700181 - crash [@ mozalloc_abort | pthread_mutex_unlock | CreateHTMLElement ]

Status: RESOLVED WORKSFORME

(Core :: DOM: HTML Parser, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:66
1 	libc.so 	pthread_mutex_unlock 	
2 	libxul.so 	CreateHTMLElement 	content/html/document/src/nsHTMLContentSink.cpp:595
3 	libxul.so 	NS_NewHTMLElement 	content/html/document/src/nsHTMLContentSink.cpp:578
4 	libxul.so 	NS_NewElement 	content/base/src/nsNameSpaceManager.cpp:231
5 	libxul.so 	nsHtml5TreeOperation::Perform 	parser/html/nsHtml5TreeOperation.cpp:394
6 	libxul.so 	nsHtml5TreeOpExecutor::FlushDocumentWrite 	parser/html/nsHtml5TreeOpExecutor.cpp:632
7 	libxul.so 	nsHtml5Parser::ParseHtml5Fragment 	parser/html/nsHtml5Parser.cpp:626
8 	libxul.so 	nsContentUtils::ParseFragmentHTML 	content/base/src/nsContentUtils.cpp:3648
9 	libxul.so 	nsGenericHTMLElement::SetInnerHTML 	content/html/content/src/nsGenericHTMLElement.cpp:771
10 	libxul.so 	nsHTMLDivElement::SetInnerHTML 	content/html/content/src/nsHTMLDivElement.cpp:67
11 	libxul.so 	nsIDOMHTMLElement_SetInnerHTML 	obj-firefox/js/xpconnect/src/dom_quickstubs.cpp:14805
12 	libxul.so 	js::Shape::set 	js/src/jscntxtinlines.h:358
13 	libxul.so 	js_SetPropertyHelper 	js/src/jsobj.cpp:6192
14 	libxul.so 	js::Interpret 	js/src/jsinterp.cpp:3741
15 	libxul.so 	js::RunScript 	js/src/jsinterp.cpp:584
16 	libxul.so 	js::InvokeKernel 	js/src/jsinterp.cpp:647
17 	libxul.so 	js_fun_apply 	js/src/jsinterp.h:148
18 	libxul.so 	js::InvokeKernel 	js/src/jscntxtinlines.h:297
19 	libxul.so 	js::Interpret 	js/src/jsinterp.cpp:3948
20 	libxul.so 	js::RunScript 	js/src/jsinterp.cpp:584
21 	libxul.so 	js::InvokeKernel 	js/src/jsinterp.cpp:647
22 	libxul.so 	js_fun_apply 	js/src/jsinterp.h:148
23 	libxul.so 	js::InvokeKernel 	js/src/jscntxtinlines.h:297
24 	libxul.so 	js::Interpret 	js/src/jsinterp.cpp:3948
25 	libxul.so 	js::RunScript 	js/src/jsinterp.cpp:584
26 	libxul.so 	js::InvokeKernel 	js/src/jsinterp.cpp:647
27 	libxul.so 	js_fun_apply 	js/src/jsinterp.h:148
28 	libxul.so 	js::InvokeKernel 	js/src/jscntxtinlines.h:297
29 	libxul.so 	js::Interpret 	js/src/jsinterp.cpp:3948
30 	libxul.so 	js::RunScript 	js/src/jsinterp.cpp:584
31 	libxul.so 	js::Invoke 	js/src/jsinterp.cpp:647
32 	libxul.so 	JS_CallFunctionValue 	js/src/jsapi.cpp:5144
33 	libxul.so 	nsJSContext::CallEventHandler 	dom/base/nsJSEnvironment.cpp:1936
34 	libxul.so 	nsGlobalWindow::RunTimeout 	dom/base/nsGlobalWindow.cpp:9314
35 	libxul.so 	nsGlobalWindow::TimerCallback 	dom/base/nsGlobalWindow.cpp:9754
36 	libxul.so 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:425
37 	libxul.so 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:521
38 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
39 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
40 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
41 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
42 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201
43 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:189
44 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:228
45 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3551
46 	libxul.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	toolkit/xre/nsAndroidStartup.cpp:139
47 	libmozutils.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	other-licenses/android/APKOpen.cpp:232
48 	libdvm.so 	dvmPlatformInvoke 	
49 	libdvm.so 	dvmCallJNIMethod_general 	
50 	libdvm.so 	dvmResolveNativeMethod 	
51 	libdvm.so 	dvmAsmSisterStart 	
52 	libdvm.so 	dvmMterpStd 	
53 	libdvm.so 	dvmInterpret 	
54 	libdvm.so 	dvmCallMethodV 	
55 	libdvm.so 	dvmCallMethod 	
56 	libdvm.so 	dvmAttachCurrentThread 	
57 	libc.so 	__thread_entry 	
58 	libc.so 	pthread_create 	
59 		@0x5ee301ae

Comment 1

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

https://crash-stats.mozilla.com/report/index/7c02130c-84ac-4adf-b1d0-4c4862111106

Comment 2

[Henri Sivonen (:hsivonen)]

This looks like a plain out of memory crash.

Comment 3

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Nick, would this be a candidate for memshrink.

Comment 4

[Nicholas Nethercote [inactive]]

> Nick, would this be a candidate for memshrink.

Not unless you have some ideas for reducing the memory usage that caused this OOM.  But then that would be filed as a separate bug.

Comment 5

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Thanks, Nick.  Sorry about that Comment 3 was suppose to be a question, not a statement.  Marking as P4; low occurence

Comment 6

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Does not occur on native.  Last report was using 7 : https://crash-stats.mozilla.com/report/list?product=Fennec&query_search=signature&query_type=contains&query=CreateHTMLElement&reason_type=contains&date=01%2F18%2F2012%2016%3A43%3A03&range_value=30&range_unit=days&hang_type=any&process_type=any&do_query=1&admin=1&signature=CreateHTMLElement

Closing off as WFM