162695 - Trunk crashes on exit [@ PL_DHashTableRawRemove]

Status: VERIFIED DUPLICATE of bug 162526

(Core :: XUL, defect)

Description

[greer]

This exit crash started showing up in the 081218 build and looks like bug 162526
(and bug 162436) but travels through different code and crashes at
PL_DHashTableRawRemove.

Probable dupe. 

Over to XPCOM based on the stack. DougT, same issue as bug 162436?

   Count BuildID
     4   2002081308
     4   2002081218
     2   2002081304
 
     No of Unique Users        10
 
 Stack trace(Frame) 

	 PL_DHashTableRawRemove	[c:/builds/seamonkey/mozilla/xpcom/ds/pldhash.c  line 580] 
	 PL_DHashTableOperate	[c:/builds/seamonkey/mozilla/xpcom/ds/pldhash.c  line 549] 
	 nsGenericElement::~nsGenericElement
[c:/builds/seamonkey/mozilla/content/base/src/nsGenericElement.cpp  line 811] 
	 nsHTMLInputElement::`scalar deleting destructor'  
	 nsHTMLBaseFontElement::Release
[c:/builds/seamonkey/mozilla/content/html/content/src/nsHTMLBaseFontElement.cpp
 line 119] 
	 nsXULElement::~nsXULElement
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp  line 513] 
	 nsXULElement::`scalar deleting destructor'  
	 nsXULElement::Release
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp  line 633] 
	 nsXULElement::~nsXULElement
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp  line 513] 
	 nsXULElement::`scalar deleting destructor'  
	 nsXULElement::Release
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp  line 633] 
	 XPCJSRuntime::GCCallback
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcjsruntime.cpp  line 539] 
	 GKCONTENT.DLL + 0x11c410 (0x6069c410)  
	 nsXBLAttributeEntry::AddRef
[c:/builds/seamonkey/mozilla/content/xbl/src/nsXBLPrototypeBinding.cpp  line 152] 
	 0x56105d8b   
 
     (9325108)	URL: http://qandanj.org
     (9322807)	URL: www.mozilla.org/start
     (9322807)	Comments: closing mozilla
     (9322237)	URL: espn.com
     (9321284)	Comments: Closing last Mozilla Window
     (9320512)	Comments: Crashed on exit again.
     (9298409)	URL: www.wrh.noaa.gov/portland/
     (9298409)	Comments: URL did not appear in toolbar.  Back and forward
buttons inoperable  Browser crashed
     (9293664)	URL: http://www.telefonbuch.de/
     (9293664)	Comments: Nothing - I just closed the program

Comment 1

[greer]

Since it has shown up on the Trunk topcrash reports within 72hrs -> zt4newcrash.

Comment 2

[ly nguyen]

zt4newcrash -> blocker

Comment 3

[Mihail Daskalov]

have similar problem on linux with my own build from cvs updated today around
12:00 GMT.
I was trying to find something more about bug 159424 and exitting from browser
after more than 5 minutes of work caused the crash.
The stack trace seems a little different. I'll attach it in a separate file.

Comment 4

[Mihail Daskalov]

Attachment: stacktrace from SuSE Linux 7.2

Comment 5

[Doug Turner (:dougt)]

xul?

Comment 6

[Brendan Eich [:brendan]]

The stack in comment #4 has nothing to do with the talkback in comment #0.  File
a new bug on that (check for dups first), if it's still reproducing.

/be

Comment 7

[Brendan Eich [:brendan]]

I doubt hyatt should own this.  jrgm, can you reproduce it?

/be

Comment 8

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

This has an almost-identical stack (except the very top) to another topcrash
introduced at the same time.

*** This bug has been marked as a duplicate of 162526 ***

Comment 9

[greer]

Removing zt4newcrash, since this has been duped to the main crash bug.