970004 - mozalloc_abort(char const* const) | mozalloc_handle_oom(unsigned int) | moz_xrealloc | nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>::EnsureCapacity(unsigned int, unsigned int) | XPCWrappedNative::FlatJSObjectFinalized()

Status: RESOLVED WONTFIX

(Core :: General, defect)

Description

[[e-mail]]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:26.0) Gecko/20100101 Firefox/26.0 (Beta/Release)
Build ID: 20131205075310

Steps to reproduce:

Signature: mozalloc_abort(char const* const) | mozalloc_handle_oom(unsigned int) | moz_xrealloc | nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>::EnsureCapacity(unsigned int, unsigned int) | XPCWrappedNative::FlatJSObjectFinalized()

Branch 29: https://crash-stats.mozilla.com/report/index/b79c7cc9-5b18-4477-bfe6-ac52f2140209
Branch 30: https://crash-stats.mozilla.com/report/index/732dbe36-fa09-4324-bf87-2b4042140209

Date Processed	2014-02-09 01:47:00.383015
Uptime	4864
Install Age 	15815 since version was first installed.
Install Time 	2014-02-08 21:23:14
Product 	Firefox
Version 	30.0a1
Build ID 	20140208030207
Release Channel 	nightly
OS 	Windows NT
OS Version 	6.1.7600
Build Architecture 	x86
Build Architecture Info 	GenuineIntel family 6 model 60 stepping 3 | 4
Crash Reason 	EXCEPTION_BREAKPOINT
Crash Address 	0x73931111
User Comments 	
App Notes 	

AdapterVendorID: 0x10de, AdapterDeviceID: 0x1184, AdapterSubsysID: 27763842, AdapterDriverVersion: 9.18.13.3221
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 

Processor Notes 	sp-processor09_phx1_mozilla_com.18941:2012; HybridCrashProcessor; non-integer value of "SecondsSinceLastCrash"

Crashing Thread
Frame 	Module 	Signature 	Source
0 	mozalloc.dll 	mozalloc_abort(char const * const) 	memory/mozalloc/mozalloc_abort.cpp
1 	mozalloc.dll 	mozalloc_handle_oom(unsigned int) 	memory/mozalloc/mozalloc_oom.cpp
2 	mozalloc.dll 	moz_xrealloc 	memory/mozalloc/mozalloc.cpp
3 	xul.dll 	nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils>::EnsureCapacity(unsigned int,unsigned int) 	xpcom/glue/nsTArray-inl.h
4 	xul.dll 	XPCWrappedNative::FlatJSObjectFinalized() 	js/xpconnect/src/XPCWrappedNative.cpp
5 	xul.dll 	XPC_WN_NoHelper_Finalize 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
6 	mozjs.dll 	FinalizeArenas 	js/src/jsgc.cpp
7 	mozjs.dll 	js::gc::ArenaLists::queueObjectsForSweep(js::FreeOp *) 	js/src/jsgc.cpp
8 	mozjs.dll 	BeginSweepingZoneGroup 	js/src/jsgc.cpp
9 	mozjs.dll 	BeginSweepPhase 	js/src/jsgc.cpp
10 	mozjs.dll 	IncrementalCollectSlice 	js/src/jsgc.cpp
11 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp
12 	mozjs.dll 	Collect 	js/src/jsgc.cpp
13 	mozjs.dll 	JS::ShrinkingGC(JSRuntime *,JS::gcreason::Reason) 	js/src/jsfriendapi.cpp
14 	xul.dll 	nsJSContext::GarbageCollectNow(JS::gcreason::Reason,nsJSContext::IsIncremental,nsJSContext::IsCompartment,nsJSContext::IsShrinking,__int64) 	dom/base/nsJSEnvironment.cpp
15 	xul.dll 	nsJSEnvironmentObserver::Observe(nsISupports *,char const *,wchar_t const *) 	dom/base/nsJSEnvironment.cpp
16 	xul.dll 	nsObserverService::NotifyObservers(nsISupports *,char const *,wchar_t const *) 	xpcom/ds/nsObserverService.cpp
17 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
18 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	xpcom/glue/nsThreadUtils.cpp
19 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate *) 	ipc/glue/MessagePump.cpp
20 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
21 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
22 	xul.dll 	nsBaseAppShell::Run() 	widget/xpwidgets/nsBaseAppShell.cpp
23 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp
24 	xul.dll 	nsAppStartup::Run() 	toolkit/components/startup/nsAppStartup.cpp
25 	xul.dll 	XREMain::XRE_mainRun() 	toolkit/xre/nsAppRunner.cpp
26 	xul.dll 	XREMain::XRE_main(int,char * * const,nsXREAppData const *) 	toolkit/xre/nsAppRunner.cpp
27 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp
28 	firefox.exe 	do_main 	browser/app/nsBrowserApp.cpp
29 	firefox.exe 	NS_internal_main(int,char * *) 	browser/app/nsBrowserApp.cpp
30 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp
31 	firefox.exe 	__tmainCRTStartup 	f:/dd/vctools/crt_bld/self_x86/crt/src/crtexe.c
32 	kernel32.dll 	BaseThreadInitThunk 	
33 	ntdll.dll 	__RtlUserThreadStart 	
34 	ntdll.dll 	_RtlUserThreadStart

More Reports at:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=mozalloc_abort%28char+const%2A+const%29+%7C+mozalloc_handle_oom%28unsigned+int%29+%7C+moz_xrealloc+%7C+nsTArray_base%3CnsTArrayInfallibleAllocator%2C+nsTArray_CopyWithMemutils%3E%3A%3AEnsureCapacity%28unsigned+int%2C+unsigned+int%29+%7C+XPCWrappedNative%3A%3AFlatJSObjectFinalized%28%29

Comment 1

[Paul Silaghi, QA [:pauly]]

steps to reproduce ?

Comment 2

[[e-mail]]

This type of crash is very similar to bugs being tracked here: 
https://bugzilla.mozilla.org/show_bug.cgi?id=943017

The basic steps to reproduce is to force firefox to go out of memory. Most common step is to open many tabs which are flash/image heavy.

Comment 3

[[e-mail]]

Based on my study of other similar bugs, it seems some component needs to use fallible allocator instead of infallible allocator. But since I am not involved in development, I would leave that on devs to decide what is the best solution.

Comment 4

[Liz Henry (:lizzard) (relman/hg->git project)]

I'm not sure which component to put this in but I'd love to get it out of Firefox::Untriaged.  
Benjamin I'm needinfo-ing you in because it looks like another OOM bug.  Do you want me to add these to a meta bug somewhere? Thanks!

Comment 5

[Benjamin Smedberg]

It is OOM and we're not going to fix this particular case of it. We need to understand why the OOM is happening.