Closed Bug 597972 Opened 15 years ago Closed 7 years ago

crash on startup [@ PL_DHashTableOperate | GCGraphBuilder::NoteRoot(unsigned int, void*, nsCycleCollectionParticipant*) ]

Categories

(Core :: General, defect)

Product:
Core
Component:
General
Version:
1.9.2 Branch
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: schwarz, Unassigned)

Details

(Keywords: crash, Whiteboard: [tbird crash])

Crash Data

Attachments

(2 files)

crash log
40.31 KB, application/octet-stream
Details
screen shot of garbled characters
321.48 KB, image/png
Details
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-us) AppleWebKit/533.17.8 (KHTML, like Gecko) Version/5.0.1 Safari/533.17.8 Build Identifier: TB 3.1.4, June 8 2010 crashing every time a few seconds after TB/FF comes up, see attached crashlog Reproducible: Always Steps to Reproduce: start TB, wait a few seconds
Attached file crash log —
only occasionally the moz crash reporter catches the crash and comes up with this: Add-ons: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2,{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.1.31,keyconfig@dorando:20080929,{58D4392A-842E-11DE-B51A-C7B855D89593}:1.2.4,extra-cols@jminta_gmail.com:1.1,fr-moderne@dictionaries.addons.mozilla.org:3.8,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.1.4 BuildID: 20100915140742 CrashTime: 1284975767 EMCheckCompatibility: true Email: schwarz@ircam.fr FramePoisonBase: 00000000f0dea000 FramePoisonSize: 4096 InstallTime: 1284792657 ProductName: Thunderbird ReleaseChannel: release SecondsSinceLastCrash: 254 StartupTime: 1284975756 Theme: classic/1.0 Throttleable: 1 Vendor: Version: 3.1.4 This report also contains technical information about the state of the application when it crashed.
don't know if related to the crash, but the TB update welcome/confirmation message contains garbled characters
The console reports a malloc error just before the crash: malloc: *** mmap(size=53248) failed (error code=12)\n*** error: can't allocate region\n*** This is the whole console log for TB: Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: -- Stack Trace -- Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: get_contentWindow()@chrome://global/content/bindings/browser.xml:0 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: mailTabType_saveFocus([object Object])@chrome://messenger/content/mailTabs.js:551 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: ([object Object])@chrome://messenger/content/mailTabs.js:590 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: saveCurrentTabState()@chrome://messenger/content/tabmail.xml:918 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: openTab("contentTab",[object Object])@chrome://messenger/content/tabmail.xml:489 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: openContentTab("http://live.mozillamessaging.com/thunderbird/whatsnew?locale=en-US&version=3.1.4&os=Darwin&buildid=20100915140742")@chrome://communicator/content/utilityOverlay.js:326 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: openWhatsNew()@chrome://communicator/content/utilityOverlay.js:308 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: onShowWhatsNewPage()@chrome://messenger/content/specialTabs.js:457 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: ()@chrome://messenger/content/specialTabs.js:168 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: OnLoadMessenger()@chrome://messenger/content/msgMail3PaneWindow.js:376 Sep 20 11:52:41 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: onload([object Event])@chrome://messenger/content/messenger.xul:1 Sep 20 11:52:48 IMTR-1646-Schwarz-5 thunderbird-bin[11417]: thunderbird-bin(11417,0xa0145720) malloc: *** mmap(size=53248) failed (error code=12)\n*** error: can't allocate region\n*** set a breakpoint in malloc_error_break to debug Sep 20 11:52:48 IMTR-1646-Schwarz-5 thunderbird-bin[11417]: thunderbird-bin(11417,0xa0145720) malloc: *** mmap(size=262144) failed (error code=12)\n*** error: can't allocate region\n*** set a breakpoint in malloc_error_break to debug Sep 20 11:52:48 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: thunderbird-bin(11417,0xa0145720) malloc: *** mmap(size=53248) failed (error code=12) Sep 20 11:52:48 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: *** error: can't allocate region Sep 20 11:52:48 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: *** set a breakpoint in malloc_error_break to debug Sep 20 11:52:48 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: thunderbird-bin(11417,0xa0145720) malloc: *** mmap(size=262144) failed (error code=12) Sep 20 11:52:48 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: *** error: can't allocate region Sep 20 11:52:48 IMTR-1646-Schwarz-5 [0x0-0x2b22b2].org.mozilla.thunderbird[11417]: *** set a breakpoint in malloc_error_break to debug Sep 20 11:52:48 IMTR-1646-Schwarz-5 com.apple.launchd[165] ([0x0-0x2b22b2].org.mozilla.thunderbird[11417]): Stray process with PGID equal to this dead job: PID 11447 PPID 1 crashreporter Sep 20 11:52:48 IMTR-1646-Schwarz-5 com.apple.launchd[165] ([0x0-0x2b22b2].org.mozilla.thunderbird[11417]): Exited with exit code: 1
luckily, the crashfest stops after a reboot of the machine. FYI, the available memory while TB crashed was 1.5GB, an 2.4GB of disk space Hopefully, this can give a hint on which error checks to investigate to catch rare states of corruption of the OS/machine. Thanks!
Severity: critical → major
Can you provide us with a crashID (see http://support.mozillamessaging.com/en-US/kb/Mozilla+Crash+Reporter on how to get that ) ?
Severity: major → critical
Keywords: crash
Summary: crash on startup around nsMsgDBFolder::SetMsgDatabase → crash on startup [@ PL_DHashTableOperate | GCGraphBuilder::NoteRoot(unsigned int, void*, nsCycleCollectionParticipant*) ]
Version: unspecified → 3.1
gary should we move this to Core/JS ?
(In reply to comment #8) > gary should we move this to Core/JS ? Doesn't seem to be a JS issue at first glance though there's a line of js_GC. Probably related to XPConnect but I'm not sure, cc'ing mrbkap for his opinion. :)
0 libxpcom_core.dylib PL_DHashTableOperate pldhash.c:615 1 libxpcom_core.dylib GCGraphBuilder::NoteRoot xpcom/base/nsCycleCollector.cpp:1352 2 thunderbird-bin XPCJSRuntime::AddXPConnectRoots js/src/xpconnect/src/xpcjsruntime.cpp:421 3 thunderbird-bin nsXPConnect::BeginCycleCollection js/src/xpconnect/src/nsXPConnect.cpp:573 4 libxpcom_core.dylib nsCycleCollector::BeginCollection xpcom/base/nsCycleCollector.cpp:2503 5 libxpcom_core.dylib nsCycleCollector_beginCollection xpcom/base/nsCycleCollector.cpp:3141 6 thunderbird-bin XPCCycleCollectGCCallback js/src/xpconnect/src/nsXPConnect.cpp:391 7 libmozjs.dylib js_GC js/src/jsgc.cpp:3537 8 libmozjs.dylib libmozjs.dylib@0x6177 9 thunderbird-bin nsXPConnect::Collect js/src/xpconnect/src/nsXPConnect.cpp:478 10 libxpcom_core.dylib nsCycleCollector::Collect xpcom/base/nsCycleCollector.cpp:2434 11 libxpcom_core.dylib nsCycleCollector_collect xpcom/base/nsCycleCollector.cpp:3129 12 thunderbird-bin nsCCMemoryPressureObserver::Observe dom/base/nsJSEnvironment.cpp:3621 13 libxpcom_core.dylib nsMemoryImpl::RunFlushers xpcom/base/nsMemoryImpl.cpp:238 14 libxpcom_core.dylib nsMemoryImpl::FlushEvent::Run xpcom/base/nsMemoryImpl.cpp:266 15 libxpcom_core.dylib nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:527 16 libxpcom_core.dylib NS_ProcessPendingEvents_P nsThreadUtils.cpp:200 17 thunderbird-bin nsBaseAppShell::NativeEventCallback widget/src/xpwidgets/nsBaseAppShell.cpp:125 18 thunderbird-bin nsAppShell::ProcessGeckoEvents widget/src/cocoa/nsAppShell.mm:425 19 CoreFoundation CFRunLoopRunSpecific 20 CoreFoundation CFRunLoopRunInMode 21 HIToolbox RunCurrentEventLoopInMode 22 HIToolbox ReceiveNextEventCommon 23 HIToolbox BlockUntilNextEventMatchingListInMode 24 AppKit _DPSNextEvent 25 AppKit -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] 26 AppKit -[NSApplication run] 27 thunderbird-bin nsAppShell::Run widget/src/cocoa/nsAppShell.mm:778 28 thunderbird-bin nsAppStartup::Run toolkit/components/startup/src/nsAppStartup.cpp:183 29 thunderbird-bin XRE_main toolkit/xre/nsAppRunner.cpp:3483 30 thunderbird-bin main mail/app/nsMailApp.cpp:101 31 thunderbird-bin thunderbird-bin@0x1681 32 thunderbird-bin thunderbird-bin@0x15a8 33 @0x1
all are startup, but bp-46be2d47-91c5-47f7-a10e-b5b882100920 is singularly diemo, does it also crash with TB started in safe mode? https://support.mozillamessaging.com/en-US/kb/Safe+Mode different, with our friend mork on the stack ... Frame Module Signature [Expand] Source 0 thunderbird-bin thunderbird-bin@0x17644b 1 thunderbird-bin thunderbird-bin@0x17b562 2 thunderbird-bin morkObject::AddWeakRef db/mork/src/morkObject.cpp:178 3 thunderbird-bin nsMsgDatabase::AddNewThread mailnews/db/msgdb/src/nsMsgDatabase.cpp:4558 4 thunderbird-bin nsMsgDatabase::ThreadNewHdr mailnews/db/msgdb/src/nsMsgDatabase.cpp:4376 5 thunderbird-bin nsMsgDatabase::AddNewHdrToDB mailnews/db/msgdb/src/nsMsgDatabase.cpp:3244 6 thunderbird-bin nsParseNewMailState::PublishMsgHeader mailnews/local/src/nsParseMailbox.cpp:1887 7 thunderbird-bin nsParseNewMailState::DoneParsingFolder mailnews/local/src/nsParseMailbox.cpp:1779 8 thunderbird-bin nsMsgMailboxParser::OnStopRequest mailnews/local/src/nsParseMailbox.cpp:200 9 thunderbird-bin nsMsgLocalMailFolder::AddMessage mailnews/local/src/nsLocalMailFolder.cpp:3898
sorry, I didn't know about safe mode, and after a reboot, TB does not crash anymore. Regarding the hints of malloc errors and nsCCMemoryPressureObserver, as I said, I had plenty of free RAM while it crashed, but had run the machine for days before, with other programs occupying lots of RAM and swap space, so maybe it's a memory fragmentation issue?
Mark, any thoughts on the above stacks?
(In reply to comment #13) > Mark, any thoughts on the above stacks? Nope, sorry.
This isn't a Thunderbird specific issue, I'm hitting it in Firefox, too. It goes into an infinite loop of start-up crashes, and I had to reboot to get it to stop. It looked like general OS memory corruption, as many apps had unicode squares where fonts should be. A reboot fixed it. http://crash-stats.mozilla.com/report/index/965613b2-dc6c-4902-ad35-95f472101023
Status: UNCONFIRMED → NEW
Ever confirmed: true
Product: Thunderbird → Core
QA Contact: general → general
Version: 3.1 → 1.9.2 Branch
that's typically resource exhaustion, not memory corruption
Whiteboard: [tbird crash]
Crash Signature: [@ PL_DHashTableOperate | GCGraphBuilder::NoteRoot(unsigned int, void*, nsCycleCollectionParticipant*) ]
(In reply to David Humphrey (:humph) from comment #15) > This isn't a Thunderbird specific issue, I'm hitting it in Firefox, too. It > goes into an infinite loop of start-up crashes, and I had to reboot to get > it to stop. It looked like general OS memory corruption, as many apps had > unicode squares where fonts should be. A reboot fixed it. humph, is this gone for you? No crashes found for recent versions on crash-stats.
Flags: needinfo?(david.humphrey)
ditto diemo
Flags: needinfo?(schwarz)
I've not seen it again since I filed this, no.
Flags: needinfo?(david.humphrey)
the bug didn't occur anymore, no
Flags: needinfo?(schwarz)
Crash Signature: [@ PL_DHashTableOperate | GCGraphBuilder::NoteRoot(unsigned int, void*, nsCycleCollectionParticipant*) ] → [@ PL_DHashTableOperate | GCGraphBuilder::NoteRoot(unsigned int, void*, nsCycleCollectionParticipant*) ] [@ PL_DHashTableOperate | GCGraphBuilder::NoteRoot ]
WFM per previous comments
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: