785806 - crash in XPCIncrementalReleaseRunnable::ReleaseNow

Status: RESOLVED INACTIVE

(Core :: XPConnect, defect, critical)

Description

[Scoobidiver (away)]

It first appeared in 17.0a1/20120804. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=89dcadd42ec4&tochange=20fc34efd733
It's likely a regression from bug 743112.

Signature 	XPCIncrementalReleaseRunnable::ReleaseNow(bool) More Reports Search
UUID	cf694d33-e96d-4549-a7dd-cde962120826
Date Processed	2012-08-26 23:40:17
Uptime	30931
Last Crash	1.3 days before submission
Install Age	8.6 hours since version was first installed.
Install Time	2012-08-26 15:05:27
Product	Firefox
Version	17.0a1
Build ID	20120826030526
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 23 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x60cae81c
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x0421, AdapterSubsysID: 140110b0, AdapterDriverVersion: 8.17.13.142
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
EMCheckCompatibility	True
Adapter Vendor ID	0x10de
Adapter Device ID	0x0421
Total Virtual Memory	4294836224
Available Virtual Memory	2998202368
System Memory Use Percentage	41
Available Page File	9721831424
Available Physical Memory	3785895936

Frame 	Module 	Signature 	Source
0 	xul.dll 	XPCIncrementalReleaseRunnable::ReleaseNow 	js/xpconnect/src/XPCJSRuntime.cpp:612
1 	xul.dll 	XPCIncrementalReleaseRunnable::Run 	js/xpconnect/src/XPCJSRuntime.cpp:642
2 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:624
3 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:82
4 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
5 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
6 	xul.dll 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:163
7 	xul.dll 	nsAppShell::Run 	widget/windows/nsAppShell.cpp:232
8 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:273
9 	xul.dll 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3800
10 	xul.dll 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3877
11 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3953
12 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:100
13 	firefox.exe 	__tmainCRTStartup 	crtexe.c:552
14 	kernel32.dll 	BaseThreadInitThunk 	
15 	ntdll.dll 	__RtlUserThreadStart 	
16 	ntdll.dll 	_RtlUserThreadStart

More reports at:
https://crash-stats.mozilla.com/report/list?signature=XPCIncrementalReleaseRunnable%3A%3AReleaseNow%28bool%29

Comment 1

[Scoobidiver (away)]

It's #42 top browser crasher in 17.0a2 and #38 in 18.0a1.

Comment 2

[Scoobidiver (away)]

It's #20 top browser crasher in 17.0a2 and #55 in 18.0a2.

Comment 3

[Alex Keybl [:akeybl]]

Assigning to you, Bill, since you landed the suspected regressing bug.

Comment 4

[Marcia Knous [:marcia - needinfo? me/PTO 12/6-12/12)]]]

3 	about:blank
2 	http://www.youtube.com/
2 	about:newtab
2 	http://www.facebook.com/
1 	wyciwyg://18/http://ad.doubleclick.net/adi/N3148.AdRx/B6255309.4;sz=728x90;click
1 	http://dpnf.net/viewtopic.php?f=30&t=3381
1 	https://apps.facebook.com/playslingo//index.php?ref=flashRedirectHome&ooscode=28
1 	wyciwyg://3577/http://bn.xp1.ru4.com/nf?_pnot=0&_tpc=http://adclick.g.doubleclic
1 	http://www.binnews.in/index.php?country=fr
1 	wyciwyg://17/http://arc.alpha2291.com/servlet/ajrotator/204713/0/
1 	wyciwyg://306/http://ad.doubleclick.net/adi/N7572.279382.INVITEMEDIAINC./B683073
1 	http://www.nownews.com/2012/09/24/11622-2856892.htm
1 	https://plus.google.com/u/0/_/notifications/frame?sourceid=1&hl=sr&origin=https%
1 	http://www.autotrader.co.uk/classified/advert/201234482692999/sort/default/usedc
1 	http://oyunsunucu17.mynet.com/game/WebRoot/egameflash.asp?game=101&cvalue=1ED493
1 	http://widgets.maxperview.com/widgets/1.4.0/html/cookiesiframemanager.htm?random
1 	http://www.myfreecams.com/mfc2/static/popular_rooms.html?model_group=default_set
1 	https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&cont
1 	http://www.pencilkids.com/walkthroughs/
1 	https://mail.google.com/mail/?shva=1#compose
1 	wyciwyg://326/http://ib.adnxs.com/tt?id=923812&size=468x60&0
1 	http://blog.naver.com/twinofgirl
1 	http://3-listka.ru/promomixes/new_sets.html
1 	http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_models_comparison.ht
1 	http://www.portalization.com/2011/01/olahragawati-paling-seksi.html
1 	http://globoesporte.globo.com/futebol/noticia/2012/09/promessa-da-base-do-guaran
1 	https://10.77.123.236/admin/#pageId=com_cisco_xmp_web_page_admin_deployment
1 	https://apps.facebook.com/mindjolt/games/jewel-city?nav=feat_tourn_coins.R1.P1&a
1 	https://apps.facebook.com/chefville/

Comment 5

[Scoobidiver (away)]

It has stopped after 18.0a1/20121001. The working range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=beee809b7ade&tochange=85dd8e346102

It's still #10 top crasher w/o hangs in 17.0a2.

Comment 6

[Scoobidiver (away)]

(In reply to Scoobidiver from comment #5)
> It has stopped after 18.0a1/20121001.
But replaced by a new signature: https://crash-stats.mozilla.com/report/list?signature=ReleaseSliceNow%28int%2C+void*%29

Comment 7

[Scoobidiver (away)]

It's correlated with spyware like in bug 787885:
* Oct 13:
XPCIncrementalReleaseRunnable::ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (20 crashes)
     90% (18/20) vs.  74% (3706/4975) [e-mail] (Mozilla Labs - Test Pilot, https://addons.mozilla.org/addon/13661)
     20% (4/20) vs.   5% (271/4975) [e-mail]
     20% (4/20) vs.   6% (319/4975) [e-mail]
     15% (3/20) vs.   2% (116/4975) [e-mail]
     15% (3/20) vs.   5% (224/4975) [e-mail]
* Oct 14:
XPCIncrementalReleaseRunnable::ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (94 crashes)
     18% (17/94) vs.   5% (839/15649) [e-mail]
     14% (13/94) vs.   2% (381/15649) [e-mail]
     13% (12/94) vs.   4% (703/15649) [e-mail]
     15% (14/94) vs.   8% (1229/15649) [e-mail]
      9% (8/94) vs.   2% (257/15649) [e-mail]
      9% (8/94) vs.   2% (309/15649) [e-mail]

Comment 8

[Anthony Hughes (:ashughes) [QA]]

Marcia, can you please take a crack at trying to come up with steps to reproduce?

Comment 9

[Robert Kaiser]

Those signatures seem to be new with 17, I don't see any crashes in 16 or older. XPCIncrementalReleaseRunnable::ReleaseNow(bool) is topcrash #21 in 17.0b1 now.

Comment 10

[Marcia Knous [:marcia - needinfo? me/PTO 12/6-12/12)]]]

Latest correlations on 17 still show yontoo involved:

XPCIncrementalReleaseRunnable::ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (130 crashes)
     12% (16/130) vs.   5% (2779/60466) [e-mail]
      9% (12/130) vs.   4% (2442/60466) {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

I installed the specific versions of these addons that were showing up in correlations, but haven't yet crashed on Windows:

     20% (4/20) vs.   5% (271/4975) [e-mail]
     20% (4/20) vs.   6% (319/4975) [e-mail]
     15% (3/20) vs.   2% (116/4975) [e-mail]

Comment 11

[Alex Keybl [:akeybl]]

(In reply to Marcia Knous [:marcia] from comment #10)
> Latest correlations on 17 still show yontoo involved:
> 
> XPCIncrementalReleaseRunnable::
> ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (130 crashes)
>      12% (16/130) vs.   5% (2779/60466) [e-mail]
>       9% (12/130) vs.   4% (2442/60466)
> {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
> 
> I installed the specific versions of these addons that were showing up in
> correlations, but haven't yet crashed on Windows:
> 
>      20% (4/20) vs.   5% (271/4975) [e-mail]
>      20% (4/20) vs.   6% (319/4975) [e-mail]
>      15% (3/20) vs.   2% (116/4975) [e-mail]

People mention "I was trying to play bingo on facebook, flash 11.4 hardware disabled"

Bill - what would the impact be of backing out bug 743112? Or do you think some other issue is the culprit here?

Comment 12

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

Maybe I'm misreading the stats, but I don't see this crash happening any more on 17, 18, or 19. Is that correct?

Comment 13

[Scoobidiver (away)]

(In reply to Bill McCloskey (:billm) from comment #12)
> Maybe I'm misreading the stats, but I don't see this crash happening any
> more on 17, 18, or 19. Is that correct?
Almost. It was #20 top crasher in 17.0b1 over the last 2 weeks, but only #106 in 17.0b2 over the last 2 weeks. In Aurora, it stopped spiking in 18.0a2/20121016. The working windows are:
http://hg.mozilla.org/releases/mozilla-beta/pushloghtml?fromchange=a3cbcfe120bd&tochange=2ba4becf6e35
http://hg.mozilla.org/releases/mozilla-aurora/pushloghtml?fromchange=53559d475428&tochange=03b50c47e744
Bug 785734, bug 779118, bug 791798, bug 800157, bug 796038, bug 798166, bug 796044, bug 799617, bug 798753, bug 792503, bug 799749, bug 799592, bug 801080, bug 801951, and bug 785920 belong to both (Monday is a hot day for pushes in Aurora).

Comment 14

[Andrew McCreight [:mccr8]]

Maybe bug 791798?  That involves crashes inside XPCJSRuntime::GCCallback.  The rest is very platform specific, or socialapi.  well, or bug 779118, but that shouldn't affect this...

Comment 15

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

I agree, bug 791798 was almost certainly what fixed it.

Comment 16

[Scoobidiver (away)]

(In reply to Bill McCloskey (:billm) from comment #15)
> I agree, bug 791798 was almost certainly what fixed it.
It's no longer a top crasher so there's no need to track but it's not fixed.

Comment 17

[Robert Kaiser]

(In reply to Scoobidiver from comment #16)
> It's no longer a top crasher so there's no need to track but it's not fixed.

Yes, still around in low volume, e.g. bp-545fec6b-a44c-4db3-8cc5-be1b02121028 in recent trunk and e.g. bp-98557898-569f-40cb-9ffe-630dc2121029 in 17.0b3.

Comment 18

[bhavana bajaj [:bajaj]]

Not tracking for release considering that the crash volume has dropped significantly.

Comment 19

[Robert Kaiser]

This is also seen on B2G, see bp-5e3530a0-82bc-4390-8daa-3d52c2121219 or bp-cabd07e4-c1ff-4f15-8ee6-57ba92121219

Comment 20

[Dagny Bridgeforth]

Thank you for such useful stuff. I think that <a href="http://iwantucams.com">additional information</a> will be very helpful for you.

Comment 21

[BMO Automation]

Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.