834210 - Android Flash crash in glUniformMatrix3fv on devices (mainly Asus Nexus 7) running JB

Status: RESOLVED WONTFIX

(Firefox for Android Graveyard :: Plugins, defect)

Description

[Scoobidiver (away)]

It's currently #29 top crasher in 18.0 over the last day, that is after the NP_Shutdown crash signature showed up and was added to the skiplist.

Signature 	NP_Shutdown | libGLESv2.so@0x3c5e More Reports Search
UUID	225e2408-0476-4fc4-b1e6-7a59b2130124
Date Processed	2013-01-24 12:09:33
Uptime	172
Last Crash	2.9 minutes before submission
Install Age	2.2 weeks since version was first installed.
Install Time	2013-01-09 10:46:39
Product	FennecAndroid
Version	18.0
Build ID	20130104163142
Release Channel	release
OS	Android
OS Version	0.0.0 Linux 3.1.10-g22b4fcd #1 SMP PREEMPT Fri Nov 2 10:55:26 PDT 2012 armv7l google/nakasi/grouper:4.2.1/JOP40D/533553:user/release-keys
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x44
App Notes 	
AdapterDescription: 'NVIDIA Corporation -- NVIDIA Tegra 3 -- OpenGL ES 2.0 14.01002 -- Model: Nexus 7, Product: nakasi, Manufacturer: asus, Hardware: grouper'
EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ 
asus Nexus 7
google/nakasi/grouper:4.2.1/JOP40D/533553:user/release-keys
Processor Notes 	sp-processor05.phx1.mozilla.com_29941:2008; exploitablity tool: ERROR: unable to analyze dump
EMCheckCompatibility	True
Adapter Vendor ID	NVIDIA Corporation
Adapter Device ID	NVIDIA Tegra 3
Device	asus Nexus 7
Android API Version	17 (REL)
Android CPU ABI	armeabi-v7a

Frame 	Module 	Signature 	Source
0 	libflashplayer.so 	NP_Shutdown 	
1 	libGLESv2.so 	libGLESv2.so@0x3c5e 	
2 	libflashplayer.so 	NP_Shutdown

More reports at:
https://crash-stats.mozilla.com/report/list?signature=NP_Shutdown+|+libGLESv2.so%400x3c5e

Comment 1

[Scoobidiver (away)]

With combined signatures, it's #48 crasher in 20.0.1 and #10 in 21.0b3. Note that for historical reasons, JB is overrepresented in the Beta channel.

With debug symbols, the stack trace looks like:
Frame 	Module 	Signature 	Source
0 	libflashplayer.so 	NP_Shutdown 	
1 	libGLESv2.so 	glUniformMatrix3fv 	
2 	libflashplayer.so 	NP_Shutdown

Correlations per device are:
* 20.0.1:
Asus Nexus 7 	62
Sony Tablet S 	2
Acer A500 	2
Asus Transformer TF101 	2
MEDION LIFETAB_P9514 	2
FUJITSU F-10D 	1
HTC One X 	1
LENOVO IdeaTabA2109A 	1
* 21.0 Beta:
Asus Nexus 7 	18
Asus Transformer TF101 	2
Samsung GT-P7500 	1

More reports at:
https://crash-stats.mozilla.com/report/list?signature=NP_Shutdown+|+glUniformMatrix3fv

Comment 2

[Kevin Brosnan [Ex-Mozilla]]

Loaded URLs no crashes resulting.

Comment 3

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Snorp, was all the np_shutdown stuff a crash in libflashplayer?  Is there anything we can do about something like this?  Nexus 7 seems to have some crashes due to NP_shutdowns.

Another example is : https://crash-stats.mozilla.com/report/list?range_value=7&range_unit=days&date=2013-05-06&signature=pthread_mutex_init&version=FennecAndroid%3A21.0b6

Comment 4

[Aaron Train [:aaronmt]]

^

Comment 5

[James Willcox (:snorp) ([e-mail]) (he/him)]

(In reply to Naoki Hirata :nhirata (please use needinfo instead of cc) from comment #3)
> Snorp, was all the np_shutdown stuff a crash in libflashplayer?  Is there
> anything we can do about something like this?  Nexus 7 seems to have some
> crashes due to NP_shutdowns.
> 
> Another example is :
> https://crash-stats.mozilla.com/report/
> list?range_value=7&range_unit=days&date=2013-05-
> 06&signature=pthread_mutex_init&version=FennecAndroid%3A21.0b6

NP_Shutdown just happens to be the closest symbol that was matched. It is very unlikely that it actually crashed in that function, because we only call that on shutdown.

Comment 6

[Jan Henning [:JanH]]

Flash is going away (bug 1381916), so there's no point in pursuing this further.