Last Comment Bug 751774 - Intermittent mochitest-plain-2 Shutdown crash in nsWindow::Destroy in nsDragService.h
: Intermittent mochitest-plain-2 Shutdown crash in nsWindow::Destroy in nsDragS...
Status: RESOLVED FIXED
: intermittent-failure
Product: Core
Classification: Components
Component: Widget: Gtk (show other bugs)
: Trunk
: All Linux
: -- normal (vote)
: mozilla15
Assigned To: Karl Tomlinson (ni?:karlt)
:
Mentors:
Depends on:
Blocks: 438871 607420
  Show dependency treegraph
 
Reported: 2012-05-03 16:55 PDT by Gregory Szorc [:gps]
Modified: 2012-11-25 19:31 PST (History)
3 users (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments
handle no drag service during shutdown (1005 bytes, patch)
2012-05-03 20:28 PDT, Karl Tomlinson (ni?:karlt)
roc: review+
Details | Diff | Review

Description Gregory Szorc [:gps] 2012-05-03 16:55:43 PDT
From https://tbpl.mozilla.org/?rev=2db9df42823d:

10181 INFO TEST-START | Shutdown
10182 INFO Passed: 9707
10183 INFO Failed: 0
10184 INFO Todo:   3
10185 INFO SimpleTest FINISHED
10186 INFO TEST-INFO | Ran 0 Loops
10187 INFO SimpleTest FINISHED
NPP_Destroy
NOTE: child process received `Goodbye', closing down
TEST-UNEXPECTED-FAIL | Shutdown | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:05:01.238195
INFO | automation.py | Reading PID log: /tmp/tmpcEZFcfpidlog
==> process 2225 launched child process 2279
==> process 2225 launched child process 2282
==> process 2225 launched child process 2284
==> process 2225 launched child process 2287
INFO | automation.py | Checking for orphan process with PID: 2279
INFO | automation.py | Checking for orphan process with PID: 2282
INFO | automation.py | Checking for orphan process with PID: 2284
INFO | automation.py | Checking for orphan process with PID: 2287
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-central-linux/1336080409/firefox-15.0a1.en-US.linux-i686.crashreporter-symbols.zip
PROCESS-CRASH | Shutdown | application crashed (minidump found)
Crash dump filename: /tmp/tmp8_Jfnd/minidumps/0c758db9-c11f-f9e2-28f6385a-3b3c0b39.dmp
Operating system: Linux
                  0.0.0 Linux 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
CPU: x86
     GenuineIntel family 6 model 23 stepping 10
     2 CPUs

Crash reason:  SIGSEGV
Crash address: 0x5c

Thread 0 (crashed)
 0  libxul.so!nsWindow::Destroy [nsDragService.h : 130 + 0x0]
    eip = 0x01b796d5   esp = 0xbf83e770   ebp = 0x00000006   ebx = 0x0252ae78
    esi = 0x9fef9120   edi = 0x00000018   eax = 0x00000000   ecx = 0x00000000
    edx = 0xbf83e75c   efl = 0x00010286
    Found by: given as instruction pointer in context
 1  libxul.so!nsWindow::~nsWindow [nsWindow.cpp : 436 + 0x5]
    eip = 0x01b798c0   esp = 0xbf83e7b0   ebp = 0x00000006   ebx = 0x0252ae78
    esi = 0x9fef9120   edi = 0x00000018
    Found by: call frame info
 2  libxul.so!nsChildWindow::~nsChildWindow [nsWindow.cpp : 5941 + 0x1c]
    eip = 0x01b79987   esp = 0xbf83e7d0   ebp = 0x00000006   ebx = 0x0252ae78
    esi = 0x9fef9120   edi = 0x00000018
    Found by: call frame info
 3  libxul.so!nsBaseWidget::Release [nsBaseWidget.cpp : 82 + 0x6]
    eip = 0x01b94470   esp = 0xbf83e7f0   ebp = 0x00000006   ebx = 0x0252ae78
    esi = 0x00000000   edi = 0x00000018
    Found by: call frame info
 4  libxul.so!nsCOMPtr_base::~nsCOMPtr_base [nsCOMPtr.cpp : 81 + 0x8]
    eip = 0x01cc7f1e   esp = 0xbf83e810   ebp = 0x00000006   ebx = 0x0252ae78
    esi = 0xa5734860   edi = 0x00000018
    Found by: call frame info
 5  libxul.so!nsPluginInstanceOwner::~nsPluginInstanceOwner [nsCOMPtr.h : 480 + 0x4]
    eip = 0x01b012ff   esp = 0xbf83e830   ebp = 0x00000006   ebx = 0x0252ae78
    esi = 0xa5734860   edi = 0x00000018
    Found by: call frame info
 6  libxul.so!nsPluginInstanceOwner::~nsPluginInstanceOwner [nsPluginInstanceOwner.cpp : 406 + 0x5]
    eip = 0x01b0134c   esp = 0xbf83e870   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0xa5734860   edi = 0x9faf6e40
    Found by: call frame info
 7  libxul.so!nsPluginInstanceOwner::Release [nsPluginInstanceOwner.cpp : 408 + 0x3]
    eip = 0x01b001c3   esp = 0xbf83e890   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0x00000000   edi = 0x9faf6e40
    Found by: call frame info
 8  libxul.so!nsRefPtr<nsPluginInstanceOwner>::~nsRefPtr [nsAutoPtr.h : 908 + 0x8]
    eip = 0x013fbc2a   esp = 0xbf83e8b0   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0x9faf6e40   edi = 0x9faf6e40
    Found by: call frame info
 9  libxul.so!nsObjectLoadingContent::~nsObjectLoadingContent [nsObjectLoadingContent.cpp : 634 + 0xb]
    eip = 0x01544fbc   esp = 0xbf83e8d0   ebp = 0xb0af64cc   ebx = 0x0252ae78
Comment 1 Karl Tomlinson (ni?:karlt) 2012-05-03 17:09:18 PDT
10  libxul.so!nsHTMLSharedObjectElement::~nsHTMLSharedObjectElement [nsHTMLSharedObjectElement.cpp : 206 + 0x7]
    eip = 0x016224b0   esp = 0xbf83e8f0   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0x9faf6e00   edi = 0x9faf6e40
    Found by: call frame info
11  libxul.so!nsHTMLSharedObjectElement::~nsHTMLSharedObjectElement [nsHTMLSharedObjectElement.cpp : 210 + 0x5]
    eip = 0x016224e4   esp = 0xbf83e910   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0x9faf6e00   edi = 0xa006c800
    Found by: call frame info
12  libxul.so!nsNodeUtils::LastRelease [nsNodeUtils.cpp : 283 + 0x7]
    eip = 0x01542c14   esp = 0xbf83e930   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0x9faf6e00   edi = 0xa006c800
    Found by: call frame info
13  libxul.so!nsGenericElement::Release [nsGenericElement.cpp : 5096 + 0x9]
    eip = 0x0152ff01   esp = 0xbf83e960   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0x9faf6e00   edi = 0x00001cd3
    Found by: call frame info
14  libxul.so!nsXPCOMCycleCollectionParticipant::Unroot [nsCycleCollectionParticipant.cpp : 76 + 0x5]
    eip = 0x01ccb337   esp = 0xbf83e990   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0xb681e000   edi = 0x00001cd3
    Found by: call frame info
15  libxul.so!nsCycleCollector::CollectWhite [nsCycleCollector.cpp : 2388 + 0xd]
    eip = 0x01d077ad   esp = 0xbf83e9b0   ebp = 0xb0af64cc   ebx = 0x0252ae78
    esi = 0xb681e000   edi = 0x00001cd3
    Found by: call frame info
16  libxul.so!nsCycleCollector::FinishCollection [nsCycleCollector.cpp : 3196 + 0x9]
    eip = 0x01d07854   esp = 0xbf83ea10   ebp = 0x00000000   ebx = 0x0252ae78
    esi = 0xb681e000   edi = 0xb681e000
    Found by: call frame info
17  libxul.so!nsCycleCollector::Collect [nsCycleCollector.cpp : 3074 + 0x8]
    eip = 0x01d07a6c   esp = 0xbf83ea40   ebp = 0x00000000   ebx = 0x0252ae78
    esi = 0x00000000   edi = 0xb681e000
    Found by: call frame info
18  libxul.so!nsCycleCollector::Shutdown [nsCycleCollector.cpp : 3247 + 0xd]
    eip = 0x01d07b3b   esp = 0xbf842900   ebp = 0x01cda52c   ebx = 0x0252ae78
    esi = 0xb681e000   edi = 0xb7602000
    Found by: call frame info
19  libxul.so!nsCycleCollector_shutdown [nsCycleCollector.cpp : 3619 + 0x4]
    eip = 0x01d07f64   esp = 0xbf842930   ebp = 0x01cda52c   ebx = 0x0252ae78
    esi = 0xb76e7124   edi = 0xb7602000
    Found by: call frame info
20  libxul.so!mozilla::ShutdownXPCOM [nsXPComInit.cpp : 675 + 0x4]
    eip = 0x01ccf5d4   esp = 0xbf842950   ebp = 0x01cda52c   ebx = 0x0252ae78
    esi = 0xb76e7124   edi = 0xa9374810
    Found by: call frame info
21  libxul.so!ScopedXPCOMStartup::~ScopedXPCOMStartup [nsAppRunner.cpp : 1129 + 0x7]
    eip = 0x01214830   esp = 0xbf8429b0   ebp = 0x00000000   ebx = 0x0252ae78
    esi = 0xb764d418   edi = 0xb7602000
    Found by: call frame info
22  libxul.so!XREMain::XRE_main [nsAppRunner.cpp : 3879 + 0x13]
    eip = 0x01219824   esp = 0xbf8429e0   ebp = 0x00000000   ebx = 0x0252ae78
    esi = 0xbf842a64   edi = 0xb7602000
    Found by: call frame info
Comment 5 Karl Tomlinson (ni?:karlt) 2012-05-03 20:28:31 PDT
Created attachment 620942 [details] [diff] [review]
handle no drag service during shutdown

The event queue is shut down before the service manager, so the event handlers don't need to null check.
Comment 6 Karl Tomlinson (ni?:karlt) 2012-05-03 20:38:38 PDT
https://hg.mozilla.org/integration/mozilla-inbound/rev/e9ade282b5d8
Comment 7 Ed Morley [:emorley] 2012-05-04 04:54:02 PDT
Rev3 Fedora 12x64 mozilla-central pgo test mochitests-2/5 on 2012-05-03 13:02:06 PDT for push a0356446a56a
slave: talos-r3-fed64-021
https://tbpl.mozilla.org/php/getParsedLog.php?id=11437282&tree=Firefox
Comment 8 Ed Morley [:emorley] 2012-05-04 11:48:22 PDT
(Comment 7 log was from before this landed on m-c)

https://hg.mozilla.org/mozilla-central/rev/e9ade282b5d8

Note You need to log in before you can comment on or make changes to this bug.