748301 - crash in nsUnknownDecoder::FireListenerNotifications

Status: RESOLVED WORKSFORME

(Core :: Networking, defect)

Description

[Catalin Suciu [:csuciu]]

This bug was filed from the Socorro interface and is 
report bp-3acd65a3-adcf-468e-b850-665502120424 .
=============================================================

Comment 1

[Catalin Suciu [:csuciu]]

Frame 	Module 	Signature 	Source
0 	libmozglue.so 	arena_dalloc 	memory/jemalloc/jemalloc.c:4604
1 	libmozglue.so 	__wrap_free 	memory/jemalloc/jemalloc.c:6541
2 	libmozalloc.so 	moz_free 	memory/mozalloc/mozalloc.cpp:81
3 	libxul.so 	nsUnknownDecoder::FireListenerNotifications 	mozalloc.h:265
4 	libxul.so 	nsUnknownDecoder::OnStopRequest 	netwerk/streamconv/converters/nsUnknownDecoder.cpp:242
5 	libxul.so 	nsHttpChannel::OnStopRequest 	netwerk/protocol/http/nsHttpChannel.cpp:4495
6 	libxul.so 	nsInputStreamPump::OnStateStop 	netwerk/base/src/nsInputStreamPump.cpp:587
7 	libxul.so 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:405
8 	libxul.so 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:114
9 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:656
10 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
11 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
12 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
13 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201
14 	libxul.so 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:189
15 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:295
16 	libxul.so 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3780
17 	libxul.so 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3857
18 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3933
19 	libxul.so 	GeckoStart 	toolkit/xre/nsAndroidStartup.cpp:109
20 	libmozglue.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	mozglue/android/APKOpen.cpp:996
21 	libdvm.so 	dvmPlatformInvoke 	
22 	libdvm.so 	dvmCallJNIMethod_general 	
23 	libdvm.so 	dvmResolveNativeMethod 	
24 	libdvm.so 	dvmAsmSisterStart 	
25 	libdvm.so 	dvmMterpStd 	
26 	libdvm.so 	dvmInterpret 	
27 	libdvm.so 	dvmCallMethodV 	
28 	libdvm.so 	dvmCallMethod 	
29 	libdvm.so 	dvmDetachCurrentThread 	
30 	libc.so 	__thread_entry 	
31 	libc.so 	pthread_create 	
32 		@0x295566

Comment 2

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Catalin, do you have steps to reproduce?  It seems like you were trying to play something on a device that didn't know how to decode the encoding of a media type?

Comment 3

[Catalin Suciu [:csuciu]]

This was a one time occurrence and this is what happened:
I was on the www.cnn.com and I switched to another app using the recent app's menu. When I tried to switch back to fennec using the same method, the crash occurred

Comment 4

[Boris Zbarsky [:bzbarsky]]

Presumably that's the |delete [] mBuffer| call, but why would that crash?  We test that mBuffer is non-null earlier in the method....

Comment 5

[Mike Hommey [:glandium]]

Presumably, this is fixed by bug 758010

Comment 6

[Scoobidiver (away)]

(In reply to Mike Hommey [:glandium] from comment #5)
> Presumably, this is fixed by bug 758010
No. See bp-6d56fff2-1748-4e81-8385-aab542120605 in 16.0a1/20120605.

Comment 7

[Mike Hommey [:glandium]]

(In reply to Scoobidiver from comment #6)
> (In reply to Mike Hommey [:glandium] from comment #5)
> > Presumably, this is fixed by bug 758010
> No. See bp-6d56fff2-1748-4e81-8385-aab542120605 in 16.0a1/20120605.

Then it's very unlikely to be related to bug 758858 :(

Comment 8

[Tracy Walker [:tracy]]

Saw this on my Galaxy Tab with Fx 15b2 at http://www.channelfireball.com/articles/channel-conley-avr-draft-7/ just reloading the page and trying to start a video.

Comment 9

[Scoobidiver (away)]

With combined signatures, it's #2 top crasher in 14.0.1 and #9 in 15.0b3.
The 16.0 branch is currently unaffected so either it's fixed or the Aurora population is not representative.

Comment 10

[Scoobidiver (away)]

There are no crashes in 16.0. Closing as WFM.