This bug was filed from the Socorro interface and is report bp-31d994ed-10cf-4775-80ec-d57682141107. ============================================================= Placing smart collection app at top, opening site, and then closing browser caused crash. Many apps were open in background including browser on youtube. Software Home button is on. Repro Steps: 1) Update a Flame device to BuildID: 20141107001205 2) Open all default apps (Phone, Messages, Contacts, Browser (on youtube), Marketplace, Camera, Gallery, Music, Video, FM Radio, Settings, Clock, E-Mail, Calendar, Usage). 3) Go to Settings, turn on Developer Menu 4) Go in Developer Menu > select Software Home button 5) On Homescreen, tap on Music Smart Collection. 6) Hold on NME Mag icon > Add to top of collection 7) Tap on NME icon to open site 8) After page has loaded, hold down home button then close the site/browser 9) Observe Actual: With memory heavily used with many apps on in background and then going into Music Smart Collection, adding NME to top, opening that site, and then closing that site/browser will cause a crash. Expected: With memory heavily used, adding an icon to top of Smart Collection, opening that site, then closing that site/browser will not cause a crash. Environmental Variables: Device: Flame 2.1 (319mb)(Kitkat Base)(Shallow Flash) BuildID: 20141107001205 Gaia: 6295f6acfe91c6ae659712747dd2b9c8f51d0339 Gecko: 8c23b4f2ba29 Gonk: Version: 34.0 (2.1) Firmware: V188-1 User Agent: Mozilla/5.0 (Mobile; rv:34.0) Gecko/34.0 Firefox/34.0 Repro frequency: Only happened one time See attached: Please see Crash Report

Issue did not occur on 2.0 or 2.2. With memory heavily used, adding an icon to top of Smart Collection, opening that site, then closing that site/browser did not cause a crash. Device: Flame 2.2 Master (319mb)(Kitkat Base)(Shallow Flash) BuildID: 20141107040206 Gaia: 779f05fead3d009f6e7fe713ad0fea16b6f2fb31 Gecko: 64f4392d0bdc Version: 36.0a1 (2.2 Master) Firmware: V188-1 User Agent: Mozilla/5.0 (Mobile; rv:36.0) Gecko/36.0 Firefox/36.0 Device: Flame 2.0 (319mb)(Kitkat Base)(Shallow Flash BuildID: 20141107000206 Gaia: d3e4da377ee448f9c25f908159480e867dfb13f3 Gecko: 9836e9d81357 Version: 32.0 (2.0) Firmware: V188-1 User Agent: Mozilla/5.0 (Mobile; rv:32.0) Gecko/32.0 Firefox/32.0

Once-crash - adding Steps-wanted to see if we can find a way to reproduce (won't consider this a regression until we can effectively reproduce this crash and then check other branches).

I tried to reproduce this bug for over an hour and was not able to. I got some slow performance at times but no crash. Leaving steps-wanted tag for other testers to try. Actual Result: No crash when following the STR. Repro Rate: 0/15 Environmental Variables: Device: Flame 2.1 KK BuildID: 20141114064525 Gaia: e6409eb6d2e8c13127f9e6e46995db03354e4b57 Gecko: 8657c038c437 Version: 34.0 (2.1) Firmware Version: v188-1 User Agent: Mozilla/5.0 (Mobile; rv:34.0) Gecko/34.0 Firefox/34.0

Unable to reproduce issue. I used the STR listed in Comment 0, but could not reproduce the crash. Repro Attempts: 0/10 (Shallow Flash, tinderbox eng. build, 319 MB memory) Device: Flame 2.1 BuildID: 20141120063205 Gaia: 66e6a55892d2c5843d32ebbb63795d2d56892613 Gecko: 5afcd7e1b815 Version: 34.0 (2.1) Firmware: V188 User Agent: Mozilla/5.0 (Mobile; rv:34.0) Gecko/34.0 Firefox/34.0

Unable to reproduce the crash on the reported build. Played around the STR for over an hour with no repro. From the crash report it seems that the majority of the crashes come from desktop firefox browser? This bug seems to be the only crash instance on Firefox OS. Device: Flame 2.1 (319MB mem, shallow flash) BuildID: 20141107001205 Gaia: 6295f6acfe91c6ae659712747dd2b9c8f51d0339 Gecko: 8c23b4f2ba29 Version: 34.0 (2.1) Firmware: V188-1 User Agent: Mozilla/5.0 (Mobile; rv:34.0) Gecko/34.0 Firefox/34.0

This seems a dead end as this has only ever occurred once on FFOS and only several weeks back. Let's stop looking for steps (for now) unless this pops up again for FFOS.

Stack: 0 libxul.so XPCConvert::JSData2Native(void*, JS::Handle<JS::Value>, nsXPTType const&, nsID const*, tag_nsresult*) js/xpconnect/src/XPCConvert.cpp 1 libxul.so nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS*, unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) js/xpconnect/src/XPCWrappedJSClass.cpp 2 libxul.so nsXPCWrappedJS::CallMethod(unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) js/xpconnect/src/XPCWrappedJS.cpp 3 libxul.so PrepareAndDispatch xpcom/reflect/xptcall/md/unix/xptcstubs_arm.cpp 4 libxul.so libxul.so@0x358d47 5 libxul.so mozilla::dom::MobileConnectionInfo::Update(nsIMobileConnectionInfo*) dom/mobileconnection/MobileConnectionInfo.cpp 6 libxul.so mozilla::dom::MobileConnection::UpdateVoice() dom/mobileconnection/MobileConnection.cpp 7 libxul.so mozilla::dom::MobileConnection::MobileConnection(nsPIDOMWindow*, unsigned int) dom/mobileconnection/MobileConnection.cpp 8 libxul.so mozilla::dom::MobileConnectionArray::Init() dom/mobileconnection/MobileConnectionArray.cpp 9 libxul.so mozilla::dom::MobileConnectionArray::IndexedGetter(unsigned int, bool&) dom/mobileconnection/MobileConnectionArray.cpp 10 libxul.so mozilla::dom::MozMobileConnectionArrayBinding::DOMProxyHandler::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) const /builds/slave/b2g_m-b34_21_flm-kk_ntly-00000/build/objdir-gecko/dom/bindings/MozMobileConnectionArrayBinding.cpp:386 11 libxul.so js::Proxy::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) js/src/jsproxy.cpp 12 libxul.so js::proxy_GetElement(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, unsigned int, JS::MutableHandle<JS::Value>) js/src/jsproxy.cpp 13 libxul.so JSObject::getElement(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, unsigned int, JS::MutableHandle<JS::Value>) js/src/jsobjinlines.h 14 libxul.so Interpret js/src/vm/Interpreter-inl.h 15 libxul.so js::RunScript js/src/vm/Interpreter.cpp 16 libxul.so js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) js/src/vm/Interpreter.cpp 17 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 18 libxul.so js::InvokeGetterOrSetter(JSContext*, JSObject*, JS::Value, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 19 libxul.so js::Shape::get(JSContext*, JS::Handle<JSObject*>, JSObject*, JSObject*, JS::MutableHandle<JS::Value>) js/src/vm/Shape-inl.h 20 libxul.so js::baseops::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) js/src/jsobj.cpp 21 libxul.so Interpret js/src/vm/Interpreter.cpp 22 libxul.so js::RunScript js/src/vm/Interpreter.cpp 23 libxul.so js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) js/src/vm/Interpreter.cpp 24 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 25 libxul.so js::InvokeGetterOrSetter(JSContext*, JSObject*, JS::Value, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 26 libxul.so js::Shape::get(JSContext*, JS::Handle<JSObject*>, JSObject*, JSObject*, JS::MutableHandle<JS::Value>) js/src/vm/Shape-inl.h 27 libxul.so js::baseops::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) js/src/jsobj.cpp 28 libxul.so Interpret js/src/vm/Interpreter.cpp 29 libxul.so js::RunScript js/src/vm/Interpreter.cpp 30 libxul.so js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) js/src/vm/Interpreter.cpp 31 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 32 libxul.so js::InvokeGetterOrSetter(JSContext*, JSObject*, JS::Value, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 33 libxul.so js::Shape::get(JSContext*, JS::Handle<JSObject*>, JSObject*, JSObject*, JS::MutableHandle<JS::Value>) js/src/vm/Shape-inl.h 34 libxul.so js::baseops::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) js/src/jsobj.cpp 35 libxul.so Interpret js/src/vm/Interpreter.cpp 36 libxul.so js::RunScript js/src/vm/Interpreter.cpp 37 libxul.so js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) js/src/vm/Interpreter.cpp 38 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 39 libxul.so JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) js/src/jsapi.cpp 40 libxul.so mozilla::dom::AnyCallback::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&) /builds/slave/b2g_m-b34_21_flm-kk_ntly-00000/build/objdir-gecko/dom/bindings/PromiseBinding.cpp:78 41 libxul.so mozilla::dom::WrapperPromiseCallback::Call(JSContext*, JS::Handle<JS::Value>) /builds/slave/b2g_m-b34_21_flm-kk_ntly-00000/build/objdir-gecko/dist/include/mozilla/dom/PromiseBinding.h:128 42 libxul.so mozilla::dom::Promise::RunTask() dom/promise/Promise.cpp 43 libxul.so mozilla::dom::PromiseTask::Run() dom/promise/Promise.cpp 44 libxul.so nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp 45 libxul.so NS_ProcessNextEvent(nsIThread*, bool) xpcom/glue/nsThreadUtils.cpp 46 libxul.so mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp 47 libxul.so MessageLoop::RunInternal() ipc/chromium/src/base/message_loop.cc 48 libxul.so MessageLoop::Run() ipc/chromium/src/base/message_loop.cc 49 libxul.so nsBaseAppShell::Run() widget/xpwidgets/nsBaseAppShell.cpp 50 libxul.so XRE_RunAppShell toolkit/xre/nsEmbedFunctions.cpp 51 libxul.so MessageLoop::RunInternal() ipc/chromium/src/base/message_loop.cc 52 libxul.so MessageLoop::Run() ipc/chromium/src/base/message_loop.cc 53 libxul.so XRE_InitChildProcess toolkit/xre/nsEmbedFunctions.cpp 54 libxul.so content_process_main(int, char**) ipc/contentproc/plugin-container.cpp 55 libxul.so mozilla::ipc::ProcLoaderLoadRunner::DoWork() ipc/glue/ProcessUtils_linux.cpp 56 libxul.so XRE_ProcLoaderServiceRun ipc/glue/ProcessUtils_linux.cpp 57 b2g main b2g/app/B2GLoader.cpp Ø 58 libc.so libc.so@0xe4a3 59 linker set_soinfo_pool_protection /builds/slave/b2g_m-cen_flm-kk_ntly-00000000/build/bionic/linker/linker.cpp:291 60 @0xbeb42b25

Firefox OS is not being worked on