676983 - XPCOM pldhash crashes on WebOS prefox startup

Status: RESOLVED WORKSFORME

(Core :: XPCOM, defect)

Description

[Oleg Romashin (:romaxa)]

Attachment: WebOS Qt port

WebOS/Touchpad device
Apply patches:
hg clone http://hg.mozilla.org/users/romaxa_gmail.com/nox11_port
Compile with next mozconfig:
*************************
ac_add_options --enable-application=mobile
ac_add_options --enable-optimize
ac_add_options --disable-installer
ac_add_options --disable-crashreporter
ac_add_options --target=arm-palm-eabi
ac_add_options --with-palm-pdk=/opt/PalmPDK
ac_add_options --disable-ctypes
ac_add_options --disable-tests
mk_add_options MOZ_MAKE_FLAGS="-j4"
mk_add_options MOZ_OBJDIR="obj-mb-qt2"
ac_add_options --with-system-zlib
ac_add_options --disable-jemalloc
*************************
or apply patch for building "WebOS Qt port"
Mozconfig
**********************
mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/objdir-prefox
ac_add_options --enable-application=mobile
ac_add_options --enable-optimize
ac_add_options --disable-installer
ac_add_options --disable-crashreporter
ac_add_options --disable-tests
ac_add_options --disable-ctypes
ac_add_options --with-palm-pdk=/opt/PalmPDK
ac_add_options --disable-tracejit
CROSS_COMPILE=1
LIBIDL_CONFIG=/opt/PalmPDK/device/usr/bin/libIDL-config-2
HOST_LIBIDL_CONFIG=/usr/bin/libIDL-config
ac_add_options --target=arm-palm-eabi
ac_add_options --host=i686-linux
mk_add_options MOZ_MAKE_FLAGS="-j4"
mk_add_options MOZ_OBJDIR="obj-mb-qt1"
**********************

Try to start fennec

It crashes with next backtrace:

#0  0x00d0e154 in ?? ()
#1  0x2bf48ed8 in PL_DHashTableInit (table=0x2e4ecf14, ops=0x2c678e88, data=<value optimized out>, entrySize=12, capacity=16) at obj-mb-qt2/xpcom/build/pldhash.c:268
#2  0x2bd97410 in InMemoryDataSource::Init (this=0x2e4ecee0) at rdf/base/src/nsInMemoryDataSource.cpp:912
#3  0x2bd975f0 in NS_NewRDFInMemoryDataSource (aOuter=0x0, aIID=..., aResult=0x7ee14574) at rdf/base/src/nsInMemoryDataSource.cpp:873
#4  0x2bf500c4 in mozilla::GenericFactory::CreateInstance (this=<value optimized out>, aOuter=<value optimized out>, aIID=<value optimized out>, aResult=0x40) at obj-mb-qt2/xpcom/build/GenericFactory.cpp:48
#5  0x2bf7ee94 in nsComponentManagerImpl::CreateInstanceByContractID (this=0x2af47150, aContractID=<value optimized out>, aDelegate=0x0, aIID=..., aResult=0x7ee14574) at xpcom/components/nsComponentManager.cpp:1297
#6  0x2bf4adb0 in CallCreateInstance (aContractID=0x2c4b531b "@mozilla.org/rdf/datasource;1?name=in-memory-datasource", aDelegate=0x0, aIID=..., aResult=0x7ee14574) at obj-mb-qt2/xpcom/build/nsComponentManagerUtils.cpp:170
#7  0x2bf4ade8 in nsCreateInstanceByContractID::operator() (this=0x7ee14584, aIID=<value optimized out>, aInstancePtr=0x7ee14574) at obj-mb-qt2/xpcom/build/nsComponentManagerUtils.cpp:210
#8  0x2bf4a214 in nsCOMPtr_base::assign_from_helper (this=0x2e5c72d0, helper=<value optimized out>, iid=<value optimized out>) at obj-mb-qt2/xpcom/build/nsCOMPtr.cpp:150
#9  0x2bdab1e0 in nsCOMPtr<nsIRDFDataSource>::operator= (this=0x2e5c7290) at ../../../dist/include/nsCOMPtr.h:730
#10 nsWindowDataSource::Init (this=0x2e5c7290) at xpfe/components/windowds/nsWindowDataSource.cpp:82
#11 0x2bdab538 in nsWindowDataSourceConstructor (aOuter=0x0, aIID=..., aResult=0x7ee14670) at xpfe/components/windowds/nsWindowDataSource.cpp:576
#12 0x2bf500c4 in mozilla::GenericFactory::CreateInstance (this=<value optimized out>, aOuter=<value optimized out>, aIID=<value optimized out>, aResult=0x40) at obj-mb-qt2/xpcom/build/GenericFactory.cpp:48
#13 0x2bf7ee94 in nsComponentManagerImpl::CreateInstanceByContractID (this=0x2af47150, aContractID=<value optimized out>, aDelegate=0x0, aIID=..., aResult=0x7ee14670) at xpcom/components/nsComponentManager.cpp:1297
#14 0x2bf7e2c0 in nsComponentManagerImpl::GetServiceByContractID (this=0x2af47150, aContractID=0x0, aIID=..., result=0x7ee146b4) at xpcom/components/nsComponentManager.cpp:1699
#15 0x2bf4af1c in nsGetServiceByContractIDWithError::operator() (this=0x7ee1474c, aIID=..., aInstancePtr=0xc) at obj-mb-qt2/xpcom/build/nsComponentManagerUtils.cpp:288
#16 0x2bf4a268 in nsCOMPtr_base::assign_from_gs_contractid_with_error (this=0x7ee14770, gs=<value optimized out>, iid=<value optimized out>) at obj-mb-qt2/xpcom/build/nsCOMPtr.cpp:141
#17 0x2bcb598c in nsCOMPtr<nsISupports>::operator= (this=<value optimized out>, aSubject=<value optimized out>, aTopic=0x2c3b787c "app-startup", someData=<value optimized out>) at ../../../../dist/include/nsCOMPtr.h:1054
#18 nsAppStartupNotifier::Observe (this=<value optimized out>, aSubject=<value optimized out>, aTopic=0x2c3b787c "app-startup", someData=<value optimized out>) at embedding/components/appstartup/src/nsAppStartupNotifier.cpp:100
#19 0x2b4aef2c in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at toolkit/xre/nsAppRunner.cpp:3372
#20 0x00009558 in do_main (argc=1, argv=0x7ee16cf4) at mobile/app/nsBrowserApp.cpp:198
#21 main (argc=1, argv=0x7ee16cf4) at mobile/app/nsBrowserApp.cpp:281


Does anyone seen this problem before? any ideas what it could be?

Comment 1

[Oleg Romashin (:romaxa)]

Debug logging output
NSPR_LOG_MODULES=nsComponentManager:5  ./run-mozilla.sh ./nsTestSample
715965568[246b8]: WARNING: XPCOM objects created/destroyed from static ctor/dtor: file /home/romaxa/palmbuild/mozilla-central/xpcom/base/nsTraceRefcntImpl.cpp, line 172
WARNING: XPCOM objects created/destroyed from static ctor/dtor: file /home/romaxa/palmbuild/mozilla-central/xpcom/base/nsTraceRefcntImpl.cpp, line 172
715965568[246b8]: nsComponentManager: Initialized.
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/xre/app-info;1) FAILED
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/xre/app-info;1) FAILED
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/memory-reporter-manager;1) succeeded
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/xre/app-info;1) FAILED
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/xre/app-info;1) FAILED
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/xre/app-info;1) FAILED
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/xre/app-info;1) succeeded
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/observer-service;1) succeeded
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/file/directory_service;1) succeeded
......
CreateInstanceByContractID(@mozilla.org/browser/directory-provider;1) succeeded
715965568[246b8]: nsComponentManager: CreateInstanceByContractID(@mozilla.org/spellcheck/dir-provider;1) succeeded
ERROR: Cannot create instance of component @mozilla.org/sample;1 [80040154].
Debugging hint:

Comment 2

[Oleg Romashin (:romaxa)]

here is debug output from debug fennec
(process:4220): LunaService-CRITICAL **: Error in /home/reviewdaemon/projects/nova/oe/BUILD-topaz/work/luna-service2-2.0.0-135.2/135.2/src/transport.c:2439

(process:4220): LunaService-CRITICAL **: Invalid permissions for (null)

(process:4220): LunaService-CRITICAL **: Error in /home/reviewdaemon/projects/nova/oe/BUILD-topaz/work/luna-service2-2.0.0-135.2/135.2/src/transport.c:2439

(process:4220): LunaService-CRITICAL **: Invalid permissions for (null)
###!!! ASSERTION: This is not supposed to fail!: 'Error', file /home/romaxa/pdk/build/mozilla-central-palm/js/src/xpconnect/src/nsXPConnect.cpp, line 984
###!!! ASSERTION: Failed to initialize nsScriptSecurityManager: 'NS_SUCCEEDED(rv)', file /home/romaxa/pdk/build/mozilla-central-palm/caps/src/nsScriptSecurityManager.cpp, line 3455
Segmentation fault

Comment 3

[Benjamin Smedberg]

It *looks* like ops->allocTable is bogus or null here: http://hg.mozilla.org/mozilla-central/annotate/982a5835fba1/xpcom/glue/pldhash.c#l268

And the ops are supposed to be these: http://hg.mozilla.org/mozilla-central/annotate/982a5835fba1/xpcom/glue/pldhash.c#l192

Comment 4

[Oleg Romashin (:romaxa)]

Tried to compile fennec with --disable-optimize and it was actually started and mostly working...
Any similar bugs in mind? some optimizer compiler/toolchain bugs?

Comment 5

[Wayne Mery (:wsmwk)]

Oleg, still see this?

Comment 6

[Oleg Romashin (:romaxa)]

I think not, don't have build env anymore... and last time I tried it was working fine IIRC.

Comment 7

[Wayne Mery (:wsmwk)]

> last time I tried it was working fine IIRC.
Let's trust your  memory :)