Mobile/4.0b5 crashes

From MozillaWiki
Jump to: navigation, search

Don't bother looking at crashes newer than March 4, and even ones from then can be hit or miss - some have been reprocessed, most haven't. The numbers on the main crash listing page mean nothing and are frequently incorrect, unfortunately.


tl;dr: The generic OOM (libc.so, 0xdeadbaad), nsJNIString leak (libdvm.so, 0xdeadd00d), and CloseSuperfluousFds (libc.so, non-0xdeadbaad) triumvirate take the cake for probably >90% of all crashes. The JNIString leak is fixed, and the CloseSuperfluousFds crash only happens in the content process, so we're in decent shape.


Now, drilling down:

Most named stacks are invalid recent ones or references to old reprocessed ones - the vast majority of crashes are hidden behind libc.so, libdvm.so and libxul.so. Continue to see libz.so stacks, not necessarily happening on cyanogenmod devices. OOM stacks are still pretty screwed up and don't give much useful info (libc.so, crash address 0xdeadbaad) Child process crashes don't display hardware type - this is a known bug.


OOM stacks - why are they so wacky? Either they have a single common nonsense frame showing after mozalloc_abort (nsXULTemplateQueryProcessorRDF::ComputeContainmentProperties), or they have a bunch of unrelated stacks interleaved,like https://crash-stats.mozilla.com/report/index/697fd5b5-fca4-4bb3-a748-72fd12110227


Other common crashes:

gfxFont::AddRef

nsThebesFontMetrics::GetMetrics

nsXPConnect::GetPrincipal and friends, but that's fixed in recent builds (yay!)

js::Interpret coming out of nsFrameMessageManager

Large numbers of libc-2.5.so crashes with non-useful stack, quite mysterious


Interesting crashes encountered:

A couple js_EmitTree crashes at startup

Strange PR_AtomicDecrement stacks, ipc-related: https://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2011-03-05%2005%3A00%3A00&signature=PR_AtomicDecrement%20%7C%20PR_DestroyCondVar&version=Fennec%3A4.0b5

Seems like any stack that begins with "@0x0 |" contains Java_org_mozilla_gecko_GeckoAppShell_callObserver

The regular nsTHashtable<mozilla::FrameLayerBuilder::ThebesLayerItemsEntry>::s_ClearEntry> crash is still around: https://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2011-03-05%2005%3A00%3A00&signature=nsTArray_base%3CnsTArrayDefaultAllocator%3E%3A%3AShiftData%20%7C%20nsTHashtable%3Cmozilla%3A%3AFrameLayerBuilder%3A%3AThebesLayerItemsEntry%3E%3A%3As_ClearEntry&version=Fennec%3A4.0b5

libGLES* crashes: https://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2011-03-05%2005%3A00%3A00&signature=libGLESv2_adreno200.so%400x7afd6&version=Fennec%3A4.0b5 https://crash-stats.mozilla.com/report/index/4bff1f97-1180-4247-acee-501002110301

AndroidBridge::SetClipboardText: https://crash-stats.mozilla.com/report/index/739b7d65-e12b-4c2b-9520-5f7722110304

xpconnect: https://crash-stats.mozilla.com/report/index/ac049960-85b6-495f-a76e-ce7402110227

PL_Arena_Allocate: https://crash-stats.mozilla.com/report/index/4355382b-9607-437c-9547-d03992110226

js: https://crash-stats.mozilla.com/report/index/47b646fe-68bc-471e-8a21-25fbd2110227

libz, from turning canvas data into a png: https://crash-stats.mozilla.com/report/index/793dbf2b-b8ff-4d58-90cf-fa4832110301 https://crash-stats.mozilla.com/report/index/b035bb8d-d636-466a-9d6d-331c92110302


Varities of different crashes hiding behind libc.so and libxul.so, in descending popularity:

neon_composite_src_0565_0565: https://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2011-03-05%2005%3A00%3A00&signature=libxul.so%400xc533e4&version=Fennec%3A4.0b5

vp8 decoding: https://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2011-03-05%2005%3A00%3A00&signature=libxul.so%400x5fe490&version=Fennec%3A4.0b5

HttpChannelChild::OnDataAvailable: https://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2011-03-05%2005%3A00%3A00&signature=libxul.so%400xdb100&version=Fennec%3A4.0b5

js mjit: https://crash-stats.mozilla.com/report/index/ec523b7d-8026-428d-96fa-f1fe82110301

chromium ipc: https://crash-stats.mozilla.com/report/index/81df1589-e9fe-4b3b-94a9-af1a12110304

cycle collector: https://crash-stats.mozilla.com/report/index/b1dd6dbd-72d9-469d-923c-0db612110301

nsStyleFont allocation: https://crash-stats.mozilla.com/report/index/7095dbb8-268f-4821-9459-8cc612110228

places -> nsACString: https://crash-stats.mozilla.com/report/index/e0ee2857-2b22-4205-8b9f-f855d2110226

various jit crashes: https://crash-stats.mozilla.com/report/index/d6b1aef5-3c49-41b4-8824-abd102110301 https://crash-stats.mozilla.com/report/index/6e76dfa9-035b-481f-b28c-067dd2110224 https://crash-stats.mozilla.com/report/index/6e76dfa9-035b-481f-b28c-067dd2110224