816654 - crash in nsCacheEntryDescriptor::SetPredictedDataSize @ ScriptLoaderRunnable::OnStreamComplete

Status: RESOLVED INCOMPLETE

(Core :: DOM: Workers, defect)

Description

[Robert Kaiser]

This bug was filed from the Socorro interface and is 
report bp-f4b35084-36d7-43c2-97c5-e627b2121129 .
============================================================= 

Top 10 frames:

0 	libxul.so 	ScriptLoaderRunnable::OnStreamComplete 	dom/workers/ScriptLoader.cpp:154
1 	libxul.so 	nsStreamLoader::OnStopRequest 	netwerk/base/src/nsStreamLoader.cpp:95
2 	libxul.so 	mozilla::net::nsHttpChannel::OnStopRequest 	netwerk/protocol/http/nsHttpChannel.cpp:4957
3 	libxul.so 	nsInputStreamPump::OnStateStop 	netwerk/base/src/nsInputStreamPump.cpp:559
4 	libxul.so 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:374
5 	libxul.so 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:82
6 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:624
7 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:220
8 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:82
9 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
10 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201

This started on mobile 17.0 with the release and has been rising daily so far, now it's #50 in yesterday's data, so not really high yet, but with a constant tendency upwards.

Find more crashes with this signature at https://crash-stats.mozilla.com/report/list?signature=ScriptLoaderRunnable%3A%3AOnStreamComplete

Comment 1

[Marcia Knous [:marcia]]

2 	http://www.chip.de/
1 	http://www.chip.de/downloads/Adobe-Flash-Player-Android-App_47084648.html
1 	http://www.chip.de/downloads/Glary-Utilities-Pro-Vollversion_58015411.html
1 	about:blank
1 	http://www.codecademy.com/
1 	http://www.chip.de/downloads/c1_downloads_hs_getfile_v1_19837112.html?t=13544811
1 	http://www.chip.de/downloads/c1_downloads_hs_getfile_v1_51736233.html?t=13540809
1 	http://www.chip.de/artikel/Download-Adventskalender_33781926.html

Comment 2

[Scoobidiver (away)]

Stack traces are various:
Frame 	Module 	Signature 	Source
0 	libxul.so 	ScriptLoaderRunnable::OnStreamComplete 	dom/workers/ScriptLoader.cpp:175
1 	libxul.so 	NS_ConvertASCIItoUTF16::~NS_ConvertASCIItoUTF16 	
2 	libxul.so 	imgStatusTracker::SyncNotifyDifference 	image/src/imgStatusTracker.cpp:598
3 	libxul.so 	nsTArrayInfallibleResult nsTArray_base<nsTArrayInfallibleAllocator>::SwapArrayEl 	obj-firefox/dist/include/nsTArray-inl.h:390
4 	libxul.so 	base::Histogram::SampleSet::AccumulateWithExponentialStats 	histogram.cc:752
5 	libxul.so 	base::Histogram::Add 	histogram.cc:129
6 	libxul.so 	mozilla::Telemetry::Accumulate 	toolkit/components/telemetry/Telemetry.cpp:2163
7 	libxul.so 	mozilla::Telemetry::AccumulateDelta_impl< 	obj-firefox/dist/include/mozilla/Telemetry.h:73
8 	libnss3.so 	PR_Unlock 	nsprpub/pr/src/pthreads/ptsynch.c:205
9 	libxul.so 	nsTArray_Impl<CellData*, nsTArrayInfallibleAllocator>::~nsTArray_Impl 	
10 	libxul.so 	nsCacheService::Unlock 	obj-firefox/dist/include/nsTArray.h:1466
11 	libxul.so 	nsCacheEntryDescriptor::SetPredictedDataSize 	netwerk/cache/nsCacheService.h:383
12 	libxul.so 	nsStreamLoader::OnStopRequest 	netwerk/base/src/nsStreamLoader.cpp:101
13 	libxul.so 	nsStreamLoader::OnStartRequest 	netwerk/base/src/nsStreamLoader.cpp:90
14 	libxul.so 	mozilla::net::nsHttpChannel::OnStopRequest 	netwerk/protocol/http/nsHttpChannel.cpp:5065
15 	libxul.so 	nsPipeEvents::~nsPipeEvents 	obj-firefox/dist/include/nsCOMPtr.h:489
16 	libxul.so 	nsInputStreamPump::OnStateStop 	netwerk/base/src/nsInputStreamPump.cpp:555
17 	libxul.so 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:375
...

Frame 	Module 	Signature 	Source
0 	libxul.so 	ScriptLoaderRunnable::OnStreamComplete 	dom/workers/ScriptLoader.cpp:175
1 	libxul.so 	mozilla::MediaPluginHost::~MediaPluginHost 	obj-firefox/dist/include/nsTArray.h:1111
2 	libxul.so 	nsTArray_base<nsTArrayFallibleAllocator>::~nsTArray_base 	obj-firefox/dist/include/nsTArray-inl.h:18
3 	libxul.so 	nsCacheService::Unlock 	netwerk/cache/nsCacheService.cpp:2643
4 	libxul.so 	nsCacheService::Lock 	netwerk/cache/nsCacheService.cpp:2602
5 	libxul.so 	nsCacheService::Unlock 	netwerk/cache/nsCacheService.cpp:2632
6 	libxul.so 	nsCacheEntryDescriptor::SetPredictedDataSize 	netwerk/cache/nsCacheService.h:377
7 	libmozglue.so 	malloc_mutex_lock 	memory/mozjemalloc/jemalloc.c:1642
8 	libxul.so 	nsACString_internal::EqualsASCII const 	xpcom/string/src/nsTSubstring.cpp:654
9 	libxul.so 	nsCacheEntryDescriptor::SetPredictedDataSize 	netwerk/cache/nsCacheEntryDescriptor.cpp:233
10 	libc.so 	libc.so@0xe5b9 	
...

Frame 	Module 	Signature 	Source
0 	libxul.so 	ScriptLoaderRunnable::OnStreamComplete 	dom/workers/ScriptLoader.cpp:177
1 	libxul.so 	mozilla::Telemetry::AccumulateDelta_impl< 	obj-firefox/dist/include/mozilla/Telemetry.h:73
2 	libxul.so 	nsCacheService::Unlock 	obj-firefox/dist/include/nsTArray.h:595
3 	libxul.so 	nsCacheEntryDescriptor::SetPredictedDataSize 	netwerk/cache/nsCacheService.h:374
4 	libxul.so 	mozilla::net::nsHttpChannel::CallOnStartRequest 	netwerk/protocol/http/nsHttpChannel.cpp:965
5 	libxul.so 	nsNodeWeakReference::QueryReferent 	content/base/src/FragmentOrElement.cpp:483
...

Frame 	Module 	Signature 	Source
0 	libxul.so 	ScriptLoaderRunnable::OnStreamComplete 	dom/workers/ScriptLoader.cpp:177
1 	libxul.so 	ThirdPartyUtil::IsThirdPartyChannel 	obj-firefox/dist/include/nsCOMPtr.h:449
2 	libxul.so 	mozilla::Telemetry::AccumulateDelta_impl< 	obj-firefox/dist/include/mozilla/Telemetry.h:73
3 	libxul.so 	nsCacheService::Unlock 	obj-firefox/dist/include/nsTArray.h:595
4 	libxul.so 	nsCacheEntryDescriptor::SetPredictedDataSize 	netwerk/cache/nsCacheService.h:374
5 	libxul.so 	mozilla::net::nsHttpChannel::CallOnStartRequest 	netwerk/protocol/http/nsHttpChannel.cpp:965
...

Comment 3

[Marty Rosenberg [:mjrosenb]]

I seem to have discovered a semi-reproducable test case for this.
On an atrix-4g (that's a tegra 2, should be the same as our tbpl machines), run www.club.cc.cmu.edu/~mjrosenb/ion/crash.html  I've run it 4 times, and have gotten 2 crashes, and 2 ooms.  My other phones aren't hitting this crash.  This is with the current beta for 23.