918621 - Shutdown crash under ~AsyncLatencyLogger

Status: RESOLVED DUPLICATE of bug 918234

(Core :: Audio/Video, defect)

Description

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

(gdb) bt
#0  0x58cab32a in mozilla::DeadlockDetector<mozilla::BlockingResourceBase::DeadlockDetectorEntry>::CheckAcquisition (this=0x0, aLast=0x0, aProposed=0x5ebd77c0, aCallContext=...) at ../../dist/include/mozilla/DeadlockDetector.h:406
#1  0x58caa3e1 in mozilla::BlockingResourceBase::CheckAcquire (this=0x5ea945f0, aCallContext=...) at /home/cjones/rr/mozilla-central/xpcom/glue/BlockingResourceBase.cpp:104
#2  0x58caaa75 in mozilla::OffTheBooksMutex::Lock (this=0x5ea945f0) at /home/cjones/rr/mozilla-central/xpcom/glue/BlockingResourceBase.cpp:224
#3  0x5675d04b in mozilla::BaseAutoLock<mozilla::Mutex>::BaseAutoLock (this=0xffffd53c, aLock=..., _notifier=...) at ../../../dist/include/mozilla/Mutex.h:173
#4  0x572fdef1 in AsyncLatencyLogger::~AsyncLatencyLogger (this=0x5ea945e0, __in_chrg=<optimized out>) at /home/cjones/rr/mozilla-central/content/media/Latency.cpp:95
#5  0x572f0dbb in AsyncLatencyLogger::Release (this=0x5ea945e0) at /home/cjones/rr/mozilla-central/content/media/Latency.h:25
#6  0x572fe72a in nsRefPtr<AsyncLatencyLogger>::~nsRefPtr (this=0x5ce0cad8, __in_chrg=<optimized out>) at ../../dist/include/nsAutoPtr.h:887
#7  0x55925f51 in __run_exit_handlers (status=0, listp=0x55a983e4, run_list_atexit=true) at exit.c:78

The global is being freed from a static dtor.  It appears Shutdown() wasn't called, since it doesn't seem like refs to the global can "leak".

Regardless, this code maybe wants to be using one of jlebar's Static*Ptr helpers.

If the problem here is nontrivial, I have this execution saved in a trace that can be debugged (with great patience and tolerance of bugs).

Comment 1

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

I reproduced this by (approximately)

 1. Launching FF
 2. Clicking around in the start screen
 3. Opening the bookmarks manager window
 4. Shutting down

If memory and the logging spew serve.

This message might be relevant too

WARNING: YOU ARE LEAKING THE WORLD (at least one JSRuntime and everything alive inside it, that is) AT JS_ShutDown TIME.  FIX THIS!

Comment 2

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

(Sorry for spam, I'm out of practice in bugzilla.)  This was reproduced on hg id c486dec6e968.

Comment 4

[Chris Jones [:cjones] inactive; ni?/f?/r? if you need me]

I think the more serious issue here is that bug 912180 seems to be causing the "leak" of this object, but however you guys want to deal with that is fine with me.