CrashKill/2014-07-21

General

Previous Action Items

• [KaiRo] Loop back to Socorro on Signature Summary not being up to date - covered in bug 1038234
• [KaiRo] finish up discussion with relman on prerequisites in approval questionnaire

Socorro

• nothing shipped last week, cron issues on stage that we would like to debug first
• most of the team out for vacation or conferences

Flash / Plugins

Desktop

Beta

• Not seeing anything out of the ordinary with 31RC yet
  • Overall crashes at 17785.222 (2014-07-20) vs 15424.837 (2014-06-06) ==> 15% higher than 6 weeks ago
  • Overall crashes at 17785.222 (2014-07-20) vs 21108.804 (2016-07-06) ==> 16% lower than 2 weeks ago
• bug 1035534, bug 1035537, bug 1015341 all seem to be the same issue according to DMajor (fallout from bug 988549 [gfx blocklist regression])
  • bug 1015341 seems to be non-existant for 31.0b99/31.0
  • bug 1035534 has 1977 crashes in 31.0b99/31.0 (comment 7 implicates "external code untested in native-32bit")
  • bug 1035537 has 2077 crashes in 31.0b99/31.0 (comment 3 implicates Movie Toolbar)
  • In combined signatures this is the #7 topcrash
  • [KaiRo] This is not gfx blocklist-related, this is all Bandoo-related (see bug 1035529).
• bug 984033 is an OOM that is now #4, correlated with Crossrider framework add-ons
• bug 1012924 (experiments shutddown crash) is #2/#3 (depending on specific report) after OOM|small, competing with processMarkStackTop
• bug 1041581 low volume crash correlated to malware (smdmf.dll)

Aurora

Trunk

• bug 1039547 - crash in js::detail::HashTable<js::HashMapEntry<* (multiple variations; see crash signature field) Needs some traction. It is combined signatures #2 on Nightly
• bug 1028902 - crash in js::GetLengthProperty(JS::Value const&, JS::MutableHandle<JS::Value>) Is still #3 on Nightly

Android

• Was on PTO last week
• I believe the removed top crash from early to mid betas was just split into separate signature given the beta 8, 10 and 11 crash rates

B2G

• mbrandt will be co-leading the QA for B2G 2.1 project.
• tracking Loop platform bugs with this meta : bug 1004761 - [meta] Loop Platform

Potential Uplift bugs

Partner Issues

• bug 1020956 - [Flame][RTSP][V2.0] The kernel crash happened if RTSP streaming is interrupted several times by incoming call
  • waiting for partner
• bug 1025414 - wifi_start_supplicant crashes
  • waiting partner fix to be released
• bug 1000271 - [Camera][Gecko][Tarako] Semi-auto camera test causes tarako camera to crash
  • closed WFM; following up with reporter

New Feature Crashes

Loop

• bug 1022058 - crash in sigslot::lock_block<sigslot::single_threaded>::lock_block(sigslot::single_threaded*)
  • dev looked at; needs patch
• bug 1009922 - [Open C] crash in __pthread_cond_pulse
  • dev looked atl needs patch
• bug 1021451 - WebRTC Chat between FFOS and Desktop Computer Resulted in Graphics Crash - mozalloc_abort(char const*) | NS_DebugBreak | mozilla::ipc::FatalError(char const*, char const*, int, bool) | mozilla::layers::PSharedBufferManagerChild::SendAllocateGrallocBuffer
  • might be fixed by bug 1034294
• Please set any crashes affecting Loop to block bug 1004761

2.1 : Gecko 33a1

• bug 1035286 - crash in mozalloc_abort(char const*) | abort | js::jit::BacktrackingAllocator::splitAcrossCalls(js::jit::LiveInterval*)
• bug 1035249 - crash in jemalloc_crash | arena_dalloc | je_free | free | js::detail::HashTable<JS::Symbol* const, js::HashSet<JS::Symbol*, js::HashSymbolsByDescription, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::changeTableSize(int)
• bug 1026631 - crash in jemalloc_crash | arena_salloc | je_realloc | realloc | moz_xrealloc | nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>::EnsureCapacity(unsigned int, unsigned int) | nsObserverList::AddObserver(nsIObserver*, bool)
  • memory corruption; startup crashes; a couple on nightly
• bug 1026655 - crash in jemalloc_crash | arena_dalloc | je_free | free | moz_free | XPCNativeInterface::DestroyInstance(XPCNativeInterface*)
  • need dev input
• bug 1026672 - crash in jemalloc_crash | arena_dalloc | je_free | free | js::Shape::sweep()
  • need dev input
• bug 1025975 - crash in mozilla::layers::CompositorChild::SharedFrameMetricsData::GetViewID()
  • need better STR

2.0, the version formerly known as 1.5 : gecko 32a2

• bug 1038461 - Failed to map ion memory in the client on gonk
• bug 1038891 - OMXCodec crash while stability testing
• bug 1036482 - Crash in low memory situation while stability testing
• bug 1029710 - crash in mozilla::dom::ShadowRoot::IsPooledNode(nsIContent*, nsIContent*, nsIContent*)
  • need dev input
• bug 1029938 - flame v2.0 periodically crashes after OTA update around June 26
  • need STR; more info from reporter
• bug 1026011 - crash in android::BpAudioPolicyService::initStreamVolume(audio_stream_type_t, int, int)
  • need str
• bug 1030803 - crash in @0x0 | MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&)
  • need dev input.
• bug 1008791 - Crash in stability test [@ ? | pthread_kill | raise | __libc_android_abort | ... | js::BaseProxyHandler::get(JSContext*, JS::Handle, JS::Handle, JS::Handle, JS::MutableHandleJS::Value) ]
  • reopened and patch in progress.

1.4 : Gecko 30.0

• bug 1025312 - Crash in NetworkWorker::~NetworkWorker while stability testing
• bug 1038037 - [dolphin][flame] b2g crash when open some streaming audio from browser

1.3/1.3T : Gecko 28.0/28.1

• bug 1007019 - [tarako] Facebook crashes whenever trying to upload a photo
  • facebook making UA change; OAUTH is not supported on lo-fi version ( bug 1033195 )
  • bug closed and bug 1033195 has been fixed.
• bug 1031224 - shut down phone, and the b2g crash
• bug 1033966 - [Sora][FOTA] after FOTA updates,the system crash
  • being investigated
• bug 1034409 is a follow up crash
  • being investigated

2.1 Geeksphone

• bug 1016497 - crash in mozilla::layers::TextureClient::WaitForCompositorRecycle() | mozilla::layers::SimpleTextureClientPool::WaitForCompositorRecycleCallback(mozilla::layers::TextureClient*, void*) | mozilla::RefPtr<mozilla::layers::BufferTextureClient>::~RefPtr
  • need to disable SimpleTexture, vendor issue; can't seem to reproduce?
• bug 1032245 - crash in mozilla::layers::TextureClient::WaitForCompositorRecycle() | mozilla::layers::SimpleTextureClientPool::WaitForCompositorRecycleCallback(mozilla::layers::TextureClient*, void*) | mozilla::AtomicRefCountedWithFinalize..
  • need to disable SimpleTexture; can't seem to reproduce?
• bug 1038229 - crash in mozilla::MediaEngine::Release()
• bug 1038253 - crash in mozilla::CrossProcessMutex::CrossProcessMutex

Notes

Upcoming PTO

• juanb - July 21
• bsmedberg - July 21-Aug 4
• KaiRo - work week July 28-30, vacation July 31 - Aug 10
• Tracy - QA work week July 28-31 (mostly unavailable)

Action Items

• [KaiRo] escalate getting dev attention in bug 1039547
• [KaiRo] finish up discussion with relman on prerequisites in approval questionnaire
• [nhirata] follow up to MTBF test; purposeful crash should be obvious crash signature + channel change : add -test-<testsuite> ie -test-MTBF.
• [KaiRo] Cancel next week's meeting due to QA work week; send invite for meeting in two weeks which will be hosted by Kevin