Closed Bug 749687 Opened 13 years ago Closed 6 years ago

crash in mozilla::AndroidBridge::HandleGeckoMessage

Categories

(Core Graveyard :: Widget: Android, defect)

Product:
Core Graveyard
Component:
Widget: Android
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: scoobidiver, Unassigned)

References

(
URL
)

Details

(Keywords: crash, Whiteboard: [native-crash])

Crash Data

It happens after the fix of bug 721654. Signature mozilla::nsJNIString::nsJNIString More Reports Search UUID 24ad033f-b9ef-4be4-946b-fda702120427 Date Processed 2012-04-27 16:58:31 Uptime 1415 Last Crash 4.9 days before submission Install Age 5.0 hours since version was first installed. Install Time 2012-04-27 11:56:28 Product FennecAndroid Version 15.0a1 Build ID 20120427030500 Release Channel nightly OS Linux OS Version 0.0.0 Linux 2.6.35.7-g61e3522 #2 SMP PREEMPT Wed Dec 28 17:24:11 EST 2011 armv7l Build Architecture arm Build Architecture Info Crash Reason SIGSEGV Crash Address 0xd App Notes EGL? EGL+ AdapterVendorID: mapphone_cdma, AdapterDeviceID: DROID RAZR. AdapterDescription: 'Android, Model: 'DROID RAZR', Product: 'spyder_vzw', Manufacturer: 'motorola', Hardware: 'mapphone_cdma''. GL Context? GL Context+ GL Layers? GL Layers+ motorola DROID RAZR verizon/spyder_vzw/cdma_spyder:2.3.6/6.5.1-167_DHD-14_M2-5/111228:user/release-keys EMCheckCompatibility True Frame Module Signature Source 0 libdvm.so libdvm.so@0x4ef88 1 libxul.so mozilla::nsJNIString::nsJNIString jni.h:834 2 libxul.so mozilla::AndroidBridge::HandleGeckoMessage widget/android/AndroidBridge.cpp:1530 3 libxul.so nsAndroidBridge::HandleGeckoMessage widget/android/AndroidBridge.cpp:1928 4 libxul.so NS_InvokeByIndex_P xpcom/reflect/xptcall/src/md/unix/xptcinvoke_arm.cpp:194 5 libxul.so XPCWrappedNative::CallMethod js/xpconnect/src/XPCWrappedNative.cpp:3111 6 libxul.so XPC_WN_CallMethod js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1549 7 libxul.so js::Interpret js/src/jscntxtinlines.h:314 8 libxul.so js::RunScript js/src/jsinterp.cpp:475 9 libxul.so js::Invoke js/src/jsinterp.cpp:535 10 libxul.so JS_CallFunctionValue js/src/jsapi.cpp:5416 11 libxul.so nsXPCWrappedJSClass::CallMethod js/xpconnect/src/XPCWrappedJSClass.cpp:1509 12 libxul.so nsXPCWrappedJS::CallMethod js/xpconnect/src/XPCWrappedJS.cpp:617 13 libxul.so PrepareAndDispatch xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp:138 14 libxul.so libxul.so@0xa175df 15 libxul.so nsEventListenerManager::HandleEventSubType content/events/src/nsEventListenerManager.cpp:818 16 libxul.so nsEventListenerManager::HandleEventInternal content/events/src/nsEventListenerManager.cpp:875 17 libxul.so nsEventTargetChainItem::HandleEvent content/events/src/nsEventListenerManager.h:169 18 libxul.so nsEventTargetChainItem::HandleEventTargetChain content/events/src/nsEventDispatcher.cpp:349 19 libxul.so nsEventDispatcher::Dispatch content/events/src/nsEventDispatcher.cpp:684 20 libxul.so PresShell::FireResizeEvent layout/base/nsPresShell.cpp:2109 21 libxul.so PresShell::FlushPendingNotifications layout/base/nsPresShell.cpp:3930 22 libxul.so PresShell::WillPaint layout/base/nsPresShell.cpp:7142 23 libxul.so nsViewManager::CallWillPaintOnObservers view/src/nsViewManager.cpp:1383 24 libxul.so nsViewManager::DispatchEvent view/src/nsViewManager.cpp:777 25 libxul.so nsViewManager::DispatchEvent view/src/nsViewManager.cpp:802 26 libxul.so HandleEvent view/src/nsView.cpp:158 27 libxul.so nsWindow::DispatchEvent widget/android/nsWindow.cpp:673 28 libxul.so nsWindow::DrawTo widget/android/nsWindow.cpp:1036 29 libxul.so nsWindow::DrawTo widget/android/nsWindow.cpp:1084 30 libxul.so nsWindow::OnDraw widget/android/nsWindow.cpp:1133 31 libxul.so nsWindow::OnGlobalAndroidEvent widget/android/nsWindow.cpp:898 32 libxul.so nsAppShell::ProcessNextNativeEvent widget/android/nsAppShell.cpp:570 33 libxul.so nsBaseAppShell::DoProcessNextNativeEvent widget/xpwidgets/nsBaseAppShell.cpp:171 34 libxul.so nsBaseAppShell::OnProcessNextEvent widget/xpwidgets/nsBaseAppShell.cpp:306 35 libxul.so nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:618 36 libxul.so NS_ProcessNextEvent_P obj-firefox/xpcom/build/nsThreadUtils.cpp:245 37 libxul.so mozilla::ipc::MessagePump::Run ipc/glue/MessagePump.cpp:110 38 libxul.so MessageLoop::RunInternal ipc/chromium/src/base/message_loop.cc:208 39 libxul.so MessageLoop::Run ipc/chromium/src/base/message_loop.cc:201 40 libxul.so nsBaseAppShell::Run widget/xpwidgets/nsBaseAppShell.cpp:189 41 libxul.so nsAppStartup::Run toolkit/components/startup/nsAppStartup.cpp:295 42 libxul.so XREMain::XRE_mainRun toolkit/xre/nsAppRunner.cpp:3780 43 libxul.so XREMain::XRE_main toolkit/xre/nsAppRunner.cpp:3857 44 libxul.so XRE_main toolkit/xre/nsAppRunner.cpp:3933 45 libxul.so GeckoStart toolkit/xre/nsAndroidStartup.cpp:109 ... More reports at: https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3AnsJNIString%3A%3AnsJNIString https://crash-stats.mozilla.com/report/list?signature=dvmStringLen+|+JNI_CreateJavaVM+|+mozilla%3A%3AnsJNIString%3A%3AnsJNIString
Crash Signature: [@ mozilla::nsJNIString::nsJNIString] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] → [@ mozilla::nsJNIString::nsJNIString] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString]
Crash Signature: [@ mozilla::nsJNIString::nsJNIString] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString] → [@ mozilla::nsJNIString::nsJNIString] [@ dvmDbgGetSourceFile] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString]
Crash Signature: [@ mozilla::nsJNIString::nsJNIString] [@ dvmDbgGetSourceFile] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString] → [@ mozilla::nsJNIString::nsJNIString] [@ dvmDbgGetSourceFile] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString] [@ dvmAbort | _ZNK16IndirectRefTable10checkEn…
It's #9 top crasher in 14.0a2.
blocking-fennec1.0: --- → ?
Keywords: topcrash
Assignee: nobody → blassey.bugs
blocking-fennec1.0: ? → +
Crash Signature: [@ mozilla::nsJNIString::nsJNIString] [@ dvmDbgGetSourceFile] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString] [@ dvmAbort | → [@ mozilla::nsJNIString::nsJNIString] [@ _JNIEnv::NewString] [@ dvmDbgGetSourceFile] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString] [@ dvmAbort |
Crash Signature: _ZNK16IndirectRefTable10checkEntryEPKcPvi] → _ZNK16IndirectRefTable10checkEntryEPKcPvi] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage]
Crash Signature: _ZNK16IndirectRefTable10checkEntryEPKcPvi] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage] → _ZNK16IndirectRefTable10checkEntryEPKcPvi] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage] [@ mozilla::AndroidBridge::HandleGeckoMessage]
I see crashes from 15.0a1/20120509 (nothing before) long after the fix of bug 748531: bp-1b5a8c2d-7b39-4c13-ae4b-17b9f2120509 and bp-c90f892c-f826-4d42-87a6-c4c472120509.
Crash Signature: _ZNK16IndirectRefTable10checkEntryEPKcPvi] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage] [@ mozilla::AndroidBridge::HandleGeckoMessage] → _ZNK16IndirectRefTable10checkEntryEPKcPvi] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage] [@ mozilla::AndroidBridge::HandleGeckoMessage] [@ libutils.so@0x1b896] [@ _ZN7android6Parcel13continueWriteEj]
resolving works for me since there have been no crashes since the 11th (3 days).
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WORKSFORME
There's one crash in 15.0a1/20120517: bp-ad01badf-740a-4cf2-94e1-b7a332120517.
Status: RESOLVED → REOPENED
blocking-fennec1.0: + → ---
Crash Signature: _ZNK16IndirectRefTable10checkEntryEPKcPvi] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage] [@ mozilla::AndroidBridge::HandleGeckoMessage] [@ libutils.so@0x1b896] [@ _ZN7android6Parcel13continueWriteEj] → _ZNK16IndirectRefTable10checkEntryEPKcPvi] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage] [@ mozilla::AndroidBridge::HandleGeckoMessage] [@ libutils.so@0x1b896] [@ _ZN7android6Parcel13continueWriteEj] …
Depends on: 741315, 741222
Keywords: topcrash
Resolution: WORKSFORME → ---
Crash Signature: _ZN7android6Parcel13continueWriteEj] [@ 2 (deleted)@0x22992e] → _ZN7android6Parcel13continueWriteEj] [@ 2 (deleted)@0x22992e] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod]
No longer depends on: 741222, 741315, 748531
Depends on: 741222, 741315, 748531
Crash Signature: _ZN7android6Parcel13continueWriteEj] [@ 2 (deleted)@0x22992e] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod] → _ZN7android6Parcel13continueWriteEj] [@ 2 (deleted)@0x22992e] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod] [@ dvmJitGetCodeAddr | dvmAsmSisterStart | dvmMterpStd | dvmInterpret | dvmCallMethodV | JNI_CreateJavaVM…
Crash Signature: [@ mozilla::nsJNIString::nsJNIString] [@ _JNIEnv::NewString] [@ dvmDbgGetSourceFile] [@ dvmStringLen | JNI_CreateJavaVM | mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::NewString] [@ dvmAbort | _ZNK16I… → [@ mozilla::nsJNIString::nsJNIString] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | mozilla::AndroidBridge::HandleGeckoMessage] [@ mozilla::AndroidBridge::HandleGeckoMessage] [@ libutils.so@0x1b896] [@ _ZN7android6Parcel13continueWriteEj] [@ 2 …
Depends on: 764756
By cold start, do you mean you started Fennec and then typed the URL into the awesomebar? Or did you click on the link in some other app and it opened it in Fennec?
Fennec wasn't running & I opened that link from the gmail app.
Scoobidiver mentioned that bug 783983 is probably a duplicate of this bug. That bug has steps to reproduce.
Assignee: blassey.bugs → nobody
Crash Signature: dvmAsmInstructionStart | dvmMterpStd | dvmInterpret | dvmCallMethodV | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod | mozilla::AndroidBridge::HandleGeckoMessage] [@ free | _JNIEnv::NewString | mozilla::AndroidBridge::HandleGeckoMessage] → dvmAsmInstructionStart | dvmMterpStd | dvmInterpret | dvmCallMethodV | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod | mozilla::AndroidBridge::HandleGeckoMessage] [@ free | _JNIEnv::NewString | mozilla::AndroidBridge::HandleGeckoMessage] [@ NewJava…
Crash Signature: NewJavaString] → NewJavaString] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20]
Crash Signature: NewJavaString] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20] → NewJavaString] [@ NewJavaString(mozilla::AutoLocalJNIFrame*, unsigned short const*, unsigned int)] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20]
Crash Signature: NewJavaString] [@ NewJavaString(mozilla::AutoLocalJNIFrame*, unsigned short const*, unsigned int)] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20] → NewJavaString] [@ NewJavaString(mozilla::AutoLocalJNIFrame*, unsigned short const* unsigned int)] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1…
Crash Signature: NewJavaString] [@ NewJavaString(mozilla::AutoLocalJNIFrame*, unsigned short const* unsigned int)] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1… → NewJavaString] [@ NewJavaString(mozilla::AutoLocalJNIFrame*, unsigned short const*, unsigned int)] [@ _JNIEnv::CallStaticObjectMethod(_jclass*, _jmethodID*, ...) | mozilla::AndroidBridge::HandleGeckoMessage(nsAString_internal const& nsAString_internal&)…
Crash Signature: nsAString_internal&)] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c26] [@ → nsAString_internal&) ] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c26] [@
Crash Signature: data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c26] → data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c26] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x11816a] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x11816a]
I got this stack 1 out of about 10 times loading Peacekeeper benchmark. Most of the crashes were bug 766816. Samsung Galaxy SII i727 Android 2.3.6
URL: http://peacekeeper.futuremark.com/run...
Crash Signature: , nsAString_internal&) ] [@ data@app@org.mozilla.firefox-2.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c20] [@ data@app@org.mozilla.firefox-1.apk@classes.dex@0x110c26] [@ data@app@org.mozilla.firefox-2.apk@classes.… → , nsAString_internal&) ] [@ dvmAsmInstructionStart | dvmMterpStd | dvmInterpret | dvmCallMethodV | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod(_jclass*, _jmethodID*, ...) | mozilla::AndroidBridge::HandleGeckoMessage(nsAString_internal const&, nsAS…
Crash Signature: , nsAString_internal&) ] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod(_jclass*, _jmethodID*, ...) | mozilla::AndroidBridge::HandleGeckoMessage(nsAString_internal const&, nsAString_internal&) ] → , nsAString_internal&) ] [@ dvmAbort | JNI_CreateJavaVM | JNI_CreateJavaVM | _JNIEnv::CallStaticObjectMethod(_jclass*, _jmethodID*, ...) | mozilla::AndroidBridge::HandleGeckoMessage(nsAString_internal const&, nsAString_internal&) ] [@ 2 @0x22992e]
Closing because no crash reported since 12 weeks.
Status: REOPENED → RESOLVED
Closed: 13 years ago → 6 years ago
Resolution: --- → WONTFIX
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.