850031 - crash in nsEventSH::PreCreate

Status: RESOLVED DUPLICATE of bug 856167

(Core :: XPConnect, defect)

Description

[Scoobidiver (away)]

It first showed up in 22.0a1/20130310. The regression range might be (one user per build):
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=e6215e0357fa&tochange=9e6232e86000
I suspect bug 822399 or maybe bug 846380.

Signature 	nsEventSH::PreCreate(nsISupports*, JSContext*, JSObject*, JSObject**) More Reports Search
UUID	73a7e4cc-cb07-4e3c-9133-0e8af2130311
Date Processed	2013-03-11 04:33:11
Uptime	64
Last Crash	1.2 minutes before submission
Install Age	5.5 hours since version was first installed.
Install Time	2013-03-10 23:03:58
Product	FennecAndroid
Version	22.0a1
Build ID	20130310030906
Release Channel	nightly
OS	Android
OS Version	0.0.0 Linux 3.0.31-g6fb96c9 #1 SMP PREEMPT Thu Jun 28 11:02:39 PDT 2012 armv7l samsung/yakjuxw/maguro:4.1.1/JRO03C/I9250XWLH2:user/release-keys
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x1e
App Notes 	
AdapterDescription: 'Imagination Technologies -- PowerVR SGX 540 -- OpenGL ES 2.0 build 1.8@905891 -- Model: Galaxy Nexus, Product: yakjuxw, Manufacturer: samsung, Hardware: tuna'
EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ 
samsung Galaxy Nexus
samsung/yakjuxw/maguro:4.1.1/JRO03C/I9250XWLH2:user/release-keys
Processor Notes 	sp-processor03.phx1.mozilla.com_19476:2008; exploitablity tool: ERROR: unable to analyze dump
EMCheckCompatibility	True
Adapter Vendor ID	Imagination Technologies
Adapter Device ID	PowerVR SGX 540
Device	samsung Galaxy Nexus
Android API Version	16 (REL)
Android CPU ABI	armeabi-v7a

Frame 	Module 	Signature 	Source
0 	libxul.so 	nsEventSH::PreCreate 	obj-firefox/dist/include/nsISupportsUtils.h:149
1 	libxul.so 	XPCWrappedNative::GetNewOrUsed 	js/xpconnect/src/XPCWrappedNative.cpp:518
2 	libmozalloc.so 	moz_xmalloc 	mozalloc.cpp:54
3 	libxul.so 	XPCNativeInterface::NewInstance 	js/xpconnect/src/XPCWrappedNativeInfo.cpp:366

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsEventSH%3A%3APreCreate%28nsISupports*%2C+JSContext*%2C+JSObject*%2C+JSObject**%29

Comment 1

[Bobby Holley (:bholley)]

Huh. If Events are now on Paris bindings, why is PreCreate even involved at all?

Comment 2

[Olli Pettay [:smaug][[e-mail]](vacation until Nov 16)]

Only Event is using Paris bindings. Other use old bindings.

Comment 3

[Olli Pettay [:smaug][[e-mail]](vacation until Nov 16)]

Hmm, Android only o_O?

Comment 4

[Jonathan Watt [:jwatt]]

(In reply to Scoobidiver from comment #0)
> I suspect bug 822399 or maybe bug 846380.

Pretty sure it's not bug 846380, FWIW, since that's behind a disabled pref for now.

Comment 5

[Scoobidiver (away)]

It's #10 top crasher in 22.0a1.

Comment 6

[Olli Pettay [:smaug][[e-mail]](vacation until Nov 16)]

Need more data here. Those crash reports aren't too useful, unfortunately.

Comment 7

[Alex Keybl [:akeybl]]

We'll try to get URLs and device correlations to help pull more info for dev/QA.

Comment 8

[Alex Keybl [:akeybl]]

Whoops it's a startup crash, so no URLs. We'll still want device correlations though if Olli is stumped.

Comment 9

[Olli Pettay [:smaug][[e-mail]](vacation until Nov 16)]

Yeah, I have nothing to work on here. The stack traces are oddly short. Even a proper stack
trace might help.

Comment 10

[Scoobidiver (away)]

(In reply to Alex Keybl [:akeybl] from comment #8)
> Whoops it's a startup crash, so no URLs.
50% happens within 60 seconds but others don't.

Comment 11

[Robert Kaiser]

URLs:

3 	http://glitchnap.com/zumbie/shoot/?name=Demetrius
1 	about:blank
1 	https://www.google.com/search?q=css+3d+transforms&ie=utf-8&oe=utf-8&aq=t&rls=org

That's all we've ever seen with this signature.


Devices from https://crash-analysis.mozilla.com/rkaiser/2013-03-17/2013-03-17.fennecandroid.nightly.devices.weekly.html#sigs

nsEventSH::PreCreate(nsISupports*, JSContext*, JSObject*, JSObject**) 	15
Samsung GT-I9300 	7
Samsung Galaxy Nexus 	3
LGE Nexus 4 	3
HTC One X+ 	2

Comment 12

[Olli Pettay [:smaug][[e-mail]](vacation until Nov 16)]

I expect https://bugzilla.mozilla.org/show_bug.cgi?id=856167 might have fixed this.
Anyone with Android device could test DeviceMotionEvent.

Comment 13

[Scoobidiver (away)]

(In reply to Olli Pettay [:smaug] from comment #12)
> I expect https://bugzilla.mozilla.org/show_bug.cgi?id=856167 might have
> fixed this.
I seems so based on crash stats: no crashes after 22.0a1/20130330. Let's wait a few more days to confirm.