Closed Bug 845735 Opened 12 years ago Closed 12 years ago

Intermittent test_bug582412-1.html, 640272.html | This test left crash dumps behind (ABORT: __delete__()d actor: file PPluginScriptableObject.cpp, line 28) [@ mozilla::plugins::PPluginScriptableObject::Transition]

Categories

(Core Graveyard :: Plug-ins, defect, P2)

x86_64
macOS
defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: dbaron, Assigned: gfritzsche)

References

Details

(Keywords: crash, intermittent-failure)

Attachments

(2 files)

A new intermittent failure showed up due to a child (plugin) process crash: 23:34:10 INFO - 174326 ERROR TEST-UNEXPECTED-FAIL | /tests/content/html/content/test/test_bug582412-1.html | This test left crash dumps behind, but we weren't expecting it to! I *think* the crash dump it's talking about is the result of this: 23:34:01 INFO - ^G###!!! ABORT: __delete__()d actor: file PPluginScriptableObject.cpp, line 28 23:34:01 INFO - ^G###!!! ASSERTION: Cannot call AnnotateCrashReport in child processes from non-main thread.: 'Error', file ../../../toolkit/crashreporter/nsExceptionHandler.cpp, line 1504 23:34:01 INFO - NS_DebugBreak_P [xpcom/base/nsDebugImpl.cpp:377] 23:34:01 INFO - mozilla::plugins::PPluginScriptableObject::Transition(mozilla::plugins::PPluginScriptableObject::State, mozilla::ipc::Trigger, mozilla::plugins::PPluginScriptableObject::State*) [obj-firefox/ipc/ipdl/PPluginScriptableObject.cpp:34] 23:34:01 INFO - mozilla::plugins::PPluginScriptableObjectChild::SendUnprotect() [obj-firefox/ipc/ipdl/PPluginScriptableObjectChild.cpp:530] 23:34:01 INFO - mozilla::plugins::PluginScriptableObjectChild::ScriptableDeallocate(NPObject*) [dom/plugins/ipc/PluginScriptableObjectChild.cpp:67] 23:34:01 INFO - mozilla::plugins::PluginModuleChild::DeallocNPObject(NPObject*) [dom/plugins/ipc/PluginModuleChild.cpp:2168] 23:34:01 INFO - DeleteObject [dom/plugins/ipc/PluginInstanceChild.cpp:3949] 23:34:01 INFO - PL_DHashTableEnumerate [obj-firefox/xpcom/build/pldhash.cpp:717] 23:34:01 INFO - mozilla::plugins::PluginInstanceChild::AnswerNPP_Destroy(short*) [dom/plugins/ipc/PluginInstanceChild.cpp:4132] 23:34:01 INFO - mozilla::plugins::PPluginInstanceChild::OnCallReceived(IPC::Message const&, IPC::Message*&) [obj-firefox/ipc/ipdl/PPluginInstanceChild.cpp:2355] 23:34:01 INFO - mozilla::plugins::PPluginModuleChild::OnCallReceived(IPC::Message const&, IPC::Message*&) [obj-firefox/ipc/ipdl/PPluginModuleChild.cpp:1006] 23:34:01 INFO - mozilla::ipc::RPCChannel::DispatchIncall(IPC::Message const&) [ipc/glue/RPCChannel.cpp:487] 23:34:01 INFO - mozilla::ipc::RPCChannel::Incall(IPC::Message const&, unsigned long) [ipc/glue/RPCChannel.cpp:473] 23:34:01 INFO - mozilla::ipc::RPCChannel::OnMaybeDequeueOne() [ipc/glue/RPCChannel.cpp:398] 23:34:01 INFO - RunnableMethod<mozilla::ipc::RPCChannel, bool (mozilla::ipc::RPCChannel::*)(), Tuple0>::Run() [ipc/chromium/src/base/task.h:308] 23:34:01 INFO - MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) [ipc/chromium/src/base/message_loop.cc:334] 23:34:01 INFO - MessageLoop::DoWork() [ipc/chromium/src/base/message_loop.cc:442] 23:34:01 INFO - base::MessagePumpCFRunLoopBase::RunWorkSource(void*) [ipc/chromium/src/base/message_pump_mac.mm:278] 23:34:01 INFO - CoreFoundation + 0x12841 23:34:01 INFO - CoreFoundation + 0x1222d 23:34:01 INFO - CoreFoundation + 0x354e5 23:34:01 INFO - CoreFoundation + 0x34dd2 23:34:01 INFO - HIToolbox + 0x5f774 23:34:01 INFO - HIToolbox + 0x5f512 23:34:01 INFO - HIToolbox + 0x5f3a3 23:34:01 INFO - AppKit + 0x156fa3 23:34:01 INFO - -AppKit + 0x156862 23:34:01 INFO - -AppKit + 0x14dc03 23:34:01 INFO - base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) [ipc/chromium/src/base/message_pump_mac.mm:680] 23:34:01 INFO - base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) [ipc/chromium/src/base/message_pump_mac.mm:216] 23:34:01 INFO - MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:503] 23:34:01 INFO - XRE_InitChildProcess [obj-firefox/dist/include/nsAutoPtr.h:156] 23:34:01 INFO - main [ipc/app/MozillaRuntimeMain.cpp:48] 23:34:01 INFO - mozilla::plugins::PPluginScriptableObjectChild::SendUnprotect() [obj-firefox/ipc/ipdl/PPluginScriptableObjectChild.cpp:530] 23:34:01 INFO - mozilla::plugins::PluginScriptableObjectChild::ScriptableDeallocate(NPObject*) [dom/plugins/ipc/PluginScriptableObjectChild.cpp:67] 23:34:01 INFO - mozilla::plugins::PluginModuleChild::DeallocNPObject(NPObject*) [dom/plugins/ipc/PluginModuleChild.cpp:2168] 23:34:01 INFO - DeleteObject [dom/plugins/ipc/PluginInstanceChild.cpp:3949] 23:34:01 INFO - PL_DHashTableEnumerate [obj-firefox/xpcom/build/pldhash.cpp:717] 23:34:01 INFO - mozilla::plugins::PluginInstanceChild::AnswerNPP_Destroy(short*) [dom/plugins/ipc/PluginInstanceChild.cpp:4132] 23:34:01 INFO - mozilla::plugins::PPluginInstanceChild::OnCallReceived(IPC::Message const&, IPC::Message*&) [obj-firefox/ipc/ipdl/PPluginInstanceChild.cpp:2355] 23:34:01 INFO - mozilla::plugins::PPluginModuleChild::OnCallReceived(IPC::Message const&, IPC::Message*&) [obj-firefox/ipc/ipdl/PPluginModuleChild.cpp:1006] 23:34:01 INFO - mozilla::ipc::RPCChannel::DispatchIncall(IPC::Message const&) [ipc/glue/RPCChannel.cpp:487] 23:34:01 INFO - mozilla::ipc::RPCChannel::Incall(IPC::Message const&, unsigned long) [ipc/glue/RPCChannel.cpp:473] 23:34:01 INFO - mozilla::ipc::RPCChannel::OnMaybeDequeueOne() [ipc/glue/RPCChannel.cpp:398] 23:34:01 INFO - RunnableMethod<mozilla::ipc::RPCChannel, bool (mozilla::ipc::RPCChannel::*)(), Tuple0>::Run() [ipc/chromium/src/base/task.h:308] 23:34:01 INFO - MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) [ipc/chromium/src/base/message_loop.cc:334] 23:34:01 INFO - MessageLoop::DoWork() [ipc/chromium/src/base/message_loop.cc:442] 23:34:01 INFO - base::MessagePumpCFRunLoopBase::RunWorkSource(void*) [ipc/chromium/src/base/message_pump_mac.mm:278] 23:34:01 INFO - CoreFoundation + 0x12841 23:34:01 INFO - CoreFoundation + 0x1222d 23:34:01 INFO - CoreFoundation + 0x354e5 23:34:01 INFO - CoreFoundation + 0x34dd2 23:34:01 INFO - HIToolbox + 0x5f774 23:34:01 INFO - HIToolbox + 0x5f512 23:34:01 INFO - HIToolbox + 0x5f3a3 23:34:01 INFO - AppKit + 0x156fa3 23:34:01 INFO - -AppKit + 0x156862 23:34:01 INFO - -AppKit + 0x14dc03 23:34:01 INFO - base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) [ipc/chromium/src/base/message_pump_mac.mm:680] 23:34:01 INFO - base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) [ipc/chromium/src/base/message_pump_mac.mm:216] 23:34:01 INFO - MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:503] 23:34:01 INFO - XRE_InitChildProcess [obj-firefox/dist/include/nsAutoPtr.h:156] 23:34:01 INFO - main [ipc/app/MozillaRuntimeMain.cpp:48] 23:34:01 INFO - ###!!! ABORT: __delete__()d actor: file PPluginScriptableObject.cpp, line 28 The breakpad reading of the dump has a bit of garbage in it, which, trimmed out, looks roughly the same: 23:45:44 INFO - PROCESS-CRASH | Main app process exited normally | application crashed [@ mozalloc_abort(char const*)] 23:45:44 INFO - Crash dump filename: /var/folders/7c/fqxs206n3dlcgjphjlbqjk6000000w/T/tmpqoN36i/minidumps/15E8DE21-06F4-4AF5-91A8-7B3833E28316.dmp 23:45:44 INFO - Operating system: Mac OS X 23:45:44 INFO - 10.8.0 12A269 23:45:44 INFO - CPU: amd64 23:45:44 INFO - family 6 model 42 stepping 7 23:45:44 INFO - 8 CPUs 23:45:44 INFO - Crash reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS 23:45:44 INFO - Crash address: 0x0 23:45:44 INFO - Thread 0 (crashed) 23:45:44 INFO - 0 libmozalloc.dylib!mozalloc_abort(char const*) [mozalloc_abort.cpp : 30 + 0x0] 23:45:44 INFO - rbx = 0x00007fff71c88c68 r12 = 0x0000000000000000 23:45:44 INFO - r13 = 0x00000001028e934d r14 = 0x00007fff5fbfb260 23:45:44 INFO - r15 = 0x00007fff71c88c68 rip = 0x0000000100014b64 23:45:44 INFO - rsp = 0x00007fff5fbfb210 rbp = 0x00007fff5fbfb220 23:45:44 INFO - Found by: given as instruction pointer in context 23:45:44 INFO - 1 XUL!NS_DebugBreak_P [nsDebugImpl.cpp:a3aaa9067e14 : 379 + 0x7] 23:45:44 INFO - rip = 0x0000000101b7d982 rsp = 0x00007fff5fbfb240 23:45:44 INFO - Found by: stack scanning [snip garbage from stack scanning] 23:45:44 INFO - 13 XUL!mozilla::plugins::PPluginScriptableObject::Transition(mozilla::plugins::PPluginScriptableObject::State, mozilla::ipc::Trigger, mozilla::plugins::PPluginScriptableObject::State*) [PPluginScriptableObject.cpp:a3aaa9067e14 : 34 + 0x1f] 23:45:44 INFO - rip = 0x000000010184f596 rsp = 0x00007fff5fbfb690 23:45:44 INFO - Found by: stack scanning 23:45:44 INFO - 14 XUL!mozilla::plugins::PPluginScriptableObjectChild::SendUnprotect() [PPluginScriptableObjectChild.cpp:a3aaa9067e14 : 530 + 0x16] 23:45:44 INFO - rip = 0x00000001017df68b rsp = 0x00007fff5fbfb6a0 23:45:44 INFO - Found by: stack scanning 23:45:44 INFO - 15 XUL!mozilla::plugins::PluginModuleChild::UnregisterActorForNPObject(NPObject*) [nsTHashtable.h:a3aaa9067e14 : 147 + 0xc] 23:45:44 INFO - rip = 0x00000001016ca4ac rsp = 0x00007fff5fbfb6d0 23:45:44 INFO - Found by: stack scanning 23:45:44 INFO - 16 XUL!mozilla::plugins::PluginScriptableObjectChild::ScriptableDeallocate(NPObject*) [PluginScriptableObjectChild.cpp:a3aaa9067e14 : 64 + 0x7] 23:45:44 INFO - rip = 0x00000001016d3497 rsp = 0x00007fff5fbfb710 23:45:44 INFO - Found by: stack scanning 23:45:44 INFO - 17 XUL!mozilla::plugins::PluginModuleChild::DeallocNPObject(NPObject*) [PluginModuleChild.cpp:a3aaa9067e14 : 2168 + 0x4] 23:45:44 INFO - rip = 0x00000001016ce5d0 rsp = 0x00007fff5fbfb730 23:45:44 INFO - Found by: stack scanning 23:45:44 INFO - 18 XUL!DeleteObject [PluginInstanceChild.cpp:a3aaa9067e14 : 3949 + 0x7] 23:45:44 INFO - rip = 0x00000001016c52dc rsp = 0x00007fff5fbfb750 23:45:44 INFO - Found by: stack scanning 23:45:44 INFO - 19 XUL!PL_DHashTableEnumerate [pldhash.cpp:a3aaa9067e14 : 717 + 0xe] 23:45:44 INFO - rip = 0x0000000101b14155 rsp = 0x00007fff5fbfb780 23:45:44 INFO - Found by: stack scanning etc. This is from: https://tbpl.mozilla.org/php/getParsedLog.php?id=20133620&tree=Mozilla-Inbound Rev5 MacOSX Mountain Lion 10.8 mozilla-inbound debug test mochitest-1 on 2013-02-26 23:18:32 PST for push a3aaa9067e14 slave: talos-mtnlion-r5-077 There are a few more reports coming.
https://tbpl.mozilla.org/php/getParsedLog.php?id=20133875&tree=Mozilla-Inbound Rev4 MacOSX Lion 10.7 mozilla-inbound debug test mochitest-1 on 2013-02-26 23:19:28 PST for push a3aaa9067e14 slave: talos-r4-lion-030 (It's interesting that we had multiple occurrences on one push... though it didn't recur when I retriggered the test runs, or on any later pushes.)
(In reply to David Baron [:dbaron] (don't cc:, use needinfo? instead) from comment #1) > https://tbpl.mozilla.org/php/getParsedLog.php?id=20133875&tree=Mozilla- > Inbound > Rev4 MacOSX Lion 10.7 mozilla-inbound debug test mochitest-1 on 2013-02-26 > 23:19:28 PST for push a3aaa9067e14 > slave: talos-r4-lion-030 > > > (It's interesting that we had multiple occurrences on one push... though it > didn't recur when I retriggered the test runs, or on any later pushes.) Er, wait, no, this second one was bug 824069.
Depends on: 824069
I've already hit this while trying to work around bug 824069, so this is probably just one variation of it.
Assignee: nobody → georg.fritzsche
Priority: -- → P2
As the other bug is drowned in TBPL comments: the current state of this is bug 824069, comment 226.
The abort also happens during 640272.html, it's just been starred as bug 824069 until now.
Summary: intermittent test_bug582412-1.html | This test left crash dumps behind, with ABORT: __delete__()d actor: file PPluginScriptableObject.cpp, line 28 [@ mozilla::plugins::PPluginScriptableObject::Transition] → Intermittent test_bug582412-1.html, 640272.html | This test left crash dumps behind, with ABORT: __delete__()d actor: file PPluginScriptableObject.cpp, line 28 [@ mozilla::plugins::PPluginScriptableObject::Transition]
Severity: normal → critical
Keywords: crash
Summary: Intermittent test_bug582412-1.html, 640272.html | This test left crash dumps behind, with ABORT: __delete__()d actor: file PPluginScriptableObject.cpp, line 28 [@ mozilla::plugins::PPluginScriptableObject::Transition] → Intermittent test_bug582412-1.html, 640272.html | This test left crash dumps behind (ABORT: __delete__()d actor: file PPluginScriptableObject.cpp, line 28) [@ mozilla::plugins::PPluginScriptableObject::Transition]
Attached file Filtered try log
This is a filtered version of a full log [1], showing only the traces i added [2] + 10 lines context [1] https://tbpl.mozilla.org/php/getParsedLog.php?id=20378527&tree=Try&full=1#error0 [2] https://hg.mozilla.org/try/rev/21d628017ec6
This is an excerpt from the above log, showing only the traces relevant to the instance that triggers the abort.
bsmedberg, does that log give you the needed information?
Flags: needinfo?(benjamin)
Blocks: 849613
Depends on: 831768
Possible fix over on bug 831768.
Flags: needinfo?(benjamin)
Bug 831768 landed on m-c at 2013-03-18 16:00:21 +0100, so let's see if there are still any failures now. https://hg.mozilla.org/mozilla-central/rev/9c6474e8d3c8
Looks like this is fixed by bug 831768, closing it for now.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: