524706 - crash [@sqlite3VdbeMemGrow ]

Status: RESOLVED INACTIVE

(Toolkit :: Storage, defect)

Description

[Shawn Wilsher :sdwilsh]

SQLite version 3.6.10
Firefox version 3.5.3

See url field for recent crashes.

Comment 1

[(not currently active) Ted Mielczarek]

This is a bit confusing, since the line number points at the function declaration. Looking at the symbol file that matches a crash report Shawn sent me:
http://symbols.mozilla.org/firefox/sqlite3.pdb/555255959B1B4EF38AD174DEB0E456B81/sqlite3.sym

FUNC 108f0 126 4 sqlite3VdbeMemGrow
108f0 8 43814 18

there are 8 bytes of code that correspond to that line number. You could grab the 3.5.3 binaries, and look at the disassembly of that function to see exactly what it's doing there. In addition, looking at the raw dump:
0|0|sqlite3.dll|sqlite3VdbeMemGrow|hg:hg.mozilla.org/releases/mozilla-1.9.1:db/sqlite3/src/sqlite3.c:0da982f65d37|43814|0x0

The last number is the instruction offset within that line, so the instruction pointer was apparently at the first instruction in the function.

I wouldn't expect Breakpad to be wrong here, since this is the top of the stack, so the instruction pointer is taken from the exception record, not derived from anything else, and the rest of the stack looks sane.

Comment 2

[Shawn Wilsher :sdwilsh]

This may have gone away with the upgrade to 3.6.16 in Firefox 3.5.4.  No reports yet, but it also hasn't been 24 hours:
http://crash-stats.mozilla.com/report/list?product=Firefox&version=Firefox%3A3.5.4&query_search=signature&query_type=exact&query=sqlite3VdbeMemGrow&date=&range_value=1&range_unit=weeks&do_query=1&signature=sqlite3VdbeMemGrow

Comment 3

[Shawn Wilsher :sdwilsh]

Still around in 3.5.5

Comment 4

[Shawn Wilsher :sdwilsh]

Not seeing this on 3.6 with SQLite 3.6.22.  If we want to fix this on 3.5, we could upgrade SQLite (bug 530667).

Comment 5

[Wayne Mery (:wsmwk)]

bp-92dd1bd4-c268-4c21-ab91-0cccb2131127
0	nss3.dll	sqlite3VdbeMemGrow	db/sqlite3/src/sqlite3.c
1	nss3.dll	allocateCursor	db/sqlite3/src/sqlite3.c
2	nss3.dll	sqlite3VdbeExec	db/sqlite3/src/sqlite3.c
3	nss3.dll	sqlite3Step	db/sqlite3/src/sqlite3.c
4	nss3.dll	sqlite3_step	db/sqlite3/src/sqlite3.c
5	xul.dll	mozilla::storage::Connection::stepStatement(sqlite3_stmt *)	storage/src/mozStorageConnection.cpp
6	xul.dll	mozilla::storage::Statement::ExecuteStep(bool *)	storage/src/mozStorageStatement.cpp

Comment 6

[BMO Automation]

Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.