883541 - crash in nsInputStreamPump::Cancel

Status: VERIFIED FIXED

(Core :: Networking, defect)

Description

[Scoobidiver (away)]

It first showed up in 24.0a1/201306015. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=b197bed90a98&tochange=3d16d59c9317
It might be a regression from bug 759964.

Signature 	nsInputStreamPump::EnsureWaiting() More Reports Search
UUID	e7b5d201-3393-4695-9c03-9cd0e2130615
Date Processed	2013-06-15 16:26:04
Uptime	20
Install Age	20 seconds since version was first installed.
Install Time	2013-06-15 16:25:07
Product	Firefox
Version	24.0a1
Build ID	20130615031212
Release Channel	nightly
OS	Windows NT
OS Version	6.2.9200
Build Architecture	x86
Build Architecture Info	AuthenticAMD family 20 model 2 stepping 0
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x0
App Notes 	
AdapterVendorID: 0x1002, AdapterDeviceID: 0x9802, AdapterSubsysID: 06021025, AdapterDriverVersion: 8.97.10.6
D3D10 Layers? D3D10 Layers- D3D9 Layers? D3D9 Layers+ 
Processor Notes 	sp-processor04_phx1_mozilla_com_28648:2012; non-integer value of "SecondsSinceLastCrash"
EMCheckCompatibility	True
Adapter Vendor ID	0x1002
Adapter Device ID	0x9802
Total Virtual Memory	4294836224
Available Virtual Memory	3954855936
System Memory Use Percentage	38
Available Page File	4229746688
Available Physical Memory	1788284928

Frame 	Module 	Signature 	Source
0 	xul.dll 	nsInputStreamPump::EnsureWaiting 	netwerk/base/src/nsInputStreamPump.cpp:130
1 	xul.dll 	nsInputStreamPump::Cancel 	netwerk/base/src/nsInputStreamPump.cpp:199
2 	xul.dll 	mozilla::net::nsHttpChannel::Cancel 	netwerk/protocol/http/nsHttpChannel.cpp:4282
3 	xul.dll 	nsLoadGroup::Cancel 	netwerk/base/src/nsLoadGroup.cpp:289
4 	xul.dll 	nsDocLoader::Stop 	uriloader/base/nsDocLoader.cpp:268
5 	xul.dll 	nsDocShell::Stop 	docshell/base/nsDocShell.cpp:4662
6 	xul.dll 	nsDocShell::InternalLoad 	docshell/base/nsDocShell.cpp:9209
7 	xul.dll 	nsDocShell::LoadURI 	docshell/base/nsDocShell.cpp:1520
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3AEnsureWaiting%28%29
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3ACancel%28tag_nsresult%29

Comment 1

[Matthew N. [:MattN]]

I think bug 497003 is a more likely cause.

Comment 2

[Scoobidiver (away)]

2000 crashes in one build mean a blocker.

Comment 3

[bhavana bajaj [:bajaj]]

needsinfo on Steve/Jason to help with the investigation here asap based on the crash volume so far.

Comment 4

[Steve Workman [:sworkman] (INACTIVE)]

RyanVM backed the offending patches out:

https://tbpl.mozilla.org/?tree=Mozilla-Inbound&rev=d78e02224026

Comment 5

[Steve Workman [:sworkman] (INACTIVE)]

Inbound looks ok now - closing this bug.

Comment 6

[Jim Jeffery not reading bug-mail 1/2/11]

(In reply to Steve Workman [:sworkman] from comment #5)
> Inbound looks ok now - closing this bug.

Normally, bugs are not CLOSED/FIXED m-i merges into m-c..  or so I thought.

Comment 7

[Scoobidiver (away)]

Fixed by the backout of bug 497003.

Comment 8

[Ioana (away)]

According to Socorro, this is no longer a top crash.
[@ nsInputStreamPump::EnsureWaiting()] - 2 Firefox 24 beta crashes, 30 Firefox 25a2 crashes, 17 Firefox 26a1 crashes
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3AEnsureWaiting%28%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-27+08%3A00%3A00&range_value=4

[@ nsInputStreamPump::Cancel(tag_nsresult)] - 1 Firefox beta crash, 1 Firefox 26a1 crash
https://crash-stats.mozilla.com/report/list?signature=nsInputStreamPump%3A%3ACancel%28tag_nsresult%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-27+08%3A00%3A00&range_value=4

[@ mozilla::net::nsHttpChannel::Cancel(tag_nsresult)] - 1 Firefox beta crash, 1 Firefox 25a2 crash
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Anet%3A%3AnsHttpChannel%3A%3ACancel%28tag_nsresult%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-27+08%3A00%3A00&range_value=4

Please let me know if you need me to file a new bug for the remaining crashes.