729013 - Intermittent talos tp5 crash [@ nsHttpChannel::DetermineCacheAccess]

Status: RESOLVED WORKSFORME

(Core :: Networking: Cache, defect)

Description

[Phil Ringnalda (:philor)]

https://tbpl.mozilla.org/php/getParsedLog.php?id=9486793&tree=Mozilla-Inbound
Rev3 Fedora 12 mozilla-inbound talos tp_responsiveness on 2012-02-20 20:57:46 PST for push a374a3bb0bc2

NOISE: Cycle 8: loaded http://localhost/page_load_test/tp5/ezinearticles.com/ezinearticles.com/index.html@Migraine-Ocular---The-Eye-Migraines&id=4684133.html (next: http://localhost/page_load_test/tp5/taringa.net/www.taringa.net/index.html)
NOISE: Found crashdump: /tmp/tmpLEaIrD/profile/minidumps/25bbfad7-6a4e-6161-6d588002-77712d81.dmp
Operating system: Linux
                  0.0.0 Linux 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
CPU: x86
     GenuineIntel family 6 model 23 stepping 10
     2 CPUs

Crash reason:  SIGABRT
Crash address: 0x88e

Thread 0 (crashed)
 0  libxul.so!nsHttpChannel::DetermineCacheAccess [nsHttpChannel.cpp : 5231 + 0x0]
    eip = 0x012a6912   esp = 0xbfbc1d44   ebp = 0xa7483c00   ebx = 0x02488cd0
    esi = 0xa7483c00   edi = 0x00000000   eax = 0x00000000   ecx = 0x00000000
    edx = 0xbfbc1e38   efl = 0x00000246
    Found by: given as instruction pointer in context
 1  libxul.so!nsHttpChannel::OpenCacheEntry [nsHttpChannel.cpp : 2074 + 0xf]
    eip = 0x012ae0ad   esp = 0xbfbc1d50   ebp = 0xa7483c00   ebx = 0x02488cd0
    esi = 0xa7483c00   edi = 0x00000000
    Found by: call frame info
 2  libxul.so!nsHttpChannel::Connect [nsHttpChannel.cpp : 247 + 0x8]
    eip = 0x012ad539   esp = 0xbfbc1e60   ebp = 0x00000001   ebx = 0x02488cd0
    esi = 0xa7483c00   edi = 0x804b001e
    Found by: call frame info
 3  libxul.so!nsHttpChannel::AsyncOpen [nsHttpChannel.cpp : 3820 + 0x9]
    eip = 0x012ad9aa   esp = 0xbfbc1f10   ebp = 0xa63b34c0   ebx = 0x02488cd0
    esi = 0xa7483c00   edi = 0xa7483c78
    Found by: call frame info
 4  libxul.so!imgLoader::LoadImage [imgLoader.cpp : 1730 + 0xf]
    eip = 0x0133deb2   esp = 0xbfbc1f60   ebp = 0xa7b56c90   ebx = 0x02488cd0
    esi = 0xb100a940   edi = 0xbfbc212c
    Found by: call frame info
 5  libxul.so!nsContentUtils::LoadImage [nsContentUtils.cpp : 2439 + 0x3b]
    eip = 0x014f8225   esp = 0xbfbc2180   ebp = 0xa1c6ec00   ebx = 0x02488cd0
    esi = 0xa1efd740   edi = 0xb100a940
    Found by: call frame info
 6  libxul.so!nsCSSValue::Image::Image [nsCSSValue.cpp : 1685 + 0x2a]
    eip = 0x0144f996   esp = 0xbfbc2220   ebp = 0xa4ddcf18   ebx = 0x02488cd0
    esi = 0xa1c6ec00   edi = 0xa7b56c90
    Found by: call frame info
 7  libxul.so!nsCSSValue::StartImageLoad [nsCSSValue.cpp : 602 + 0x1d]
    eip = 0x0145050b   esp = 0xbfbc2260   ebp = 0xa1efd740   ebx = 0x02488cd0
    esi = 0xa23f1850   edi = 0xa20d1be0
    Found by: call frame info
 8  libxul.so!TryToStartImageLoadOnValue [nsCSSDataBlock.cpp : 119 + 0x7]
    eip = 0x014271f1   esp = 0xbfbc22b0   ebp = 0x00000012   ebx = 0x02488cd0
    esi = 0xa23f1850   edi = 0xa1c6ec00
    Found by: call frame info
 9  libxul.so!TryToStartImageLoad [nsCSSDataBlock.cpp : 129 + 0xc]
    eip = 0x0142722b   esp = 0xbfbc22d0   ebp = 0x00000012   ebx = 0x02488cd0

Comment 1

[Honza Bambas (:mayhemer)]

Just for record, it crashes here: https://hg.mozilla.org/integration/mozilla-inbound/file/a374a3bb0bc2/netwerk/protocol/http/nsHttpChannel.cpp#l5231

Might be a broken stack?  A wild guess...

Comment 2

[Ed Morley [:emorley]]

Mass marking whiteboard:[orange] bugs WFM (to clean up TBPL bug suggestions) that:
* Haven't changed in > 6months
* Whose whiteboard contains none of the strings: {disabled,marked,random,fuzzy,todo,fails,failing,annotated,leave open,time-bomb}
* Passed a (quick) manual inspection of bug summary/whiteboard to ensure they weren't a false positive.

I've also gone through and searched for cases where the whiteboard wasn't labelled correctly after test disabling, by using attachment description & basic comment searches. However if the test for which this bug was about has in fact been disabled/annotated/..., please accept my apologies & reopen/mark the whiteboard appropriately so this doesn't get re-closed in the future (and please ping me via IRC or email so I can try to tweak the saved searches to avoid more edge cases).

Sorry for the spam! Filter on: #FFA500