Closed Bug 883541 Opened 7 years ago Closed 7 years ago

crash in nsInputStreamPump::Cancel

Categories

(Core :: Networking, defect, blocker)

24 Branch
defect
Not set
blocker

Tracking

()

VERIFIED FIXED
mozilla24
Tracking Status
firefox23 --- unaffected
firefox24 + verified

People

(Reporter: scoobidiver, Assigned: sworkman)

References

Details

(Keywords: crash, regression, Whiteboard: [native-crash])

Crash Data

It first showed up in 24.0a1/201306015. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=b197bed90a98&tochange=3d16d59c9317
It might be a regression from bug 759964.

Signature 	nsInputStreamPump::EnsureWaiting() More Reports Search
UUID	e7b5d201-3393-4695-9c03-9cd0e2130615
Date Processed	2013-06-15 16:26:04
Uptime	20
Install Age	20 seconds since version was first installed.
Install Time	2013-06-15 16:25:07
Product	Firefox
Version	24.0a1
Build ID	20130615031212
Release Channel	nightly
OS	Windows NT
OS Version	6.2.9200
Build Architecture	x86
Build Architecture Info	AuthenticAMD family 20 model 2 stepping 0
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x0
App Notes 	
AdapterVendorID: 0x1002, AdapterDeviceID: 0x9802, AdapterSubsysID: 06021025, AdapterDriverVersion: 8.97.10.6
D3D10 Layers? D3D10 Layers- D3D9 Layers? D3D9 Layers+ 
Processor Notes 	sp-processor04_phx1_mozilla_com_28648:2012; non-integer value of "SecondsSinceLastCrash"
EMCheckCompatibility	True
Adapter Vendor ID	0x1002
Adapter Device ID	0x9802
Total Virtual Memory	4294836224
Available Virtual Memory	3954855936
System Memory Use Percentage	38
Available Page File	4229746688
Available Physical Memory	1788284928

Frame 	Module 	Signature 	Source
0 	xul.dll 	nsInputStreamPump::EnsureWaiting 	netwerk/base/src/nsInputStreamPump.cpp:130
1 	xul.dll 	nsInputStreamPump::Cancel 	netwerk/base/src/nsInputStreamPump.cpp:199
2 	xul.dll 	mozilla::net::nsHttpChannel::Cancel 	netwerk/protocol/http/nsHttpChannel.cpp:4282
3 	xul.dll 	nsLoadGroup::Cancel 	netwerk/base/src/nsLoadGroup.cpp:289
4 	xul.dll 	nsDocLoader::Stop 	uriloader/base/nsDocLoader.cpp:268
5 	xul.dll 	nsDocShell::Stop 	docshell/base/nsDocShell.cpp:4662
6 	xul.dll 	nsDocShell::InternalLoad 	docshell/base/nsDocShell.cpp:9209
7 	xul.dll 	nsDocShell::LoadURI 	docshell/base/nsDocShell.cpp:1520
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3AEnsureWaiting%28%29
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3ACancel%28tag_nsresult%29
I think bug 497003 is a more likely cause.
Depends on: 882913
Blocks: 497003
2000 crashes in one build mean a blocker.
Severity: critical → blocker
needsinfo on Steve/Jason to help with the investigation here asap based on the crash volume so far.
Flags: needinfo?(sworkman)
Flags: needinfo?(jduell.mcbugs)
Crash Signature: [@ nsInputStreamPump::EnsureWaiting()] [@ nsInputStreamPump::Cancel(tag_nsresult)] → [@ nsInputStreamPump::EnsureWaiting()] [@ nsInputStreamPump::Cancel(tag_nsresult)] [@ mozilla::net::nsHttpChannel::Cancel(tag_nsresult)]
RyanVM backed the offending patches out:

https://tbpl.mozilla.org/?tree=Mozilla-Inbound&rev=d78e02224026
Assignee: nobody → sworkman
Status: NEW → ASSIGNED
Flags: needinfo?(sworkman)
Flags: needinfo?(jduell.mcbugs)
Inbound looks ok now - closing this bug.
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
(In reply to Steve Workman [:sworkman] from comment #5)
> Inbound looks ok now - closing this bug.

Normally, bugs are not CLOSED/FIXED m-i merges into m-c..  or so I thought.
Fixed by the backout of bug 497003.
Target Milestone: --- → mozilla24
According to Socorro, this is no longer a top crash.
[@ nsInputStreamPump::EnsureWaiting()] - 2 Firefox 24 beta crashes, 30 Firefox 25a2 crashes, 17 Firefox 26a1 crashes
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3AEnsureWaiting%28%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-27+08%3A00%3A00&range_value=4

[@ nsInputStreamPump::Cancel(tag_nsresult)] - 1 Firefox beta crash, 1 Firefox 26a1 crash
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3ACancel%28tag_nsresult%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-27+08%3A00%3A00&range_value=4

[@ mozilla::net::nsHttpChannel::Cancel(tag_nsresult)] - 1 Firefox beta crash, 1 Firefox 25a2 crash
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Anet%3A%3AnsHttpChannel%3A%3ACancel%28tag_nsresult%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-27+08%3A00%3A00&range_value=4

Please let me know if you need me to file a new bug for the remaining crashes.
Status: RESOLVED → VERIFIED
Keywords: topcrash
tracking-fennec: ? → ---
You need to log in before you can comment on or make changes to this bug.