crash EXCEPTION_IN_PAGE_ERROR [@ xtolong] (v3.1, v3.1.1) processing extensions, [@ nsZipArchive::GetData(nsZipItem*)] (Mac)

NEW
Unassigned

Status

()

P5
critical
8 years ago
8 months ago

People

(Reporter: wsmwk, Unassigned)

Tracking

({crash, qawanted})

1.9.2 Branch
x86
All
crash, qawanted
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [tbird crash][startupcrash][necko-would-take], crash signature)

(Reporter)

Description

8 years ago
crash [@ xtolong]. All thunderbird. No firefox, even in top 10 frames afaict.
long term it's been a rare crash, but currently for 3.1 it's ~#30

last 30 days are all thunderbird 3.1 and 3.1b2. most but not all have german dictionary installed like bp-2ff9a08e-2446-48f3-87f3-d93232100606, bp-886116cf-921b-4402-bf31-8fcb92100608. 

some 3.0.4 in april were all startup crashes like
bp-4fd20622-b5f7-4e7a-baf5-10aa92100516 which are almost all smajer. smajer is the only person whose crashes have addresses. unfortunately, smajer does not respond.

https://crash-stats.mozilla.com/report/index/4fd20622-b5f7-4e7a-baf5-10aa92100516
https://crash-stats.mozilla.com/report/index/3c8ef729-4432-4a86-8346-afa852100516
https://crash-stats.mozilla.com/report/index/c227613a-3384-4a5f-959e-175fb2100516
https://crash-stats.mozilla.com/report/index/dc82f152-b3bc-40b4-a972-7e9982100516
https://crash-stats.mozilla.com/report/index/dc82f152-b3bc-40b4-a972-7e9982100516
https://crash-stats.mozilla.com/report/index/71522e7a-af60-4083-b1cb-0e4f92100516 
https://crash-stats.mozilla.com/report/index/71522e7a-af60-4083-b1cb-0e4f92100516
(stack from the above crashid)
0	jar50.dll	xtolong	 modules/libjar/nsZipArchive.cpp:1399
1	jar50.dll	nsZipArchive::BuildFileList	modules/libjar/nsZipArchive.cpp:880
2	jar50.dll	nsZipArchive::OpenArchive	modules/libjar/nsZipArchive.cpp:535
3	jar50.dll	nsJAR::Open	modules/libjar/nsJAR.cpp:184
4	jar50.dll	nsZipReaderCache::GetZip	modules/libjar/nsJAR.cpp:1163
5	jar50.dll	nsJARInputThunk::EnsureJarStream	modules/libjar/nsJARChannel.cpp:140
6	jar50.dll	nsJARChannel::Open	modules/libjar/nsJARChannel.cpp:673
7	thunderbird.exe	nsStringBundle::LoadProperties	intl/strres/src/nsStringBundle.cpp:128
8	thunderbird.exe	nsStringBundle::FormatStringFromName	intl/strres/src/nsStringBundle.cpp:227
9	thunderbird.exe	nsCSSScanner::ReportUnexpectedParams	layout/style/nsCSSScanner.cpp:454
10	thunderbird.exe	nsCSSScanner::ReportUnexpectedToken	layout/style/nsCSSScanner.cpp:510
11	thunderbird.exe	CSSParserImpl::ParseColor	layout/style/nsCSSParser.cpp:3644
12	thunderbird.exe	CSSParserImpl::ParseVariant	layout/style/nsCSSParser.cpp:4437
13	thunderbird.exe	CSSParserImpl::ParseSingleValueProperty	layout/style/nsCSSParser.cpp:5300
14	thunderbird.exe	CSSParserImpl::ParseChoice	layout/style/nsCSSParser.cpp:4684
15	thunderbird.exe	CSSParserImpl::ParseOutline	layout/style/nsCSSParser.cpp:7451
16	thunderbird.exe	CSSParserImpl::ParseProperty	layout/style/nsCSSParser.cpp:5074
17	thunderbird.exe	CSSParserImpl::ParseDeclaration	layout/style/nsCSSParser.cpp:3919
18	thunderbird.exe	CSSParserImpl::ParseDeclarationBlock	layout/style/nsCSSParser.cpp:3477
19	thunderbird.exe	CSSParserImpl::ParseRuleSet	layout/style/nsCSSParser.cpp:2320
20	thunderbird.exe	CSSParserImpl::Parse	layout/style/nsCSSParser.cpp:866
21	thunderbird.exe	CSSLoaderImpl::ParseSheet	layout/style/nsCSSLoader.cpp:1550 


bp-21a5a970-3c0f-4ca5-a11c-24c782100609 states "tried to open address book" and has a stack which I think is different from most

0	thunderbird.exe	xtolong	 modules/libjar/nsZipArchive.cpp:873
1	thunderbird.exe	nsZipArchive::GetData	modules/libjar/nsZipArchive.cpp:678
2	thunderbird.exe	nsJARInputStream::InitFile	modules/libjar/nsJARInputStream.cpp:91
3	thunderbird.exe	nsJAR::GetInputStreamWithSpec	modules/libjar/nsJAR.cpp:342
4	thunderbird.exe	nsJAR::GetInputStream	modules/libjar/nsJAR.cpp:316
5	thunderbird.exe	nsJARInputThunk::EnsureJarStream	modules/libjar/nsJARChannel.cpp:166
6	thunderbird.exe	nsJARChannel::Open	modules/libjar/nsJARChannel.cpp:676
7	thunderbird.exe	NS_OpenURI	objdir-tb/mozilla/dist/include/nsNetUtil.h:228
8	thunderbird.exe	nsExpatDriver::OpenInputStreamFromExternalDTD	parser/htmlparser/src/nsExpatDriver.cpp:825
9	thunderbird.exe	nsExpatDriver::HandleExternalEntityRef	parser/htmlparser/src/nsExpatDriver.cpp:734
10	thunderbird.exe	Driver_HandleExternalEntityRef	parser/htmlparser/src/nsExpatDriver.cpp:213
11	thunderbird.exe	doProlog	parser/expat/lib/xmlparse.c:4014
Component: General → General
Product: Thunderbird → Core
QA Contact: general → general
Version: 3.0 → 1.9.2 Branch
(Reporter)

Comment 1

8 years ago
#16 crash for v3.1 => topcrash and we should work toward getting this fixed for tbird 3.1.2

bp-95109c42-65b8-4d0a-88dc-37bf12100711 claims to have no extensions

msged bp-3faa194d-64f5-4c95-8655-661942100717 (john)
that's the only crashin 2 weeks with an email address
Keywords: qawanted, topcrash
Whiteboard: [tbird crash]

Comment 2

8 years ago
EXCEPTION_IN_PAGE_ERROR

The thread tried to access a page that was not present, and the system was unable to load the page. For example, this exception might occur if a network connection is lost while running a program over the network.

Roughly this means the backing store for the data being read went away. For instance using an extension from a network volume and the network volume disappears.

Someone should be able to take the .dmp from:
bp-3faa194d-64f5-4c95-8655-661942100717 

and figure out if that's what's up.
Assignee: nobody → tglek
Blocks: 525755
Summary: crash [@ xtolong] processing extensions → crash EXCEPTION_IN_PAGE_ERROR [@ xtolong] processing extensions

Updated

8 years ago
Component: General → Networking: JAR
QA Contact: general → networking.jar

Comment 3

8 years ago
If the sourcelinks are right, this is using jar code from 1.9.1 which is ancient buggy and slow.

EXCEPTION_IN_PAGE_ERROR suggests that something goes wrong while reading from endp. I don't see how endp could be pointing outside of bufsize.


This looks like a startup crash, so I don't see how the network-share disappearing scenario is realistic here. This code isn't using mmap like the newer code, so a EXCEPTION_IN_PAGE_ERROR is odd.

Updated

8 years ago
Depends on: 598416
(Reporter)

Comment 4

8 years ago
Taras,

Mac signature is @ nsZipArchive::GetData(nsZipItem*). 
  bp-96c1aefb-7163-4589-b289-1794c2100922 v3.1.4
  bp-96f9dec5-59ce-4231-90bc-10a172100921 v3.1.1

windows @ xtolog crash sig is not found in v3.1.2 and higher. 
It morphed to @ int32_le_at, which explains bug 596826 comment 2.
If you agree they are the same, then we can dup 596826.
OS: Windows Vista → All
Summary: crash EXCEPTION_IN_PAGE_ERROR [@ xtolong] processing extensions → crash EXCEPTION_IN_PAGE_ERROR [@ xtolong] (v3.1, v3.1.1) processing extensions, [@ nsZipArchive::GetData(nsZipItem*)] (Mac)

Comment 5

8 years ago
I got a fix for windows in 598416, not really sure what to do on unix.
(Reporter)

Comment 6

8 years ago
(In reply to comment #2)
> The thread tried to access a page that was not present, and the system was
> unable to load the page. For example, this exception might occur if a network
> connection is lost while running a program over the network.

firefox crash bp-48238592-f566-4075-977c-3aa472100908 echoes the above comment
"Profile directory is on a network drive. The server was offline, and Windows cached all file acess. FF crashed during update and reconnecting to the fileserver. (I noticed the server was offline, after clicking to upgrade to Beta 5, but did not look to FF until I got the crash reporter, this took serveral minutes, while thefileserver was offline)"
@ memcmp | nsZipArchive::GetItem(char const*) 
0	mozcrt19.dll	memcmp	
1	xul.dll	nsZipArchive::GetItem	modules/libjar/nsZipArchive.cpp:322
2	xul.dll	xul.dll@0xd52b03	
3	xul.dll	nsJAR::GetInputStreamWithSpec	modules/libjar/nsJAR.cpp:319
4	xul.dll	nsJAR::GetInputStream	modules/libjar/nsJAR.cpp:305
5	xul.dll	nsJARInputThunk::EnsureJarStream	modules/libjar/nsJARChannel.cpp:165 

similar stack in bp-64bfc764-edf0-4fc1-a811-288d92100911
nsZipArchive::GetItem(char const*) 
0	xul.dll	nsZipArchive::GetItem	 modules/libjar/nsZipArchive.cpp:321
1	xul.dll	xul.dll@0xab0717	
2	xul.dll	nsJAR::GetInputStreamWithSpec	modules/libjar/nsJAR.cpp:330
3	xul.dll	nsJAR::GetInputStream	modules/libjar/nsJAR.cpp:316
4	xul.dll	nsJARInputThunk::EnsureJarStream	modules/libjar/nsJARChannel.cpp:166
5	mozcrt19.dll	malloc	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:5790

Comment 7

8 years ago
Wayne, thanks for spotting this comment. Good to have a confirmation.
(Assignee)

Updated

7 years ago
Crash Signature: [@ xtolong] [@ nsZipArchive::GetData(nsZipItem*)]

Comment 8

7 years ago
I do not have cycles to work on this
Assignee: tglek → nobody
Crash Signature: [@ xtolong] [@ nsZipArchive::GetData(nsZipItem*)] → [@ xtolong] [@ nsZipArchive::GetData(nsZipItem*)]

Comment 9

7 years ago
This is pretty low volume. Removing the top crash keyword.
Keywords: topcrash

Updated

7 years ago
Crash Signature: [@ xtolong] [@ nsZipArchive::GetData(nsZipItem*)] → [@ xtolong] [@ nsZipArchive::GetData(nsZipItem*)] [@ nsZipArchive::GetData]
(Reporter)

Comment 10

6 years ago
is nsZipArchive::GetItem(char const*) another example?
bp-b235c929-3a1e-4902-a03d-6ee132120728
Whiteboard: [tbird crash] → [tbird crash][startupcrash]
(Reporter)

Updated

3 years ago
Duplicate of this bug: 596826
Whiteboard: [tbird crash][startupcrash] → [tbird crash][startupcrash][necko-would-take]
You need to log in before you can comment on or make changes to this bug.