631496 - Crash close to startup [@ nsSSLIOLayerImportFD ]

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect, P3)

Description

[Scoobidiver (away)]

It is a residual crash signature that exists in 3.0, 3.5, 3.6 and the trunk.
It happens close to startup.
It is #105 top crasher in 4.0b10 over the last week.

Signature	nsSSLIOLayerImportFD
UUID	2565da1e-9977-4e62-a0a0-de4fe2110203
Time 	2011-02-03 16:04:19.11478
Uptime	3
Last Crash	13177 seconds (3.7 hours) before submission
Install Age	13186 seconds (3.7 hours) since version was first installed.
Product	Firefox
Version	4.0b10
Build ID	20110121161358
Branch	2.0
OS	Windows NT
OS Version	6.1.7600
CPU	x86
CPU Info	GenuineIntel family 6 model 23 stepping 6
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x169eb8
App Notes 	AdapterVendorID: 10de, AdapterDeviceID: 0427, AdapterDriverVersion: 8.17.12.5896

Frame 	Module 	Signature [Expand] 	Source
0 		@0x65ffe 	
1 	xul.dll 	nsSSLIOLayerImportFD 	security/manager/ssl/src/nsNSSIOLayer.cpp:3627
2 	xul.dll 	nsSSLIOLayerAddToSocket 	security/manager/ssl/src/nsNSSIOLayer.cpp:3760
3 	xul.dll 	nsSSLIOLayerNewSocket 	security/manager/ssl/src/nsNSSIOLayer.cpp:2407
4 	xul.dll 	nsSSLSocketProvider::NewSocket 	security/manager/ssl/src/nsSSLSocketProvider.cpp:72
5 	xul.dll 	nsSocketTransport::BuildSocket 	
6 	xul.dll 	nsSocketTransport::InitiateSocket 	netwerk/base/src/nsSocketTransport2.cpp:1119
7 	xul.dll 	nsSocketTransport::OnSocketEvent 	netwerk/base/src/nsSocketTransport2.cpp:1454
8 	xul.dll 	nsSocketEvent::Run 	netwerk/base/src/nsSocketTransport2.cpp:98
9 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:633
10 	xul.dll 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:250
11 	xul.dll 	nsSocketTransportService::Run 	netwerk/base/src/nsSocketTransportService2.cpp:594
12 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:633
13 	xul.dll 	nsThreadStartupEvent::Run 	xpcom/threads/nsThread.cpp:207
14 	nspr4.dll 	_PR_NativeRunThread 	nsprpub/pr/src/threads/combined/pruthr.c:426
15 	nspr4.dll 	pr_root 	nsprpub/pr/src/md/windows/w95thred.c:122
16 	mozcrt19.dll 	_callthreadstartex 	obj-firefox/memory/jemalloc/crtsrc/threadex.c:348
17 	mozcrt19.dll 	__dllonexit 	obj-firefox/memory/jemalloc/crtsrc/onexit.c:276
18 	mozcrt19.dll 	_threadstartex 	obj-firefox/memory/jemalloc/crtsrc/threadex.c:326
19 	ntdll.dll 	__RtlUserThreadStart 	

More reports at:
https://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=nsSSLIOLayerImportFD&version=Firefox%3A4.0b10

Comment 1

[Kai Engert [:KaiE:]]

This file hasn't changed within the last 3+ months.


static PRFileDesc*
nsSSLIOLayerImportFD(PRFileDesc *fd,
                     nsNSSSocketInfo *infoObject,
                     const char *host,
                     PRBool anonymousLoad)
{
  nsNSSShutDownPreventionLock locker;
  PRFileDesc* sslSock = SSL_ImportFD(nsnull, fd);  <-- line  3627


How can this crash?
If SSL_ImportFD is the culprit, I would have expected more stack frames.


If we actually crash one line earlier, our memory is corrupted.

Comment 2

[Loic]

Recent crash report: https://crash-stats.mozilla.com/report/index/ffa152db-cb1c-4a28-9b87-35a462111106

Maybe the OrangeToolbar.dll is involved.

Comment 3

[Dana Keeler (she/her) [:keeler]]

Volume isn't high, but this still appears to be happening.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.