410998 - crash when a series of actions in main UI are performed

Status: RESOLVED WORKSFORME

(Core :: Widget: Cocoa, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

(my first time reporting crashes in debug builds; hope I'm doing this right.)

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9b3pre) Gecko/2008010612 Calendar/0.6a1

1. Double click on today's date (06 Jan 2008) to bring up the new event window.
2. Left-click on Invite attendees.
3. Left-click on cancel.
4. Using keyboard, click cmd-w to close the event window.
5. Left click on the Window menu. The spinning logo appears and the app hangs, then crashes after a period of time.

(the crash also occurs without steps 2 and 3.)

A message appeared in Terminal with "export XPCOM_MEM_LEAK_LOG=2" enabled, using gdb (see http://kb.mozillazine.org/Getting_a_stacktrace_with_gdb ) and upon completion of the last step:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0xc5c1d543
0x9406c6e8 in objc_msgSend ()


gdb backtrace:

#0  0x9406c6e8 in objc_msgSend ()
#1  0x960c5c83 in -[NSWindow performKeyEquivalent:] ()
#2  0x960c5910 in -[NSApplication _handleKeyEquivalent:] ()
#3  0x95fe2e4e in -[NSApplication sendEvent:] ()
#4  0x95f40705 in -[NSApplication run] ()
#5  0x095c8423 in nsAppShell::Run (this=0x62a210) at /Users/skywalker/Desktop/Mozilla/cvs/mozilla/widget/src/cocoa/nsAppShell.mm:565
#6  0x0a20231c in nsAppStartup::Run (this=0x64b240) at /Users/skywalker/Desktop/Mozilla/cvs/mozilla/toolkit/components/startup/src/nsAppStartup.cpp:181
#7  0x000f194f in XRE_main (argc=1, argv=0xbffff4ec, aAppData=0x60e9b0) at /Users/skywalker/Desktop/Mozilla/cvs/mozilla/toolkit/xre/nsAppRunner.cpp:3207
#8  0x000027c8 in main (argc=1, argv=0xbffff4ec) at /Users/skywalker/Desktop/Mozilla/cvs/mozilla/calendar/sunbird/app/nsCalendarApp.cpp:92


My .mozconfig:

mk_add_options MOZ_MAKE_FLAGS="-j3"
mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/../objdir-@CONFIG_GUESS@
mk_add_options MOZ_BUILD_PROJECTS="browser mail calendar"
mk_add_options MOZ_CO_PROJECT="browser mail calendar"

ac_add_app_options browser --enable-application=browser
ac_add_app_options mail --enable-application=mail
ac_add_app_options calendar --enable-application=calendar

ac_add_options --disable-optimize
ac_add_options --enable-debug
ac_add_options --disable-static
ac_add_options --enable-shared
ac_add_options --with-macos-sdk=/Developer/SDKs/MacOSX10.4u.sdk

(I chose to compile calendar)

Comment 1

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

cc'ing Daniel Boelzle.

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

A further experiment:

when sunbird launches, double click the current date to bring up the new event window. Then a cmd-w to close that window. Program hangs on clicking "Window" at the menubar.

gdb shows:
...
--WEBSHELL 0x13a67390 == 2
objc[1631]: FREED(id): message _unlockViewHierarchyForDrawing sent to freed object=0x17002be0

Program received signal EXC_BAD_INSTRUCTION, Illegal instruction/operand.
0x9405ce5a in _objc_error ()


and the stack trace is at:
http://pastebin.mozilla.org/298081

Comment 3

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: Info to be imported into Instruments.app in XCode 3

Using Sampler.app (in Instruments.app of XCode 3) I have attached some additional debug info.

Unfortunately it cannot be exported into any other format.. :( (not that I know of now)

Comment 4

[Daniel Boelzle [:dbo]]

Gary, please try a regular trunk build from ftp.mozilla.org whether that crashes, too.

Comment 5

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Confirmed crashing on a regular trunk build downloaded from ftp.mozilla.org:

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9b3pre) Gecko/2008010905 Calendar/0.6a1


Crash report:

BuildID: 2008010905
CrashTime: 1199902565
InstallTime: 1199902549
ProductName: Sunbird
StartupTime: 1199902553
URL: 
UserID: dc23873f-1b54-5d4e-82bf-a178c4d90c45
Vendor: Mozilla
Version: 0.6a1

Comment 6

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

The crash report (forgot to add that a fresh profile was created) for comment #5 is here:

http://crash-stats.mozilla.com/report/index/04e0a4b8-bedf-11dc-8f84-001a4bd46e84?date=2008-01-09-18

Sunbird ( Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.12pre) Gecko/20080109 Calendar/0.8pre ) branch build downloaded from ftp confirmed OK - Not crashing.

(I'm not sure if this should be a Calendar or Core code bug)

Comment 7

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Following suggestions by Håkan Waara at https://bugzilla.mozilla.org/show_bug.cgi?id=411173#c4 , I used SpinControl.app (instead of Instruments.app) to detect this problem and the output (sampled data for ~35s) is at:

http://pastebin.mozilla.org/300417

Comment 8

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Per Clint's suggestion in IRC, re-assigning to Core, widget cocoa.

Comment 9

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

WFM on Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.2pre) Gecko/20090721 Calendar/1.0pre