Bug 1559523 Comment 18 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Original comment by
on 
Thread 1 "thunderbird" received signal SIGSEGV, Segmentation fault.
0x00007fffe8c28c71 in mozilla::RefPtrTraits<nsIDocumentObserver>::AddRef (aPtr=0x7fffcd779ea0) at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:45
45	  static void AddRef(U* aPtr) { aPtr->AddRef(); }
(gdb) bt 15
#0  0x00007fffe8c28c71 in mozilla::RefPtrTraits<nsIDocumentObserver>::AddRef(nsIDocumentObserver*) (aPtr=0x7fffcd779ea0) at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:45
#1  0x00007fffe8c28c05 in RefPtr<nsIDocumentObserver>::ConstRemovingRefPtrTraits<nsIDocumentObserver>::AddRef(nsIDocumentObserver*) (aPtr=0x7fffcd779ea0)
    at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:362
#2  0x00007fffe8c28bdc in RefPtr<nsIDocumentObserver>::assign_with_AddRef(nsIDocumentObserver*) (this=0x7fffffff6740, aRawPtr=0x7fffcd779ea0)
    at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:56
#3  0x00007fffe8b8c1df in RefPtr<nsIDocumentObserver>::operator=(nsIDocumentObserver*) (this=0x7fffffff6740, aRhs=0x7fffcd779ea0) at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:178
#4  0x00007fffe8b8db71 in mozilla::dom::Document::EndLoad() (this=0x7fffcd78d000) at /home/user/moz/commcent/mozilla/dom/base/Document.cpp:7264
#5  0x00007fffe811a1fa in nsHtml5TreeOpExecutor::DidBuildModel(bool) (this=0x7fffd1026400, aTerminated=false) at /home/user/moz/commcent/mozilla/parser/html/nsHtml5TreeOpExecutor.cpp:202
#6  0x00007fffe811e66e in nsHtml5TreeOpExecutor::FlushDocumentWrite() (this=0x7fffd1026400) at /home/user/moz/commcent/mozilla/parser/html/nsHtml5TreeOpExecutor.cpp:623
#7  0x00007fffe80cf28a in nsHtml5Parser::ParseUntilBlocked() (this=0x7fffcde33f90) at /home/user/moz/commcent/mozilla/parser/html/nsHtml5Parser.cpp:577
#8  0x00007fffe80cdd46 in nsHtml5Parser::Parse(nsTSubstring<char16_t> const&, void*, bool) (this=0x7fffcde33f90, aSourceBuffer=..., aKey=0x0, aLastCall=true)
    at /home/user/moz/commcent/mozilla/parser/html/nsHtml5Parser.cpp:213
#9  0x00007fffe8b9916b in mozilla::dom::Document::Close(mozilla::ErrorResult&) (this=0x7fffcd78d000, rv=...) at /home/user/moz/commcent/mozilla/dom/base/Document.cpp:9006
#10 0x00007fffe9c5118d in mozilla::dom::Document_Binding::close(JSContext*, JS::Handle<JSObject*>, mozilla::dom::Document*, JSJitMethodCallArgs const&)
    (cx=0x7fffe422d000, obj=..., self=0x7fffcd78d000, args=...) at DocumentBinding.cpp:3236
#11 0x00007fffe9fc1837 in mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)
    (cx=0x7fffe422d000, argc=0, vp=0x7fffcddc6158) at /home/user/moz/commcent/mozilla/dom/bindings/BindingUtils.cpp:3171
#12 0x00007fffee153b7f in CallJSNative(JSContext*, bool (*)(JSContext*, unsigned int, JS::Value*), JS::CallArgs const&)
    (cx=0x7fffe422d000, native=0x7fffe9fc1560 <mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)>, args=...) at /home/user/moz/commcent/mozilla/js/src/vm/Interpreter.cpp:448
#13 0x00007fffee15347a in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x7fffe422d000, args=..., construct=js::NO_CONSTRUCT)
    at /home/user/moz/commcent/mozilla/js/src/vm/Interpreter.cpp:540
#14 0x00007fffee1546c5 in InternalCall(JSContext*, js::AnyInvokeArgs const&) (cx=0x7fffe422d000, args=...) at /home/user/moz/commcent/mozilla/js/src/vm/Interpreter.cpp:595
(More stack frames follow...)
(gdb) up 4
#4  0x00007fffe8b8db71 in mozilla::dom::Document::EndLoad (this=0x7fffcd78d000) at /home/user/moz/commcent/mozilla/dom/base/Document.cpp:7264
7264	        obs_ = next;
(gdb) print next
$1 = (nsIDocumentObserver *) 0x7fffcd779ea0
(gdb) print *next
$2 = {<nsIMutationObserver> = {<nsISupports> = {_vptr$nsISupports = 0xe5e5e5e5e5e5e5e5}, <No data fields>}, <No data fields>}
Revision 1 by
on 
```
Thread 1 "thunderbird" received signal SIGSEGV, Segmentation fault.
0x00007fffe8c28c71 in mozilla::RefPtrTraits<nsIDocumentObserver>::AddRef (aPtr=0x7fffcd779ea0) at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:45
45	  static void AddRef(U* aPtr) { aPtr->AddRef(); }
(gdb) bt 15
#0  0x00007fffe8c28c71 in mozilla::RefPtrTraits<nsIDocumentObserver>::AddRef(nsIDocumentObserver*) (aPtr=0x7fffcd779ea0) at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:45
#1  0x00007fffe8c28c05 in RefPtr<nsIDocumentObserver>::ConstRemovingRefPtrTraits<nsIDocumentObserver>::AddRef(nsIDocumentObserver*) (aPtr=0x7fffcd779ea0)
    at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:362
#2  0x00007fffe8c28bdc in RefPtr<nsIDocumentObserver>::assign_with_AddRef(nsIDocumentObserver*) (this=0x7fffffff6740, aRawPtr=0x7fffcd779ea0)
    at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:56
#3  0x00007fffe8b8c1df in RefPtr<nsIDocumentObserver>::operator=(nsIDocumentObserver*) (this=0x7fffffff6740, aRhs=0x7fffcd779ea0) at /home/user/moz/commcent/obj-thunder-debug/dist/include/mozilla/RefPtr.h:178
#4  0x00007fffe8b8db71 in mozilla::dom::Document::EndLoad() (this=0x7fffcd78d000) at /home/user/moz/commcent/mozilla/dom/base/Document.cpp:7264
#5  0x00007fffe811a1fa in nsHtml5TreeOpExecutor::DidBuildModel(bool) (this=0x7fffd1026400, aTerminated=false) at /home/user/moz/commcent/mozilla/parser/html/nsHtml5TreeOpExecutor.cpp:202
#6  0x00007fffe811e66e in nsHtml5TreeOpExecutor::FlushDocumentWrite() (this=0x7fffd1026400) at /home/user/moz/commcent/mozilla/parser/html/nsHtml5TreeOpExecutor.cpp:623
#7  0x00007fffe80cf28a in nsHtml5Parser::ParseUntilBlocked() (this=0x7fffcde33f90) at /home/user/moz/commcent/mozilla/parser/html/nsHtml5Parser.cpp:577
#8  0x00007fffe80cdd46 in nsHtml5Parser::Parse(nsTSubstring<char16_t> const&, void*, bool) (this=0x7fffcde33f90, aSourceBuffer=..., aKey=0x0, aLastCall=true)
    at /home/user/moz/commcent/mozilla/parser/html/nsHtml5Parser.cpp:213
#9  0x00007fffe8b9916b in mozilla::dom::Document::Close(mozilla::ErrorResult&) (this=0x7fffcd78d000, rv=...) at /home/user/moz/commcent/mozilla/dom/base/Document.cpp:9006
#10 0x00007fffe9c5118d in mozilla::dom::Document_Binding::close(JSContext*, JS::Handle<JSObject*>, mozilla::dom::Document*, JSJitMethodCallArgs const&)
    (cx=0x7fffe422d000, obj=..., self=0x7fffcd78d000, args=...) at DocumentBinding.cpp:3236
#11 0x00007fffe9fc1837 in mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)
    (cx=0x7fffe422d000, argc=0, vp=0x7fffcddc6158) at /home/user/moz/commcent/mozilla/dom/bindings/BindingUtils.cpp:3171
#12 0x00007fffee153b7f in CallJSNative(JSContext*, bool (*)(JSContext*, unsigned int, JS::Value*), JS::CallArgs const&)
    (cx=0x7fffe422d000, native=0x7fffe9fc1560 <mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)>, args=...) at /home/user/moz/commcent/mozilla/js/src/vm/Interpreter.cpp:448
#13 0x00007fffee15347a in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x7fffe422d000, args=..., construct=js::NO_CONSTRUCT)
    at /home/user/moz/commcent/mozilla/js/src/vm/Interpreter.cpp:540
#14 0x00007fffee1546c5 in InternalCall(JSContext*, js::AnyInvokeArgs const&) (cx=0x7fffe422d000, args=...) at /home/user/moz/commcent/mozilla/js/src/vm/Interpreter.cpp:595
(More stack frames follow...)
(gdb) up 4
#4  0x00007fffe8b8db71 in mozilla::dom::Document::EndLoad (this=0x7fffcd78d000) at /home/user/moz/commcent/mozilla/dom/base/Document.cpp:7264
7264	        obs_ = next;
(gdb) print next
$1 = (nsIDocumentObserver *) 0x7fffcd779ea0
(gdb) print *next
$2 = {<nsIMutationObserver> = {<nsISupports> = {_vptr$nsISupports = 0xe5e5e5e5e5e5e5e5}, <No data fields>}, <No data fields>}
```

Back to Bug 1559523 Comment 18