1617139 - Crash when visiting specific webpage

Status: NEW

(GeckoView :: General, defect, P3)

Description

[ValentinTimisica]

Issue found originally on webcompat and reported on Fenix

Originally reported @ webcompat/web-bugs#44583

In Fenix Preview Nightly (but not "regular" Fenix Preview) Firefox Preview Nightly 191118 (🦎: 72.0a1-20191115095319) and 191118, visit https://www.microsoftedgeinsider.com/en-us/whats-new and before loading the site will crash the browser.

I investigated and I could reproduce the crash on Fennec, Fenix, Firefox Focus, Reference Browser and GeckoView Example. As such I think the issue stems from GV.

Device information

• Android device: Samsung Galaxy Note 10 (Android 10).
• Fennec, Reference Browser and Focus versions: Latest from store.
• GeckoView Example: from latest central.

Videos with the crash

• Fennec
• Firefox Focus
• Reference Browser
• GeckoView Example

StackTrace

android.os.DeadObjectException
        at android.os.BinderProxy.transactNative(Native Method)
        at android.os.BinderProxy.transact(BinderProxy.java:526)
        at android.view.IWindow$Stub$Proxy.windowFocusChanged(IWindow.java:797)
        at com.android.server.wm.WindowState.reportFocusChangedSerialized(WindowState.java:3591)
        at com.android.server.wm.WindowManagerService$H.handleMessage(WindowManagerService.java:5136)
        at android.os.Handler.dispatchMessage(Handler.java:107)
        at android.os.Looper.loop(Looper.java:237)
        at android.os.HandlerThread.run(HandlerThread.java:67)
        at com.android.server.ServiceThread.run(ServiceThread.java:44)

Comment 1

[Emily Toop (:fluffyemily)]

I have tried replicating this on ReferenceBrowser, Fenix (release and nightly) and GVE and did not get the crash.

I was able to replicate the crash on Fennec. This may be a Fennec only bug, in which case we will not fix it.

Comment 2

[Andrei Bodea[:andrei]]

Hello, note that I investigated this issue and I added more information on the GitHub bug that can be found here.

Browser	Device	Android version	Crash?
Fenix Nightly 2/21	Google Pixel 3a XL	10	❌
Fenix Nightly 2/21	Samsung Galaxy S10+	9	❌
Fenix Nightly 2/21	Samsung Galaxy S8+	8	✔️
Fenix Nightly 2/21	Samsung Galaxy S7	7	✔️
Fenix Nightly 2/21	OnePlus A3	6	❌
Fenix Nightly 2/21	Nexus 4	5	❌
Fennec RC	Google Pixel 3a XL	10	✔️
Fennec RC	Samsung Galaxy S10+	9	✔️
Fennec RC	Samsung Galaxy S8+	8	✔️
Fennec RC	Samsung Galaxy S7	7	✔️
Fennec RC	OnePlus A3	6	❌
Fennec RC	Nexus 4	5	❌
R-B latest	Google Pixel 3a XL	10	❌
R-B latest	Samsung Galaxy S10+	9	❌
R-B latest	Samsung Galaxy S8+	8	✔️
R-B latest	Samsung Galaxy S7	7	✔️
R-B latest	OnePlus A3	6	❌
R-B latest	Nexus 4	5	✔️

Comment 3

[James Willcox (:snorp) ([e-mail]) (he/him)]

Agi has an S7 and will try to reproduce there.

Comment 4

[[ex-Mozilla] Agi Sferro | :agi]

Can't reproduce with the latest Fenix Nightly on S7.

Comment 5

[James Willcox (:snorp) ([e-mail]) (he/him)]

Valentin, can you still reproduce this?

Comment 6

[Andrei Bodea[:andrei]]

I retested this issue on the latest Nightly from 3/10 for more details please check the following:

Browser	Device	Android version	Crash?
Fenix Nightly 3/20	Google Pixel 4 XL	10	❌
Fenix Nightly 3/20	Samsung Galaxy S10+	10	❌
Fenix Nightly 3/20	Huawei Mate 20 Lite	8.1.0	✔️
Fenix Nightly 3/20	OnePlus A	6.0.1	❌
Fenix Nightly 3/20	Samsung Galaxy S7	7	✔️
Fenix Nightly 3/20	Google Pixel 3a XL	9	❌
Fenix Nightly 3/20	Nexu 4	5	❌

Here you can find the logcat.

Comment 7

[James Willcox (:snorp) ([e-mail]) (he/him)]

NI to Agi to try on the S7 with Android 7.

Comment 8

[Kevin Brosnan [Ex-Mozilla]]

I have a reproducible device and could get it to Agi if that is acceptable to him.

2020-07-27 19:06:41.039 1521-15054/? I/WindowManager: WIN DEATH: Window{efa213 u0 org.mozilla.fenix/org.mozilla.fenix.App}
2020-07-27 19:06:41.071 1521-3352/? W/ActivityManager: Exception when unbinding service org.mozilla.fenix/.customtabs.CustomTabsService
    android.os.DeadObjectException
        at android.os.BinderProxy.transactNative(Native Method)
        at android.os.BinderProxy.transact(Binder.java:761)
        at android.app.IApplicationThread$Stub$Proxy.scheduleUnbindService(IApplicationThread.java:1575)
        at com.android.server.am.ActiveServices.removeConnectionLocked(ActiveServices.java:2917)
        at com.android.server.am.ActiveServices.killServicesLocked(ActiveServices.java:3327)
        at com.android.server.am.ActivityManagerService.cleanUpApplicationRecordLocked(ActivityManagerService.java:22158)
        at com.android.server.am.ActivityManagerService.handleAppDiedLocked(ActivityManagerService.java:6962)
        at com.android.server.am.ActivityManagerService.appDiedLocked(ActivityManagerService.java:7233)
        at com.android.server.am.ActivityManagerService$AppDeathRecipient.binderDied(ActivityManagerService.java:2020)
        at android.os.BinderProxy.sendDeathNotice(Binder.java:841)

Comment 9

[[ex-Mozilla] Agi Sferro | :agi]

(In reply to Kevin Brosnan [:kbrosnan] from comment #8)

I have a reproducible device and could get it to Agi if that is acceptable to him.

that sounds good to me!

Comment 10

[[ex-Mozilla] Agi Sferro | :agi]

Kevin kindly dropped off an S8 at my place. I just tried an I can reproduce, ni to figure out what's going on here.

Comment 11

[[ex-Mozilla] Agi Sferro | :agi]

Ok so from what I can see this seems to be an OOM. Android kills pretty much everything on the system before killing Fenix. Still looking.