Closed Bug 1587675 Opened 5 years ago Closed 5 years ago

Crashes in objc_msgSend | (anonymous namespace)::AutoreleasePoolPage::pop in nsAppShell::AfterProcessNextEvent()

Categories

(Core :: Widget: Cocoa, defect)

Unspecified
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1587351

People

(Reporter: smichaud, Unassigned)

References

Details

Crash Data

These have been around for a while, but have recently increased in frequency. They all happen accessing memory at 0xffffffffe5e5e5f8.

Typical top of stack trace:

    0  libobjc.A.dylib objc_msgSend context
    1  libobjc.A.dylib (anonymous namespace)::AutoreleasePoolPage::pop(void*) frame_pointer
    2  CoreFoundation __CFStringEncodeByteStream frame_pointer
    3  Foundation -[NSAutoreleasePool release] frame_pointer
    4  XUL nsAppShell::AfterProcessNextEvent(nsIThreadInternal*, bool) widget/cocoa/nsAppShell.mm:808 frame_pointer
    5  XUL nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp:1278 frame_pointer
    6  XUL NS_ProcessPendingEvents(nsIThread*, unsigned int) xpcom/threads/nsThreadUtils.cpp:434 frame_pointer
    7  XUL nsBaseAppShell::NativeEventCallback() widget/nsBaseAppShell.cpp:87 frame_pointer
    8  XUL nsAppShell::ProcessGeckoEvents(void*) widget/cocoa/nsAppShell.mm:440 frame_pointer
Severity: normal → critical
Crash Signature: [@ objc_msgSend | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ libobjc.A.dylib@0x705d ]

This bug might benefit from an analysis using a HookCase hook library (https://github.com/steven-michaud/HookCase).

Possibly related to bug 1587351, which also happens in nsAppShell::AfterProcessNextEvent().

See Also: → 1587351

This crash spikes in Nightly 20191008214557 and then drops to zero. The changes that were causing bug 1587351 were in that version afaik. It's possible this is something else, but if it's the same crash as bug 1587351 then this has already been backed out.

Crash Signature: [@ objc_msgSend | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ libobjc.A.dylib@0x705d ] → [@ objc_msgSend | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ objc_release | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ libobjc.A.dylib@0x705d ]

(In reply to comment #3)

Yes, this is probably a dup of bug 1587351. But let's keep it separate for the time being, until further investigation shows it has the same cause.

Crash Signature: [@ objc_msgSend | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ objc_release | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ libobjc.A.dylib@0x705d ] → [@ objc_msgSend | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ objc_release | (anonymous namespace)::AutoreleasePoolPage::pop ] [@ libobjc.A.dylib@0x705d ] [@ libobjc.A.dylib@0x68a9 ]

The priority flag is not set for this bug.
:spohl, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(spohl.mozilla.bugs)

The reported spike in crashes correlates to the spike in bug 1587351.

Status: NEW → RESOLVED
Closed: 5 years ago
Flags: needinfo?(spohl.mozilla.bugs)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.