Closed Bug 810038 Opened 13 years ago Closed 9 years ago

crash in FreeWrapper mainly with vSpace virtualization SW from Ncomputing

Categories

(Core Graveyard :: Plug-ins, defect)

Product:
Core Graveyard
Component:
Plug-ins
Version:
17 Branch
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED INCOMPLETE

People

(Reporter: marcia, Unassigned, NeedInfo)

Details

(Keywords: crash, Whiteboard: [startupcrash])

Crash Data

This bug was filed from the Socorro interface and is report bp-0340df49-d189-465a-9985-090542121108 . ============================================================= This crash showed up on the explosive report today for Beta and did not have a bug associated with it. Link to the crashes: https://crash-stats.mozilla.com/report/list?signature=RtlpLowFragHeapFree%20|%20RtlFreeHeap%20|%20FreeWrapper%28void*%29. Correlations show it is more heavily linked to NPSWF32_11_4_402_287.dll and most of the URLs appear to be video or flash sites. Addons correlations from Firefox 17: RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)|EXCEPTION_ACCESS_VIOLATION_READ (129 crashes) 11% (14/129) vs. 0% (281/57069) adblockpopups@jessehakanen.net 100% (129/129) vs. 94% (53378/57069) {972ce4c6-7e08-4474-a285-3208198ce6fd} (Default, https://addons.mozilla.org/addon/8150) 88% (113/129) vs. 82% (46661/57069) testpilot@labs.mozilla.com (Mozilla Labs - Test Pilot, https://addons.mozilla.org/addon/13661) Module correlations from Firefox 17: RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)|EXCEPTION_ACCESS_VIOLATION_READ (129 crashes) 98% (126/129) vs. 0% (216/57069) NcAudEP.dll 98% (126/129) vs. 4% (2009/57069) credssp.dll 98% (126/129) vs. 10% (5699/57069) schannel.dll 98% (126/129) vs. 13% (7653/57069) mlang.dll 98% (126/129) vs. 17% (9823/57069) winsta.dll 100% (129/129) vs. 30% (17189/57069) RpcRtRemote.dll 98% (126/129) vs. 31% (17534/57069) plugin-container.exe 100% (129/129) vs. 35% (20063/57069) sspicli.dll 98% (126/129) vs. 34% (19240/57069) dsound.dll 83% (107/129) vs. 27% (15318/57069) NPSWF32_11_4_402_287.dll 98% (126/129) vs. 44% (25318/57069) comdlg32.dll 58% (75/129) vs. 11% (6281/57069) ksuser.dll 98% (127/129) vs. 52% (29466/57069) secur32.dll 100% (129/129) vs. 54% (30674/57069) profapi.dll 100% (129/129) vs. 55% (31513/57069) devobj.dll 100% (129/129) vs. 55% (31574/57069) CRYPTBASE.dll 100% (129/129) vs. 55% (31574/57069) sechost.dll 100% (129/129) vs. 55% (31574/57069) KERNELBASE.dll 100% (129/129) vs. 56% (31952/57069) cfgmgr32.dll 58% (75/129) vs. 16% (9271/57069) avrt.dll 100% (129/129) vs. 58% (33300/57069) propsys.dll 100% (129/129) vs. 60% (34001/57069) winnsi.dll 100% (129/129) vs. 60% (34004/57069) IPHLPAPI.DLL 100% (129/129) vs. 61% (34602/57069) MMDevAPI.dll 100% (129/129) vs. 62% (35312/57069) powrprof.dll 100% (129/129) vs. 62% (35646/57069) dwmapi.dll 100% (129/129) vs. 63% (35697/57069) nsi.dll 100% (129/129) vs. 64% (36508/57069) iertutil.dll 100% (129/129) vs. 65% (37298/57069) urlmon.dll 98% (126/129) vs. 67% (38195/57069) winspool.drv 100% (129/129) vs. 70% (39917/57069) msctf.dll 100% (129/129) vs. 71% (40489/57069) lpk.dll 58% (75/129) vs. 34% (19135/57069) wdmaud.drv 100% (129/129) vs. 76% (43327/57069) wininet.dll 21% (27/129) vs. 0% (72/57069) msgsm32.acm 21% (27/129) vs. 0% (73/57069) imaadp32.acm 21% (27/129) vs. 0% (74/57069) msg711.acm 21% (27/129) vs. 0% (79/57069) msadp32.acm 21% (27/129) vs. 0% (275/57069) l3codeca.acm 87% (112/129) vs. 68% (39046/57069) icm32.dll 18% (23/129) vs. 1% (600/57069) videomngr.dll 12% (16/129) vs. 1% (557/57069) NPSWF32_11_5_500_104.dll 12% (16/129) vs. 2% (1386/57069) wth155.dll 100% (129/129) vs. 94% (53825/57069) mscms.dll URLs: 2 about:blank 2 http://www.facebook.com/ 1 http://www.bhaskar.com/article/RAJ-JOD-railways-reserve-tickets-are-on-tour-so-i 1 http://www.nba.com/ 1 http://www.stargames.com/web/web/Games-Details?lang=de&id_game=54&xpf=casino&mod 1 http://www.youtube.com/results?search_query=funny+people+falling+of+treadmills&ox 1 https://psapp.richland2.org/admin/students/home.html?homesearch=1&x=0&y=0&select 1 https://signin.ebay.de/ws/eBayISAPI.dll?SignIn&lgout=1 1 http://www.facebook.com/?sk=nf 1 http://www.nzherald.co.nz/sideswipe/news/article.cfm?c_id=702&objectid=10845091 1 http://www.youtube.com/?tab=w1&gl=GB 1 http://www.forumalev.net/resimli-dua-ayet-ve-hadisler/409725-ayet-yazili-anlamli 1 http://imgirlsnow.layoutz.org/?sov=63917402&hid=hplxplhpxlljh&id=XNSX.790003246 1 http://www.google.co.nz/search?client=firefox-a&rls=org.mozilla%3Aen-US%3Aoffici 1 http://www.wartune.com/index.html 1 http://kinox.to/Stream/Gossip_Girl.html 1 http://www.facebook.com/grace.bang.3?ref=tn_tnmn&ajaxpipe=1&ajaxpipe_token=AXgO- 1 https://www.facebook.com/login.php?login_attempt=1 1 http://loveismyjudge.tumblr.com/post/35018316627#notes 1 http://www.oldradioworld.com/shows/Amos_n_Andy.php 1 http://www.facebook.com/ai.php?aed=AQLZZAp2DESYROo8Zt4JHLtLfAf_iyq0RrgvgnYFjrxc2 1 http://mail.live.com/default.aspx 1 http://www.youtube.com/ 1 http://www.hulu.com/search?query=Naruto+Shippuden&st=0&fs= 1 http://www.uni-frankfurt.de/fb/fb14/Studium/ChemieLA/index.html 1 http://www.tumblr.com/dashboard/4/35124182721?lite 1 http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=66449245-2E71- 1 http://www.movie2k.to/Ip-Man-2-online-film-1565728.html 1 http://www.cookinggames.com/papas-pancakeria.html 1 http://msn.de/ 1 https://mail.google.com/mail/u/0/?shva=1#inbox 1 http://www.buzzle.com/articles/parachute-science-physics-of-parachutes.html 1 http://vk.com/app3069891_176737937?ref=1 1 http://interval.tv/videos.php?id=282733 Frame Module Signature Source 0 ntdll.dll RtlpLowFragHeapFree 1 ntdll.dll RtlFreeHeap 2 rpcrt4.dll FreeWrapper 3 rpcrt4.dll operator delete 4 rpcrt4.dll DCE_BINDING::~DCE_BINDING 5 rpcrt4.dll DCE_BINDING::`scalar deleting destructor' 6 rpcrt4.dll LRPC_BINDING_HANDLE::~LRPC_BINDING_HANDLE 7 rpcrt4.dll LRPC_BINDING_HANDLE::`vector deleting destructor' 8 rpcrt4.dll LRPC_BASE_BINDING_HANDLE::FreeObject 9 rpcrt4.dll RpcBindingFree 10 sechost.dll SVCCTL_HANDLEW_unbind 11 rpcrt4.dll GenericHandleMgr 12 rpcrt4.dll GenericHandleUnbind 13 rpcrt4.dll ExplicitBindHandleMgr 14 rpcrt4.dll NdrClientCall2 15 rpcrt4.dll NdrClientCall2 16 rpcrt4.dll _SEH_epilog4_GS 17 sechost.dll ROpenSCManagerW 18 sechost.dll OpenSCManagerW 19 MMDevAPI.dll NotifyAudiosrvStatusChange 20 MMDevAPI.dll NotifyAudiosrvStatusChange 21 MMDevAPI.dll CDeviceEnumerator::PnpNotificationThreadWrapper 22 kernel32.dll BaseThreadInitThunk 23 ntdll.dll __RtlUserThreadStart 24 ntdll.dll _RtlUserThreadStart
This is almost always a crash in the Flash plugin-container process. Flash appears to be crashing in a thread that is entirely running Windows Audio and RPC code. The Flash main thread looks to be almost always calling: CDeviceEnumerator::UnregisterEndpointNotificationCallback calling CPnpDevNodeCollection::AddOrRefresh calling CDeviceEnumerator::CreateHWndNotificationThread which then blocks waiting on some other thread, probably the one that is crashing. I highly doubt this was caused by a Firefox code change. Can we check date regressions across branches to see whether it showed up on a particular date?
It's #166 top crasher in 16.0.2 and #113 in 17.0b4. As stated in comment 0, it's highly correlated to a DLL from vSpace, NComputing's virtualization SW: RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)|EXCEPTION_ACCESS_VIOLATION_READ (58 crashes) 98% (57/58) vs. 1% (93/11413) NcAudEP.dll 64% (37/58) vs. 1% (61/11413) 6.1.1.1 34% (20/58) vs. 0% (32/11413) 6.2.5.4
Summary: crash in RtlpLowFragHeapFree → crash in FreeWrapper mainly with vSpace virtualization SW from Ncomputing
Whiteboard: [startupcrash]
This is now rising in beta 18. Correlations now are: RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)|EXCEPTION_ACCESS_VIOLATION_READ (224 crashes) 100% (224/224) vs. 1% (278/48209) NcAudEP.dll 100% (223/224) vs. 1% (276/48209) 6.1.1.1 0% (1/224) vs. 0% (2/48209) 6.2.5.4 Still very similar to comment #2, just that 6.2 almost doesn't exist any more.
Crash Signature: [@ RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)] → [@ RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)] [@ RtlpLowFragHeapFree | RtlFreeHeap | LdrpCallTlsInitializers ] [@ RtlpLowFragHeapFree | RtlFreeHeap | NtdllListBoxWndProc_A ]
Crash Signature: [@ RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)] [@ RtlpLowFragHeapFree | RtlFreeHeap | LdrpCallTlsInitializers ] [@ RtlpLowFragHeapFree | RtlFreeHeap | NtdllListBoxWndProc_A ] → [@ RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)] [@ RtlpLowFragHeapFree | RtlFreeHeap | LdrpCallTlsInitializers ] [@ RtlpLowFragHeapFree | RtlFreeHeap | NtdllListBoxWndProc_A ] [@ RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper]
RtlpLowFragHeapFree | RtlFreeHeap | FreeWrapper(void*)|EXCEPTION_ACCESS_VIOLATION_READ (129 crashes) 98% (126/129) vs. 0% (216/57069) NcAudEP.dll 98% (126/129) vs. 4% (2009/57069) credssp.dll 98% (126/129) vs. 10% (5699/57069) schannel.dll 98% (126/129) vs. 13% (7653/57069) mlang.dll 98% (126/129) vs. 17% (9823/57069) winsta.dll 100% (129/129) vs. 30% (17189/57069) RpcRtRemote.dll 98% (126/129) vs. 31% (17534/57069) plugin-container.exe 100% (129/129) vs. 35% (20063/57069) sspicli.dll 98% (126/129) vs. 34% (19240/57069) dsound.dll 83% (107/129) vs. 27% (15318/57069) NPSWF32_11_4_402_287.dll 98% (126/129) vs. 44% (25318/57069) comdlg32.dll 58% (75/129) vs. 11% (6281/57069) ksuser.dll 98% (127/129) vs. 52% (29466/57069) secur32.dll 100% (129/129) vs. 54% (30674/57069) profapi.dll 100% (129/129) vs. 55% (31513/57069) devobj.dll 100% (129/129) vs. 55% (31574/57069) CRYPTBASE.dll 100% (129/129) vs. 55% (31574/57069) sechost.dll 100% (129/129) vs. 55% (31574/57069) KERNELBASE.dll 100% (129/129) vs. 56% (31952/57069) cfgmgr32.dll 58% (75/129) vs. 16% (9271/57069) avrt.dll 100% (129/129) vs. 58% (33300/57069) propsys.dll 100% (129/129) vs. 60% (34001/57069) winnsi.dll 100% (129/129) vs. 60% (34004/57069) IPHLPAPI.DLL 100% (129/129) vs. 61% (34602/57069) MMDevAPI.dll 100% (129/129) vs. 62% (35312/57069) powrprof.dll 100% (129/129) vs. 62% (35646/57069) dwmapi.dll 100% (129/129) vs. 63% (35697/57069) nsi.dll 100% (129/129) vs. 64% (36508/57069) iertutil.dll 100% (129/129) vs. 65% (37298/57069) urlmon.dll 98% (126/129) vs. 67% (38195/57069) winspool.drv 100% (129/129) vs. 70% (39917/57069) msctf.dll 100% (129/129) vs. 71% (40489/57069) lpk.dll 58% (75/129) vs. 34% (19135/57069) wdmaud.drv 100% (129/129) vs. 76% (43327/57069) wininet.dll 21% (27/129) vs. 0% (72/57069) msgsm32.acm 21% (27/129) vs. 0% (73/57069) imaadp32.acm 21% (27/129) vs. 0% (74/57069) msg711.acm 21% (27/129) vs. 0% (79/57069) msadp32.acm 21% (27/129) vs. 0% (275/57069) l3codeca.acm 87% (112/129) vs. 68% (39046/57069) icm32.dll 18% (23/129) vs. 1% (600/57069) videomngr.dll 12% (16/129) vs. 1% (557/57069) NPSWF32_11_5_500_104.dll 12% (16/129) vs. 2% (1386/57069) wth155.dll 100% (129/129) vs. 94% (53825/57069) mscms.dll URLs: 2 about:blank 2 http://www.facebook.com/ 1 http://www.bhaskar.com/article/RAJ-JOD-railways-reserve-tickets-are-on-tour-so-i 1 http://www.nba.com/ 1 http://zombocalypse2.com/ 1 http://www.stargames.com/web/web/Games-Details?lang=de&id_game=54&xpf=casino&mod 1 http://www.youtube.com/results?search_query=funny+people+falling+of+treadmills&ox 1 https://psapp.richland2.org/admin/students/home.html?homesearch=1&x=0&y=0&select 1 https://signin.ebay.de/ws/eBayISAPI.dll?SignIn&lgout=1 1 http://www.facebook.com/?sk=nf 1 http://www.nzherald.co.nz/sideswipe/news/article.cfm?c_id=702&objectid=10845091 1 http://www.youtube.com/?tab=w1&gl=GB 1 http://clicker-heroes.com/ 1 http://www.forumalev.net/resimli-dua-ayet-ve-hadisler/409725-ayet-yazili-anlamli 1 http://imgirlsnow.layoutz.org/?sov=63917402&hid=hplxplhpxlljh&id=XNSX.790003246 1 http://www.google.co.nz/search?client=firefox-a&rls=org.mozilla%3Aen-US%3Aoffici 1 http://www.wartune.com/index.html 1 http://kinox.to/Stream/Gossip_Girl.html 1 http://www.facebook.com/grace.bang.3?ref=tn_tnmn&ajaxpipe=1&ajaxpipe_token=AXgO- 1 https://www.facebook.com/login.php?login_attempt=1 1 http://loveismyjudge.tumblr.com/post/35018316627#notes 1 http://www.oldradioworld.com/shows/Amos_n_Andy.php 1 http://www.facebook.com/ai.php?aed=AQLZZAp2DESYROo8Zt4JHLtLfAf_iyq0RrgvgnYFjrxc2 1 http://mail.live.com/default.aspx 1 http://www.youtube.com/ 1 http://www.hulu.com/search?query=Naruto+Shippuden&st=0&fs= 1 http://www.uni-frankfurt.de/fb/fb14/Studium/ChemieLA/index.html 1 http://www.tumblr.com/dashboard/4/35124182721?lite 1 http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=66449245-2E71- 1 http://www.movie2k.to/Ip-Man-2-online-film-1565728.html 1 http://www.cookinggames.com/papas-pancakeria.html 1 http://msn.de/ 1 http://bestfrozengames.com/ 1 https://mail.google.com/mail/u/0/?shva=1#inbox 1 http://www.tanktroubleswf.net/ 1 http://www.buzzle.com/articles/parachute-science-physics-of-parachutes.html 1 http://vk.com/app3069891_176737937?ref=1 1 http://interval.tv/videos.php?id=282733 Frame Module Signature Source 0 ntdll.dll RtlpLowFragHeapFree 1 ntdll.dll RtlFreeHeap 2 rpcrt4.dll FreeWrapper 3 rpcrt4.dll operator delete 4 rpcrt4.dll DCE_BINDING::~DCE_BINDING 5 rpcrt4.dll DCE_BINDING::`scalar deleting destructor' 6 rpcrt4.dll LRPC_BINDING_HANDLE::~LRPC_BINDING_HANDLE 7 rpcrt4.dll LRPC_BINDING_HANDLE::`vector deleting destructor' 8 rpcrt4.dll LRPC_BASE_BINDING_HANDLE::FreeObject 9 rpcrt4.dll RpcBindingFree 10 sechost.dll SVCCTL_HANDLEW_unbind 11 rpcrt4.dll GenericHandleMgr 12 rpcrt4.dll GenericHandleUnbind 13 rpcrt4.dll ExplicitBindHandleMgr 14 rpcrt4.dll NdrClientCall2 15 rpcrt4.dll NdrClientCall2 16 rpcrt4.dll _SEH_epilog4_GS 17 sechost.dll ROpenSCManagerW 18 sechost.dll OpenSCManagerW 19 MMDevAPI.dll NotifyAudiosrvStatusChange 20 MMDevAPI.dll NotifyAudiosrvStatusChange 21 MMDevAPI.dll CDeviceEnumerator::PnpNotificationThreadWrapper 22 kernel32.dll BaseThreadInitThunk 23 ntdll.dll __RtlUserThreadStart 24 ntdll.dll _RtlUserThreadStart
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.