[Unagi][Monkey Test] crash at libxul.so!nsDocLoader::doStartDocumentLoad

NEW
Unassigned

Status

Firefox OS
General
--
critical
5 years ago
5 years ago

People

(Reporter: Peipei Cheng (needinfo if you need my action), Unassigned)

Tracking

({crash})

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [b2g-crash], crash signature)

Attachments

(1 attachment)

Created attachment 750295 [details]
Crash Report

Operating system: Android
                  0.0.0 Linux 3.0.8-perf #1 PREEMPT Wed Dec 5 04:47:49 PST 2012 armv7l toro/full_unagi/unagi:4.0.4.0.4.0.4/OPENMASTER/eng.moz.20130510.122429:eng/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGILL
Crash address: 0x41b271f4

Thread 0 (crashed)
 0  libmedia.so + 0x271f4
     r4 = 0x00009602    r5 = 0x00000008    r6 = 0x00000008    r7 = 0xbefa8150
     r8 = 0xbefa8084    r9 = 0x00000008   r10 = 0xbefa83a8    fp = 0x00000008
     sp = 0xbefa9230    lr = 0x40083c9d    pc = 0x41b271f4
    Found by: given as instruction pointer in context
 1  libxul.so!nsDocLoader::doStartDocumentLoad [nsDocLoader.cpp : 853 + 0xf]
     sp = 0xbefa9248    pc = 0x4095dbbf
    Found by: stack scanning
 2  libxul.so!nsDocLoader::OnStartRequest [nsDocLoader.cpp : 550 + 0x3]
     sp = 0xbefa9258    pc = 0x4095df6f
    Found by: call frame info
 3  libxul.so!nsLoadGroup::AddRequest [nsLoadGroup.cpp : 577 + 0x9]
     r4 = 0x43b1d580    r5 = 0x41f42460    r6 = 0x00000000    sp = 0xbefa9270
     pc = 0x403d64c1
    Found by: call frame info
 4  libxul.so!nsJARChannel::AsyncOpen [nsJARChannel.cpp : 767 + 0x9]
     r4 = 0x41f42460    r5 = 0x41513f98    r6 = 0x00000001    r7 = 0x41f424c8
     r8 = 0x41f424c4    r9 = 0x00000000   r10 = 0x00000000    sp = 0xbefa92a8
     pc = 0x4046ae07
    Found by: call frame info
 5  libxul.so!nsURILoader::OpenURI [nsURILoader.cpp : 763 + 0xb]
     r4 = 0x41f42460    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x43845418
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x41513f98    fp = 0x00000000
     sp = 0xbefa9308    pc = 0x4095c2f5
    Found by: call frame info
 6  libxul.so!nsDocShell::DoChannelLoad [nsDocShell.cpp : 9588 + 0x1b]
     r4 = 0x41f42460    r5 = 0x43845400    r6 = 0x4095c2b1    r7 = 0x43b95750
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x41513f98    fp = 0x00000000
     sp = 0xbefa9330    pc = 0x4094d7fd
    Found by: call frame info
 7  libxul.so!nsDocShell::DoURILoad [nsDocShell.cpp : 9424 + 0xf]
     r4 = 0x43845400    r5 = 0x4094d6e1    r6 = 0xbefa93b0    r7 = 0x00080000
     r8 = 0xbefa93e0    r9 = 0x00000000   r10 = 0x41513f98    fp = 0x00000000
     sp = 0xbefa9350    pc = 0x4094fad5
    Found by: call frame info
 8  libxul.so!nsDocShell::InternalLoad [nsDocShell.cpp : 9098 + 0x35]
     r4 = 0x43845400    r5 = 0x43cad500    r6 = 0x4094f4b9    r7 = 0x00000001
     r8 = 0x438f16a0    r9 = 0x404c6155   r10 = 0x00000000    fp = 0x41f42600
     sp = 0xbefa9440    pc = 0x4095771f
    Found by: call frame info
 9  libxul.so!nsDocShell::LoadURI [nsDocShell.cpp : 1521 + 0x1b]
     r4 = 0x40956a91    r5 = 0x43845400    r6 = 0x41513f98    r7 = 0x43cad500
     r8 = 0x00000001    r9 = 0x00040000   r10 = 0x00000001    fp = 0x00000000
     sp = 0xbefa9740    pc = 0x409500cb
    Found by: call frame info
10  libxul.so!nsDocShell::LoadURI [nsDocShell.cpp : 4055 + 0x17]
     r4 = 0x43845400    r5 = 0x00040000    r6 = 0x4094fc8d    r7 = 0x00000000
     r8 = 0xbefa98cc    r9 = 0x00000000   r10 = 0x43b04ba0    fp = 0x00000000
     sp = 0xbefa9808    pc = 0x40955b3f
    Found by: call frame info
11  libxul.so!nsWebBrowser::LoadURI [nsWebBrowser.cpp : 632 + 0xd]
     r4 = 0x409559f1    r5 = 0x00000000    r6 = 0x4097edb9    r7 = 0x438e1a04
     r8 = 0x41513f98    r9 = 0x00000006   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9898    pc = 0x4097eddb
    Found by: call frame info
12  libxul.so!mozilla::dom::TabChild::RecvLoadURL [TabChild.cpp : 1105 + 0x1d]
     r4 = 0xbefa9a40    r5 = 0xbefa98b8    r6 = 0x4097edb9    r7 = 0x438e1a04
     r8 = 0x41513f98    r9 = 0x00000006   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa98b0    pc = 0x40a933c3
    Found by: call frame info
13  libxul.so!mozilla::dom::PBrowserChild::OnMessageReceived [PBrowserChild.cpp : 1380 + 0x9]
     r4 = 0x4385fb00    r5 = 0xbefa9e8c    r6 = 0xbefa9a40    r7 = 0x00000000
     r8 = 0x41513f98    r9 = 0x00000006   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9970    pc = 0x40b15bc7
    Found by: call frame info
14  libxul.so!mozilla::dom::PContentChild::OnMessageReceived [PContentChild.cpp : 2302 + 0x7]
     r4 = 0x41acb618    r5 = 0xbefa9e8c    r6 = 0xbefa9e8c    r7 = 0x41513f98
     r8 = 0xbefa9ef0    r9 = 0x00000006   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9b50    pc = 0x40b1ddd5
    Found by: call frame info
15  libxul.so!mozilla::ipc::AsyncChannel::OnDispatchMessage [AsyncChannel.cpp : 471 + 0x5]
     r4 = 0x41acb624    r5 = 0xbefa9e8c    r6 = 0xbefa9e8c    r7 = 0xbefaa808
     r8 = 0xbefa9ef0    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9e78    pc = 0x40aa261b
    Found by: call frame info
16  libxul.so!mozilla::ipc::RPCChannel::OnMaybeDequeueOne [RPCChannel.cpp : 402 + 0x7]
     r4 = 0x41acb624    r5 = 0xbefa9e8c    r6 = 0xbefa9e8c    r7 = 0xbefaa808
     r8 = 0xbefa9ef0    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9e88    pc = 0x40aa7497
    Found by: call frame info
17  libxul.so!RunnableMethod<IPC::ChannelProxy::Context, void (IPC::ChannelProxy::Context::*)(), Tuple0>::Run [tuple.h : 383 + 0x5]
     r4 = 0xbefaa7fc    r5 = 0x41a02110    r6 = 0xbefa9ef8    r7 = 0xbefaa808
     r8 = 0xbefa9ef0    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9ec0    pc = 0x40a882ff
    Found by: call frame info
18  libxul.so!mozilla::ipc::RPCChannel::DequeueTask::Run [RPCChannel.h : 425 + 0x9]
     r4 = 0xbefaa7fc    r5 = 0x41a02110    r6 = 0xbefa9ef8    r7 = 0xbefaa808
     r8 = 0xbefa9ef0    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9ec8    pc = 0x40aa5e41
    Found by: call frame info
19  libxul.so!MessageLoop::RunTask [message_loop.cc : 337 + 0x5]
     r4 = 0xbefaa7fc    r5 = 0x41a02110    r6 = 0xbefa9ef8    r7 = 0xbefaa808
     r8 = 0xbefa9ef0    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9ed0    pc = 0x40bd3c5d
    Found by: call frame info
20  libxul.so!MessageLoop::DeferOrRunPendingTask [message_loop.cc : 345 + 0x5]
     r4 = 0x00000001    r5 = 0xbefa9ee8    r6 = 0xbefa9ef8    r7 = 0xbefaa808
     r8 = 0xbefa9ef0    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9ee0    pc = 0x40bd4a8f
    Found by: call frame info
21  libxul.so!MessageLoop::DoWork [message_loop.cc : 445 + 0x7]
     r4 = 0xbefaa7fc    r5 = 0xbefa9ee8    r6 = 0xbefa9ef8    r7 = 0xbefaa808
     r8 = 0xbefa9ef0    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9ee8    pc = 0x40bd566d
    Found by: call frame info
22  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 225 + 0x7]
     r4 = 0xbefaa7fc    r5 = 0x41ac4340    r6 = 0xbefaa7fc    r7 = 0x00000001
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f18    pc = 0x40aa59ab
    Found by: call frame info
23  libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
     r4 = 0xbefaa7fc    r5 = 0x4389b100    r6 = 0x41ac88e0    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f30    pc = 0x40bd3c19
    Found by: call frame info
24  libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
     r4 = 0xbefaa7fc    r5 = 0x4389b100    r6 = 0x41ac88e0    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f38    pc = 0x40bd3cc3
    Found by: call frame info
25  libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp : 163 + 0x7]
     r4 = 0x00000000    r5 = 0x4389b100    r6 = 0x41ac88e0    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f50    pc = 0x40a2b11d
    Found by: call frame info
26  libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 646 + 0x5]
     r4 = 0xbefa9f64    r5 = 0x41ac4340    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f60    pc = 0x403c08b9
    Found by: call frame info
27  libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run [MessagePump.cpp : 198 + 0x3]
     r4 = 0xbefaa7fc    r5 = 0x41ac4340    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f78    pc = 0x40aa598d
    Found by: call frame info
28  libxul.so!MessageLoop::RunInternal [message_loop.cc : 219 + 0x5]
     r4 = 0xbefaa7fc    r5 = 0x41acb600    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f90    pc = 0x40bd3c19
    Found by: call frame info
29  libxul.so!MessageLoop::Run [message_loop.cc : 212 + 0x5]
     r4 = 0xbefaa7fc    r5 = 0x41acb600    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9f98    pc = 0x40bd3cc3
    Found by: call frame info
30  libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 485 + 0xb]
     r4 = 0xbefaa7fc    r5 = 0x41acb600    r6 = 0x00000002    r7 = 0x00000003
     r8 = 0x41adb000    r9 = 0x41ae0000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefa9fb0    pc = 0x403c0c5d
    Found by: call frame info
31  plugin-container!main [MozillaRuntimeMain.cpp : 60 + 0x5]
     r4 = 0xbefaa964    r5 = 0x00000005    r6 = 0xbefaa934    r7 = 0xbefaa980
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefaa930    pc = 0x00008583
    Found by: call frame info
32  libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7]
     r4 = 0x00008524    r5 = 0xbefaa964    r6 = 0x00000006    r7 = 0xbefaa980
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefaa948    pc = 0x4003a77b
    Found by: call frame info
33  0xb0001dc5
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0xbefaa960    pc = 0xb0001dc7
    Found by: call frame info

Updated

5 years ago
Severity: normal → critical
Crash Signature: [@ libmedia.so@0x271f4]
Keywords: crash
Whiteboard: [b2g-crash]
You need to log in before you can comment on or make changes to this bug.