Closed Bug 37204 Opened 25 years ago Closed 25 years ago

Crash in nsCachedNetData::Evict when viewing listed URL

Categories

(Core :: Networking: Cache, defect, P3)

x86
All
defect

Tracking

()

VERIFIED DUPLICATE of bug 37071

People

(Reporter: cks+mozilla, Assigned: gordon)

References

()

Details

(Keywords: crash)

Build: (near-)latest CVS, pulled just now. This doesn't appear to happen on the 2000042512 nightly. Viewing the mentioned URL crashes Mozilla (I believe during document rendering, instead of initial layout) with the following gdb backtrace: (gdb) where #0 0x405b8722 in nsCachedNetData::Evict () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #1 0x405ba26c in nsReplacementPolicy::Evict () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #2 0x405b69f5 in nsCacheManager::LimitDiskCacheSize () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #3 0x405b6a18 in nsCacheManager::LimitCacheSize () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #4 0x405baaa6 in CacheOutputStream::Write () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #5 0x405b8c16 in InterceptStreamListener::write () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #6 0x405b8c63 in InterceptStreamListener::Read () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #7 0x4002771b in ImageConsumer::OnDataAvailable () from /scratch/mozilla/dist/bin/libraptorgfx.so #8 0x406a6d6b in nsDocumentOpenInfo::OnDataAvailable () from /scratch/mozilla/dist/bin/components/liburiloader.so #9 0x405b8d35 in InterceptStreamListener::OnDataAvailable () from /scratch/mozilla/dist/bin/components/libnecko_cache.so #10 0x40641715 in nsHTTPServerListener::OnDataAvailable () from /scratch/mozilla/dist/bin/components/libnecko_http.so #11 0x405f569c in nsOnDataAvailableEvent::HandleEvent () ---Type <return> to continue, or q <return> to quit--- from /scratch/mozilla/dist/bin/components/libnecko.so #12 0x405f4f38 in nsStreamListenerEvent::HandlePLEvent () from /scratch/mozilla/dist/bin/components/libnecko.so #13 0x40110ab6 in PL_HandleEvent () from /scratch/mozilla/dist/bin/libxpcom.so #14 0x401109e6 in PL_ProcessPendingEvents () from /scratch/mozilla/dist/bin/libxpcom.so #15 0x4011178a in nsEventQueueImpl::ProcessPendingEvents () from /scratch/mozilla/dist/bin/libxpcom.so #16 0x4141d24e in event_processor_callback () from /scratch/mozilla/dist/bin/libwidget_gtk.so #17 0x4141cff2 in our_gdk_io_invoke () from /scratch/mozilla/dist/bin/libwidget_gtk.so #18 0x404d6aca in g_io_unix_dispatch () from /usr/lib/libglib-1.2.so.0 #19 0x404d8186 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0 #20 0x404d8751 in g_main_iterate () from /usr/lib/libglib-1.2.so.0 #21 0x404d88f1 in g_main_run () from /usr/lib/libglib-1.2.so.0 #22 0x403fd5b9 in gtk_main () from /usr/lib/libgtk-1.2.so.0 #23 0x4141d72d in nsAppShell::Run () from /scratch/mozilla/dist/bin/libwidget_gtk.so #24 0x4101b73d in nsAppShellService::Run () from /scratch/mozilla/dist/bin/components/libnsappshell.so #25 0x804af92 in main1 () #26 0x804b2ce in main () ---Type <return> to continue, or q <return> to quit--- #27 0x402459cb in __libc_start_main (main=0x804b138 <main>, argc=2, argv=0xbfffec44, init=0x8049128 <_init>, fini=0x804c060 <_fini>, rtld_fini=0x4000ae60 <_dl_fini>, stack_end=0xbfffec3c) at ../sysdeps/generic/libc-start.c:92
works for me on my recently compiled version although I'm not sure if i'm using the cache or not. Stuff seems to be in my cache directory but the page loads so slowly that it seems to be getting repulled from the net each time i look at it.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Adding crash keyword.
Keywords: crash
I get similar stack trace when running chofmann's browser buster a while. Before crash i get assert: ###!!! ASSERTION: QueryInterface needed: 'query_result == mRawPtr', file ../../dist/include/nsCOMPtr.h, line 476 BacTrace shows that its comming from nsReplacementPolicy::AddAllRecordsInCache at netwerk/cache/mgr/nsReplacementPolicy.cpp:159 #0 nsDebug::Break (aFile=0x805436b "../../dist/include/nsCOMPtr.h", aLine=476) at ../../../xpcom/base/nsDebug.cpp:197 #1 0x401ac07b in nsDebug::Assertion (aStr=0x805451c "QueryInterface needed", aExpr=0x8054504 "query_result == mRawPtr", aFile=0x805436b "../../dist/include/nsCOMPtr.h", aLine=476) at ../../../xpcom/base/nsDebug.cpp:191 #2 0x8052ca4 in nsCOMPtr<nsISimpleEnumerator>::Assert_NoQueryNeeded (this=0xbffff2fc) at ../../dist/include/nsCOMPtr.h:476 #3 0x8052c20 in nsGetterAddRefs<nsISimpleEnumerator>::~nsGetterAddRefs (this=0xbffff2f0, __in_chrg=2) at ../../dist/include/nsCOMPtr.h:871 #4 0x4186cbcf in nsReplacementPolicy::AddAllRecordsInCache (this=0x8713dc0, aCache=0x86dffe0) at ../../../../netwerk/cache/mgr/nsReplacementPolicy.cpp:159 #5 0x4186db9c in nsReplacementPolicy::LoadAllRecordsInAllCacheDatabases (this=0x8713dc0) at ../../../../netwerk/cache/mgr/nsReplacementPolicy.cpp:619 #6 0x4186dc0a in nsReplacementPolicy::Evict (this=0x8713dc0, aTargetOccupancy=4849) at ../../../../netwerk/cache/mgr/nsReplacementPolicy.cpp:646 #7 0x41867de1 in nsCacheManager::LimitDiskCacheSize () at ../../../../netwerk/cache/mgr/nsCacheManager.cpp:516 #8 0x41867e14 in nsCacheManager::LimitCacheSize () at ../../../../netwerk/cache/mgr/nsCacheManager.cpp:526
I am seeing this crash too but not on any particular page. I saw it twice while surfing amazon.com and once after leaving the browser run unattended. It's somewhat annoying. runnning NT (commercial build) 2000050215. Changing OS from Linux to All. Adding my stack trace below. nsCachedNetData::Evict [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCachedNetData.cpp, line 1049] nsReplacementPolicy::Evict [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsReplacementPolicy.cpp, line 684] nsCacheManager::LimitDiskCacheSize [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCacheManager.cpp, line 515] nsCacheManager::LimitCacheSize [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCacheManager.cpp, line 527] CacheOutputStream::Write [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCacheEntryChannel.cpp, line 90] InterceptStreamListener::Read [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCachedNetData.cpp, line 1182] nsParser::OnDataAvailable [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1498] nsDocumentOpenInfo::OnDataAvailable [d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 276] nsHTTPFinalListener::OnDataAvailable [d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp p, line 1152] InterceptStreamListener::OnDataAvailable [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCachedNetData.cpp, line 1164] nsHTTPChunkConv::OnDataAvailable [d:\builds\seamonkey\mozilla\netwerk\streamconv\converters\nsHTTPChunkConv.cpp, line 197] nsHTTPServerListener::OnDataAvailable [d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp p, line 498] nsOnDataAvailableEvent::HandleEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 412] nsStreamListenerEvent::HandlePLEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 106] PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 576] _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 1032]
OS: Linux → All
*** Bug 37378 has been marked as a duplicate of this bug. ***
I'm seeing something that may be similar, but I don't always get a crash; instead I get a bunch of assertion failures. Perhaps a NULL pointer is slipping through somewhere. ###!!! ASSERTION: QueryInterface needed: 'query_result == mRawPtr', file ../../dist/include/nsCOMPtr.h, line 476 ###!!! Break: at file ../../dist/include/nsCOMPtr.h, line 476 ###!!! ASSERTION: Error: RecordID not in DB : 'Error', file nsNetDiskCache.cpp, line 475 ###!!! Break: at file nsNetDiskCache.cpp, line 475 ###!!! ASSERTION: You can't dereference a NULL nsCOMPtr with operator->().: 'mRawPtr != 0', file ../../../dist/include/nsCOMPtr.h, line 621 ###!!! Break: at file ../../../dist/include/nsCOMPtr.h, line 621
marking this as a duplicate again due to data losssage *** This bug has been marked as a duplicate of 37071 ***
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
verified DUP
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.