868073 - crash in mozilla::net::HttpChannelChild::OnStartRequest

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: Gaia::Video, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-8a9278f7-7ba2-4acb-b380-52b3e2130502 .
============================================================= 

Frame 	Module 	Signature 	Source
0 	libxul.so 	mozilla::net::HttpChannelChild::OnStartRequest 	HttpChannelChild.cpp:275
1 	libxul.so 	mozilla::net::HttpChannelChild::RecvOnStartRequest 	HttpChannelChild.cpp:234
2 	libxul.so 	mozilla::net::PHttpChannelChild::OnMessageReceived 	PHttpChannelChild.cpp:547
3 	libxul.so 	mozilla::dom::PContentChild::OnMessageReceived 	PContentChild.cpp:2323
4 	libxul.so 	mozilla::ipc::AsyncChannel::OnDispatchMessage 	AsyncChannel.cpp:471
5 	libxul.so 	mozilla::ipc::RPCChannel::OnMaybeDequeueOne 	RPCChannel.cpp:402
6 	libxul.so 	RunnableMethod<IPC::ChannelProxy::Context, void , Tuple0>::Run 	tuple.h:383
7 	libxul.so 	mozilla::ipc::RPCChannel::DequeueTask::Run 	RPCChannel.h:425
8 	libxul.so 	MessageLoop::RunTask 	message_loop.cc:337
9 	libxul.so 	MessageLoop::DeferOrRunPendingTask 	message_loop.cc:345
10 	libxul.so 	MessageLoop::DoWork 	message_loop.cc:445
11 	libxul.so 	mozilla::ipc::DoWorkRunnable::Run 	MessagePump.cpp:42
12 	libxul.so 	nsThread::ProcessNextEvent 	nsThread.cpp:620
13 	libxul.so 	NS_ProcessNextEvent_P 	nsThreadUtils.cpp:237
14 	libxul.so 	mozilla::ipc::MessagePump::Run 	MessagePump.cpp:117
15 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	MessagePump.cpp:231
16 	libxul.so 	MessageLoop::RunInternal 	message_loop.cc:219
17 	libxul.so 	MessageLoop::Run 	message_loop.cc:212
18 	libxul.so 	nsBaseAppShell::Run 	nsBaseAppShell.cpp:163
19 	libxul.so 	XRE_RunAppShell 	nsEmbedFunctions.cpp:646
20 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	MessagePump.cpp:198
21 	libxul.so 	MessageLoop::RunInternal 	message_loop.cc:219
22 	libxul.so 	MessageLoop::Run 	message_loop.cc:212
23 	libxul.so 	XRE_InitChildProcess 	nsEmbedFunctions.cpp:485
24 	plugin-container 	main 	ipc/app/MozillaRuntimeMain.cpp:48
25 	libc.so 	__libc_init 	libc_init_dynamic.c:114 

Gecko  http://hg.mozilla.org/releases/mozilla-b2g18_v1_0_1/rev/5c1d67e0c242
Gaia   11477c127ae9be5051e4cfbcbf3da1d4150f9967
BuildID 20130502070201
Version 18.0
Buri

## Repro :
1. go to www.youtube.com/watch?v=ikAb-NYkseI in browser
2. select the link
3. watch the video

## Expected : no crash
## Actual : crash
## Note : maybe a dup of the video crashing

Comment 1

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Note: it took a while to crash (about 15 mins into the video?)

Comment 2

[Josh Matthews [:jdm]]

Huh, this is a null mListener. That's curious.

Comment 3

[Josh Matthews [:jdm]]

I'd be really curious where mListener becomes null - I would expect one of http://mxr.mozilla.org/mozilla-b2g18/source/netwerk/protocol/http/HttpChannelChild.cpp#997 (should be an easy fix), http://mxr.mozilla.org/mozilla-b2g18/source/netwerk/protocol/http/HttpChannelChild.cpp#453 (if we're calling OnStartRequest after OnStopRequest there are big problems), or http://mxr.mozilla.org/mozilla-b2g18/source/netwerk/protocol/http/HttpChannelChild.cpp#842.

Comment 4

[Sotaro Ikeda [:sotaro]]

(In reply to Josh Matthews [:jdm] from comment #3)
> http://mxr.mozilla.org/mozilla-b2g18/source/netwerk/protocol/http/
> HttpChannelChild.cpp#453 (if we're calling OnStartRequest after
> OnStopRequest there are big problems), or

When I analyzed a little bit in the past. This pattern happened.

Comment 5

[Sotaro Ikeda [:sotaro]]

(In reply to Sotaro Ikeda [:sotaro] from comment #4)
> (In reply to Josh Matthews [:jdm] from comment #3)
> > http://mxr.mozilla.org/mozilla-b2g18/source/netwerk/protocol/http/
> > HttpChannelChild.cpp#453 (if we're calling OnStartRequest after
> > OnStopRequest there are big problems), or
> 
> When I analyzed a little bit in the past. This pattern happened.

Before Bug 863441 was fixed. This happened relatively often.

Comment 6

[Sotaro Ikeda [:sotaro]]

Before Bug 863441 was fixed. pause/resume was sometimes called incredible number of times.

Comment 7

[Jason Duell]

:sotaro, you're saying you saw OnStopRequest called before the OnStartRequest of the same channel?

Is this crash still happening now that bug 863441 is fixed?  I honestly can't see how it would have fixed the issue, but maybe I'm missing something subtle.

Comment 8

[Sotaro Ikeda [:sotaro]]

(In reply to Jason Duell (:jduell) from comment #7)
> :sotaro, you're saying you saw OnStopRequest called before the
> OnStartRequest of the same channel?

Yes.

> Is this crash still happening now that bug 863441 is fixed?  I honestly
> can't see how it would have fixed the issue, but maybe I'm missing something
> subtle.

I did not see the crash since bug 863441 was fixed.

Comment 9

[Jason Duell]

please reopen if we see this again--closing per last comment

Comment 10

[Scoobidiver (away)]

(In reply to Sotaro Ikeda [:sotaro] from comment #8)
> I did not see the crash since bug 863441 was fixed.
It still occurs after B2G 18.0/20130509. See https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Anet%3A%3AHttpChannelChild%3A%3AOnStartRequest

Comment 11

[Jason Duell]

Scoobidiver: crash-stats link in comment 10 shows nothing for me--am I doing it wrong? (I tried changing product to B2G, still empty result list).

Comment 12

[Scoobidiver (away)]

(In reply to Jason Duell (:jduell) from comment #11)
> Scoobidiver: crash-stats link in comment 10 shows nothing for me--am I doing
> it wrong? (I tried changing product to B2G, still empty result list).
I don't know why. Try https://crash-stats.mozilla.com/report/list?product=B2G&signature=mozilla%3A%3Anet%3A%3AHttpChannelChild%3A%3AOnStartRequest

Comment 13

[Josh Matthews [:jdm]]

I also see no results with the link in comment 10 and comment 12.

Comment 14

[Scoobidiver (away)]

(In reply to Josh Matthews [:jdm] from comment #13)
> I also see no results with the link in comment 10 and comment 12.
Clear your cookies and cache as the Socorro code is updated every weeks.

Comment 15

[BMO Automation]

Firefox OS is not being worked on