699794 - trunk crash in IPC::Channel::set_listener

Status: RESOLVED WORKSFORME

(Core :: IPC, defect)

Description

[Robert Kaiser]

This bug was filed from the Socorro interface and is 
report bp-70601f1c-4d20-4d82-9b48-201f02111104 .
============================================================= 

Top frames:

0 	XUL 	IPC::Channel::set_listener 	ipc/chromium/src/chrome/common/ipc_channel_posix.h:32
1 	XUL 	mozilla::ipc::AsyncChannel::~AsyncChannel 	ipc/glue/AsyncChannel.cpp:391
2 	XUL 	mozilla::ipc::RPCChannel::~RPCChannel 	ipc/glue/RPCChannel.cpp:113
3 	XUL 	mozilla::plugins::PluginModuleParent::~PluginModuleParent 	dom/plugins/ipc/PluginModuleParent.cpp:167
4 	XUL 	mozilla::plugins::PluginModuleParent::LoadModule 	nsAutoPtr.h:104
5 	XUL 	nsNPAPIPlugin::CreatePlugin 	dom/plugins/base/nsNPAPIPlugin.cpp:465
6 	XUL 	nsPluginHost::EnsurePluginLoaded 	dom/plugins/base/nsPluginHost.cpp:1647
7 	XUL 	nsPluginHost::GetPlugin 	dom/plugins/base/nsPluginHost.cpp:1688
8 	XUL 	nsPluginHost::TrySetUpPluginInstance 	dom/plugins/base/nsPluginHost.cpp:1263
9 	XUL 	nsPluginHost::SetUpPluginInstance 	dom/plugins/base/nsPluginHost.cpp:1187
10 	XUL 	nsPluginHost::InstantiateEmbeddedPlugin 	dom/plugins/base/nsPluginHost.cpp:1063


This is a new crash on 10.0a1 trunk since the 2011-11-02 build, happening on OS X 10.7 exclusively it seems, see https://crash-stats.mozilla.com/report/list?signature=IPC%3A%3AChannel%3A%3Aset_listener for a larger list of crash reports for this signature.

Comment 1

[Josh Matthews [:jdm]]

This crash is bizarre. The majority of crash addresses are 0x0 inside of IPC::Channel::set_listener, implying a null this, but we specifically check for non-null mTransport in ~AsyncChannel before calling set_listener.

Comment 2

[Marcia Knous [:marcia]]

Possible pushlog regression range based on crash stats: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=67d1049b0bf9&tochange=978002c0b0ad.

I can crash on my machine using one of the URLs from one of the reports - http://www.jmccanneyscience.com/JamesMcCanneyScienceHour_November_03_2011.mp3 - but on my machine I get the Apple crash reporter. Please also see Bug 699180 which started happening around the same time.

Comment 3

[LegNeato]

I just got this after updating to 10.0a1 (2011-11-04). It was the first run after the update and I had only 1 tab open with http://news.yahoo.com/ before restarting. My homepage is set to about:blank, so I am not sure if it was actually loading the yahoo page.

I don't crash on http://www.jmccanneyscience.com/JamesMcCanneyScienceHour_November_03_2011.mp3

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.