CrashKill/2014-06-16

General

Previous Action Items

• [Carryover] KaiRo/liz to evaluate options for public stability list. KaiRo sent an email to Liz, didn't a get a reply yet.

Socorro

Flash

Desktop

• bug 1023239 (libinject2) is still huge across channels, firmly top-10 in both 31 beta and 30 release.
• Birunthan Mohanathas (poiru) is an intern who will be working on support-after-crash prompting (and other FHR-related support issues if time allows). He starts today and will be working from SF. Willian Chen will be his local mentor. He will be attending this meeting starting next week and we will add an agenda section for items related to that project.

Beta

• bug 988549 (_VEC_memzero | _VEC_memzero, startup) is #1 now. Even if the gfx team has no lead on it, we can't ignore this one.
• bug 999165 Yarr (rash in js::CrashAtUnhandlableOOM(char const*) | JSC::Yarr::YarrGenerator<int>::opCompileAlternative(JSC::Yarr::PatternAlternative*))
• 12 signatures with an explosiveness rating of 2.3 or above in the first Beta -- will triage those bugs after the meeting and escalate accordingly (source)

Aurora

• bug 1013586 and bug 1013589 are fallout from irregexp landing, fixed on trunk, need uplift of bug 1024678.
• bug 1021053 is #1, "ABORT: nested sync messages are not supported" in mozilla::ipc::MessageChannel
• OMTC for Windows is still in, so we are still seeing crashes, the gfx team seems to intend to disable it in the next weeks if they can't fix the stability and perf issues.
• Aurora continues to have a much higher crash rate than other branches. There are a handful of new signatures in the top crashers list this week. To be filed.

Trunk

• bug 1025896 - crash in mozilla::gfx::DrawTargetD2D::MaskSurface(mozilla::gfx::Pattern const&, mozilla::gfx::SourceSurface*, mozilla::gfx::PointTyped<mozilla::gfx::UnknownUnits>, mozilla::gfx::DrawOptions const&)
• bug 1025904 - crash in nvwgf2umx.dll@0xa4e4e

Android

• once again release looks good
• Beta has a NSS crash that is by and far the top crasher bug 827264
• Aurora has a uplift that is needed, bug 1011474 though the relman team seems to be on top of it
• Nightly numbers are coming back down with the fix for 1011474

B2G

• US Moz QA moving off of 1.3T, 1.3, 1.4 testing
  • Taipei team on standby for 1.3T, 1.4 testing
• flame has a new oem build v121-2; please switch to that build. v122 is under test.
• Geeksphone changed their channel settings to nightly-geeksphone; ex. http://bit.ly/1iEsyGt
  • if you click on the link, see note from bug 1026622
• Our channels have changed as well : default = engineering build; for user builds : nightly, aurora, 1.4 is "nightly-b2g30"
  • device name should be set correctly as that is the way it's determining which build for OTA/FOTA updates
    • ie : adb shell getprop ro.product.device should produce "flame" for the flame device
  • example of a search : http://bit.ly/1pdpO6F
• Signatures for OOM crashes are now either "OOM | small" (<256k), "OOM | large | foo" (needs fallible allocation), or "OOM | unknown | foo" (needs OOMAllocationSize annotation). See dev-platform/firefox-dev post from bsmedberg for more details.
• Decided to start listed blockers, blocker noms, and high crash volume bugs only; please let me know if I have to adjust.

2.1 Geeksphone

• [NEW] bug 1026006 - crash in __libc_android_abort | __android_log_assert | android::OMXCodec::freeBuffersOnPort(unsigned long, bool) | android::OMXCodec::onStateChange(OMX_STATETYPE)
• bug 1012741 - crash in mozalloc_abort(char const*) | NS_DebugBreak | mozilla::ipc::FatalError(char const*, char const*, int, bool) | mozilla::layers::PSharedBufferManagerChild::FatalError(char const*) const |...
  • happens on 2.0 as well
• bug 1016497 - crash in mozilla::layers::TextureClient::WaitForCompositorRecycle() | mozilla::layers::SimpleTextureClientPool::WaitForCompositorRecycleCallback(mozilla::layers::TextureClient*, void*) | mozilla::RefPtr<mozilla::layers::BufferTextureClient>::~RefPtr
  • need to disable SimpleTexture, vendor issue.

2.1 : Gecko 33a1

• [NEW] bug 1026631 - crash in jemalloc_crash | arena_salloc | je_realloc | realloc | moz_xrealloc | nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>::EnsureCapacity(unsigned int, unsigned int) | nsObserverList::AddObserver(nsIObserver*, bool)
• [NEW] bug 1026655 - crash in jemalloc_crash | arena_dalloc | je_free | free | moz_free | XPCNativeInterface::DestroyInstance(XPCNativeInterface*)
• [NEW] bug 1026672 - crash in jemalloc_crash | arena_dalloc | je_free | free | js::Shape::sweep()
• [NEW] bug 1026011 - crash in android::BpAudioPolicyService::initStreamVolume(audio_stream_type_t, int, int)
• happens on 2.1/2.0
• bug 1021451 - WebRTC Chat between FFOS and Desktop Computer Resulted in Graphics Crash - mozalloc_abort(char const*) | NS_DebugBreak | mozilla::ipc::FatalError(char const*, char const*, int, bool) | mozilla::layers::PSharedBufferManagerChild::SendAllocateGrallocBuffer
  • happens on 2.1/2.0
• bug 1019987 - FX OS crash in sensors.msm8610.so@0x9f02 while using Yepi app
  • qawanted

2.0, the version formerly known as 1.5 : gecko 32a2

• Not enough data; some crashes are the same as the ones happening in 2.1
• bug 1013748 - dom::bluetooth::BluetoothChild::RecvNotify crashes during monkey testing
• bug 1020956 -[RTSP][V2.0] The kernel crash happened if RTSP streaming is interrupted several times by incoming call

1.4 : Gecko 30.0

• bug 1019422 - [Flame][V1.4][System]Device Crashed after MT a call when playing a video
• bug 1025414 - wifi_start_supplicant crashes
• bug 1025312 - Crash in NetworkWorker::~NetworkWorker while stability testing
• bug 1017757 - Crash in JSCompartment::wrapId() while stability testing
• bug 1008791 - Crash in stability test [@ ? | pthread_kill | raise | __libc_android_abort | ... | js::BaseProxyHandler::get(JSContext*, JS::Handle, JS::Handle, JS::Handle, JS::MutableHandleJS::Value) ]
• bug 1015852 - [dolphin][monkey test] monkey test crash at libxul.so!mozilla::gl::GLContextProviderEGL::CreateForWindow(nsIWidget*)
• bug 1016512 - Crash in MOZ_PNG_read_filt_row_a while stability testing
• bug 1017740 - Crash in js::NewObjectWithClassProtoCommon() while running stability scripts

1.3/1.3T : Gecko 28.0/28.1

• bug 1000271 - [Camera][Gecko][Tarako] Semi-auto camera test causes tarako camera to crash
• bug 1007019 - [tarako] Facebook crashes whenever trying to upload a photo
• bug 1017504 - [Sora][FOTA] after FOTA updates,the system crash

Notes

Upcoming PTO

• Tracy - PTO June 20 and June 24 through July 13
• David is out Wed-Fri
• Anthony Hughes will be on vacation from June 25 until July 2

Action Items

• Liz to add more info out of crash reports (address similarities, gfx cards, etc.) into bug 988549 to help getting actions from devs.
• Juan to cover for beta stability when both Anthony and Liz are unavailable next week.