0} tv_p = <optimized out> res = <optimized out> done = 0 retval = 0 __func__ = "event_base_loop" #5 0xaf9eb2c1 in event_base_loop (base=0xb786a200, flags=1) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1961 n = <optimized out> evsel = 0xb5a08f60 <epollops> tv = {tv_sec = 0, tv_usec = 0} tv_p = <optimized out> res = <optimized out> done = 0 retval = 0 __func__ = "event_base_loop" #6 0xaf9d07f0 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) (this=0xb781ef40, delegate=0xaeb47230) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/base/message_pump_libevent.cc:373 did_work = <optimized out> old_in_run = false #7 0xaf9d2713 in MessageLoop::RunInternal() (this=0xaeb47230) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/objdir/dist/include/mozilla/RefPtr.h:324 save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xaeb47230, previous_state_ = 0x0} #8 0xaf9d2713 in MessageLoop::RunHandler() (this=0xaeb47230) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/base/message_loop.cc:318 save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xaeb47230, previous_state_ = 0x0} #9 0xaf9d2713 in MessageLoop::Run() (this=0xaeb47230) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/base/message_loop.cc:298 save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xaeb47230, previous_state_ = 0x0} #10 0xaf9e0cb8 in base::Thread::ThreadMain() (this=0xb780bc44) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/base/thread.cc:181 raiiObject157 = {<No data fields>} message_loop = {<base::MessagePump::Delegate> = {_vptr.Delegate = 0xb5a08d58 <vtable for MessageLoop+8>}, type_ = MessageLoop::TYPE_IO, id_ = 2, work_queue_ = std::queue wrapping: std::deque with 0 elements, delayed_work_queue_ = std::priority_queue wrapping: std::vector of length 0, capacity 0, deferred_non_nestable_work_queue_ = std::queue wrapping: std::deque with 0 elements, pump_ = {mRawPtr = 0xb781ef40}, destruction_observers_ = {observers_ = std::vector of length 1, capacity 1 = {0xb782bfc8}, notify_depth_ = 0, type_ = base::ObserverList<MessageLoop::DestructionObserver, false>::NOTIFY_ALL}, nestable_tasks_allowed_ = true, exception_restoration_ = false, thread_name_ = "Chrome_ChildThread", incoming_queue_ = std::queue wrapping: std::deque with 0 elements, incoming_queue_lock_ = {lock_ = {native_handle_ = {__data = {__lock = 0, __count = 0, __owner = 0, __kind = 0, __nusers = 0, {__elision_data = {__espins = 0, __eelision = 0}, __list = {__next = 0x0}}}, __size = '\000' <repeats 23 times>, __align = 0}}}, state_ = 0xaeb471ec, run_depth_base_ = 1, shutting_down_ = false, transient_hang_timeout_ = 0, permanent_hang_timeout_ = 0, next_sequence_num_ = 0, mEventTarget = {mRawPtr = 0xb782bfc0}} #11 0xaf9d0421 in ThreadFunc(void*) (closure=0xb780bc44) at /usr/src/debug/firefox-62.0.3-4.fc29.i386/ipc/chromium/src/base/platform_thread_posix.cc:38 delegate = 0xb780bc44 #12 0xb7f3f5de in start_thread (arg=<optimized out>) at pthread_create.c:486 ret = <optimized out> pd = <optimized out> now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1208651776, -1363903680, -1208651776, -1363905496, 977875080, -1253777222}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 #13 0xb7bf072a in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108 Other reports I've submitted of crashes involving the same trace are the following https://crash-stats.mozilla.com/report/index/2d864062-2a86-43f3-ac84-9eae60181014 https://crash-stats.mozilla.com/report/index/f0b24c88-3e41-4377-8787-dd9c30181012 https://crash-stats.mozilla.com/report/index/f39b19c3-858b-46ed-be11-ffc3d0181012 f39b19c3-858b-46ed-be11-ffc3d0181012 had the same segmentation fault and trace using coredumpctl debug and gdb. The core dumps of other crashes didn't show up using coredumpctl. Steps to reproduce 1. Started firefox 62.0.3-4 in Fedora 29 2. Loaded various sites 3. Closed Firefox How reproducible: The Firefox crash reporter appeared in <5% of cases with crashes involving libxul.so Actual results: Shutdown crashes described above Expected results: No crashes when closing Additional information: Many Fedora users have reported crashes with similar traces as those above for recent Firefox versions at https://bugzilla.redhat.com/show_bug.cgi?id=1568097 https://retrace.fedoraproject.org/faf/reports/2077858/ https://bugzilla.redhat.com/show_bug.cgi?id=1541603 I've seen more frequent shutdown crashes with the id IPCError-browser | ShutDownKill involving content processes and often involve libxul.so such as https://crash-stats.mozilla.com/report/index/0376d1b4-ea12-49ef-9d7a-df7cc0181016 https://crash-stats.mozilla.com/report/index/db7f3ed3-14ef-487a-a295-68c240181016 https://crash-stats.mozilla.com/report/index/86e2abe3-ae4a-4185-b3e6-26cef0181015 https://crash-stats.mozilla.com/report/index/c5386c6b-320b-4cdf-ac30-233460181015 https://crash-stats.mozilla.com/report/index/863ade50-d307-41f3-84c5-1164c0181015 These crashes might be occurring because Firefox is taking longer than a specified time limit to shutdown.
I got a crash @ libxul.so@0x33581a4 | libnspr4.so@0x42af7 with a similar trace involving the Shutdown Hang Terminator thread although the error was a segmentation fault with a different reason MOZ_CRASH(Shutdown too long, probably frozen, causing a crash.) I reported the crash at https://crash-stats.mozilla.com/report/index/94d51e60-a715-41b6-9f6c-4980a0181020 The crash didn't show up in coredumpctl.
Product: Firefox → Core
Hmm, more shutdown crashes. I'll attach this to the metabug tracking this issue.
Blocks: shutdown
Priority: -- → P3
I got another crash @ libxul.so@0x33cbe4 | libnspr4.so@0x42af7 in Firefox 63 with a similar trace involving the Shutdown Hang Terminator thread although the error was a segmentation fault with the reason MOZ_CRASH(Shutdown hanging before starting.) I reported the crash at https://crash-stats.mozilla.com/report/index/de6f408a-553e-4122-b89e-c06b00181030 Two other crash reports happened during that same shutdown but apparently about 1-2 minutes before the crash report above with the IPCError-browser | ShutDownKill signature https://crash-stats.mozilla.com/report/index/a089f421-4be8-4579-93d1-3f4b90181030 https://crash-stats.mozilla.com/report/index/a463f426-a1d7-4e5d-a5a3-74b4e0181030 The following pairs of crash reports with the IPCError-browser | ShutDownKill signature occurred today during the same shutdowns but without the segmentation fault report. Crash 2: https://crash-stats.mozilla.com/report/index/a2820cb9-5013-4766-9ccc-04abe0181030 https://crash-stats.mozilla.com/report/index/78ffe852-aacd-4e76-be01-a9a890181030 Crash 3: https://crash-stats.mozilla.com/report/index/24a9be9f-b6b6-4ff0-976d-3ce8f0181030 https://crash-stats.mozilla.com/report/index/6dd89fbd-7e10-4e24-a856-bb3960181030 I don't see the crashes using coredumpctl or journalctl. I've got the firefox and glibc debug packages installed so that information might show up in the full raw dumps in the crash reports above. I can provide more information if that would help.
I got another shutdown crash in Firefox 63.0 with a similar trace and the reason MOZ_CRASH(Shutdown hanging before starting.) in the crash report. https://crash-stats.mozilla.com/report/index/bp-15a2e670-c0dd-455e-bb49-74d680181031 The same shutdown generated three other crash reports with the IPCError-browser | ShutDownKill signature with uptimes 1-4 minutes less than that of the report with the segmentation fault and "Aborting on channel error." The Firefox Crash reporter showed up about 2-3 minutes after the Firefox window disappeared. https://crash-stats.mozilla.com/report/index/bp-6294b603-59f7-47a7-81e0-da7c30181031 https://crash-stats.mozilla.com/report/index/bp-d63f0234-b965-45eb-bd20-ec35c0181031 https://crash-stats.mozilla.com/report/index/bp-03fc2306-7638-439e-9f55-57a420181031 The coredumpctl debug / gdb trace output were quite similar to that in my first report above with a segmentation fault in mozilla::ipc::MessageChannel::OnChannelErrorFromLink at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/glue/MessageChannel.cpp:2662 MOZ_CRASH("Aborting on channel error."). coredumpctl debug PID: 6451 (Web Content) UID: 1000 (matt) GID: 1000 (matt) Signal: 11 (SEGV) Timestamp: Wed 2018-10-31 18:00:50 EDT (3h 20min ago) Command Line: /usr/lib/firefox/firefox -contentproc -childID 5 -isForBrowser -prefsLen 5379 -prefMapSize 204355 -schedulerPrefs 0001,2 -parentBuildID 20181023080428 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 6165 true tab Executable: /usr/lib/firefox/firefox Control Group: /user.slice/user-1000.slice/session-2.scope Unit: session-2.scope Slice: user-1000.slice Session: 2 Owner UID: 1000 (matt) Boot ID: 113f125920b64bdcabdf3790799468f5 Machine ID: 68c534516091436b931b8f2dd87b8100 Hostname: dimension Storage: /var/lib/systemd/coredump/core.Web\x20Content.1000.113f125920b64bdcabdf3790799468f5.6451.1541023250000000.lz4 Message: Process 6451 (Web Content) of user 1000 dumped core. Stack trace of thread 6456: #0 0x00000000aef687be _ZN7mozilla3ipc14MessageChannel22OnChannelErrorFromLinkEv.cold.799 (libxul.so) #1 0x00000000af54d62b _ZN7mozilla3ipc11ProcessLink14OnChannelErrorEv (libxul.so) #2 0x00000000af533864 event_process_active_single_queue.isra.125 (libxul.so) #3 0x00000000af534041 event_base_loop (libxul.so) #4 0x00000000af519330 _ZN4base19MessagePumpLibevent3RunEPNS_11MessagePump8DelegateE (libxul.so) #5 0x00000000af51b253 _ZN11MessageLoop3RunEv (libxul.so) #6 0x00000000af529a38 _ZN4base6Thread10ThreadMainEv (libxul.so) #7 0x00000000af5194ca _ZL10ThreadFuncPv (libxul.so) #8 0x00000000b7e6f5de start_thread (libpthread.so.0) #9 0x00000000b7b2072a __clone (libc.so.6) Stack trace of thread 6451: #0 0x00000000b7eebd41 __kernel_vsyscall (linux-gate.so.1) #1 0x00000000b7b16853 __GI___poll (libc.so.6) #2 0x00000000b6440254 poll (libglib-2.0.so.0) #3 0x00000000b129e85a _ZL11PollWrapperP8_GPollFDji (libxul.so) #4 0x00000000b6430913 g_main_context_poll (libglib-2.0.so.0) #5 0x00000000b6430a5b g_main_context_iteration (libglib-2.0.so.0) #6 0x00000000b129a250 _ZN10nsAppShell22ProcessNextNativeEventEb (libxul.so) #7 0x00000000b125e719 _ZN14nsBaseAppShell24DoProcessNextNativeEventEb (libxul.so) #8 0x00000000b125e8d0 _ZN14nsBaseAppShell18OnProcessNextEventEP17nsIThreadInternalb (libxul.so) #9 0x00000000af0b22ac _ZN8nsThread16ProcessNextEventEbPb (libxul.so) #10 0x00000000af0af2e3 _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so) #11 0x00000000af549c1d _ZN7mozilla3ipc11MessagePump3RunEPN4base11MessagePump8DelegateE (libxul.so) #12 0x00000000af51b253 _ZN11MessageLoop3RunEv (libxul.so) #13 0x00000000b125b07c _ZN14nsBaseAppShell3RunEv (libxul.so) #14 0x00000000b22bea2d _Z15XRE_RunAppShellv (libxul.so) #15 0x00000000af51b253 _ZN11MessageLoop3RunEv (libxul.so) #16 0x00000000b22befbe _Z20XRE_InitChildProcessiPPcPK12XREChildData (libxul.so) #17 0x00000000004e5a13 _Z20content_process_mainPN7mozilla9BootstrapEiPPc (firefox) #18 0x00000000004e5376 main (firefox) #19 0x00000000b7a4ec09 __libc_start_main (libc.so.6) #20 0x00000000004e5657 _start (firefox) ... Core was generated by `/usr/lib/firefox/firefox -contentproc -childID 5 -isForBrowser -prefsLen 5379 -'. Program terminated with signal SIGSEGV, Segmentation fault. #0 mozilla::ipc::MessageChannel::OnChannelErrorFromLink (this=0xb778f0c4) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/glue/MessageChannel.cpp:2662 2662 MOZ_CRASH("Aborting on channel error."); ... (gdb) bt full #0 0xaef687be in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() (this=0xb778f0c4) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/glue/MessageChannel.cpp:2662 #1 0xaf54d62b in mozilla::ipc::ProcessLink::OnChannelError() (this=0xb77d3ca0) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/glue/MessageLink.cpp:397 lock = {mMonitor = 0xb77d73d0} #2 0xaf533864 in event_persist_closure (ev=<optimized out>, base=0xb776a200) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1580 evcb_callback = <optimized out> evcb_fd = <optimized out> evcb_res = 2 evcb_arg = 0xb778c000 ev = <optimized out> evcb = <optimized out> count = <optimized out> #3 0xaf533864 in event_process_active_single_queue (base=base@entry=0xb776a200, max_to_process=max_to_process@entry=2147483647, endtime=0x0, activeq=<optimized out>) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1639 ev = <optimized out> evcb = <optimized out> count = <optimized out> #4 0xaf534041 in event_process_active (base=0xb776a200) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1738 --Type <RET> for more, q to quit, c to continue without paging--c activeq = <optimized out> i = 0 c = 0 tv = {tv_sec = 0, tv_usec = -1209590271} maxcb = 2147483647 endtime = 0x0 limit_after_prio = 2147483647 n = <optimized out> evsel = 0xb58f8100 <epollops> tv = {tv_sec = 0, tv_usec = 0} tv_p = <optimized out> res = <optimized out> done = 0 retval = 0 __func__ = "event_base_loop" #5 0xaf534041 in event_base_loop (base=0xb776a200, flags=1) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/third_party/libevent/event.c:1961 n = <optimized out> evsel = 0xb58f8100 <epollops> tv = {tv_sec = 0, tv_usec = 0} tv_p = <optimized out> res = <optimized out> done = 0 retval = 0 __func__ = "event_base_loop" #6 0xaf519330 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) (this=0xb771ef40, delegate=0xaa84b230) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/base/message_pump_libevent.cc:373 did_work = <optimized out> old_in_run = false #7 0xaf51b253 in MessageLoop::RunInternal() (this=0xaa84b230) at /usr/src/debug/firefox-63.0-2.fc29.i386/objdir/dist/include/mozilla/RefPtr.h:335 save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xaa84b230, previous_state_ = 0x0} #8 0xaf51b253 in MessageLoop::RunHandler() (this=0xaa84b230) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/base/message_loop.cc:318 save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xaa84b230, previous_state_ = 0x0} #9 0xaf51b253 in MessageLoop::Run() (this=0xaa84b230) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/base/message_loop.cc:298 save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xaa84b230, previous_state_ = 0x0} #10 0xaf529a38 in base::Thread::ThreadMain() (this=0xb770bc44) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/base/thread.cc:181 raiiObject157 = {<No data fields>} message_loop = {<base::MessagePump::Delegate> = {_vptr.Delegate = 0xb58f7ef8 <vtable for MessageLoop+8>}, type_ = MessageLoop::TYPE_IO, id_ = 2, work_queue_ = std::queue wrapping: std::deque with 0 elements, delayed_work_queue_ = std::priority_queue wrapping: std::vector of length 0, capacity 0, deferred_non_nestable_work_queue_ = std::queue wrapping: std::deque with 0 elements, pump_ = {mRawPtr = 0xb771ef40}, destruction_observers_ = {observers_ = std::vector of length 1, capacity 1 = {0xb778b028}, notify_depth_ = 0, type_ = base::ObserverList<MessageLoop::DestructionObserver, false>::NOTIFY_ALL}, nestable_tasks_allowed_ = true, exception_restoration_ = false, thread_name_ = "Chrome_ChildThread", incoming_queue_ = std::queue wrapping: std::deque with 0 elements, incoming_queue_lock_ = {lock_ = {native_handle_ = {__data = {__lock = 0, __count = 0, __owner = 0, __kind = 0, __nusers = 0, {__elision_data = {__espins = 0, __eelision = 0}, __list = {__next = 0x0}}}, __size = '\000' <repeats 23 times>, __align = 0}}}, state_ = 0xaa84b1ec, run_depth_base_ = 1, shutting_down_ = false, transient_hang_timeout_ = 0, permanent_hang_timeout_ = 0, next_sequence_num_ = 0, mEventTarget = {mRawPtr = 0xb778b020}} #11 0xaf5194ca in ThreadFunc(void*) (closure=0xb770bc44) at /usr/src/debug/firefox-63.0-2.fc29.i386/ipc/chromium/src/base/platform_thread_posix.cc:44 delegate = 0xb770bc44 #12 0xb7e6f5de in start_thread (arg=<optimized out>) at pthread_create.c:486 ret = <optimized out> pd = <optimized out> now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1209503744, -1434141888, -1209503744, -1434143704, -1706830425, 1590560157}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 #13 0xb7b2072a in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:10 The crashes might've involved a race condition in which two functions or threads tried to kill the same content process or free the same memory after the shutdown took longer than a prespecified limit. I'll attach the full traces for all threads since it is long.
Version: 62 Branch → 63 Branch

Closing because no crashes reported for 12 weeks.

Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: