QA/Topcrashes: Difference between revisions

 
(24 intermediate revisions by 3 users not shown)
Line 1: Line 1:
This page is a tracking document for handling and following topcrashes on the trunk.
This page is a tracking document for handling and following topcrashes on the trunk.


Info on weekly status meetings for tracking crashes and improvements to the crash reporting system is at http://wiki.mozilla.org/Breakpad/Status_Meetings
Info on weekly status meetings for tracking improvements to the crash reporting system is at [[Breakpad/Status_Meetings]]
 
If you find an extension or plugin that is the source of a crash consider filing a blocklist request - [[Blocklisting]]
 
An archive of this page is available here: [[QA/Topcrashes/Archive]]


If you find an extension or plugin that is the source of a crash consider filing a blocklist request - http://wiki.mozilla.org/Blocklisting
__TOC__
__TOC__


Line 30: Line 32:
| nanojit::LIns::isTramp()
| nanojit::LIns::isTramp()
| js engine / nanojit
| js engine / nanojit
|  
| possible fix landed; crash "went away" on trunk with landing of {{bug|488775}}
|-  
|-  
| 2
| 2
Line 39: Line 41:
|-  
|-  
| 3
| 3
|  
| {{bug|467167}}
| _PR_MD_SEND
| _PR_MD_SEND
|  
| netwerk
| probably malware
| probably malware; timeless thinks LSPs, but not clear that's possible with module analysis.
|-  
|-  
| 4
| 4
| {{bug|470487}}
| {{bug|470500}}
| nsWindow::GetParentWindow()
| nssutil3.dll@0x34c0
|
|  
|  
| (was 11)
|-  
|-  
| 5
| 5
| lots
| libobjc.A.dylib@0x15688
| cocoa widgets
| general stack signature; needs to get broken up
|-
| 6
| {{bug|491604}}
| js_NewGCThing
| js engine, likely
| bug just filed
|-
| 7
| {{bug|492492}}
| {{bug|492492}}
| libawt.jnilib@0x11e1
| libawt.jnilib@0x11e1
Line 68: Line 58:
| seems to happen when trying to download windows 7 rc on mac... but how? that requires activex. need more investigation.
| seems to happen when trying to download windows 7 rc on mac... but how? that requires activex. need more investigation.
|-  
|-  
| 8
| 6
|  
| {{bug|470487}}
| nsWindow::GetParentWindow()
| widget
| might require major rework; could pick up in 1.9.1.x release
|-
| 7
| {{bug|493177}}
| js_Interpret
| js_Interpret
| think these js_Interp and upVar bugs are all fixed in the same bug.
|  
|  
|-
| 8
| {{bug|492504}}
| js3250.dll@0x73075
| seen on many facebook apps and ebay auctions
|  
|  
|-  
|-  
| 9
| 9
|  
| {{bug|492675}}
| nsBaseWidget::Destroy()
| nsStyleSet::FileRules(int (*)(nsIStyleRuleProcessor*, void*), RuleProcessorData*)
|  
|  
|  
|  
|-  
|-  
| 10
| 10
|  
| {{bug|493287}}
| dtoa
| gfxTextRun::`vector deleting destructor'(unsigned int)
|  
|  
|  
|  
|-  
|-  
| 11
| 11
|  
| {{bug|485799}}
| nssutil3.dll@0x34c0
| memmove
|  
|  
|  
|  
|-  
|-  
| 12
| 12
|  
| {{bug|470487}}
| nsStyleSet::FileRules(int (*)(nsIStyleRuleProcessor*, void*), RuleProcessorData*)
| nsBaseWidget::Destroy()
|  
| getting closer to understanding plugin window destruction prob.
|  
|  
|-  
|-  
| 13
| 13
|  
|  
| gfxTextRun::`vector deleting destructor'(unsigned int)
| PL_DHashTableOperate
|  
|  
|  
|  
|-  
|-  
| 13a
| 14
| {{bug|492487}}
|  
| js_DeepBail
| dtoa
| easy to reproduce on aim.search.aol.com
|  
|  
|-
| 14
| {{bug|492504}}
| js3250.dll@0x73075
| seen on many facebook apps and ebay auctions
|  
|  
|-  
|-  
| 15
| 15
|  
|  
| PL_DHashTableOperate
| nsSocketTransport::OnSocketEvent(unsigned int, unsigned int, nsISupports*)
|  
|  
|  
|  
Line 124: Line 120:
| 16
| 16
|  
|  
| nsObjCExceptionLogAbort
| GraphWalker::DoWalk(nsDeque&)
|  
|  
|  
|  
Line 130: Line 126:
| 17
| 17
|  
|  
| memmove
| arena_dalloc_small | arena_dalloc
|  
|  
|  
|  
Line 136: Line 132:
| 18
| 18
|  
|  
| arena_dalloc_small | arena_dalloc
| ntdll.dll@0x43387
|  
|  
|  
|  
|-  
|-  
| 19
| 19
|  
| {{bug|485072}}
| CallQueryInterface<nsISupports, nsXPCOMCycleCollectionParticipant>(nsISupports*, nsXPCOMCycleCollectionParticipant**)
| CallQueryInterface<nsISupports, nsXPCOMCycleCollectionParticipant>(nsISupports*, nsXPCOMCycleCollectionParticipant**)
|  
| Crashes at shutdown and after installing a new add on
|  
|  
|-  
|-  
| 20
| 20
|  
|  
| nsSocketTransport::OnSocketEvent(unsigned int, unsigned int, nsISupports*)
| @0x0
|  
|  
|  
|  
|-  
|-  
| 21
| 21
| {{bug|492487}}
| js_DeepBail
| easy to reproduce on aim.search.aol.com
|  
|  
| GraphWalker::DoWalk(nsDeque&)
|
|
|-  
|-  
| 22
| 27
|  
| {{bug|491604}}
|  
| js_NewGCThing
|  
| js engine, likely
| bug just filed
|-
| 33+97 maybe others
| {{bug|492496}}
| [@ specializeTreesToMissingGlobals ] js3250.dll@0x60b87 js3250.dll@0x60b7e
| one-clickr and boom!
|  
|  
|}
|}


== Current topcrashes being tracked 3.0.7 ==
== Current topcrashes being tracked 3.0.11 ==
=== Summary ===
=== Summary ===
'''Date''' -  
'''Date''' -  
Line 171: Line 173:
=== Queries ===
=== Queries ===


* [http://crash-stats.mozilla.com/query/query?do_query=1&product=Firefox&version=Firefox%3A3.0.10&date=&range_value=1&range_unit=weeks&query_search=signature&query_type=exact&query= Firefox 3.0.10 crashes in the past 1 ''week'']
* [http://crash-stats.mozilla.com/query/query?do_query=1&product=Firefox&version=Firefox%3A3.0.11&query_search=signature&query_type=contains&query=&date=&range_value=7&range_unit=days Firefox 3.0.11 crashes in the past 1 ''week'']
 
* [http://crash-stats.mozilla.com/query/query?do_query=1&product=Firefox&version=Firefox%3A3.0.11&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=days Firefox 3.0.11 crashes in the past 1 ''day'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.0.7&query_search=signature&query_type=contains&query=&date=&range_value=7&range_unit=days Firefox 3.0.7 crashes in the past 1 ''week'']
* [http://crash-stats.mozilla.com/query/query?do_query=1&product=Firefox&version=Firefox%3A3.0.11&query_search=signature&query_type=contains&query=&date=&range_value=4&range_unit=hours Firefox 3.0.11 crashes in the past 4 ''hours'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.0.7&query_search=signature&query_type=contains&query=&date=&range_value=1&range_unit=days Firefox 3.0.7 crashes in the past 1 ''day'']
* [http://crash-stats.mozilla.com/?do_query=1&product=Firefox&version=Firefox%3A3.0.7&query_search=signature&query_type=contains&query=&date=&range_value=4&range_unit=hours Firefox 3.0.7 crashes in the past 4 ''hours'']


=== List ===
=== List ===
need to rework this list for 3.0.10


{| class="fullwidth-table"
{| class="fullwidth-table"
Line 189: Line 187:
|-  
|-  
| 1
| 1
| {{bug|469366}}
| {{bug|482578}}
| nsSubDocumentFrame::Reflow
| nsSubDocumentFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&)
| layout
| dom
| wasn't in the top 100 before
| patch in bug; hoping to take it in 1.9.0.13
|-  
|-  
| 2
| 2
| {{bug|435779}}
| {{bug|498971}}
| PostMessageEvent::Run()
| Flash_EnforceLocalSecurity
| dom
| mac-only flash
| patch in bug; wasn't a topcrash before so we didn't take the patch in an earlier release
| came out of nowhere; likely caused by flash upgrade/problem/bad ad
|-  
|-  
| 3
| 3
| {{bug|444930}}
| {{bug|467167}}
| nsIFrame::GetAncestorWithView()
| _PR_MD_SEND
| acrobat reader
|  
| fixed in a new version of the plugin
| probably malware
|-  
|-  
| 4
| 4
| {{bug|467167}}
| {{bug|427715}}
| _PR_MD_SEND
| NSSRWLock_LockRead_Util
| nspr
| psm
| possibly caused by an add-on, otherwise nspr
| patch in bug; might take in 1.9.0.13
|-  
|-  
| 5
| 5
| none yet
| {{bug|498971}}
| user32.dll@0x11911
| CFReadStreamGetStatus
| plugins
| mac-only flash
| multiple plugins including S4PLUGIN.DLL, WinampTBPlayer.dll, [http://www.spywareremove.com/removeMyGlobalSearch.html MyGlobalSearch spyware] (most seem like those three)
| came out of nowhere; likely caused by flash upgrade/problem/bad ad
|-  
|-  
| 6
| 6
| {{bug|470487}}
| {{bug|444930}}
| nsWindow::GetParentWindow()
| nsIFrame::GetAncestorWithView()
|  
| plug-ins
|  
|  
|-  
|-  
| 7
| 7
| {{bug|427715}}
| {{bug|500575}}, {{bug|464213}}
| NSSRWLock_LockRead_Util
| ntdll.dll@0x43387
| psm (maybe nss)
| plugins/add-ons
| been a topcrash forever; not clear what's causing it
| some flash, some Norton Confidential (coFFPlgn.dll), a bunch of [http://www.eset.com/products/nod32.php NOD32] crashes (imon.dll)
|-  
|-  
| 8
| 8
|  
|  
| msvcrt.dll@0x37c89
| @0x0
|
|  
|  
| needs investigation
|-  
|-  
| 9
| 9
| {{bug|459531}}
| {{bug|466024}}
| libobjc.A.dylib@0x15688
| nsStyleSet::AddImportantRules(nsRuleNode*, nsRuleNode*)
|  
| css/add-on?
|  
| probably caused by bad toolbar/add-ons
|-  
|-  
| 10
| 10
|  
| {{bug|437449}}
| nsBaseWidget::Destroy()
| nsCycleCollector::MarkRoots(GCGraphBuilder&)
|  
| xpcom
|  
|  
|-  
|-  
| 11
| 11
|  
|  
| @0x0
| PL_DHashTableOperate
|  
|  
| no single crash
| needs investigation
|-  
|-  
| 12
| 12
| {{bug|437449}}
| {{bug|500105}}
| nsCycleCollector::MarkRoots(GCGraphBuilder&)
| GraphWalker::DoWalk(nsDeque&)
| ??
|  
|  
|  
|-  
|-  
| 13
| 13
| {{bug|466024}}
| nsStyleSet::AddImportantRules(nsRuleNode*, nsRuleNode*)
|  
|  
| maybe caused by extensions?
| arena_run_reg_alloc
|
| needs investigation
|-  
|-  
| 14
| 14
|  
|  
| GoogleDesktopMozilla.dll@0x5500
| memcpy | fillInCell
| google desktop
|  
|  
| needs investigation
|-  
|-  
| 15
| 15
|  
|  
| PL_DHashTableOperate
| user32.dll@0x11911
|
|  
|  
| needs investigation
|-  
|-  
| 16
| 16
|  
| {{bug|470487}}
| arena_run_reg_alloc
| nsWindow::GetParentWindow()
|  
| widget
|  
| supposedly fixed on 1.9.1, but not really; maybe fixed in {{bug|493601}} for 1.9.0.12
|-  
|-  
| 17
| 17
|  
|  
| ntdll.dll@0x43387
| kernel32.dll@0x12afb
|  
|  
|  
|  
Line 292: Line 290:
| 18
| 18
|  
|  
| msvcrt.dll@0x1226a
| avgssff.dll@0x9ba3
|  
|  
|  
|  
Line 298: Line 296:
| 19
| 19
|  
|  
| RaiseException
| msvcr80.dll@0xf880
|  
|  
|  
|  
Line 304: Line 302:
| 20
| 20
|  
|  
| kernel32.dll@0x12aeb
| NPSWF32.dll@0x15a4bf
|
|
|-
| 21
|
| GoogleDesktopMozilla.dll@0x5512
| google desktop
|
|-
| 22
|
| wcslen
|
|
|-
| 23
|
| user32.dll@0x8815
|
|
|-
| 24
|
| msvcr80.dll@0xf870
|
|
|-
| 25
|
| msvcrt.dll@0x37fd4
|  
|  
|  
|  
Line 310: Line 338:
| 26
| 26
|  
|  
| GoogleDesktopMozilla.dll@0x5512
| js_TraceObject
|
|
|-
| 27
|
| ntdll.dll@0x1b21a
|
|
|-
| 28
|
| Flash Player@0x91bd0
|
|
|-
| 29
|
| coFFPlgn.dll@0x2e2f1
|
|
|-
| 30
|
| radhslib.dll@0x3b6f
|
|
|-
| 31
|
| NPSWF32.dll@0xa7edc
|
|  
|  
| Google Desktop
|-  
|-  
| 32
| 32
|  
|  
| fastzero_I
| JS_TraceChildren
|
|
|-
| 33
|
| coWbAuth.dll@0x14e9e
|
|
|-
| 34
|
| GoogleDesktopMozilla.dll@0x5500
|
|
|-
| 35
|
| RtlpWaitForCriticalSection
|  
|  
|  
|  
|-  
|-  
| 96
| 36
|
| ageSelectionCallback
|
|
|-
| 37
|
| NPSWF32.dll@0xbbff7
|
|
|-
| 38
|
| ntdll.dll@0x19c2f
|
|
|-
| 39
|
| NPSWF32.dll@0x7c043
|
|
|-
| 40
|
| GoogleDesktopNetwork3.dll@0x3dfb
|
|
|-
| 41
|
| extent_tree_ad_s_RB_REMOVE
|
|
|-
| 42
|
| nsBaseWidget::Destroy()
|
|
|-
| 43
|
| @0x0 | coFFPlgn.dll@0x2db6a
|
|
|-
| 44
|
| js_GC
|
|
|-
| 45
|
| UserCallWinProcCheckWow
|
|
|-
| 46
|
| NPSWF32.dll@0x1b9cf9
|
|
|-
| 47
|
| RaiseException
|
|
|-
| 48
|
| js_Interpret
|
|
|-
| 49
|
| NPSWF32.dll@0x77540
|
|
|-
| 50
|
| nsGenericElement::cycleCollection::Traverse(void*, nsCycleCollectionTraversalCallback&)
|
|  
|  
| NPSWF32.dll@0x1a7640
| flash
| Windows-specific
|}
|}
1,457

edits