1842663 - Crash in [@ stackoverflow | RtlpHeapGenerateRandomValue32 | RtlpLowFragHeapAllocFromContext | RtlpAllocateHeapInternal | LdrpGetNewTlsVector]

Status: NEW

(Core :: Widget: Win32, defect, P3)

Description

[Ryan VanderMeulen [:RyanVM]]

Not really sure where to file this as it's crashing in Windows code, but it's happening often enough that it seems worth getting on file.

Crash report: https://crash-stats.mozilla.org/report/index/db3d4fc9-9f54-4b93-be97-a4b9d0230710

Reason: EXCEPTION_STACK_OVERFLOW

Top 9 frames of crashing thread:

0  ntdll.dll  RtlpHeapGenerateRandomValue32  
1  ntdll.dll  RtlpLowFragHeapAllocFromContext  
2  ntdll.dll  RtlpAllocateHeapInternal  
3  ntdll.dll  LdrpGetNewTlsVector  
4  ntdll.dll  LdrpAllocateTls  
5  ntdll.dll  LdrpInitializeThread  
6  ntdll.dll  LdrpInitialize  
7  ntdll.dll  LdrpInitialize  
8  ntdll.dll  LdrInitializeThunk  

Comment 1

[Ray Kraesig [:rkraesig]]

At first glance this looks like an OOM (exhibited as a stack overflow) while trying to load a DLL. That seems suspicious on its own, but several of the reports have a lot of duplicate unloaded modules (example, example). If something's repeatedly loading and unloading a DLL, it's not too much of a stretch to believe that this will occasionally intersect with an OOM.

Those reports which don't all seem to have at least one KBD*.dll (example, example) in their unloaded modules list. If, somehow, keyboard input DLLs aren't being duplicated in the Unloaded Modules list even though others are, that would explain everything we're seeing... but I'm not sure why that would be the case.