[Mono-bugs] [Bug 624498] New: async_io_thread crashes when unloading domain

[bugzilla_noreply at novell.com]

http://bugzilla.novell.com/show_bug.cgi?id=624498

http://bugzilla.novell.com/show_bug.cgi?id=624498#c0


           Summary: async_io_thread crashes when unloading domain
    Classification: Mono
           Product: Mono: Runtime
           Version: 2.6.x
          Platform: x86
        OS/Version: Windows 7
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: JIT
        AssignedTo: lupus at novell.com
        ReportedBy: lucas.meijer at gmail.com
         QAContact: mono-bugs at lists.ximian.com
          Found By: ---
           Blocker: ---


User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-US)
AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4

run this small c program: http://monobin.com/__f74695555
against this small cs program: http://monobin.com/__f6e1caceb

causes mono to crash while it tries to unload the domain.  
Happens 4 out of every 5 times on win7. unable to repro on osx.  2.6.x branch.

This is the callstack:


     02c5d869()    
>	mono.dll!mono_jit_runtime_invoke(_MonoMethod * method=0x031a6748, void * obj=0x003ebab8, void * * params=0x0350fd80, MonoObject * * exc=0x0350feb0)  Line 4888 + 0x18 bytes	C
     mono.dll!mono_runtime_invoke(_MonoMethod * method=0x031a6748, void *
obj=0x003ebab8, void * * params=0x0350fd80, MonoObject * * exc=0x0350feb0) 
Line 2614 + 0x18 bytes    C
     mono.dll!mono_runtime_invoke_array(_MonoMethod * method=0x031a6748, void *
obj=0x003ebab8, MonoArray * params=0x0031f5b8, MonoObject * * exc=0x0350feb0) 
Line 3804 + 0x15 bytes    C
     mono.dll!mono_message_invoke(MonoObject * target=0x003ebab8,
MonoMethodMessage * msg=0x003eee00, MonoObject * * exc=0x0350feb0, MonoArray *
* out_args=0x0350fea4)  Line 5433 + 0x40 bytes    C
     mono.dll!mono_async_invoke(MonoAsyncResult * ares=0x003eba80)  Line 1021 +
0x1b bytes    C
     mono.dll!async_invoke_io_thread(void * data=0x00767d90)  Line 329 + 0x9
bytes    C
     mono.dll!start_wrapper(void * data=0x031aa7d8)  Line 666 + 0x9 bytes    C
     mono.dll!thread_start(void * arg=0x003e9fe8)  Line 557 + 0x10 bytes    C
     kernel32.dll!75c03677()     
     [Frames below may be incorrect and/or missing, no symbols loaded for
kernel32.dll]    
     ntdll.dll!77ab9d72()     
     ntdll.dll!77ab9d45()     


Reproducible: Always

Steps to Reproduce:
1.
2.
3.

-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.