QA/Topcrashes: Difference between revisions

From MozillaWiki
< QA
Jump to navigation Jump to search
 
(37 intermediate revisions by 6 users not shown)
Line 1: Line 1:
This page is a tracking document for handling and following topcrashes on the trunk.
This page is a tracking document for handling and following topcrashes on the trunk.


Info on weekly status meetings for tracking crashes and improvements to the crash reporting system is at http://wiki.mozilla.org/Breakpad/Status_Meetings
Info on weekly status meetings for tracking improvements to the crash reporting system is at [[Breakpad/Status_Meetings]]
 
If you find an extension or plugin that is the source of a crash consider filing a blocklist request - [[Blocklisting]]
 
An archive of this page is available here: [[QA/Topcrashes/Archive]]


If you find an extension or plugin that is the source of a crash consider filing a blocklist request - http://wiki.mozilla.org/Blocklisting
__TOC__
__TOC__


== Current topcrashes being tracked 3.1b3 ==
== Current topcrashes being tracked 3.5b4 ==
=== Summary ===
=== Summary ===
'''Date''' - Summary
'''Date''' - Summary


=== Queries ===
=== Queries ===
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.1b3&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=weeks Firefox 3.1b3 crashes in the past 1 ''week'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.5b4&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=weeks Firefox 3.5b4 crashes in the past 1 ''week'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.1b3&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=days Firefox 3.1b3 crashes in the past 1 ''day'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.5b4&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=days Firefox 3.5b4 crashes in the past 1 ''day'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.1b3&query_search=signature&query_type=contains&query=&date=&range_value=4&range_unit=hours Firefox 3.1b3 crashes in the past 4 ''hours'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.5b4&query_search=signature&query_type=contains&query=&date=&range_value=4&range_unit=hours Firefox 3.5b4 crashes in the past 4 ''hours'']


=== List ===
=== List ===
Line 27: Line 29:
|-  
|-  
| 1
| 1
|  
| {{bug|491514}}
| nsXULWindow::SavePersistentAttributes()
| nanojit::LIns::isTramp()
|  
| js engine / nanojit
| desc
| possible fix landed; crash "went away" on trunk with landing of {{bug|488775}}
|-  
|-  
| 2
| 2
|  
| {{bug|462728}}
| nsHTMLTextFieldAccessible::GetStateInternal(unsigned int*, unsigned int*)
| nsJARChannel::OnStartRequest(nsIRequest*, nsISupports*)
|  
| networking: jar
| desc
| patch in bug, landed on trunk
|-  
|-  
| 3
| 3
|  
| {{bug|467167}}
| LeaveTree
| _PR_MD_SEND
|  
| netwerk
| desc
| probably malware; timeless thinks LSPs, but not clear that's possible with module analysis.
|-  
|-  
| 4
| 4
| {{bug|470500}}
| nssutil3.dll@0x34c0
|  
|  
| nanojit::LIns::isTramp()
| (was 11)
|
| desc
|-  
|-  
| 5
| 5
|  
| {{bug|492492}}
| nsGlobalWindow::RunTimeout(nsTimeout*)
| libawt.jnilib@0x11e1
|  
| java on Mac?
| desc
| seems to happen when trying to download windows 7 rc on mac... but how? that requires activex. need more investigation.
|-  
|-  
| 6
| 6
|  
| {{bug|470487}}
| nsWindow::GetParentWindow()
| nsWindow::GetParentWindow()
|  
| widget
| desc
| might require major rework; could pick up in 1.9.1.x release
|-  
|-  
| 7
| 7
| {{bug|493177}}
| js_Interpret
| think these js_Interp and upVar bugs are all fixed in the same bug.
|  
|  
| nssutil3.dll@0x34c0
|
| desc
|-  
|-  
| 8
| 8
| {{bug|492504}}
| js3250.dll@0x73075
| seen on many facebook apps and ebay auctions
|  
|  
| dtoa
|
| desc
|-  
|-  
| 9
| 9
| {{bug|492675}}
| nsStyleSet::FileRules(int (*)(nsIStyleRuleProcessor*, void*), RuleProcessorData*)
|  
|  
| memmove
|  
|  
| desc
|-  
|-  
| 10
| 10
| {{bug|493287}}
| gfxTextRun::`vector deleting destructor'(unsigned int)
|  
|  
| js_SynthesizeFrame
|  
|  
| desc
|-  
|-  
| 11
| 11
| {{bug|485799}}
| memmove
|  
|  
| _PR_MD_SEND
|  
|  
| desc
|-  
|-  
| 12
| 12
| {{bug|470487}}
| nsBaseWidget::Destroy()
| getting closer to understanding plugin window destruction prob.
|  
|  
| nsCOMPtr_base::assign_assuming_AddRef(nsISupports*)
|
| desc
|-  
|-  
| 13
| 13
|  
|  
| nsBaseWidget::Destroy()
| PL_DHashTableOperate
|
|  
|  
| desc
|-  
|-  
| 14
| 14
|  
|  
| nsJARChannel::OnStartRequest(nsIRequest*, nsISupports*)
| dtoa
|
|  
|  
| desc
|-  
|-  
| 15
| 15
|  
|  
| arena_dalloc_small | arena_dalloc
| nsSocketTransport::OnSocketEvent(unsigned int, unsigned int, nsISupports*)
|  
|  
|  
| desc
|-  
|-  
| 16
| 16
|  
|  
| msvcrt.dll@0x37c89
| GraphWalker::DoWalk(nsDeque&)
|
|  
|  
| desc
|-  
|-  
| 17
| 17
|  
|  
| nsGlobalWindow::InsertTimeoutIntoList(nsTimeout*
| arena_dalloc_small | arena_dalloc
|
|  
|  
| desc
|-  
|-  
| 18
| 18
|  
|  
| @0x0
| ntdll.dll@0x43387
|
|  
|  
| desc
|-  
|-  
| 19
| 19
| {{bug|485072}}
| CallQueryInterface<nsISupports, nsXPCOMCycleCollectionParticipant>(nsISupports*, nsXPCOMCycleCollectionParticipant**)
| Crashes at shutdown and after installing a new add on
|
|-
| 20
|
| @0x0
|  
|  
| nsGlobalWindow::ResumeTimeouts(int)
|  
|  
| desc
|-  
|-  
| 20
| 21
| {{bug|492487}}
| js_DeepBail
| easy to reproduce on aim.search.aol.com
|  
|  
| JS_GetStringChars
|-
| 27
| {{bug|491604}}
| js_NewGCThing
| js engine, likely
| bug just filed
|-
| 33+97 maybe others
| {{bug|492496}}
|  [@ specializeTreesToMissingGlobals ] js3250.dll@0x60b87 js3250.dll@0x60b7e
| one-clickr and boom!
|  
|  
| desc
|}
|}


== Current topcrashes being tracked 3.0.7 ==
== Current topcrashes being tracked 3.0.11 ==
=== Summary ===
=== Summary ===
'''Date''' -  
'''Date''' -  


=== Queries ===
=== Queries ===
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.0.7&query_search=signature&query_type=contains&query=&date=&range_value=7&range_unit=days Firefox 3.0.7 crashes in the past 1 ''week'']
 
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.0.7&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=days Firefox 3.0.7 crashes in the past 1 ''day'']
* [http://crash-stats.mozilla.com/query/query?do_query=1&product=Firefox&version=Firefox%3A3.0.11&query_search=signature&query_type=contains&query=&date=&range_value=7&range_unit=days Firefox 3.0.11 crashes in the past 1 ''week'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.0.7&query_search=signature&query_type=contains&query=&date=&range_value=4&range_unit=hours Firefox 3.0.7 crashes in the past 4 ''hours'']
* [http://crash-stats.mozilla.com/query/query?do_query=1&product=Firefox&version=Firefox%3A3.0.11&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=days Firefox 3.0.11 crashes in the past 1 ''day'']
* [http://crash-stats.mozilla.com/query/query?do_query=1&product=Firefox&version=Firefox%3A3.0.11&query_search=signature&query_type=contains&query=&date=&range_value=4&range_unit=hours Firefox 3.0.11 crashes in the past 4 ''hours'']


=== List ===
=== List ===
Line 166: Line 187:
|-  
|-  
| 1
| 1
| {{bug|469366}}
| {{bug|482578}}
| nsSubDocumentFrame::Reflow
| nsSubDocumentFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&)
| layout
| dom
| wasn't in the top 100 before
| patch in bug; hoping to take it in 1.9.0.13
|-  
|-  
| 2
| 2
| {{bug|435779}}
| {{bug|498971}}
| PostMessageEvent::Run()
| Flash_EnforceLocalSecurity
| dom
| mac-only flash
| patch in bug; wasn't a topcrash before so we didn't take the patch in an earlier release
| came out of nowhere; likely caused by flash upgrade/problem/bad ad
|-  
|-  
| 3
| 3
| {{bug|444930}}
| {{bug|467167}}
| nsIFrame::GetAncestorWithView()
| _PR_MD_SEND
| acrobat reader
|  
| fixed in a new version of the plugin
| probably malware
|-  
|-  
| 4
| 4
| {{bug|467167}}
| {{bug|427715}}
| _PR_MD_SEND
| NSSRWLock_LockRead_Util
| nspr
| psm
| possibly caused by an add-on, otherwise nspr
| patch in bug; might take in 1.9.0.13
|-  
|-  
| 5
| 5
| none yet
| {{bug|498971}}
| user32.dll@0x11911
| CFReadStreamGetStatus
| plugins
| mac-only flash
| multiple plugins including S4PLUGIN.DLL, WinampTBPlayer.dll, [http://www.spywareremove.com/removeMyGlobalSearch.html MyGlobalSearch spyware] (most seem like those three)
| came out of nowhere; likely caused by flash upgrade/problem/bad ad
|-  
|-  
| 6
| 6
| {{bug|470487}}
| {{bug|444930}}
| nsWindow::GetParentWindow()
| nsIFrame::GetAncestorWithView()
|  
| plug-ins
|  
|  
|-  
|-  
| 7
| 7
| {{bug|427715}}
| {{bug|500575}}, {{bug|464213}}
| NSSRWLock_LockRead_Util
| ntdll.dll@0x43387
| psm (maybe nss)
| plugins/add-ons
| been a topcrash forever; not clear what's causing it
| some flash, some Norton Confidential (coFFPlgn.dll), a bunch of [http://www.eset.com/products/nod32.php NOD32] crashes (imon.dll)
|-  
|-  
| 8
| 8
|  
|  
| msvcrt.dll@0x37c89
| @0x0
|
|  
|  
| needs investigation
|-  
|-  
| 9
| 9
|  
| {{bug|466024}}
| libobjc.A.dylib@0x15688
| nsStyleSet::AddImportantRules(nsRuleNode*, nsRuleNode*)
|  
| css/add-on?
|  
| probably caused by bad toolbar/add-ons
|-  
|-  
| 10
| 10
|  
| {{bug|437449}}
| nsBaseWidget::Destroy()
| nsCycleCollector::MarkRoots(GCGraphBuilder&)
|  
| xpcom
|  
|  
|-  
|-  
| 11
| 11
|  
|  
| @0x0
| PL_DHashTableOperate
|  
|  
| no single crash
| needs investigation
|-  
|-  
| 12
| 12
| {{bug|437449}}
| {{bug|500105}}
| nsCycleCollector::MarkRoots(GCGraphBuilder&)
| GraphWalker::DoWalk(nsDeque&)
| ??
|  
|  
|  
|-  
|-  
| 13
| 13
| {{bug|466024}}
| nsStyleSet::AddImportantRules(nsRuleNode*, nsRuleNode*)
|  
|  
| maybe caused by extensions?
| arena_run_reg_alloc
|
| needs investigation
|-  
|-  
| 14
| 14
|  
|  
| GoogleDesktopMozilla.dll@0x5500
| memcpy | fillInCell
| google desktop
|  
|  
| needs investigation
|-  
|-  
| 15
| 15
|  
|  
| PL_DHashTableOperate
| user32.dll@0x11911
|
|  
|  
| needs investigation
|-  
|-  
| 16
| 16
|  
| {{bug|470487}}
| arena_run_reg_alloc
| nsWindow::GetParentWindow()
|  
| widget
|  
| supposedly fixed on 1.9.1, but not really; maybe fixed in {{bug|493601}} for 1.9.0.12
|-  
|-  
| 17
| 17
|  
|  
| ntdll.dll@0x43387
| kernel32.dll@0x12afb
|  
|  
|  
|  
Line 269: Line 290:
| 18
| 18
|  
|  
| msvcrt.dll@0x1226a
| avgssff.dll@0x9ba3
|  
|  
|  
|  
Line 275: Line 296:
| 19
| 19
|  
|  
| RaiseException
| msvcr80.dll@0xf880
|  
|  
|  
|  
Line 281: Line 302:
| 20
| 20
|  
|  
| kernel32.dll@0x12aeb
| NPSWF32.dll@0x15a4bf
|
|
|-
| 21
|
| GoogleDesktopMozilla.dll@0x5512
| google desktop
|
|-
| 22
|
| wcslen
|
|
|-
| 23
|
| user32.dll@0x8815
|
|
|-
| 24
|
| msvcr80.dll@0xf870
|
|
|-
| 25
|
| msvcrt.dll@0x37fd4
|  
|  
|  
|  
Line 287: Line 338:
| 26
| 26
|  
|  
| GoogleDesktopMozilla.dll@0x5512
| js_TraceObject
|
|
|-
| 27
|
| ntdll.dll@0x1b21a
|
|
|-
| 28
|
| Flash Player@0x91bd0
|
|
|-
| 29
|
| coFFPlgn.dll@0x2e2f1
|
|
|-
| 30
|
| radhslib.dll@0x3b6f
|
|
|-
| 31
|
| NPSWF32.dll@0xa7edc
|
|  
|  
| Google Desktop
|-  
|-  
| 32
| 32
|  
|  
| fastzero_I
| JS_TraceChildren
|
|
|-
| 33
|
| coWbAuth.dll@0x14e9e
|
|
|-
| 34
|
| GoogleDesktopMozilla.dll@0x5500
|
|
|-
| 35
|
| RtlpWaitForCriticalSection
|  
|  
|  
|  
|-  
|-  
| 96
| 36
|
| ageSelectionCallback
|
|
|-
| 37
|
| NPSWF32.dll@0xbbff7
|
|
|-
| 38
|
| ntdll.dll@0x19c2f
|
|
|-
| 39
|
| NPSWF32.dll@0x7c043
|
|
|-
| 40
|
| GoogleDesktopNetwork3.dll@0x3dfb
|
|
|-
| 41
|
| extent_tree_ad_s_RB_REMOVE
|
|
|-
| 42
|
| nsBaseWidget::Destroy()
|
|
|-
| 43
|
| @0x0 | coFFPlgn.dll@0x2db6a
|
|
|-
| 44
|
| js_GC
|
|
|-
| 45
|
| UserCallWinProcCheckWow
|
|
|-
| 46
|
| NPSWF32.dll@0x1b9cf9
|
|
|-
| 47
|
| RaiseException
|
|
|-
| 48
|
| js_Interpret
|
|
|-
| 49
|
| NPSWF32.dll@0x77540
|
|
|-
| 50
|
| nsGenericElement::cycleCollection::Traverse(void*, nsCycleCollectionTraversalCallback&)
|
|  
|  
| NPSWF32.dll@0x1a7640
| flash
| Windows-specific
|}
|}

Latest revision as of 01:28, 26 June 2009

This page is a tracking document for handling and following topcrashes on the trunk.

Info on weekly status meetings for tracking improvements to the crash reporting system is at Breakpad/Status_Meetings

If you find an extension or plugin that is the source of a crash consider filing a blocklist request - Blocklisting

An archive of this page is available here: QA/Topcrashes/Archive

Current topcrashes being tracked 3.5b4

Summary

Date - Summary

Queries

List

(Using the last week query.

# bug stack where status
1 bug 491514 nanojit::LIns::isTramp() js engine / nanojit possible fix landed; crash "went away" on trunk with landing of bug 488775
2 bug 462728 nsJARChannel::OnStartRequest(nsIRequest*, nsISupports*) networking: jar patch in bug, landed on trunk
3 bug 467167 _PR_MD_SEND netwerk probably malware; timeless thinks LSPs, but not clear that's possible with module analysis.
4 bug 470500 nssutil3.dll@0x34c0 (was 11)
5 bug 492492 libawt.jnilib@0x11e1 java on Mac? seems to happen when trying to download windows 7 rc on mac... but how? that requires activex. need more investigation.
6 bug 470487 nsWindow::GetParentWindow() widget might require major rework; could pick up in 1.9.1.x release
7 bug 493177 js_Interpret think these js_Interp and upVar bugs are all fixed in the same bug.
8 bug 492504 js3250.dll@0x73075 seen on many facebook apps and ebay auctions
9 bug 492675 nsStyleSet::FileRules(int (*)(nsIStyleRuleProcessor*, void*), RuleProcessorData*)
10 bug 493287 gfxTextRun::`vector deleting destructor'(unsigned int)
11 bug 485799 memmove
12 bug 470487 nsBaseWidget::Destroy() getting closer to understanding plugin window destruction prob.
13 PL_DHashTableOperate
14 dtoa
15 nsSocketTransport::OnSocketEvent(unsigned int, unsigned int, nsISupports*)
16 GraphWalker::DoWalk(nsDeque&)
17 arena_dalloc
18 ntdll.dll@0x43387
19 bug 485072 CallQueryInterface<nsISupports, nsXPCOMCycleCollectionParticipant>(nsISupports*, nsXPCOMCycleCollectionParticipant**) Crashes at shutdown and after installing a new add on
20 @0x0
21 bug 492487 js_DeepBail easy to reproduce on aim.search.aol.com
27 bug 491604 js_NewGCThing js engine, likely bug just filed
33+97 maybe others bug 492496 [@ specializeTreesToMissingGlobals ] js3250.dll@0x60b87 js3250.dll@0x60b7e one-clickr and boom!

Current topcrashes being tracked 3.0.11

Summary

Date -

Queries

List

# bug stack where status
1 bug 482578 nsSubDocumentFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) dom patch in bug; hoping to take it in 1.9.0.13
2 bug 498971 Flash_EnforceLocalSecurity mac-only flash came out of nowhere; likely caused by flash upgrade/problem/bad ad
3 bug 467167 _PR_MD_SEND probably malware
4 bug 427715 NSSRWLock_LockRead_Util psm patch in bug; might take in 1.9.0.13
5 bug 498971 CFReadStreamGetStatus mac-only flash came out of nowhere; likely caused by flash upgrade/problem/bad ad
6 bug 444930 nsIFrame::GetAncestorWithView() plug-ins
7 bug 500575, bug 464213 ntdll.dll@0x43387 plugins/add-ons some flash, some Norton Confidential (coFFPlgn.dll), a bunch of NOD32 crashes (imon.dll)
8 @0x0 needs investigation
9 bug 466024 nsStyleSet::AddImportantRules(nsRuleNode*, nsRuleNode*) css/add-on? probably caused by bad toolbar/add-ons
10 bug 437449 nsCycleCollector::MarkRoots(GCGraphBuilder&) xpcom
11 PL_DHashTableOperate needs investigation
12 bug 500105 GraphWalker::DoWalk(nsDeque&)
13 arena_run_reg_alloc needs investigation
14 fillInCell needs investigation
15 user32.dll@0x11911 needs investigation
16 bug 470487 nsWindow::GetParentWindow() widget supposedly fixed on 1.9.1, but not really; maybe fixed in bug 493601 for 1.9.0.12
17 kernel32.dll@0x12afb
18 avgssff.dll@0x9ba3
19 msvcr80.dll@0xf880
20 NPSWF32.dll@0x15a4bf
21 GoogleDesktopMozilla.dll@0x5512 google desktop
22 wcslen
23 user32.dll@0x8815
24 msvcr80.dll@0xf870
25 msvcrt.dll@0x37fd4
26 js_TraceObject
27 ntdll.dll@0x1b21a
28 Flash Player@0x91bd0
29 coFFPlgn.dll@0x2e2f1
30 radhslib.dll@0x3b6f
31 NPSWF32.dll@0xa7edc
32 JS_TraceChildren
33 coWbAuth.dll@0x14e9e
34 GoogleDesktopMozilla.dll@0x5500
35 RtlpWaitForCriticalSection
36 ageSelectionCallback
37 NPSWF32.dll@0xbbff7
38 ntdll.dll@0x19c2f
39 NPSWF32.dll@0x7c043
40 GoogleDesktopNetwork3.dll@0x3dfb
41 extent_tree_ad_s_RB_REMOVE
42 nsBaseWidget::Destroy()
43 coFFPlgn.dll@0x2db6a
44 js_GC
45 UserCallWinProcCheckWow
46 NPSWF32.dll@0x1b9cf9
47 RaiseException
48 js_Interpret
49 NPSWF32.dll@0x77540
50 nsGenericElement::cycleCollection::Traverse(void*, nsCycleCollectionTraversalCallback&)
Retrieved from "https://wiki.mozilla.org/index.php?title=QA/Topcrashes&oldid=152020"