crash in XPCIncrementalReleaseRunnable::ReleaseNow

RESOLVED INACTIVE

Status

()

Core
XPConnect
--
critical
RESOLVED INACTIVE
6 years ago
a day ago

People

(Reporter: Scoobidiver (away), Unassigned)

Tracking

({crash, regression})

17 Branch
All
Windows 7
crash, regression
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox17- affected, firefox18- affected)

Details

(Whiteboard: [b2g-crash], crash signature)

(Reporter)

Description

6 years ago
It first appeared in 17.0a1/20120804. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=89dcadd42ec4&tochange=20fc34efd733
It's likely a regression from bug 743112.

Signature 	XPCIncrementalReleaseRunnable::ReleaseNow(bool) More Reports Search
UUID	cf694d33-e96d-4549-a7dd-cde962120826
Date Processed	2012-08-26 23:40:17
Uptime	30931
Last Crash	1.3 days before submission
Install Age	8.6 hours since version was first installed.
Install Time	2012-08-26 15:05:27
Product	Firefox
Version	17.0a1
Build ID	20120826030526
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 23 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x60cae81c
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x0421, AdapterSubsysID: 140110b0, AdapterDriverVersion: 8.17.13.142
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
EMCheckCompatibility	True
Adapter Vendor ID	0x10de
Adapter Device ID	0x0421
Total Virtual Memory	4294836224
Available Virtual Memory	2998202368
System Memory Use Percentage	41
Available Page File	9721831424
Available Physical Memory	3785895936

Frame 	Module 	Signature 	Source
0 	xul.dll 	XPCIncrementalReleaseRunnable::ReleaseNow 	js/xpconnect/src/XPCJSRuntime.cpp:612
1 	xul.dll 	XPCIncrementalReleaseRunnable::Run 	js/xpconnect/src/XPCJSRuntime.cpp:642
2 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:624
3 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:82
4 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
5 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
6 	xul.dll 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:163
7 	xul.dll 	nsAppShell::Run 	widget/windows/nsAppShell.cpp:232
8 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:273
9 	xul.dll 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3800
10 	xul.dll 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3877
11 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3953
12 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:100
13 	firefox.exe 	__tmainCRTStartup 	crtexe.c:552
14 	kernel32.dll 	BaseThreadInitThunk 	
15 	ntdll.dll 	__RtlUserThreadStart 	
16 	ntdll.dll 	_RtlUserThreadStart

More reports at:
https://crash-stats.mozilla.com/report/list?signature=XPCIncrementalReleaseRunnable%3A%3AReleaseNow%28bool%29
(Reporter)

Comment 1

6 years ago
It's #42 top browser crasher in 17.0a2 and #38 in 18.0a1.
Crash Signature: [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] → [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool) ]
(Reporter)

Comment 2

6 years ago
It's #20 top browser crasher in 17.0a2 and #55 in 18.0a2.
tracking-firefox17: --- → ?
Keywords: topcrash

Comment 3

6 years ago
Assigning to you, Bill, since you landed the suspected regressing bug.
Assignee: nobody → wmccloskey
tracking-firefox17: ? → +
Keywords: needURLs, qawanted, steps-wanted
3 	about:blank
2 	http://www.youtube.com/
2 	about:newtab
2 	http://www.facebook.com/
1 	wyciwyg://18/http://ad.doubleclick.net/adi/N3148.AdRx/B6255309.4;sz=728x90;click
1 	http://dpnf.net/viewtopic.php?f=30&t=3381
1 	https://apps.facebook.com/playslingo//index.php?ref=flashRedirectHome&ooscode=28
1 	wyciwyg://3577/http://bn.xp1.ru4.com/nf?_pnot=0&_tpc=http://adclick.g.doubleclic
1 	http://www.binnews.in/index.php?country=fr
1 	wyciwyg://17/http://arc.alpha2291.com/servlet/ajrotator/204713/0/
1 	wyciwyg://306/http://ad.doubleclick.net/adi/N7572.279382.INVITEMEDIAINC./B683073
1 	http://www.nownews.com/2012/09/24/11622-2856892.htm
1 	https://plus.google.com/u/0/_/notifications/frame?sourceid=1&hl=sr&origin=https%
1 	http://www.autotrader.co.uk/classified/advert/201234482692999/sort/default/usedc
1 	http://oyunsunucu17.mynet.com/game/WebRoot/egameflash.asp?game=101&cvalue=1ED493
1 	http://widgets.maxperview.com/widgets/1.4.0/html/cookiesiframemanager.htm?random
1 	http://www.myfreecams.com/mfc2/static/popular_rooms.html?model_group=default_set
1 	https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&cont
1 	http://www.pencilkids.com/walkthroughs/
1 	https://mail.google.com/mail/?shva=1#compose
1 	wyciwyg://326/http://ib.adnxs.com/tt?id=923812&size=468x60&0
1 	http://blog.naver.com/twinofgirl
1 	http://3-listka.ru/promomixes/new_sets.html
1 	http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_models_comparison.ht
1 	http://www.portalization.com/2011/01/olahragawati-paling-seksi.html
1 	http://globoesporte.globo.com/futebol/noticia/2012/09/promessa-da-base-do-guaran
1 	https://10.77.123.236/admin/#pageId=com_cisco_xmp_web_page_admin_deployment
1 	https://apps.facebook.com/mindjolt/games/jewel-city?nav=feat_tourn_coins.R1.P1&a
1 	https://apps.facebook.com/chefville/
Keywords: needURLs
QA Contact: mozillamarcia.knous
(Reporter)

Comment 5

6 years ago
It has stopped after 18.0a1/20121001. The working range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=beee809b7ade&tochange=85dd8e346102

It's still #10 top crasher w/o hangs in 17.0a2.
status-firefox17: --- → affected
status-firefox18: --- → unaffected
(Reporter)

Comment 6

6 years ago
(In reply to Scoobidiver from comment #5)
> It has stopped after 18.0a1/20121001.
But replaced by a new signature: https://crash-stats.mozilla.com/report/list?signature=ReleaseSliceNow%28int%2C+void*%29
Crash Signature: [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool) ] → [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] [@ ReleaseSliceNow(int, void*)]
status-firefox18: unaffected → affected
(Reporter)

Comment 7

6 years ago
It's correlated with spyware like in bug 787885:
* Oct 13:
XPCIncrementalReleaseRunnable::ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (20 crashes)
     90% (18/20) vs.  74% (3706/4975) testpilot@labs.mozilla.com (Mozilla Labs - Test Pilot, https://addons.mozilla.org/addon/13661)
     20% (4/20) vs.   5% (271/4975) plugin@yontoo.com
     20% (4/20) vs.   6% (319/4975) ffxtlbr@babylon.com
     15% (3/20) vs.   2% (116/4975) bbrs_002@blabbers.com
     15% (3/20) vs.   5% (224/4975) toolbar@ask.com
* Oct 14:
XPCIncrementalReleaseRunnable::ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (94 crashes)
     18% (17/94) vs.   5% (839/15649) plugin@yontoo.com
     14% (13/94) vs.   2% (381/15649) bbrs_002@blabbers.com
     13% (12/94) vs.   4% (703/15649) ffxtlbr@funmoods.com
     15% (14/94) vs.   8% (1229/15649) ffxtlbr@babylon.com
      9% (8/94) vs.   2% (257/15649) ytd@mybrowserbar.com
      9% (8/94) vs.   2% (309/15649) OneClickDownload@OneClickDownload.com
(Reporter)

Updated

6 years ago
Crash Signature: [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] [@ ReleaseSliceNow(int, void*)] → [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] [@ XPCIncrementalReleaseRunnable::Run()] [@ ReleaseSliceNow(int, void*)]
Marcia, can you please take a crack at trying to come up with steps to reproduce?

Comment 9

6 years ago
Those signatures seem to be new with 17, I don't see any crashes in 16 or older. XPCIncrementalReleaseRunnable::ReleaseNow(bool) is topcrash #21 in 17.0b1 now.
Crash Signature: [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] [@ XPCIncrementalReleaseRunnable::Run()] [@ ReleaseSliceNow(int, void*)] → [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] [@ XPCIncrementalReleaseRunnable::ReleaseNow] [@ XPCIncrementalReleaseRunnable::Run()] [@ @0x0 | XPCIncrementalReleaseRunnable::Run()] [@ ReleaseSliceNow(int, void*)]
tracking-firefox18: --- → ?

Updated

6 years ago
tracking-firefox18: ? → +
Latest correlations on 17 still show yontoo involved:

XPCIncrementalReleaseRunnable::ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (130 crashes)
     12% (16/130) vs.   5% (2779/60466) plugin@yontoo.com
      9% (12/130) vs.   4% (2442/60466) {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

I installed the specific versions of these addons that were showing up in correlations, but haven't yet crashed on Windows:

     20% (4/20) vs.   5% (271/4975) plugin@yontoo.com
     20% (4/20) vs.   6% (319/4975) ffxtlbr@babylon.com
     15% (3/20) vs.   2% (116/4975) bbrs_002@blabbers.com
(In reply to Marcia Knous [:marcia] from comment #10)
> Latest correlations on 17 still show yontoo involved:
> 
> XPCIncrementalReleaseRunnable::
> ReleaseNow(bool)|EXCEPTION_ACCESS_VIOLATION_READ (130 crashes)
>      12% (16/130) vs.   5% (2779/60466) plugin@yontoo.com
>       9% (12/130) vs.   4% (2442/60466)
> {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
> 
> I installed the specific versions of these addons that were showing up in
> correlations, but haven't yet crashed on Windows:
> 
>      20% (4/20) vs.   5% (271/4975) plugin@yontoo.com
>      20% (4/20) vs.   6% (319/4975) ffxtlbr@babylon.com
>      15% (3/20) vs.   2% (116/4975) bbrs_002@blabbers.com

People mention "I was trying to play bingo on facebook, flash 11.4 hardware disabled"

Bill - what would the impact be of backing out bug 743112? Or do you think some other issue is the culprit here?
Maybe I'm misreading the stats, but I don't see this crash happening any more on 17, 18, or 19. Is that correct?
(Reporter)

Comment 13

6 years ago
(In reply to Bill McCloskey (:billm) from comment #12)
> Maybe I'm misreading the stats, but I don't see this crash happening any
> more on 17, 18, or 19. Is that correct?
Almost. It was #20 top crasher in 17.0b1 over the last 2 weeks, but only #106 in 17.0b2 over the last 2 weeks. In Aurora, it stopped spiking in 18.0a2/20121016. The working windows are:
http://hg.mozilla.org/releases/mozilla-beta/pushloghtml?fromchange=a3cbcfe120bd&tochange=2ba4becf6e35
http://hg.mozilla.org/releases/mozilla-aurora/pushloghtml?fromchange=53559d475428&tochange=03b50c47e744
Bug 785734, bug 779118, bug 791798, bug 800157, bug 796038, bug 798166, bug 796044, bug 799617, bug 798753, bug 792503, bug 799749, bug 799592, bug 801080, bug 801951, and bug 785920 belong to both (Monday is a hot day for pushes in Aurora).
tracking-firefox17: + → ?
tracking-firefox18: + → ?
Keywords: topcrash
Maybe bug 791798?  That involves crashes inside XPCJSRuntime::GCCallback.  The rest is very platform specific, or socialapi.  well, or bug 779118, but that shouldn't affect this...
Depends on: 791798
Keywords: qawanted, steps-wanted
I agree, bug 791798 was almost certainly what fixed it.
status-firefox17: affected → fixed
status-firefox18: affected → fixed
(Reporter)

Comment 16

6 years ago
(In reply to Bill McCloskey (:billm) from comment #15)
> I agree, bug 791798 was almost certainly what fixed it.
It's no longer a top crasher so there's no need to track but it's not fixed.
status-firefox17: fixed → affected
status-firefox18: fixed → affected
No longer blocks: 785778

Comment 17

6 years ago
(In reply to Scoobidiver from comment #16)
> It's no longer a top crasher so there's no need to track but it's not fixed.

Yes, still around in low volume, e.g. bp-545fec6b-a44c-4db3-8cc5-be1b02121028 in recent trunk and e.g. bp-98557898-569f-40cb-9ffe-630dc2121029 in 17.0b3.
Not tracking for release considering that the crash volume has dropped significantly.
tracking-firefox17: ? → -
tracking-firefox18: ? → -
Assignee: wmccloskey → nobody

Updated

6 years ago
Depends on: 816064

Comment 19

6 years ago
This is also seen on B2G, see bp-5e3530a0-82bc-4390-8daa-3d52c2121219 or bp-cabd07e4-c1ff-4f15-8ee6-57ba92121219
Whiteboard: [b2g-crash]

Updated

3 years ago
Crash Signature: [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] [@ XPCIncrementalReleaseRunnable::ReleaseNow] [@ XPCIncrementalReleaseRunnable::Run()] [@ @0x0 | XPCIncrementalReleaseRunnable::Run()] [@ ReleaseSliceNow(int, void*)] → [@ XPCIncrementalReleaseRunnable::ReleaseNow(bool)] [@ XPCIncrementalReleaseRunnable::ReleaseNow] [@ XPCIncrementalReleaseRunnable::Run()] [@ @0x0 | XPCIncrementalReleaseRunnable::Run()] [@ ReleaseSliceNow(int, void*)] [@ XPCIncrementalRelease…
Comment hidden (spam)

Comment 21

a day ago
Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.
Status: NEW → RESOLVED
Last Resolved: a day ago
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.