759674 - crash in XPCWrappedNativeScope::SuspectAllWrappers @ JS_DHashTableEnumerate

Status: RESOLVED WORKSFORME

(Core :: XPConnect, defect)

Description

[Scoobidiver (away)]

About half of crashes with this crash signature happen with that stack making it #6 top crasher in 14.0b3.

Signature 	JS_DHashTableEnumerate More Reports Search
UUID	3070570e-a35e-4d1a-86fc-d901d2120530
Date Processed	2012-05-30 06:57:31
Uptime	4066
Install Age	1.1 hours since version was first installed.
Install Time	2012-05-30 05:49:07
Product	FennecAndroid
Version	14.0
Build ID	20120524133102
Release Channel	beta
OS	Linux
OS Version	0.0.0 Linux 2.6.35.7-CL982987 #1 PREEMPT Tue Feb 21 19:06:23 KST 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x8
App Notes 	
AdapterVendorID: latona, AdapterDeviceID: GT-I9003.
AdapterDescription: 'Model: 'GT-I9003', Product: 'GT-I9003', Manufacturer: 'samsung', Hardware: 'latona''.
samsung GT-I9003
samsung/GT-I9003/GT-I9003:2.3.6/GINGERBREAD/JPKPH:user/release-keys
Processor Notes 	
EMCheckCompatibility	True

Frame 	Module 	Signature 	Source
0 	libxul.so 	JS_DHashTableEnumerate 	js/src/jsdhash.cpp:738
1 	libxul.so 	XPCWrappedNativeScope::SuspectAllWrappers 	js/xpconnect/src/XPCMaps.h:173
2 	libxul.so 	XPCJSRuntime::AddXPConnectRoots 	js/xpconnect/src/XPCJSRuntime.cpp:557
3 	libxul.so 	nsXPConnect::BeginCycleCollection 	js/xpconnect/src/nsXPConnect.cpp:593
4 	libxul.so 	nsCycleCollector::BeginCollection 	xpcom/base/nsCycleCollector.cpp:3175
5 	libxul.so 	nsCycleCollectorRunner::Run 	xpcom/base/nsCycleCollector.cpp:3910
6 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:656
7 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
8 	libxul.so 	nsThread::ThreadFunc 	xpcom/threads/nsThread.cpp:289
9 	libnspr4.so 	_pt_root 	nsprpub/pr/src/pthreads/ptthread.c:187
10 	libc.so 	__thread_entry 	
11 	libc.so 	pthread_create

More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=JS_DHashTableEnumerate

Comment 1

[Brad Lassey [:blassey] (use needinfo?)]

qawanted to get the list of URLs and the list of phones and crash frequency for phones.

Also could really use STR.

Comment 2

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

URLs:
7 	about:blank
4 	https://safe.bankofamerica.com/login/sign-in/validateChallengeAnswer.go
3 	http://farmerama.bigpoint.com/?action=internalGame
3 	http://www.adobe.com/software/flash/about/
2 	http://vk.com/audio
2 	http://ts6.travian.net/dorf1.php
2 	http://www.gorillavid.in/cnb/9wdmitj69azf
2 	http://www.hotnewhiphop.com/rick-ross-bag-of-money-prod-by-beat-billionaire-song
2 	http://www.blackplanet.com/home/index.html
1 	http://www.animefreak.tv/watch/hack-legend-twilight-bracelet-english-dubbed-onli
1 	http://www.hotnewhiphop.com/50-cent-the-lost-tape-hosted-by-dj-drama-mixtape.543
1 	http://www.livesample.com/?relevantID=29D9A2D1-67CD-46D5-A5A6-820177D66F59&afID=
1 	http://www.hotnewhiphop.com/sb-scaff-beezy-count-it-up-song.649701.html
1 	http://uploaded.to/file/tuejexaq
1 	http://www.blogtv.com/people/lardo444
1 	http://www.filebox.com/jq30krc4xq00
1 	http://www.youtube.com/watch?v=uzudCn6U_TU
1 	http://badoo.com/search/
1 	http://www.coco.fr/chat/#
1 	http://www.tvnwarszawa.pl/informacje,news,euro-w-komunikacji-objazdy-nowe-linie-
1 	http://200.126.170.140:85/monitoreo/sistema/inicio.asp
1 	http://www.pof.com/inbox.aspx#in
1 	https://apps.facebook.com/cafeworld/index.php?ref=community
1 	http://www.ustream.tv/channel/the-almost#utm_campaign=unknown&utm_source=1106125
1 	http://www.bikebandit.com/
1 	http://www.metacafe.com/watch/cb-_HdWnnZTWXjJEPmafKbZgCoDNfoUrYpl/the_big_bang_t
1 	http://www.linkedin.com/groups/How-can-I-add-external-76373%2ES%2E118489945?qid=
1 	https://apps.facebook.com/thesimssocial/?
1 	http://www.rfm.fr/#/c-est-quoi-ce-titre/1338149400
1 	http://www.trialpay.com/campaign/?c=ecee747&cat=-1
1 	http://nicosound.anyap.info/sound/sm527446
1 	http://webkinznewz.ganzworld.com/
1 	http://www.megashare.com/4140844
1 	http://www.miniclip.com/games/boxo/en/
1 	https://www.onlineaccess.ca/NASApp/NetAccess/challengeQA.action
1 	http://7f4yj.333332.com/main.aspx
1 	http://seattletimes.nwsource.com/html/seahawks/2018281722_hawk25.html
1 	https://play.google.com/store/music/collection/series_overview_theme_2011_10_29
1 	http://us1.badoo.com/messages/
1 	http://www.rhymeswithsnitch.com/
1 	http://blog.tubemate.net/1
1 	http://store.handmark.com/ringers
1 	http://www.pof.com/inbox.aspx
1 	http://www.blackplanet.com/user_search/index.html?tracking=global_nav
1 	http://blog.rockcreek.com/archives/2012-scenic-city-trail-marathon-winner-johnny
1 	http://www.mixcloud.com/ABTrancy/pure-trance-sessions-episode-21/
1 	http://video.pbs.org/video/2234656643
1 	http://www.hotnewhiphop.com/miguel-adorn-song.686147.html
1 	http://www.slotomania.com/
1 	http://www.mediafire.com/?0brke666oo63xzf
1 	http://thegoldvideo.com/VSL-2/?a_aid=4fb65e6171873
1 	http://www.elgenero.com/
1 	http://www.adobe.com/shockwave/welcome/
1 	http://www.kboing.com.br/mamonas-assassinas/1-44386/
1 	http://www.peliculas-flv.com/us/pelicula/0000899/ver-the-amazing-spider-man-onli
1 	http://www.newgrounds.com/portal/view/595868
1 	http://www.firstrowsports.eu/watch/124723/1/watch-v.-williams-vs-ormaechea-(cour
1 	http://www.pbs.org/wgbh/masterpiece/watch/sherlock_belgravia.html
1 	http://www.comicrelief.com/
1 	https://play.google.com/store/search?q=pname:com.pandora.android
1 	http://www.kijiji.ca/
1 	http://gorillavid.in/lwxx2n4sy6t1
1 	https://apps.facebook.com/thesimssocial/
1 	http://www.livechat.fi/?e=1
1 	https://auth.alipay.com/login/index.htm?goto=https%3A%2F%2Flab.alipay.com%2Fuser
1 	https://settings.adobe.com/flashplayer/mobile/en/help/troubleshooting.html
1 	https://www.netbranch.app.fiserv.com/capedfcu/Default.aspx
1 	http://www.hotnewhiphop.com/t-i-love-this-life-song.763897.html
1 	http://atdhenet.tv/47475/watch-oklahoma-city-thunder-vs-san-antonio-spurs
1 	http://www.espncricinfo.com/
1 	http://www.facebook.com/about/timeline
1 	https://play.google.com/store
1 	http://www.amazon.co.uk/deals-offers-savings/b/ref=cs_top_nav_gb27?ie=UTF8&node=
1 	http://www.pandora.com/station/play/208413142135439174
1 	http://xqjfo.333332.com/main.aspx
1 	https://play.google.com/store/search?q=freight+software&c=apps
1 	https://safe.bankofamerica.com/myaccounts/signin/signIn.go?isSecureMobile=false&
1 	https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&errmsg=8&pUserId=d&co_partnerId=
1 	https://play.google.com/store/search?q=pname:imoblife.memorybooster.lite

Comment 3

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Problem is that JS_DHashTableEnumerate needs to get separated more.

See bug 759534

Comment 4

[Johnathan Nightingale [:johnath]]

Adding blake, too. JP says conversation with dmandelin suggests that these are coming from xpcom, can Bobby or Blake give us any thoughts on what's causing these crashes, and how to fix them?

Comment 5

[Bobby Holley (:bholley)]

mccr8 has been looking at these over in bug 759680.

Comment 6

[Andrew McCreight [:mccr8]]

Some of these crashes are from XPCWrappedNativeScope::TraceJS, not SuspectAllWrappers, but they both involve the class Native2WrappedNativeMap.  These are all crashes at address 0x8.

Based on a random sample of ten crashes, these seem to be crashes on this line (in both places the crashes come from):
  capacity = JS_DHASH_TABLE_SIZE(table);

This suggests that the table is null.  The field TABLE_SIZE looks at is probably going to be at an offset of 0x8, as it is after 2 pointer fields, so that's consistent.  mTable is initialized in the constructor, so I'd guess that this is another instance where JS_NewDHashTable is failing due to OOM, and that isn't being handled in the class that wraps it.

In other words, this is the same thing as bug 759680, except with Native2WrappedNativeMap, instead of ClassInfo2WrappedNativeProtoMap.

Comment 7

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Devices listed : 
Samsung GT-I9100 	53
Motorola DROID RAZR 	39
Motorola DROID BIONIC 	21
Sony Ericsson LT26i 	21
Samsung SPH-D710 	16
Samsung SCH-I500 	15
Samsung GT-N7000 	14
Samsung GT-I9100G 	14
HTC PC36100 	13
Samsung SGH-I717 	13
HTC PG86100 	12
HTC Desire HD 	12
Samsung SGH-T989 	12
Samsung GT-I9000 	10
Samsung GT-I8150 	9
HTC EVO 3D X515m 	9
Samsung GT-I9001 	8
Samsung GT-P1000 	8
HTC ADR6425LVW 	6
Motorola MB865 	6
HTC ADR6400L 	6
Motorola XT910 	6
Samsung SGH-I777 	6
HTC Desire HD A9191 	6
ZTE N860 	5
HTC ISW12HT 	5
HTC Sensation 4G 	5
Samsung SGH-I727 	5
Motorola DROIDX 	4
Samsung SCH-I510 	4
HTC EVO 3D X515a 	4
HTC ADR6350 	4
HTC Glacier 	4
Samsung SC-05D 	4
HTC Sensation Z710e 	4
Motorola MB526 	3
Samsung GT-I9100T 	3
Samsung SGH-T679 	3
Samsung YP-G70 	3
HTC Sensation XE with Beats Audio Z715e 	3
Samsung GT-I9003 	3
LGE LG-P970 	3
Samsung SC-02C 	3
Sony Ericsson SO-02D 	3
HTC Incredible S 	3
HTC Desire S 	2
Samsung SGH-I997 	2
Samsung SGH-I847 	2
Samsung SGH-I727R 	2
Sony Ericsson LT15i 	2
Sony Ericsson SK17a 	2
Sony Ericsson R800i 	2
Sony Ericsson ST25i 	2
Sony Ericsson WT19i 	2
Xiaomi MI-ONE Plus 	2
Sony Ericsson MT15a 	2
Sony Ericsson MT11i 	2
Samsung SCH-I405 	2
Sony Ericsson LT18i 	2
Sony Ericsson LT22i 	2
Dell Inc 001DL 	2
Samsung SPH-D700 	2
HTC Sensation XL with Beats Audio X315e 	2
HTC Explorer A310e 	2
Amazon Kindle Fire 	2
PANTECH IM-A780L 	2
LGE LG-P925g 	2
HTC Desire 	2
Samsung GT-I9100M 	2
HTC HD2 	2
Samsung GT-S7500 	2
Samsung Nexus S 	2
HTC Vision 	2
Sony Ericsson ST18i 	1
Samsung SC-02B 	1
Sony Ericsson ST15i 	1
Sony Ericsson SO-03D 	1
Sony Ericsson SK17i 	1
Sony Ericsson SO-01C 	1
Motorola DROID2 	1
HTC T-Mobile G2 	1
Telechips PAT712W 	1
LGE VS910 4G 	1
HTC PG06100 	1
Unknown Yan 8.1 Android 4.0 	1
Unknown N50GT_A 	1
Unknown A15(E6C2) 	1
Unknown AN10G2 	1
Motorola DROID3 	1
Motorola MB525 	1
Samsung SHW-M250S 	1
Samsung SPH-D600 	1
Samsung SHW-M190S 	1
LENOVO A1_07 	1
Samsung SGH-T839 	1
Samsung SGH-T959V 	1
HTC ADR6300 	1
Samsung GT-I9000T 	1
LGE LG-MS910 	1
HUAWEI M886 	1
LGE LG-MS695 	1
Samsung SGH-I717M 	1
LGE LG-LS855 	1
HTC ADR6325 	1
LGE LG-P925

Comment 8

[Andrew McCreight [:mccr8]]

Is there any way to get the memory in these devices or how much memory is available?  I saw somebody talking about another OOM crash that they suspected was actually some kind of memory corruption that was just causing the allocator to fail.  Given that these allocations are fairly small, I wonder if something may be going on here too.

Comment 9

[Tony Chung [:tchung]]

QA still hasnt found STRs for this yet.

Comment 10

[Scoobidiver (away)]

There are no crashes in 14.0b7, probably fixed by bug 756253.

Comment 11

[Martijn Wargers (dead)]

So this bug can be marked WORKSFORME, right, Scoobidiver?

Comment 12

[David Rav]

I'm having the same problem on two links. I'm suspecting is that access memory devices.

http://www.ouvirmusicasgratis.tk
http://www.sonora.fm

Comment 13

[romario-.-costa]

David Rav you already solved your problem?
I am experiencing the same problem on two links:
www.musicasparaouvironline.com
www.musicaparaouvironline.com

Comment 14

[romario-.-costa]

(In reply to romario-.-costa from comment #13)
> David Rav you already solved your problem?
> I am experiencing the same problem on two links:
> http://www.musicasparaouvironline.com
> http://www.musicaparaouvironline.com

Comment 15

[pokemaster]

@romario: Did you ever get your problem fixed? I'm also receiving the error, although it's with the following:
http://www.animerelief.com/
http://www.hentairelief.com/

Yes they're 2 similar sites using the same CMS but I was wondering if there was something there causing it? Can anyone else confirm for me please? Thank you! :)

Comment 23

[Mike Hoye [:mhoye]]

Not sure why this bug is pulling in spam, but let's put a stop to that.