QA/Topcrashes
This page is a tracking document for handling and following topcrashes on the trunk.
Info on weekly status meetings for tracking crashes and improvements to the crash reporting system is at http://wiki.mozilla.org/Breakpad/Status_Meetings
If you find an extension or plugin that is the source of a crash consider filing a blocklist request - http://wiki.mozilla.org/Blocklisting
Current topcrashes being tracked 3.1b2
Summary
19 Dec 2008 - Starting to analyze crashes and assemble the list.
Queries
- Firefox 3.1b2 crashes in the past 1 week
- Firefox 3.1b2 crashes in the past 1 day
- Firefox 3.1b2 crashes in the past 4 hours
List
(Using the last week query.)
"new" indicates new to the topcrash list in beta2
| # | bug | stack | where | status |
| 1 | 0x0 | general crash; no one topcrash | ||
| 2 (new) | bug 467007 | nanojit::LirBufWriter::insLink(nanojit::LOpcode, nanojit::LIns*) | fix is on the branch and verified1.9.1 | |
| 3 (new) | bug 470485 | nanojit::LirBufWriter::insImm(int) | could be fixed by bug 467007 | |
| 4 (new) | bug 470487 | nsWindow::GetParentWindow() | ||
| 5 (new) | bug 470492 | nanojit::LIns::targetAddr() | patch on the TM branch, but may need more work | |
| 6 (new) | bug 470494 or bug 466659 | dtoa | maybe flash? | |
| 7 (new) | maybe a variation of bug 470487 | nsBaseWidget::Destroy() | ||
| 8 formerly 16 | bug 458667 | OfficeAV.dll@0x5606 | symantec is pushing a patch for this | |
| 10 formerly 15 | bug 458961 | libobjc.A.dylib@0x24c7 | cocoa widgets | mac-only, potential patch in bug; ppc version is #10 |
| 11 (new) | bug 470892 | nanojit::LIns::deref(int) | graydon's latest merge from adobe's nj repository may have fixed | |
| 12 formerly 5 | bug 424663 | imm32.dll@0x3e24 | windows widget code | happens with chinese ime |
| 13 (back?) | bug 434752 and bug bug 420678 | arena_dalloc_small | graveyard for incompat binary addons and plugins | need to investigate for possible round of 3.1 blocklisting |
| 15 (new) | bug 470758 | JS_GetMethodById | easy to reproduce xp. Regression from 7 or 8/11/2008 | |
| 17 formerly 6 | bug 424663 | CalcCharacterPositionAtoW | windows widget code | happens with chinese ime |
| 59 formerly 7 | bug 462778 | JS_TraceChildren | js engine (xpconnect?) | patch landed for b2 |
| 47 formerly 9 | bug 444446 | memcpy | sqlite | mostly caused by sqlite functions; should be fixed in b2 |
Current topcrashes being tracked 3.1b1
Summary
7 Nov 2008 - Fix for #1 landed in b2. Potential fix for #2, #4, #7, and #8 (maybe #11) landed for b2. Some contrast applies from previous update. Also had a potential fix land for #10 and #15 for b2.
2 Nov 2008 - Top crashes are spread mostly between imagelib (#1), JS (#2, #4, #7, #8), and widget code (Windows: #5, #6 + Mac: #11, #19). Only one clear external crash in the top 10, caused by Norton. This contrasts the top crash list for Firefox 3.0.3 where 6/10 are from external factors.
Queries
- Firefox 3.1b1 crashes in the past 1 week
- Firefox 3.1b1 crashes in the past 1 day
- Firefox 3.1b1 crashes in the past 4 hours
List
(Using the last week query.)
| # | bug | stack | where | status |
| 1 | bug 441563 | imgRequest::NotifyProxyListener(imgRequestProxy*) | imagelib | patch landed for b2 |
| 2 | bug 462778 | 0x20202020 | js engine (xpconnect?) | patch landed for b2 |
| 3 | 0x0 | general crash; no one topcrash | ||
| 4 | bug 462778 | js_GetGCThingTraceKind | js engine (xpconnect?) | patch landed for b2 |
| 5 | bug 424663 | imm32.dll@0x3e24 | windows widget code | happens with chinese ime |
| 6 | bug 424663 | CalcCharacterPositionAtoW | windows widget code | happens with chinese ime |
| 7 | bug 462778 | JS_TraceChildren | js engine (xpconnect?) | patch landed for b2 |
| 8 | bug 462778 | xpsp2res.dll@0x202113 | js engine (xpconnect?) | patch landed for b2 |
| 9 | bug 444446 | memcpy | sqlite | mostly caused by sqlite functions; should be fixed in b2 |
| 10 | bug 458961 | 0xfffeff20 | cocoa widgets | mac-only, potential patch in bug; intel version is #15 |
| 11 | xpsp2res.dll@0x202020 | potentially the same as bug 462778? | ||
| 15 | bug 458961 | libobjc.A.dylib@0x24c7 | cocoa widgets | mac-only, potential patch in bug; ppc version is #10 |
| 16 | bug 458667 | OfficeAV.dll@0x5606 |
Current topcrashes being tracked 3.0.5
Summary
Date -
Queries
- Firefox 3.0.5 crashes in the past 1 week
- Firefox 3.0.5 crashes in the past 1 day
- Firefox 3.0.5 crashes in the past 4 hours
List
(Using the last week query.)
| # | bug | stack | where | status |
| 1 | @0x0 | no single crash | ||
| 2 | nsObjCExceptionLogAbort | cocoa widgets | all exceptions crash Firefox on Mac; slowly fixing some of them | |
| 3 | bug 427715 | NSSRWLock_LockRead_Util | ?? | firefox is calling nss functions before initializing it. need to find out where |
| 4 | bug 444930 | nsIFrame::GetAncestorWithView() | happens for some users when downloading a pdf | |
| 5 | bug 453927, bug 459850 | JS_RestoreFrameChain | extension | caused by DTToolbar.dll; needs to be blocklisted |
| 6 | bug 458667 | OfficeAV.dll@0x5606 | Norton | caused by Norton AV checking on download |
| 7 | bug 436302, bug 457970 | strchr | extensions | old versions of binary extensions not properly updated for firefox3; possibly worth blocklisting |
| 8 | bug 453927, bug 459850 | JS_BeginRequest | extension | caused by DTToolbar.dll; needs to be blocklisted |
| 9 | nsWindow::GetParentWindow() | new topcrash | ||
| 10 | bug 466021 | nsStyleSet::AddImportantRules(nsRuleNode*, nsRuleNode*) | style system | Windows-only, doesn't appear to be caused by an extension |
| 11 | bug 458961 | 0xfffeff20 | cocoa widgets | Mac-only; intel version is #16 |
| 12 | bug 459531, bug 465623 | libobjc.A.dylib@0x15688 | gfx | mac-only; unclear what triggers either crash |
| 13 | arena_run_reg_alloc | |||
| 14 | nsXULDocument::OnStreamComplete | new topcrash? | ||
| 15 | msvcrt.dll@0x37c89 | |||
| 16 | bug 458961 | libobjc.A.dylib@0x24c7 | cocoa widgets | Mac-only; ppc version is #11 |
| 17 | RaiseException | |||
| 18 | kernel32.dll@0x12aeb | |||
| 19 | ntdll.dll@0x43387 | |||
| 20 | PL_DHashTableOperate | |||
| 21 | bug 434403 | nsDocShell::SetupNewViewer(nsIContentViewer*) | trojan | caused by a trojan |
| 22 | PostMessageEvent::Run() | |||
| 23 | NPSWF32.dll@0x9f321 | flash | needs triage | |
| 24 | strstr | |||
| 25 | @0x300d508c | |||
| 26 |
Current topcrashes being tracked 3.0.4
Summary
21 Nov 2008 - Initial list for 3.0.4. Investigating various top crashes.
Queries
- Firefox 3.0.4 crashes in the past 1 week
- Firefox 3.0.4 crashes in the past 1 day
- Firefox 3.0.4 crashes in the past 4 hours
List
(Using the last week query.)
| # | bug | stack | where | status |
| 1 | bug 427715, bug 465974 | NSSRWLock_LockRead_Util | ?? | firefox is calling nss functions before initializing it. need to find out where |
| 2 | @0x0 | no single crash | ||
| 3 | nsObjCExceptionLogAbort | cocoa widgets | all exceptions crash Firefox on Mac; potential fix landed, didn't work (bug 442245) | |
| 4 | bug 453927, bug 459850 | JS_RestoreFrameChain | extension | caused by DTToolbar.dll; needs to be blocklisted |
| 5 | bug 444930 | nsIFrame::GetAncestorWithView() | happens for some users when downloading a pdf | |
| 6 | bug 453927, bug 459850 | JS_BeginRequest | extension | caused by DTToolbar.dll; needs to be blocklisted |
| 7 | bug 458667 | OfficeAV.dll@0x5606 | Norton | caused by Norton AV checking on download |
| 8 | bug 436302, bug 457970 | strchr | extensions | old versions of binary extensions not properly updated for firefox3; possibly worth blocklisting |
| 9 | bug 460744 | @0x300d4eea | flash | caused by outdated Flash plugin? |
| 10 | bug 458961 | 0xfffeff20 | cocoa widgets | Mac-only; intel version is #15 |
| 11 | NPSWF32.dll@0x92668 | flash | needs triage | |
| 12 | bug 466021 | nsStyleSet::AddImportantRules(nsRuleNode*, nsRuleNode*) | style system | Windows-only, doesn't appear to be caused by an extension |
| 13 | ntdll.dll@0x43387 | needs triage | ||
| 14 | NPSWF32.dll@0x880ff | flash | needs triage | |
| 15 | bug 458961 | libobjc.A.dylib@0x24c7 | cocoa widgets | Mac-only; ppc version is #10 |
| 16 | 0x300d508c | needs triage; windows-only | ||
| 17 | NPSWF32.dll@0x14f770 | flash | needs triage | |
| 18 | bug 459531, bug 465623 | libobjc.A.dylib@0x15688 | gfx | mac-only; unclear what triggers either crash |
| 19 | arena_run_reg_alloc | |||
| 20 | bug 444446 | memcpy | sqlite | fixed in 3.0.5 hopefully |
| 21 | 0x1 | no one crash | ||
| 22 | PL_DHashTableOperate | needs triage | ||
| 23 | RaiseException | |||
| 24 | bug 437449 | nsCycleCollector::MarkRoots(GCGraphBuilder&) | needs triage | |
| 25 | bug 434403 | nsDocShell::SetupNewViewer(nsIContentViewer*) | trojan | caused by a trojan |
What do I do?
So, someone CCed you to a topcrash bug and asked for your help. What should you do?
There are several steps that developers and QA need to go through to help fix a crash. As a developer, we're specifically asking that you comment in the bug when you've completed all the steps and specifically state which steps you completed.