504308 - Startup crash on WinXP SP1 [@ @0x0 | iphlpapi.dll@0xfc22][@ @0x0 | AddIPv4InterfaceInfo]

Status: RESOLVED WORKSFORME

(Core :: Networking, defect)

Description

[Wayne Mery (:wsmwk)]

crash [@ @0x0 | iphlpapi.dll@0xfc22]
#1 crash for 3.0b3pre, but can't tell how many users (might be just 1!)
all crashes are within 0-4 seconds of startup
none have comments

bp-2ef6e103-77db-4fbc-bd03-ca6802090714
0		@0x0	
1	iphlpapi.dll	iphlpapi.dll@0xfc22	
2	iphlpapi.dll	iphlpapi.dll@0xe9f1	
3	iphlpapi.dll	iphlpapi.dll@0xfdb9	
4	iphlpapi.dll	iphlpapi.dll@0xfe41	
5	iphlpapi.dll	iphlpapi.dll@0x9d89	
6	thunderbird.exe	nsNotifyAddrListener::CheckAdaptersAddresses	netwerk/system/win32/nsNotifyAddrListener.cpp:541
7	thunderbird.exe	nsNotifyAddrListener::CheckLinkStatus	netwerk/system/win32/nsNotifyAddrListener.cpp:579
8	thunderbird.exe	nsNotifyAddrListener::GetIsLinkUp	netwerk/system/win32/nsNotifyAddrListener.cpp:153
9	thunderbird.exe	nsIOService::TrackNetworkLinkStatusForOffline	netwerk/base/src/nsIOService.cpp:979
10	thunderbird.exe	nsIOService::Init	netwerk/base/src/nsIOService.cpp:254
11	thunderbird.exe	nsIOService::GetInstance	netwerk/base/src/nsIOService.cpp:274
12	thunderbird.exe	nsIOServiceConstructor	netwerk/build/nsNetModule.cpp:76
13	xpcom_core.dll	nsGenericFactory::CreateInstance	objdir-tb/mozilla/xpcom/build/nsGenericFactory.cpp:80
14	xpcom_core.dll	nsComponentManagerImpl::CreateInstanceByContractID	xpcom/components/nsComponentManager.cpp:1687
15	xpcom_core.dll	nsComponentManagerImpl::GetServiceByContractID	xpcom/components/nsComponentManager.cpp:2253
16	xpcom_core.dll	CallGetService	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:94
17	xpcom_core.dll	nsGetServiceByContractIDWithError::operator	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:288
18	xpcom_core.dll	nsCOMPtr_base::assign_from_gs_contractid_with_error	objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:141
19	thunderbird.exe	nsCOMPtr<nsIIOService>::nsCOMPtr<nsIIOService>	objdir-tb/mozilla/dist/include/xpcom/nsCOMPtr.h:612
20	thunderbird.exe	nsChromeRegistry::Init	chrome/src/nsChromeRegistry.cpp:508
21	thunderbird.exe	nsChromeRegistryConstructor	chrome/src/nsChromeFactory.cpp:49
22	xpcom_core.dll	nsGenericFactory::CreateInstance	objdir-tb/mozilla/xpcom/build/nsGenericFactory.cpp:80
23	xpcom_core.dll	nsComponentManagerImpl::CreateInstanceByContractID	xpcom/components/nsComponentManager.cpp:1687
24	xpcom_core.dll	nsComponentManagerImpl::GetServiceByContractID	xpcom/components/nsComponentManager.cpp:2253
25	xpcom_core.dll	CallGetService	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:94
26	xpcom_core.dll	nsGetServiceByContractID::operator	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:278
27	xpcom_core.dll	nsCOMPtr_base::assign_from_gs_contractid	objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:132
28	thunderbird.exe	nsCOMPtr<nsIToolkitChromeRegistry>::nsCOMPtr<nsIToolkitChromeRegistry>	objdir-tb/mozilla/dist/include/xpcom/nsCOMPtr.h:604
29	thunderbird.exe	ScopedXPCOMStartup::SetWindowCreator	toolkit/xre/nsAppRunner.cpp:1128

Comment 1

[Ludovic Hirlimann [:Usul]]

iphlpapi.dll is the dll responsible for finding network settings on windows.

Comment 2

[Mark Banner (:standard8)]

This should probably be a core bug - I can't see anything there that would indicate with would indicate a direct issue with mailnews.

Comment 3

[Samuel Sidler (old account; do not CC)]

There's hardly any of these crashes (10 in the last week) in Firefox builds. Could be something Thunderbird is using differently than Firefox that's causing it to be so popular? Also possibly an add-on, I guess, but most likely just one user is causing it to be so popular for Thunderbird.

Comment 4

[Daniel Veditz [:dveditz]]

trying to execute 0x0 can indicate badness, a potentially serious bug in the OS. All the crashes are in WinXP SP1 which has lots of known security bugs, maybe this was one of them (that is, not our bug)

http://crash-stats.mozilla.com/report/list?product=Thunderbird&version=Thunderbird%3A3.0b3pre&platform=windows&query_search=signature&query_type=exact&query=&date=&range_value=1&range_unit=weeks&do_query=1&signature=%400x0%20|%20iphlpapi.dll%400xfc22

It might be the same user, all the system .dlls appear to be the same version except mozcrt19.dll (and thunderbird itself). Of course it doesn't look like there's anything "extra" in there, and any two people who have WinXP SP1 probably have the same versions of everything.

Comment 5

[timeless]

it'd really help me if someone got the SP1 symbols added to the symbol server. I'm told there are scripts for this, but i don't know who can run them. The alternative is that someone spend hours rebuilding the stack (it's really mind numbing work).

Comment 6

[Ludovic Hirlimann [:Usul]]

ted how shall we proceed in order to get SP1 symbols on the symbol server ?

Comment 7

[(not currently active) Ted Mielczarek]

I fixed bug 419882 last week, so missing symbols should be populated pretty quickly. However, something like XP SP1 that doesn't have a lot of users might get missed since the script just grabs the 500 latest crashes once a day and fills in any missing symbols. I just checked, and the modules that were missing symbols in the report in comment 0 (iphlpapi.dll, kernel32.dll) all have symbols present on the symbol server now. That won't help the existing reports, but new reports that are submitted will have symbols.

Comment 8

[(not currently active) Ted Mielczarek]

Also, given that we have those symbols, I spent a few minutes and manually mapped the addresses in that stack to function names:
1 AddIPv4InterfaceInfo
2 ForEachIPv4Interface
3 GetAdapterAddresses
4 GetAdapterAddressesEx
5 GetAdaptersAddresses

Comment 9

[Wayne Mery (:wsmwk)]

Thanks Ted. Your frame list is accurate per bp-fdb05877-c096-4921-8968-f30722090826

still no FF crashes

Comment 10

[David :Bienvenu]

this has become a TB top crash in 3.0 pre...

Comment 11

[Wayne Mery (:wsmwk)]

@0x0 | AddIPv4InterfaceInfo  first crash appears 20090806113714 build.
the crashes are still all SP1. none have comments

Comment 12

[David :Bienvenu]

Ah, maybe we can't do anything about this, other than suggest that users install the security updates to XP.

Comment 13

[Jesse Ruderman on Windows]

This is happening for more than one user: the crash reports show a variety of CPUs.

Is this happening for all WinXP SP1 users, or just some?  Every time, or just sometimes?  Is this bad enough that we'd want to "drop support" for SP1 and/or show a warning dialog early in startup on SP1?

Has anyone loaded SP1 into a VM and tested this?

Comment 14

[Ludovic Hirlimann [:Usul]]

(In reply to comment #13)

> Has anyone loaded SP1 into a VM and tested this?

Just did. My Thunderbird installation runs on XP SP1. So some other factor might be in effect. Might be the use of a proxy.

Comment 15

[Wayne Mery (:wsmwk)]

except for two odd v3.1.15 crashes, these stack sigs died out after v3.1.11