373076 - EXC_BAD_INSTRUCTION [@ stub_binding_helper_interface] on second thread while main thread is within nsJARChannel::OnStopRequest

Status: RESOLVED WORKSFORME

(Core :: Networking: JAR, defect)

Description

[Jesse Ruderman]

My debug build of Firefox on Mac is crashing 10% of the time during startup.  The crash is in thread 1 [@ stub_binding_helper_interface] while thread 0 is doing something within nsJARChannel::OnStopRequest.  The things above nsJARChannel::OnStopRequest on the thread 0 stack vary but the stack 1 thread is always the same.

I think this is a regression from within the last week, but it could be due to a change I made to my chrome manifests.

The last line of stdout is "++DOMWINDOW == 6" (for a complete startup it would go up to 7 and then back down to 6) and last thing line of stderr is "ASSERTION: wasDirty lied".  I don't see anything in stderr or stdout that seems related to the jar protocol.

Here's part of a crash report:

Exception:  EXC_BAD_INSTRUCTION (0x0002)
Code[0]:    0x0000000d
Code[1]:    0x00000000


Thread 0:
0   libmozjs.dylib           	0x010873d6 js_InitObjectMap + 0 (jsobj.c:2200)
1   libmozjs.dylib           	0x01087452 js_NewObjectMap + 45 (jsobj.c:2211)
2   libmozjs.dylib           	0x01087d61 js_NewObject + 844 (jsobj.c:2481)
3   libmozjs.dylib           	0x01017e80 JS_NewObject + 61 (jsapi.c:2411)
4   <<00000000>> 	0x199eed64 0 + 429845860
5   <<00000000>> 	0x199edabb 0 + 429841083
6   <<00000000>> 	0x19ad6625 0 + 430794277
7   <<00000000>> 	0x199e74da 0 + 429815002
8   libnecko.dylib           	0x13b75c28 nsStreamLoader::OnStopRequest(nsIRequest*, nsISupports*, unsigned) + 166 (nsStreamLoader.cpp:110)
9   libjar50.dylib           	0x1574b041 nsJARChannel::OnStopRequest(nsIRequest*, nsISupports*, unsigned) + 187 (nsJARChannel.cpp:753)
10  libnecko.dylib           	0x13b51311 nsInputStreamPump::OnStateStop() + 271 (nsInputStreamPump.cpp:572)
11  libnecko.dylib           	0x13b5142f nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) + 153 (nsInputStreamPump.cpp:396)
12  libxpcom_core.dylib      	0x013a69f4 nsInputStreamReadyEvent::Run() + 100 (nsStreamUtils.cpp:112)
13  libxpcom_core.dylib      	0x013498ea nsThread::ProcessNextEvent(int, int*) + 556 (nsThread.cpp:483)
14  libxpcom_core.dylib      	0x012f220e NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:225)
15  <<00000000>> 	0x16f09b88 nsBaseAppShell::Run() + 124 (nsBaseAppShell.cpp:152)
16  <<00000000>> 	0x16eeddf2 nsAppShell::Run() + 190 (nsAppShell.mm:330)
17  <<00000000>> 	0x16eee0d4 -[AppShellDelegate runAppShell] + 36 (nsAppShell.mm:429)
18  com.apple.Foundation     	0x9260e0c7 __NSFireDelayedPerform + 403
19  com.apple.CoreFoundation 	0x9082b822 CFRunLoopRunSpecific + 3341
20  com.apple.CoreFoundation 	0x9082ab0e CFRunLoopRunInMode + 61
21  com.apple.HIToolbox      	0x92ddabef RunCurrentEventLoopInMode + 285
22  com.apple.HIToolbox      	0x92dda234 ReceiveNextEventCommon + 184
23  com.apple.HIToolbox      	0x92dda154 BlockUntilNextEventMatchingListInMode + 81
24  com.apple.AppKit         	0x9327f465 _DPSNextEvent + 572
25  com.apple.AppKit         	0x9327f056 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137
26  <<00000000>> 	0x16eedbe9 nsAppShell::ProcessNextNativeEvent(int) + 275 (nsAppShell.mm:284)
27  <<00000000>> 	0x16f09af9 nsBaseAppShell::DoProcessNextNativeEvent(int) + 51 (nsBaseAppShell.cpp:136)
28  <<00000000>> 	0x16f09eaa nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned) + 94 (nsBaseAppShell.cpp:209)
29  <<00000000>> 	0x16eedeb4 nsAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned) + 180 (nsAppShell.mm:354)
30  libxpcom_core.dylib      	0x013497e6 nsThread::ProcessNextEvent(int, int*) + 296 (nsThread.cpp:472)
31  libxpcom_core.dylib      	0x012f236f NS_ProcessPendingEvents_P(nsIThread*, unsigned) + 145 (nsThreadUtils.cpp:179)
32  <<00000000>> 	0x16f09a95 nsBaseAppShell::NativeEventCallback() + 83 (nsBaseAppShell.cpp:115)
33  <<00000000>> 	0x16eee757 nsAppShell::ProcessGeckoEvents() + 253 (nsAppShell.mm:209)
34  <<00000000>> 	0x16eee899 -[AppShellDelegate handlePortMessage:] + 107 (nsAppShell.mm:420)
35  com.apple.Foundation     	0x92649a4c __NSFireMachPort + 307
36  com.apple.CoreFoundation 	0x9083b3c5 __CFMachPortPerform + 136
37  com.apple.CoreFoundation 	0x9082b66d CFRunLoopRunSpecific + 2904
38  com.apple.CoreFoundation 	0x9082ab0e CFRunLoopRunInMode + 61
39  com.apple.HIToolbox      	0x92ddabef RunCurrentEventLoopInMode + 285
40  com.apple.HIToolbox      	0x92dda2fd ReceiveNextEventCommon + 385
41  com.apple.HIToolbox      	0x92dda154 BlockUntilNextEventMatchingListInMode + 81
42  com.apple.AppKit         	0x9327f465 _DPSNextEvent + 572
43  com.apple.AppKit         	0x9327f056 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137
44  com.apple.AppKit         	0x93278ddb -[NSApplication run] + 512
45  <<00000000>> 	0x16eeddc6 nsAppShell::Run() + 146 (nsAppShell.mm:327)
46  <<00000000>> 	0x185a6c83 0 + 408579203
47  XUL                      	0x0020fe48 XRE_main + 9632 (nsAppRunner.cpp:2846)
48  org.mozilla.firefox      	0x00002eec main + 40 (nsBrowserApp.cpp:62)
49  org.mozilla.firefox      	0x00002852 _start + 216
50  org.mozilla.firefox      	0x00002779 start + 41

Thread 1 Crashed:
0   dyld                     	0x8fe12f90 stub_binding_helper_interface + 30
1   libxpcom_core.dylib      	0x012f220e NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:225)
2   libxpcom_core.dylib      	0x01349ab8 nsThread::ThreadFunc(void*) + 262 (nsThread.cpp:250)
3   libnspr4.dylib           	0x005ce943 _pt_root + 313 (ptthread.c:223)
4   libSystem.B.dylib        	0x90023d87 _pthread_body + 84

Comment 1

[Jesse Ruderman]

I've been hitting this randomly even at times other than startup.

Comment 2

[Jesse Ruderman]

Looking at my last month or two of crash logs:

* The only crashes logs where nsJARChannel::OnStopRequest is on the thread 0 stack crashed on thread 0 rather than crashing on thread 1.

* The most recent one is 2007-09-29.

I think this is WFM.