Closed Bug 989910 Opened 11 years ago Closed 11 years ago

[tarako] crash at libc.so!pthread_mutex_lock [pthread.c : 1036 + 0x0]

Categories

(Firefox OS Graveyard :: General, defect)

Other
Gonk (Firefox OS)
defect
Not set
normal

Tracking

(blocking-b2g:-, b2g-v1.3T affected)

RESOLVED WORKSFORME
blocking-b2g -
Tracking Status
b2g-v1.3T --- affected

People

(Reporter: angelc04, Unassigned)

Details

(Keywords: crash, Whiteboard: [b2g-crash])

Attachments

(2 files)

Operating system: Android 0.0.0 Linux 3.0.8+ #1 PREEMPT Fri Mar 28 03:22:55 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/204:userdebug/test-keys CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0xc8 Thread 0 (crashed) 0 libc.so!pthread_mutex_lock [pthread.c : 1036 + 0x0] r4 = 0x000000c8 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98ef60 lr = 0x4003ad73 pc = 0x400fa558 Found by: given as instruction pointer in context 1 libmozglue.so!__wrap_pthread_mutex_lock [Nuwa.cpp : 1075 + 0x5] r4 = 0x00000000 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98ef80 pc = 0x4003ad73 Found by: call frame info 2 libxul.so!LockImpl::Lock() [lock_impl_posix.cc : 41 + 0x3] r4 = 0x00000000 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98efa0 pc = 0x4097af97 Found by: call frame info 3 libxul.so!MessageLoop::PostTask_Helper(tracked_objects::Location const&, Task*, int, bool) [lock.h : 16 + 0x3] r4 = 0x00000000 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98efa8 pc = 0x40983307 Found by: call frame info 4 libxul.so!MessageLoop::PostTask(tracked_objects::Location const&, Task*) [message_loop.cc : 255 + 0x7] r4 = 0x00000000 r5 = 0x404055f0 r6 = 0x00000000 r7 = 0x00000006 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98efe8 pc = 0x4098334d Found by: call frame info 5 libxul.so!ChildThread::Run() [child_thread.cc : 39 + 0x3] r4 = 0x00000000 r5 = 0x404055f0 r6 = 0x00000000 r7 = 0x00000006 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98eff8 pc = 0x40985713 Found by: call frame info 6 libxul.so!ChildProcess::ChildProcess [child_process.cc : 20 + 0x3] r4 = 0x4043e800 r5 = 0x00000050 r6 = 0x40437180 r7 = 0x00000006 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98f018 pc = 0x40985037 Found by: call frame info 7 libxul.so!mozilla::ipc::ProcessChild::ProcessChild [ProcessChild.cpp : 21 + 0xb] r4 = 0x4043e800 r5 = 0x00000050 r6 = 0x40437180 r7 = 0x00000006 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98f020 pc = 0x4098c6a7 Found by: call frame info 8 libxul.so!XRE_InitChildProcess [ContentProcess.h : 30 + 0x3] r4 = 0x41ec5b5c r5 = 0xbe98fa14 r6 = 0x4043e800 r7 = 0x00000006 r8 = 0xbe98fa2c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98f030 pc = 0x41353c75 Found by: call frame info 9 plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5] r4 = 0x00000001 r5 = 0xbe98fa14 r6 = 0x00000008 r7 = 0x000087f3 r8 = 0x00000009 r9 = 0xbe98fa34 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98f9d8 pc = 0x00008751 Found by: call frame info 10 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00008674 r5 = 0xbe98fa14 r6 = 0x00000009 r7 = 0xbe98fa3c r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98f9f8 pc = 0x400fea57 Found by: call frame info 11 0xb0001dc5 r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe98fa10 pc = 0xb0001dc7 Found by: call frame info Loaded modules: 0x00008000 - 0x00009fff plugin-container ??? (main) 0x40002000 - 0x40023fff libGLESv2_dbg.so ??? 0x40025000 - 0x4006bfff libmozglue.so ??? 0x4006f000 - 0x40072fff liblog.so ??? 0x40073000 - 0x4007afff __properties__ (deleted) ??? 0x4007c000 - 0x4008bfff libcutils.so ??? 0x4009b000 - 0x400a0fff libnetutils.so ??? 0x400a1000 - 0x400a3fff libemoji.so ??? 0x400a4000 - 0x400a5fff libstagefright_enc_common.so ??? 0x400a6000 - 0x400bbfff libm.so ??? 0x400bc000 - 0x400bffff libgabi++.so ??? 0x400c0000 - 0x400c4fff libGLESv2.so ??? 0x400c5000 - 0x400cafff libstagefright_avc_common.so ??? 0x400cf000 - 0x400d0fff libhardware.so ??? 0x400d2000 - 0x400d3fff libstdc++.so ??? 0x400d8000 - 0x400dafff libwpa_client.so ??? 0x400dd000 - 0x400e2fff libhardware_legacy.so ??? 0x400e3000 - 0x400e7fff libsysutils.so ??? 0x400e8000 - 0x4012cfff libc.so ??? 0x40138000 - 0x4014ffff libz.so ??? 0x40150000 - 0x40152fff libstagefright_yuv.so ??? 0x40254000 - 0x403effff libnss3.so ??? 0x403f3000 - 0x403fdfff libstagefright_foundation.so ??? 0x40500000 - 0x41ec7fff libxul.so ??? 0x42030000 - 0x4207afff libdbus.so ??? 0x4207b000 - 0x4219efff libstagefright.so ??? 0x4219f000 - 0x421c9fff libbinder.so ??? 0x421ca000 - 0x421f8fff libutils.so ??? 0x421f9000 - 0x42263fff libmedia.so ??? 0x42264000 - 0x4227afff libui.so ??? 0x4227b000 - 0x4229efff libEGL.so ??? 0x422a1000 - 0x422d4fff libstlport.so ??? 0x422d5000 - 0x422f0fff libpixelflinger.so ??? 0x422f1000 - 0x42412fff libskia.so ??? 0x42419000 - 0x42450fff libjpeg.so ??? 0x42451000 - 0x42464fff libexpat.so ??? 0x42465000 - 0x424b3fff libsonivox.so ??? 0x424b9000 - 0x425aefff libicuuc.so ??? 0x425b1000 - 0x425ccfff libcamera_client.so ??? 0x425cd000 - 0x425f6fff libgui.so ??? 0x425f7000 - 0x4260ffff libvorbisidec.so ??? 0x42610000 - 0x42626fff libdrmframework.so ??? 0x42627000 - 0x426f0fff libcrypto.so ??? 0x426f3000 - 0x42720fff libssl.so ??? 0x42721000 - 0x4272dfff libstagefright_amrnb_common.so ??? 0x4272e000 - 0x42748fff libstagefright_omx.so ??? 0x42749000 - 0x4275cfff libsensorservice.so ??? 0x4275d000 - 0x42c4afff omni.ja ???
blocking-b2g: --- → 1.3T?
Other Nuwa issue. -- Keven
Flags: needinfo?(cyu)
Any STR? Can we have more detailed information about the crash?
Flags: needinfo?(cyu) → needinfo?(pcheng)
(In reply to Cervantes Yu from comment #2) > Any STR? Can we have more detailed information about the crash? Sorry for missing the STR. This is a low reproduce rate issue. -------------------------------------------------------------------------------------- 1. insert two SIM cards 2. Start device 3. Put device in no service place for a while 4. Then take device back to the place which have signal 5. Make a phone call --> This crash may happen This is not the only way to reproduce. But it only happens when device search network again. Since I could not reproduce again, I have no adb log. Could you please help check what may cause this problem?
Flags: needinfo?(pcheng)
ni? cyu to look at comment 3
Flags: needinfo?(cyu)
It's a crash in the Nuwa process in very early stage of initialization. The Nuwa process should never die. If you see this crash, then it could be 1) Nuwa process killed and restarted 2) a crash of the original Nuwa process. Since there is no adb log, I don't have any actionable item until there is more information.
Flags: needinfo?(cyu)
Can you have someone provide more information?
Flags: needinfo?(james.zhang)
Just tried to reproduce with the STR in comment #3 but didn't see any crash.
peipei, please get slog from our server and attach it, we give you account yesterday.
Flags: needinfo?(james.zhang) → needinfo?(pcheng)
Attached file slog.tar.gz
please see attached slog.
Flags: needinfo?(pcheng)
unless it is happening frequently in stability testing, let's not block tarako release with this. thanks
blocking-b2g: 1.3T? → -
spreadtrum saw this crash again. attached new slog.
Operating system: Android 0.0.0 Linux 3.0.8+ #1 PREEMPT Sat Apr 12 04:25:31 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/256:userdebug/test-keys CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0xdeadbaad Thread 0 (crashed) 0 libc.so!__libc_android_abort [abort.c : 82 + 0x0] r4 = 0x00000000 r5 = 0x00000027 r6 = 0x00000000 r7 = 0xffffffff r8 = 0xbe97cf4f r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97ce80 lr = 0x400d5429 pc = 0x400d1b8c Found by: given as instruction pointer in context 1 libmozglue.so!NuwaSpawn [Nuwa.cpp : 1377 + 0x3] r4 = 0x00000000 r5 = 0xffffffff r6 = 0x00000000 r7 = 0xffffffff r8 = 0xbe97cf4f r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cea8 pc = 0x40086591 Found by: call frame info 2 libxul.so!mozilla::dom::CallNuwaSpawn::Run() [ContentChild.cpp : 1619 + 0x3] r4 = 0x40316880 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbe97cf4f r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cee8 pc = 0x40c1927f Found by: call frame info 3 libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp : 612 + 0x5] r4 = 0x40316880 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbe97cf4f r9 = 0x403168ac r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cf08 pc = 0x40760e95 Found by: call frame info 4 libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp : 263 + 0xb] r4 = 0x00000000 r5 = 0xbe97d85c r6 = 0x40302ad0 r7 = 0x00000000 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cf48 pc = 0x40733c21 Found by: call frame info 5 libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 85 + 0x7] r4 = 0x40302ac0 r5 = 0xbe97d85c r6 = 0x40302ad0 r7 = 0x00000000 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cf58 pc = 0x4088c6f9 Found by: call frame info 6 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 250 + 0x7] r4 = 0xbe97d85c r5 = 0x40302ac0 r6 = 0xbe97d85c r7 = 0x00000001 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cf80 pc = 0x4088c7c7 Found by: call frame info 7 libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5] r4 = 0xbe97d85c r5 = 0x42ee62e0 r6 = 0x40316880 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cf98 pc = 0x408826a1 Found by: call frame info 8 libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5] r4 = 0xbe97d85c r5 = 0x42ee62e0 r6 = 0x40316880 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cfa0 pc = 0x4088271f Found by: call frame info 9 libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp : 161 + 0x7] r4 = 0x00000000 r5 = 0x42ee62e0 r6 = 0x40316880 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cfb8 pc = 0x40c46515 Found by: call frame info 10 libxul.so!XRE_RunAppShell [nsEmbedFunctions.cpp : 679 + 0x5] r4 = 0x80004005 r5 = 0x40302ac0 r6 = 0x4033e800 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cfc8 pc = 0x412551bb Found by: call frame info 11 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp : 217 + 0x3] r4 = 0xbe97d85c r5 = 0x40302ac0 r6 = 0x4033e800 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cfd8 pc = 0x4088c795 Found by: call frame info 12 libxul.so!MessageLoop::RunInternal() [message_loop.cc : 222 + 0x5] r4 = 0xbe97d85c r5 = 0xbe97d96c r6 = 0x4033e800 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cff0 pc = 0x408826a1 Found by: call frame info 13 libxul.so!MessageLoop::Run() [message_loop.cc : 215 + 0x5] r4 = 0xbe97d85c r5 = 0xbe97d96c r6 = 0x4033e800 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97cff8 pc = 0x4088271f Found by: call frame info 14 libxul.so!XRE_InitChildProcess [nsEmbedFunctions.cpp : 516 + 0x9] r4 = 0xbe97d978 r5 = 0xbe97d96c r6 = 0x4033e800 r7 = 0x00000003 r8 = 0xbe97d9f8 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97d010 pc = 0x41255629 Found by: call frame info 15 plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5] r4 = 0x00000001 r5 = 0xbe97d9f4 r6 = 0x00000008 r7 = 0x000087f3 r8 = 0x00000009 r9 = 0xbe97da14 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97d9b8 pc = 0x00008751 Found by: call frame info 16 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00008674 r5 = 0xbe97d9f4 r6 = 0x00000009 r7 = 0xbe97da1c r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97d9d8 pc = 0x400d0a57 Found by: call frame info 17 0xb0001dc5 r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbe97d9f0 pc = 0xb0001dc7 Found by: call frame info Operating system: Android 0.0.0 Linux 3.0.8+ #1 PREEMPT Sat Apr 12 04:25:31 CST 2014 armv7l Spreadtrum/sp6821a_gonk/sp6821a_gonk:4.0.4.0.4.0.4/OPENMASTER/256:userdebug/test-keys CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0xc8 Thread 0 (crashed) 0 libc.so!pthread_mutex_lock [pthread.c : 1036 + 0x0] r4 = 0x000000c8 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea46f40 lr = 0x400dbd73 pc = 0x40030558 Found by: given as instruction pointer in context 1 libmozglue.so!__wrap_pthread_mutex_lock [Nuwa.cpp : 1075 + 0x5] r4 = 0x00000000 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea46f60 pc = 0x400dbd73 Found by: call frame info 2 libxul.so!LockImpl::Lock() [lock_impl_posix.cc : 41 + 0x3] r4 = 0x00000000 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea46f80 pc = 0x4097b1ff Found by: call frame info 3 libxul.so!MessageLoop::PostTask_Helper(tracked_objects::Location const&, Task*, int, bool) [lock.h : 16 + 0x3] r4 = 0x00000000 r5 = 0x000000c8 r6 = 0x00000000 r7 = 0x00000001 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea46f88 pc = 0x40983557 Found by: call frame info 4 libxul.so!MessageLoop::PostTask(tracked_objects::Location const&, Task*) [message_loop.cc : 255 + 0x7] r4 = 0x00000000 r5 = 0x404055f0 r6 = 0x00000000 r7 = 0x00000006 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea46fc8 pc = 0x4098359d Found by: call frame info 5 libxul.so!ChildThread::Run() [child_thread.cc : 39 + 0x3] r4 = 0x00000000 r5 = 0x404055f0 r6 = 0x00000000 r7 = 0x00000006 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea46fd8 pc = 0x40985963 Found by: call frame info 6 libxul.so!ChildProcess::ChildProcess [child_process.cc : 20 + 0x3] r4 = 0x4043e800 r5 = 0x00000053 r6 = 0x40437180 r7 = 0x00000006 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea46ff8 pc = 0x40985287 Found by: call frame info 7 libxul.so!mozilla::ipc::ProcessChild::ProcessChild [ProcessChild.cpp : 21 + 0xb] r4 = 0x4043e800 r5 = 0x00000053 r6 = 0x40437180 r7 = 0x00000006 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea47000 pc = 0x4098c8f7 Found by: call frame info 8 libxul.so!XRE_InitChildProcess [ContentProcess.h : 30 + 0x3] r4 = 0x41ec894c r5 = 0xbea479f4 r6 = 0x4043e800 r7 = 0x00000006 r8 = 0xbea47a0c r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea47010 pc = 0x41355525 Found by: call frame info 9 plugin-container!main [MozillaRuntimeMain.cpp : 137 + 0x5] r4 = 0x00000001 r5 = 0xbea479f4 r6 = 0x00000008 r7 = 0x000087f3 r8 = 0x00000009 r9 = 0xbea47a14 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea479b8 pc = 0x00008751 Found by: call frame info 10 libc.so!__libc_init [libc_init_dynamic.c : 114 + 0x7] r4 = 0x00008674 r5 = 0xbea479f4 r6 = 0x00000009 r7 = 0xbea47a1c r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea479d8 pc = 0x40034a57 Found by: call frame info 11 0xb0001dc5 r4 = 0x00000000 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00000000 fp = 0x00000000 sp = 0xbea479f0 pc = 0xb0001dc7 Found by: call frame info
blocking-b2g: - → 1.3T?
Is this crash found during monkey test?
ni? James, what's the reason for asking blocking on this? we have not seen this crash this week
Flags: needinfo?(james.zhang)
libmozglue.so!NuwaSpawn nuwa crash, is it caused by OOM?
Flags: needinfo?(james.zhang)
Its going to be hard to block on race-conditions like these, unless there is more data on frequency or scenario's this is hard to block on,
blocking-b2g: 1.3T? → -
(In reply to James Zhang from comment #15) > libmozglue.so!NuwaSpawn > nuwa crash, is it caused by OOM? Unlikely. The last crash stack means that some thread unknown to us is seen after we forked from the Nuwa process. How's the phone behave when this happens?
Hey Peipei, I just noticed someone asking a question for you in comment 17. I thought perhaps a needinfo? might help.
Flags: needinfo?(pcheng)
Since we haven't meet this crash for over one month. I would like to close this bug.
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(pcheng)
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: