QA/Topcrashes

This page is a tracking document for handling and following topcrashes on the trunk.

Info on weekly status meetings for tracking crashes and improvements to the crash reporting system is at http://wiki.mozilla.org/Breakpad/Status_Meetings

If you find an extension or plugin that is the source of a crash consider filing a blocklist request - http://wiki.mozilla.org/Blocklisting

Current topcrashes being tracked 3.1b2

Summary

19 Dec 2008 - Starting to analyze crashes and assemble the list.

Queries

List

(Using the last week query.)

"new" indicates new to the topcrash list in beta2

#	bug	stack	where	status
1		0x0		general crash; no one topcrash
2 (new)	bug 467007	nanojit::LirBufWriter::insLink(nanojit::LOpcode, nanojit::LIns*)		fix is on the branch and verified1.9.1
3 (new)	bug 470485	nanojit::LirBufWriter::insImm(int)		could be fixed by bug 467007
4 (new)	bug 470487	nsWindow::GetParentWindow()
5 (new)	bug 470492	nanojit::LIns::targetAddr()
6 (new)	bug 470494 or bug 466659	dtoa		maybe flash?
7 (new)	maybe a variation of bug 470487	nsBaseWidget::Destroy()
8 formerly 16	bug 458667	OfficeAV.dll@0x5606
10 formerly 15	bug 458961	libobjc.A.dylib@0x24c7	cocoa widgets	mac-only, potential patch in bug; ppc version is #10
11 (new)	bug 470892	nanojit::LIns::deref(int)
12 formerly 5	bug 424663	imm32.dll@0x3e24	windows widget code	happens with chinese ime
13 (back?)	bug 434752 and bug bug 420678	arena_dalloc_small	graveyard for incompat binary addons and plugins	need to investigate for possible round of 3.1 blocklisting
15 (new)	bug 470758	JS_GetMethodById	easy to reproduce xp. Regression from 7 or 8/11/2008
17 formerly 6	bug 424663	CalcCharacterPositionAtoW	windows widget code	happens with chinese ime
59 formerly 7	bug 462778	JS_TraceChildren	js engine (xpconnect?)	patch landed for b2
47 formerly 9	bug 444446	memcpy	sqlite	mostly caused by sqlite functions; should be fixed in b2

Current topcrashes being tracked 3.1b1

Summary

7 Nov 2008 - Fix for #1 landed in b2. Potential fix for #2, #4, #7, and #8 (maybe #11) landed for b2. Some contrast applies from previous update. Also had a potential fix land for #10 and #15 for b2.

2 Nov 2008 - Top crashes are spread mostly between imagelib (#1), JS (#2, #4, #7, #8), and widget code (Windows: #5, #6 + Mac: #11, #19). Only one clear external crash in the top 10, caused by Norton. This contrasts the top crash list for Firefox 3.0.3 where 6/10 are from external factors.

Queries

List

(Using the last week query.)

#	bug	stack	where	status
1	bug 441563	imgRequest::NotifyProxyListener(imgRequestProxy*)	imagelib	patch landed for b2
2	bug 462778	0x20202020	js engine (xpconnect?)	patch landed for b2
3		0x0		general crash; no one topcrash
4	bug 462778	js_GetGCThingTraceKind	js engine (xpconnect?)	patch landed for b2
5	bug 424663	imm32.dll@0x3e24	windows widget code	happens with chinese ime
6	bug 424663	CalcCharacterPositionAtoW	windows widget code	happens with chinese ime
7	bug 462778	JS_TraceChildren	js engine (xpconnect?)	patch landed for b2
8	bug 462778	xpsp2res.dll@0x202113	js engine (xpconnect?)	patch landed for b2
9	bug 444446	memcpy	sqlite	mostly caused by sqlite functions; should be fixed in b2
10	bug 458961	0xfffeff20	cocoa widgets	mac-only, potential patch in bug; intel version is #15
11		xpsp2res.dll@0x202020		potentially the same as bug 462778?
15	bug 458961	libobjc.A.dylib@0x24c7	cocoa widgets	mac-only, potential patch in bug; ppc version is #10
16	bug 458667	OfficeAV.dll@0x5606

Current topcrashes being tracked 3.0.5

Summary

Date -

Queries

List

(Using the last week query.)

#	bug	stack	where	status
1		@0x0		no single crash
2		nsObjCExceptionLogAbort	cocoa widgets	all exceptions crash Firefox on Mac; slowly fixing some of them
3	bug 427715	NSSRWLock_LockRead_Util	??	firefox is calling nss functions before initializing it. need to find out where
4	bug 444930	nsIFrame::GetAncestorWithView()		happens for some users when downloading a pdf
5	bug 453927, bug 459850	JS_RestoreFrameChain	extension	caused by DTToolbar.dll; needs to be blocklisted
6	bug 458667	OfficeAV.dll@0x5606	Norton	caused by Norton AV checking on download
7	bug 436302, bug 457970	strchr	extensions	old versions of binary extensions not properly updated for firefox3; possibly worth blocklisting
8	bug 453927, bug 459850	JS_BeginRequest	extension	caused by DTToolbar.dll; needs to be blocklisted
9		nsWindow::GetParentWindow()		new topcrash
10	bug 466021	nsStyleSet::AddImportantRules(nsRuleNode, nsRuleNode)	style system	Windows-only, doesn't appear to be caused by an extension
11	bug 458961	0xfffeff20	cocoa widgets	Mac-only; intel version is #16
12	bug 459531, bug 465623	libobjc.A.dylib@0x15688	gfx	mac-only; unclear what triggers either crash
13		arena_run_reg_alloc
14		nsXULDocument::OnStreamComplete		new topcrash?
15		msvcrt.dll@0x37c89
16	bug 458961	libobjc.A.dylib@0x24c7	cocoa widgets	Mac-only; ppc version is #11
17		RaiseException
18		kernel32.dll@0x12aeb
19		ntdll.dll@0x43387
20		PL_DHashTableOperate
21	bug 434403	nsDocShell::SetupNewViewer(nsIContentViewer*)	trojan	caused by a trojan
22		PostMessageEvent::Run()
23		NPSWF32.dll@0x9f321	flash	needs triage
24		strstr
25		@0x300d508c
26

Current topcrashes being tracked 3.0.4

Summary

21 Nov 2008 - Initial list for 3.0.4. Investigating various top crashes.

Queries

List

(Using the last week query.)

#	bug	stack	where	status
1	bug 427715, bug 465974	NSSRWLock_LockRead_Util	??	firefox is calling nss functions before initializing it. need to find out where
2		@0x0		no single crash
3		nsObjCExceptionLogAbort	cocoa widgets	all exceptions crash Firefox on Mac; potential fix landed, didn't work (bug 442245)
4	bug 453927, bug 459850	JS_RestoreFrameChain	extension	caused by DTToolbar.dll; needs to be blocklisted
5	bug 444930	nsIFrame::GetAncestorWithView()		happens for some users when downloading a pdf
6	bug 453927, bug 459850	JS_BeginRequest	extension	caused by DTToolbar.dll; needs to be blocklisted
7	bug 458667	OfficeAV.dll@0x5606	Norton	caused by Norton AV checking on download
8	bug 436302, bug 457970	strchr	extensions	old versions of binary extensions not properly updated for firefox3; possibly worth blocklisting
9	bug 460744	@0x300d4eea	flash	caused by outdated Flash plugin?
10	bug 458961	0xfffeff20	cocoa widgets	Mac-only; intel version is #15
11		NPSWF32.dll@0x92668	flash	needs triage
12	bug 466021	nsStyleSet::AddImportantRules(nsRuleNode, nsRuleNode)	style system	Windows-only, doesn't appear to be caused by an extension
13		ntdll.dll@0x43387		needs triage
14		NPSWF32.dll@0x880ff	flash	needs triage
15	bug 458961	libobjc.A.dylib@0x24c7	cocoa widgets	Mac-only; ppc version is #10
16		0x300d508c		needs triage; windows-only
17		NPSWF32.dll@0x14f770	flash	needs triage
18	bug 459531, bug 465623	libobjc.A.dylib@0x15688	gfx	mac-only; unclear what triggers either crash
19		arena_run_reg_alloc
20	bug 444446	memcpy	sqlite	fixed in 3.0.5 hopefully
21		0x1		no one crash
22		PL_DHashTableOperate		needs triage
23		RaiseException
24	bug 437449	nsCycleCollector::MarkRoots(GCGraphBuilder&)		needs triage
25	bug 434403	nsDocShell::SetupNewViewer(nsIContentViewer*)	trojan	caused by a trojan

What do I do?

So, someone CCed you to a topcrash bug and asked for your help. What should you do?

There are several steps that developers and QA need to go through to help fix a crash. As a developer, we're specifically asking that you comment in the bug when you've completed all the steps and specifically state which steps you completed.