295090 - Crash in Spider driving JS Test Suite - Trunk [@ JS_GetClass]

Status: RESOLVED FIXED

(Core :: XPConnect, defect)

Description

[Bob Clary [:bc] (inactive)]

This occurs in post 5/21, Firefox xpc wrapper builds.

1. Install Spider, then exit. 
    <http://bclary.com/2004/07/10/spider/spider.xpi>

2. Start Spider using the URL either from the command line or in the browser.
   Sorry, but test.bclary.com is password protected.

3. Crash.

Stack:

In top frame:
+	cx	0x03134c90
-	obj	0x029bb7a8
+	     map	0x00000000
+	     slots	0x61c606c3

JS_GetClass(JSContext * 0x03134c90, JSObject * 0x029bb7a8) line 2040 + 5 bytes
GetScopeOfObject(JSContext * 0x03134c90, JSObject * 0x029bb7a8) line 504 + 14 bytes
XPCWrappedNativeScope::FindInJSObjectScope(XPCCallContext & {...}, JSObject *
0x029bb7a8, int 0x00000000) line 572 + 18 bytes
XPCConvert::NativeInterface2JSObject(XPCCallContext & {...},
nsIXPConnectJSObjectHolder * * 0x0012d4f0, nsISupports * 0x046b47b8, const nsID
* 0x0012d73c, JSObject * 0x029bb7a8, unsigned int * 0x0012d7f8) line 1050 + 15 bytes
XPCConvert::NativeData2JS(XPCCallContext & {...}, long * 0x0012d620, const void
* 0x0012d6c8, const nsXPTType & {...}, const nsID * 0x0012d73c, JSObject *
0x029bb7a8, unsigned int * 0x0012d7f8) line 467 + 49 bytes
XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode
CALL_METHOD) line 2183 + 50 bytes
XPC_WN_CallMethod(JSContext * 0x03134c90, JSObject * 0x02a619e8, unsigned int
0x00000001, long * 0x040f6fb4, long * 0x0012d988) line 1330 + 14 bytes
js_Invoke(JSContext * 0x03134c90, unsigned int 0x00000001, unsigned int
0x00000000) line 1182 + 23 bytes
js_Interpret(JSContext * 0x03134c90, unsigned char * 0x03b2b820, long *
0x0012e43c) line 3472 + 15 bytes
js_Invoke(JSContext * 0x03134c90, unsigned int 0x00000001, unsigned int
0x00000002) line 1202 + 19 bytes
nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJSClass * const 0x02f87ae8,
nsXPCWrappedJS * 0x03c8bfc0, unsigned short 0x0003, const nsXPTMethodInfo *
0x025eba20, nsXPTCMiniVariant * 0x0012e78c) line 1339 + 22 bytes
nsXPCWrappedJS::CallMethod(nsXPCWrappedJS * const 0x03c8bfc0, unsigned short
0x0003, const nsXPTMethodInfo * 0x025eba20, nsXPTCMiniVariant * 0x0012e78c) line 450
PrepareAndDispatch(nsXPTCStubBase * 0x03c8bfc0, unsigned int 0x00000003,
unsigned int * 0x0012e83c, unsigned int * 0x0012e82c) line 117 + 31 bytes
SharedStub() line 147
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x03c8c028,
nsIDOMEvent * 0x045e5b20, nsIDOMEventTarget * 0x03b409c8, unsigned int
0x00000001, unsigned int 0x00000007) line 1568 + 20 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x03c55d18,
nsPresContext * 0x00000000, nsEvent * 0x0012ed3c, nsIDOMEvent * * 0x0012ecb8,
nsIDOMEventTarget * 0x03b409c8, unsigned int 0x00000007, nsEventStatus *
0x0012ed64) line 1672
nsXULElement::HandleDOMEvent(nsPresContext * 0x00000000, nsEvent * 0x0012ed3c,
nsIDOMEvent * * 0x0012ecb8, unsigned int 0x00000007, nsEventStatus * 0x0012ed64)
line 2194
nsGlobalWindow::HandleDOMEvent(nsPresContext * 0x03b9d930, nsEvent * 0x0012ee1c,
nsIDOMEvent * * 0x0012ed8c, unsigned int 0x00000007, nsEventStatus * 0x0012ee44)
line 967 + 45 bytes
DocumentViewerImpl::LoadComplete(DocumentViewerImpl * const 0x03c47468, unsigned
int 0x00000000) line 994 + 35 bytes
nsDocShell::EndPageLoad(nsIWebProgress * 0x03b735cc, nsIChannel * 0x03c56268,
unsigned int 0x00000000) line 4623
nsWebShell::EndPageLoad(nsIWebProgress * 0x03b735cc, nsIChannel * 0x03c56268,
unsigned int 0x00000000) line 665
nsDocShell::OnStateChange(nsDocShell * const 0x03b73680, nsIWebProgress *
0x03b735cc, nsIRequest * 0x03c56268, unsigned int 0x00020010, unsigned int
0x00000000) line 4549
nsDocLoader::FireOnStateChange(nsIWebProgress * 0x03b735cc, nsIRequest *
0x03c56268, int 0x00020010, unsigned int 0x00000000) line 1195
nsDocLoader::doStopDocumentLoad(nsIRequest * 0x03c56268, unsigned int
0x00000000) line 832
nsDocLoader::DocLoaderIsEmpty() line 729
nsDocLoader::OnStopRequest(nsIRequest * 0x01ff8318, nsISupports * 0x00000000,
unsigned int 0x00000000) line 653
nsLoadGroup::RemoveRequest(nsLoadGroup * const 0x03b737f8, nsIRequest *
0x01ff8318, nsISupports * 0x00000000, unsigned int 0x00000000) line 732 + 44 bytes
PresShell::RemoveDummyLayoutRequest() line 7045 + 42 bytes
DummyLayoutRequestEvent::HandleEvent() line 6945
HandleDummyLayoutRequestPLEvent(PLEvent * 0x03aa2068) line 6954
PL_HandleEvent(PLEvent * 0x03aa2068) line 698 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x02063188) line 633 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x000c0282, unsigned int 0x0000c110, unsigned int
0x00000000, long 0x02063188) line 1435 + 9 bytes
USER32! 77d48734()
USER32! 77d48816()
USER32! 77d489cd()
USER32! 77d48a10()
nsAppShell::Run(nsAppShell * const 0x020abfa8) line 135
nsAppStartup::Run(nsAppStartup * const 0x020abf08) line 145
XRE_main(int 0x00000001, char * * 0x01aa78b8, const nsXREAppData * 0x0123b01c
kAppData) line 2056 + 35 bytes
main(int 0x00000001, char * * 0x01aa78b8) line 61 + 18 bytes
mainCRTStartup() line 338 + 17 bytes

Comment 1

[Boris Zbarsky [:bzbarsky]]

I get the same stack here as in bug 295101.

Comment 2

[Boris Zbarsky [:bzbarsky]]

Fixed by patch in bug 295101.