Closed Bug 1538645 Opened 7 years ago Closed 7 years ago

Intermittent 0x5e844 libc.so (__memcpy_base_a55+268)

Categories

(GeckoView :: General, defect)

Product:
GeckoView
Component:
General
Version:
66 Branch
Platform:
Unspecified
Android
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(firefox66 affected, firefox67 unaffected)

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox66 --- affected
firefox67 --- unaffected

People

(Reporter: colormatch, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0

Steps to reproduce:

signal 11 (SIGSEGV), code 2 (SEGV_ACCERR)
__memcpy_base_a55

used:
geckoviewChannel ="" // stable
geckoviewVersion = "66.0.20190322021635"

reports coming from 3 devices of the kind "Google Pixel 2 XL (taimen), Android 9"

Actual results:

Crash Report:

Google Pixel 2 XL (taimen), Android 9
Report 6 of 6

pid: 0, tid: 0 >>> com.kinoseed.matchcolor <<<

backtrace:

#00 pc 000000000005e844 /bionic/lib/libc.so (__memcpy_base_a55+268)

#01 pc 000000000000a951 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libsoftokn3.so

#02 pc 000000000000ab4d /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libsoftokn3.so

#03 pc 000000000000b177 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libsoftokn3.so

#04 pc 000000000000b2a9 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libsoftokn3.so

#05 pc 00000000000a7aa5 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libnss3.so

#06 pc 00000000000a805b /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libnss3.so

#07 pc 00000000000ae7d5 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libnss3.so

#08 pc 00000000000ae86d /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libnss3.so

#09 pc 0000000000094bb9 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libnss3.so

#10 pc 0000000000094e47 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libnss3.so

#11 pc 0000000000105455 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#12 pc 0000000001796f85 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#13 pc 000000000014b73f /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#14 pc 000000000014a4c3 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#15 pc 000000000014c6f7 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#16 pc 000000000011e061 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#17 pc 00000000001491fb /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#18 pc 000000000179034f /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#19 pc 0000000001798807 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#20 pc 000000000016e9fb /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#21 pc 000000000016e9fb /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#22 pc 0000000000155b6f /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#23 pc 0000000000156b6b /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#24 pc 0000000000379e8d /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#25 pc 000000000036024f /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#26 pc 0000000000ff8759 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#27 pc 00000000017d7d63 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#28 pc 000000000182810b /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#29 pc 00000000018285bb /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#30 pc 0000000001829949 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libxul.so

#31 pc 0000000000049bd9 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/lib/arm/libmozglue.so

#32 pc 0000000000012361 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/oat/arm/base.odex (org.mozilla.gecko.mozglue.GeckoLoader.nativeRun+152)

#33 pc 00000000000d4bc5 /system/lib/libart.so (art_quick_invoke_stub_internal+68)

#34 pc 0000000000451a63 /system/lib/libart.so (art_quick_invoke_static_stub+246)

#35 pc 00000000000dd1a3 /system/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+170)

#36 pc 0000000000221e09 /system/lib/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+280)

#37 pc 000000000021dd51 /system/lib/libart.so (bool art::interpreter::DoCall<true, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+524)

#38 pc 000000000044b7d9 /system/lib/libart.so (MterpInvokeStaticRange+208)

#39 pc 00000000000cfc94 /system/lib/libart.so (Mterp_op_invoke_static_range+20)

#40 pc 00000000002683f6 /data/app/com.kinoseed.matchcolor-At4VhJzIRU7pE0KHqz96dg==/oat/arm/base.vdex (org.mozilla.gecko.GeckoThread.run+534)

#41 pc 00000000001fe893 /system/lib/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEbb.llvm.10960976735278753587+350)

#42 pc 0000000000203785 /system/lib/libart.so (art::interpreter::EnterInterpreterFromEntryPoint(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*)+124)

#43 pc 000000000043a2e7 /system/lib/libart.so (artQuickToInterpreterBridge+826)

#44 pc 00000000000d95a1 /system/lib/libart.so (art_quick_to_interpreter_bridge+32)

#45 pc 00000000000d4bc5 /system/lib/libart.so (art_quick_invoke_stub_internal+68)

#46 pc 000000000045194f /system/lib/libart.so (art_quick_invoke_stub+250)

#47 pc 00000000000dd191 /system/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+152)

#48 pc 0000000000397aab /system/lib/libart.so (art::(anonymous namespace)::InvokeWithArgArray(art::ScopedObjectAccessAlreadyRunnable const&, art::ArtMethod*, art::(anonymous namespace)::ArgArray*, art::JValue*, char const*)+54)

#49 pc 00000000003987ed /system/lib/libart.so (art::InvokeVirtualOrInterfaceWithJValues(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, jvalue const*)+304)

#50 pc 00000000003c7b89 /system/lib/libart.so (art::Thread::CreateCallback(void*)+1136)

#51 pc 00000000000a739f /bionic/lib/libc.so (__pthread_start(void*)+20)

#52 pc 0000000000061be3 /bionic/lib/libc.so (__start_thread+30)

Do you happen to have steps to reproduce the crash? Does the crash happen with GeckoView 67 Beta or 68 Nightly? Without symbols, the stack backtrace is not actionable. libsoftokn3.so is Gecko's NSS crypto code.

status-firefox66: --- → affected

(In reply to Chris Peterson [:cpeterson] from comment #1)

Do you happen to have steps to reproduce the crash? Does the crash happen with GeckoView 67 Beta or 68 Nightly? Without symbols, the stack backtrace is not actionable. libsoftokn3.so is Gecko's NSS crypto code.

I was using the "stable channel":
https://maven.mozilla.org/?prefix=maven2/org/mozilla/geckoview/geckoview-armeabi-v7a/66.0.20190322021635/

After those bugs (next day) I switched to beta channel, where the bug did not get reported again.

I can't reproduce it. There were 6 reports by 3 devices.

All 3 devices were of the same kind and the same OS version:
"Google Pixel 2 XL (taimen), Android 9"

(In reply to colormatch from comment #2)

I was using the "stable channel":
https://maven.mozilla.org/?prefix=maven2/org/mozilla/geckoview/geckoview-armeabi-v7a/66.0.20190322021635/

After those bugs (next day) I switched to beta channel, where the bug did not get reported again.

I can't reproduce it. There were 6 reports by 3 devices.

Thanks for checking. I'll close this bug as "works for me" in GeckoView 67, but we can reopen this bug if the crash signature comes back or you have steps to reproduce the crash.

Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
status-firefox67: --- → unaffected
OS: All → Android
Resolution: --- → WORKSFORME

I'm getting new reports of the same issue, after updating GV on beta arm channel (67.0.20190415085659)

Again it's the exact same device-type ( * Google Pixel 2 XL (taimen), Android 9 * ), but as my app user-pool is not that big, I can't confirm it's reintroduced problem, or it just wasn't reported after app switching to use GV67.

It seems device specific.

Google Pixel 2 XL (taimen), Android 9
Report 1 of 3

pid: 0, tid: 0 >>> com.kinoseed.matchcolor <<<

backtrace:

#00 pc 000000000005c7e4 /bionic/lib/libc.so (__memcpy_base_a55+268)

#01 pc 000000000000a959 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libsoftokn3.so

#02 pc 000000000000ab55 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libsoftokn3.so

#03 pc 000000000000b17f /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libsoftokn3.so

#04 pc 000000000000b2b1 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libsoftokn3.so

#05 pc 00000000000a84ad /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libnss3.so

#06 pc 00000000000a8a63 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libnss3.so

#07 pc 00000000000af1f5 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libnss3.so

#08 pc 00000000000af28d /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libnss3.so

#09 pc 000000000009545d /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libnss3.so

#10 pc 000000000009572f /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libnss3.so

#11 pc 0000000000101619 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#12 pc 00000000016cdf0b /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#13 pc 00000000016ce4f3 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#14 pc 000000000014a063 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#15 pc 000000000014f823 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#16 pc 000000000014e2a7 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#17 pc 0000000000150c7b /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#18 pc 000000000011a501 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#19 pc 000000000014d1d7 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#20 pc 00000000016cd3cb /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#21 pc 00000000016d556b /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#22 pc 00000000001729d7 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#23 pc 00000000001729d7 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#24 pc 000000000015a4ed /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#25 pc 000000000015b56b /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#26 pc 000000000015a0ab /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#27 pc 000000000015c20f /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#28 pc 00000000001217db /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#29 pc 000000000015a4ed /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#30 pc 000000000015b56b /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#31 pc 00000000003783f5 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#32 pc 000000000035d737 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#33 pc 0000000001003189 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#34 pc 000000000171630f /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#35 pc 0000000001767599 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#36 pc 0000000001767d55 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#37 pc 000000000176909d /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libxul.so

#38 pc 0000000000049be1 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/lib/arm/libmozglue.so

#39 pc 0000000000012301 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/oat/arm/base.odex (org.mozilla.gecko.mozglue.GeckoLoader.nativeRun+152)

#40 pc 00000000000d5bc5 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_stub_internal+68)

#41 pc 0000000000454617 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_static_stub+246)

#42 pc 00000000000de20b /apex/com.android.runtime/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+170)

#43 pc 0000000000223109 /apex/com.android.runtime/lib/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+280)

#44 pc 000000000021f051 /apex/com.android.runtime/lib/libart.so (bool art::interpreter::DoCall<true, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+524)

#45 pc 000000000044e38d /apex/com.android.runtime/lib/libart.so (MterpInvokeStaticRange+208)

#46 pc 00000000000d0c94 /apex/com.android.runtime/lib/libart.so (Mterp_op_invoke_static_range+20)

#47 pc 0000000000269896 /data/app/com.kinoseed.matchcolor-p9XBc1ZBRxlf10tjzYhwTA==/oat/arm/base.vdex (org.mozilla.gecko.GeckoThread.run+538)

#48 pc 00000000001ffb73 /apex/com.android.runtime/lib/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEbb.llvm.8650392831108427790+350)

#49 pc 0000000000204a81 /apex/com.android.runtime/lib/libart.so (art::interpreter::EnterInterpreterFromEntryPoint(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*)+124)

#50 pc 000000000043cf07 /apex/com.android.runtime/lib/libart.so (artQuickToInterpreterBridge+826)

#51 pc 00000000000da5a1 /apex/com.android.runtime/lib/libart.so (art_quick_to_interpreter_bridge+32)

#52 pc 00000000000d5bc5 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_stub_internal+68)

#53 pc 0000000000454503 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_stub+250)

#54 pc 00000000000de1f9 /apex/com.android.runtime/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+152)

#55 pc 0000000000399673 /apex/com.android.runtime/lib/libart.so (art::(anonymous namespace)::InvokeWithArgArray(art::ScopedObjectAccessAlreadyRunnable const&, art::ArtMethod*, art::(anonymous namespace)::ArgArray*, art::JValue*, char const*)+54)

#56 pc 000000000039a3b5 /apex/com.android.runtime/lib/libart.so (art::InvokeVirtualOrInterfaceWithJValues(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, jvalue const*)+304)

#57 pc 00000000003c9bad /apex/com.android.runtime/lib/libart.so (art::Thread::CreateCallback(void*)+1136)

#58 pc 00000000000a52ef /bionic/lib/libc.so (__pthread_start(void*)+20)

#59 pc 000000000005fb83 /bionic/lib/libc.so (__start_thread+30)

You need to log in before you can comment on or make changes to this bug.