598565 - Segfault on shutdown after locked profile dialog in Native2WrappedNativeMap::Find @ JS_DHashTableOperate

Status: RESOLVED INCOMPLETE

(Core :: XPConnect, defect)

Description

[Josh Matthews [:jdm]]

Attachment: Backtrace

I've seen this a few times now, but intermittently so I guess it's some sort of race happening.  Backtrace attached.

Comment 1

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Not sure if this is the same signature, but I'm seeing more of the same place in crash.  However I'm seeing the XPCWrappedNativeProto::GetNewOrUsed  in most of these signatures.  For example:

https://crash-stats.mozilla.com/report/index/51defd76-32b7-41c0-9b9f-81ac12110822

0 	libxul.so 	JS_DHashTableOperate 	js/src/jsdhash.cpp:608
1 	libxul.so 	XPCWrappedNativeProto::GetNewOrUsed 	js/src/xpconnect/src/xpcmaps.h:361
2 	libxul.so 	XPCWrappedNative::GetNewOrUsed 	js/src/xpconnect/src/xpcprivate.h:4093
3 	libxul.so 	XPCConvert::NativeInterface2JSObject 	js/src/xpconnect/src/xpcconvert.cpp:1293
4 	libxul.so 	NativeInterface2JSObject 	js/src/xpconnect/src/nsXPConnect.cpp:1300

More reports:
https://crash-stats.mozilla.com/report/list?range_value=7&range_unit=days&date=2011-08-22%2011%3A00%3A00&signature=JS_DHashTableOperate&version=Fennec%3A9.0a1

Comment 2

[Josh Matthews [:jdm]]

While these reports are not necessarily unrelated, there's no obvious similarity to them besides the first stack frame, so let's not conflate them.

Comment 3

[Scoobidiver (away)]

It's #4 top crasher in 10.0 on Linux.

Comment 4

[Scoobidiver (away)]

It's slightly correlated to Firebug on 10.0.2:
  JS_DHashTableOperate|SIGSEGV (49 crashes)
     37% (18/49) vs.  24% (287/1201) [e-mail] (Firebug, https://addons.mozilla.org/addon/1843)

Comment 5

[Sheila Mooney]

This doesn't appear to be that high on desktop anymore. It's higher on FennecAndroid. Removing the top crash keyword and we can add it again if it goes high again.

Comment 6

[Scoobidiver (away)]

It's #11 top crasher in FennecAndroid 14.0b2.

Comment 7

[Robert Kaiser]

(In reply to Scoobidiver from comment #6)
> It's #11 top crasher in FennecAndroid 14.0b2.

Probably not with this summary though, as I doubt that we see a locked profile dialog on native Android builds (too much).

Comment 8

[Scoobidiver (away)]

(In reply to Josh Matthews [:jdm] (travelling until June 25th) from comment #2)
> While these reports are not necessarily unrelated, there's no obvious
> similarity to them besides the first stack frame, so let's not conflate them.
I filed bug 759680 for Fennec crashes.

Comment 9

[Josh Matthews [:jdm]]

A crash I saw once 6 years ago isn't interesting.