Intermittent shutdown crash [@ CoreFoundation + 0x580b6] [@ nsMenuBarX::Paint]

RESOLVED WORKSFORME

Status

()

Core
Widget: Cocoa
--
critical
RESOLVED WORKSFORME
6 years ago
5 years ago

People

(Reporter: philor, Unassigned)

Tracking

({crash, intermittent-failure})

Trunk
x86_64
Mac OS X
crash, intermittent-failure
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

6 years ago
https://tbpl.mozilla.org/php/getParsedLog.php?id=10925019&tree=Mozilla-Inbound
Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test jsreftest on 2012-04-15 17:22:18 PDT for push 1b19214a0a50

REFTEST TEST-START | Shutdown
TEST-UNEXPECTED-FAIL | Shutdown | Exited with code 2 during test run
INFO | automation.py | Application ran for: 0:12:13.705268
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpr_4A0ypidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64-debug/1334533453/firefox-14.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | Shutdown | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpGLVyT4/minidumps/19A648F6-D756-4B8A-BACC-54FE08E59107.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_INSTRUCTION / 0x00000001
Crash address: 0x7fff80a0b0b6

Thread 0 (crashed)
 0  CoreFoundation + 0x580b6
    rbx = 0x00000001   r12 = 0x001249d0   r13 = 0x00000000   r14 = 0x00000001
    r15 = 0x5fbf7d20   rip = 0x80a0b0b6   rsp = 0x5fbf7d20   rbp = 0x5fbf7e80
    Found by: given as instruction pointer in context
 1  CoreFoundation + 0x58284
    rip = 0x80a0b285   rsp = 0x5fbf7d40
    Found by: stack scanning
 2  AppKit + 0x742a67
    rip = 0x84ff1a68   rsp = 0x5fbf7d60
    Found by: stack scanning
 3  libSystem.B.dylib + 0x6153
    rip = 0x86c68154   rsp = 0x5fbf7dd8
    Found by: stack scanning
 4  CoreFoundation + 0x6621
    rip = 0x809b9622   rsp = 0x5fbf7de0
    Found by: stack scanning
 5  CoreFoundation + 0x22793
    rip = 0x809d5794   rsp = 0x5fbf7e10
    Found by: stack scanning
 6  CoreFoundation + 0x55d59
    rip = 0x80a08d5a   rsp = 0x5fbf7e30
    Found by: stack scanning
 7  AppKit + 0x157ed
    rip = 0x848c47ee   rsp = 0x5fbf7e90
    Found by: stack scanning
 8  XUL!nsMenuBarX::Paint [nsMenuBarX.mm : 392 + 0x10]
    rip = 0x03170011   rsp = 0x5fbf7ee0
    Found by: stack scanning
 9  XUL!-[WindowDelegate windowDidResignMain:] [nsCocoaWindow.mm : 2011 + 0x7]
    rip = 0x0319395e   rsp = 0x5fbf7f10
    Found by: stack scanning
10  Foundation + 0x10bc4
    rip = 0x83886bc5   rsp = 0x5fbf7f30
    Found by: stack scanning
11  CoreFoundation + 0xe8cf
    rip = 0x809c18d0   rsp = 0x5fbf7f50
    Found by: stack scanning
12  CoreFoundation + 0x58fff
    rip = 0x80a0c000   rsp = 0x5fbf7f90
The top two levels of comment #0's stack are in +[NSDictionary dictionaryWithObjectAndKeys:].

At https://crash-stats.mozilla.com I couldn't find any crashes corresponding to either NSDictionary or to either CoreFoundation@0x580b6 or CoreFoundation@0x58284.

So these crashes won't become "interesting" until they increase in volume or become reproducible.

Note, though, that the results I got from crash-stats showed signs of corruption: It listed 13 crashes in the last week matching "+[NSException raise:format:] | _NSDictionaryRaiseInsertNilValueException ".  But when I followed the link to look at individual examples of these crashes, I was told there are no reports matching these criteria.

So it'd be worthwhile looking at crash-stats again in a week or so.
These crashes, though they happen deep in system code, appear to be taking place at the following line:

http://hg.mozilla.org/mozilla-central/annotate/e080a936c899/widget/cocoa/nsMenuBarX.mm#l391

So they appear to happen while "retain"ing the first item in the main menu.  Which (probably) means that either that item or the entire menu is invalid.
(Following up comment #2)

Oops, I was wrong.

The crashes take place here:
http://hg.mozilla.org/mozilla-central/annotate/e080a936c899/widget/cocoa/nsMenuBarX.mm#l392

It still seems likely, though, that either the main menu's first item or the entire main menu is invalid.

Updated

5 years ago
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → WORKSFORME
(Assignee)

Updated

5 years ago
Keywords: intermittent-failure
(Assignee)

Updated

5 years ago
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.