Crash while running stability tests

NEW
Unassigned

Status

Firefox OS
General
--
critical
5 years ago
5 years ago

People

(Reporter: Greg Grisco, Unassigned)

Tracking

({crash})

unspecified
ARM
Gonk (Firefox OS)
crash

Firefox Tracking Flags

(blocking-b2g:-)

Details

(Whiteboard: [b2g-crash][BTG-1323], crash signature)

Attachments

(2 attachments)

(Reporter)

Description

5 years ago
1.Enable Bluetooth
2.Run airplane on/off, Music, Video, SMS and call device test scripts

Reproducibility: Seen once


Crash reason:  SIGSEGV
Crash address: 0x0

Thread 0 (crashed)
 0  libxul.so!mozalloc_abort [mozalloc_abort.cpp : 30 + 0x4]
     r4 = 0xbeb5d5ec    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbeb5d200
     r8 = 0x4119f8e1    r9 = 0x00000001   r10 = 0xbeb5d200    fp = 0x00000000
     sp = 0xbeb5d1e8    lr = 0x416172c7    pc = 0x416172ca
    Found by: given as instruction pointer in context
 1  libxul.so!NS_DebugBreak_P [nsDebugImpl.cpp : 423 + 0x5]
     r4 = 0xbeb5d5ec    r5 = 0x00000000    r6 = 0xffffffff    r7 = 0xbeb5d200
     r8 = 0x4119f8e1    r9 = 0x00000001   r10 = 0xbeb5d200    fp = 0x00000000
     sp = 0xbeb5d1f0    pc = 0x4119f6c9
    Found by: call frame info
 2  libxul.so!mozilla::Logger::~Logger [logging.cc : 47 + 0xd]
     r4 = 0xbeb5d640    r5 = 0x7fffffff    r6 = 0x0000073f    r7 = 0x0000747f
     r8 = 0xbeb5d718    r9 = 0x0000073f   r10 = 0x00000001    fp = 0x00000007
     sp = 0xbeb5d620    pc = 0x411bd265
    Found by: call frame info
 3  libxul.so!base::RandUint64 [logging.h : 56 + 0x3]
     r4 = 0xffffffff    r5 = 0x7fffffff    r6 = 0x0000073f    r7 = 0x0000747f
     r8 = 0xbeb5d718    r9 = 0x0000073f   r10 = 0x00000001    fp = 0x00000007
     sp = 0xbeb5d630    pc = 0x411d0445
    Found by: call frame info
 4  libxul.so!base::RandInt [rand_util.cc : 20 + 0x3]
     r4 = 0x00000000    r5 = 0x7fffffff    r6 = 0x0000073f    r7 = 0x0000747f
     r8 = 0xbeb5d718    r9 = 0x0000073f   r10 = 0x00000001    fp = 0x00000007
     sp = 0xbeb5d660    pc = 0x411c02cf
    Found by: call frame info
 5  libxul.so!ChildProcessInfo::GenerateRandomChannelID [child_process_info.cc : 58 + 0xf]
     r4 = 0xbeb5d688    r5 = 0xbeb5d720    r6 = 0x0000073f    r7 = 0x0000747f
     r8 = 0xbeb5d718    r9 = 0x0000073f   r10 = 0x00000001    fp = 0x00000007
     sp = 0xbeb5d670    pc = 0x411c9e17
    Found by: call frame info
 6  libxul.so!mozilla::ipc::CreateTransport [Transport_posix.cpp : 29 + 0x3]
     r4 = 0xbeb5d720    r5 = 0xbeb5d6e0    r6 = 0xbeb5d718    r7 = 0x0000747f
     r8 = 0xbeb5d718    r9 = 0x0000073f   r10 = 0x00000001    fp = 0x00000007
     sp = 0xbeb5d688    pc = 0x410989c7
    Found by: call frame info
 7  libxul.so!mozilla::ipc::Open [ProtocolUtils.cpp : 99 + 0x7]
     r4 = 0x4ec536a8    r5 = 0xbeb5d720    r6 = 0x0000747f    r7 = 0x0000747f
     r8 = 0xbeb5d718    r9 = 0x0000073f   r10 = 0x00000001    fp = 0x00000007
     sp = 0xbeb5d708    pc = 0x410957f9
    Found by: call frame info
 8  libxul.so!mozilla::layers::PCompositor::Open [PCompositor.cpp : 17 + 0x21]
     r4 = 0x4ec536a0    r5 = 0x4ec536a8    r6 = 0x4a763cd0    r7 = 0xbeb5d794
     r8 = 0x00000004    r9 = 0x00000001   r10 = 0x00000519    fp = 0x00000000
     sp = 0xbeb5d750    pc = 0x411360d3
    Found by: call frame info
 9  libxul.so!mozilla::dom::ContentParent::ContentParent [ContentParent.cpp : 1097 + 0x5]
     r4 = 0x4ec536a0    r5 = 0x00000000    r6 = 0x4a763cd0    r7 = 0xbeb5d794
     r8 = 0x00000004    r9 = 0x00000001   r10 = 0x00000519    fp = 0x00000000
     sp = 0xbeb5d770    pc = 0x4107a629
    Found by: call frame info
10  libxul.so!mozilla::dom::ContentParent::PreallocateAppProcess [ContentParent.cpp : 217 + 0x3]
     r4 = 0xbeb5d7dc    r5 = 0x4ec536a0    r6 = 0x41a6066c    r7 = 0x404480f0
     r8 = 0x404024d0    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d7d0    pc = 0x4107a8f9
    Found by: call frame info
11  libxul.so!mozilla::dom::ContentParent::DelayedPreallocateAppProcess [ContentParent.cpp : 226 + 0x3]
     r4 = 0x404480c0    r5 = 0x492dbc00    r6 = 0xbeb5d83c    r7 = 0x404480f0
     r8 = 0x404024d0    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d7f8    pc = 0x4107a933
    Found by: call frame info
12  libxul.so!RunnableFunction<void (*)(), Tuple0>::Run [tuple.h : 439 + 0x1]
     r4 = 0x404480c0    r5 = 0x492dbc00    r6 = 0xbeb5d83c    r7 = 0x404480f0
     r8 = 0x404024d0    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d800    pc = 0x40e1f185
    Found by: call frame info
13  libxul.so!MessageLoop::RunTask [message_loop.cc : 334 + 0x5]
     r4 = 0x404480c0    r5 = 0x492dbc00    r6 = 0xbeb5d83c    r7 = 0x404480f0
     r8 = 0x404024d0    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d808    pc = 0x411bd311
    Found by: call frame info
14  libxul.so!MessageLoop::DeferOrRunPendingTask [message_loop.cc : 342 + 0x5]
     r4 = 0x00000001    r5 = 0x00cb7428    r6 = 0xbeb5d83c    r7 = 0x404480f0
     r8 = 0x404024d0    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d818    pc = 0x411be143
    Found by: call frame info
15  libxul.so!MessageLoop::DoDelayedWork [message_loop.cc : 469 + 0x7]
     r4 = 0x404480c0    r5 = 0x00cb7428    r6 = 0xbeb5d83c    r7 = 0x404480f0
     r8 = 0x404024d0    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d820    pc = 0x411be1b3
    Found by: call frame info
16  libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp : 98 + 0x9]
     r4 = 0x404024c0    r5 = 0x404480c0    r6 = 0x404024d0    r7 = 0x00000001
     r8 = 0x00000000    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d858    pc = 0x41095421
    Found by: call frame info
17  libxul.so!MessageLoop::RunInternal [message_loop.cc : 216 + 0x5]
     r4 = 0x404480c0    r5 = 0x42fddbe0    r6 = 0x40407be0    r7 = 0xbeb5dafd
     r8 = 0x00000000    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d880    pc = 0x411bd2c1
    Found by: call frame info
18  libxul.so!MessageLoop::Run [message_loop.cc : 209 + 0x5]
     r4 = 0x404480c0    r5 = 0x42fddbe0    r6 = 0x40407be0    r7 = 0xbeb5dafd
     r8 = 0x00000000    r9 = 0x40429000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbeb5d888    pc = 0x411bd377
    Found by: call frame info
(Reporter)

Updated

5 years ago
blocking-b2g: --- → tef?
(Reporter)

Comment 1

5 years ago
Exact STR is not available since minidumps were collected over nightly/weekend test runs.
(Reporter)

Comment 2

5 years ago
Created attachment 730737 [details]
decoded minidump of crash
(Reporter)

Comment 3

5 years ago
Created attachment 730738 [details]
EXTRA file attachment
We're failing to open /dev/urandom here:

http://mxr.mozilla.org/mozilla-central/source/ipc/chromium/src/base/rand_util_posix.cc#19

This might suggests an fd leak.
tef- for the time being, feel free to renominate if you believe we should block on this one
blocking-b2g: tef? → -

Comment 6

5 years ago
It's similar to bug 805754.
Crash Signature: [@ mozalloc_abort | NS_DebugBreak_P | mozilla::Logger::~Logger ]
Keywords: crash
Whiteboard: [BTG-1323] → [b2g-crash][BTG-1323]
(Reporter)

Comment 7

5 years ago
Not sure if it helps, but found out a little more about the scenario that caused this issue:

1. For this issue, we ran a script which will do the following things sequentially and repeatedly.
  a. Airplane mode on and then do airplane mode off (Repeat this for few iterations)
  b. Play music and pause the music (Repeat this for few iterations)
  c. Play the video and stop the video (Repeat this for few iterations)
  d. Send MO (mobile originated) SMS. (Repeat this for few iterations)
  e. Make MO calls. (Repeat this for few iterations)
  f. Again it will start from step1 and continue to step e. repeatedly.
  g. After night run mini dumps are generated in the phone.
You need to log in before you can comment on or make changes to this bug.