1021954 - crash in mozalloc_abort(char const* const) | mozilla::ipc::MessageChannel::DebugAbort(char const*, int, char const*, char const*, bool) | mozilla::ipc::MessageChannel::~MessageChannel() | mozilla::layers::PCompositorChild::~PCompositorChild()

Status: RESOLVED INCOMPLETE

(Core :: Graphics: Layers, defect)

Description

[juan becerra [:juanb]]

This bug was filed from the Socorro interface and is 
report bp-c36b8a07-46c1-4d52-aa55-c19ff2140522.
=============================================================

This started to appear on nightly 32.0a1 around 5/21 and it's moving up in the list of top crashers, although it currently is somewhere around #50. There are no comments in the reports yet.

About half of these are happening on Win7, followed evenly by the other Windows flavors.

More reports can be found here: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=mozalloc_abort%28char+const%2A+const%29+%7C+NS_DebugBreak+%7C+mozilla%3A%3Aipc%3A%3AMessageChannel%3A%3ADebugAbort%28char+const%2A%2C+int%2C+char+const%2A%2C+char+const%2A%2C+bool%29+%7C+mozilla%3A%3Aipc%3A%3AMessageChannel%3A%3A%7EMessageChannel%28%29+%7C+mozilla%3A%3Alayers%3A%3APCompositorChild%3A%3A%7EPCompositorChild%28%29

0 	mozalloc.dll 	mozalloc_abort(char const * const) 	memory/mozalloc/mozalloc_abort.cpp
1 	xul.dll 	NS_DebugBreak 	xpcom/base/nsDebugImpl.cpp
2 	xul.dll 	mozilla::ipc::MessageChannel::DebugAbort(char const *,int,char const *,char const *,bool) 	ipc/glue/MessageChannel.cpp
3 	xul.dll 	mozilla::ipc::MessageChannel::~MessageChannel() 	ipc/glue/MessageChannel.cpp
4 	xul.dll 	mozilla::layers::PCompositorChild::~PCompositorChild() 	obj-firefox/ipc/ipdl/PCompositorChild.cpp
5 	xul.dll 	mozilla::layers::CompositorChild::`scalar deleting destructor'(unsigned int) 	
6 	xul.dll 	nsBaseWidget::CreateCompositor(int,int) 	widget/xpwidgets/nsBaseWidget.cpp
7 	xul.dll 	nsBaseWidget::CreateCompositor() 	widget/xpwidgets/nsBaseWidget.cpp
8 	xul.dll 	nsWindow::GetLayerManager(mozilla::layers::PLayerTransactionChild *,mozilla::layers::LayersBackend,nsIWidget::LayerManagerPersistence,bool *) 	widget/windows/nsWindow.cpp
9 	xul.dll 	nsDOMWindowUtils::BeginTabSwitch() 	dom/base/nsDOMWindowUtils.cpp
10 	xul.dll 	XPTC__InvokebyIndex 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke_asm_x86_64.asm
11 	xul.dll 	xul.dll@0x17d0ff8 	
12 	mozjs.dll 	PurgeScopeChainHelper 	js/src/jsobj.cpp
13 	mozjs.dll 	js::DefineNativeProperty(js::ExclusiveContext *,JS::Handle<JSObject *>,JS::Handle<jsid>,JS::Handle<JS::Value>,bool (*)(JSContext *,JS::Handle<JSObject *>,JS::Handle<jsid>,JS::MutableHandle<JS::Value>),bool (*)(JSContext *,JS::Handle<JSObject *>,JS::Handle<jsid>,bool,JS::MutableHandle<JS::Value>),unsigned int) 	js/src/jsobj.cpp
14 	mozjs.dll 	JSObject::defineGeneric(js::ExclusiveContext *,JS::Handle<JSObject *>,JS::Handle<jsid>,JS::Handle<JS::Value>,bool (*)(JSContext *,JS::Handle<JSObject *>,JS::Handle<jsid>,JS::MutableHandle<JS::Value>),bool (*)(JSContext *,JS::Handle<JSObject *>,JS::Handle<jsid>,bool,JS::MutableHandle<JS::Value>),unsigned int) 	js/src/jsobj.cpp
15 		@0x11628ee0 	
16 	mozjs.dll 	js::NewFunctionByIdWithReserved(JSContext *,bool (*)(JSContext *,unsigned int,JS::Value *),unsigned int,unsigned int,JSObject *,jsid) 	js/src/jsfriendapi.cpp
17 	xul.dll 	NS_IsMainThread() 	xpcom/glue/nsThreadUtils.cpp
18 		@0x75b07f784219 	
19 	xul.dll 	XPC_WN_CallMethod(JSContext *,unsigned int,JS::Value *) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
20 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
21 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
22 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
23 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
24 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
25 	mozjs.dll 	JS::Call(JSContext *,JS::Handle<JS::Value>,JS::Handle<JS::Value>,JS::HandleValueArray const &,JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp
26 	xul.dll 	mozilla::dom::EventHandlerNonNull::Call(JSContext *,JS::Handle<JS::Value>,mozilla::dom::Event &,mozilla::ErrorResult &) 	obj-firefox/dom/bindings/EventHandlerBinding.cpp
27 	xul.dll 	mozilla::dom::EventHandlerNonNull::Call<nsISupports *>(nsISupports * const &,mozilla::dom::Event &,mozilla::ErrorResult &,mozilla::dom::CallbackObject::ExceptionHandling) 	obj-firefox/dist/include/mozilla/dom/EventHandlerBinding.h
28 	xul.dll 	mozilla::JSEventHandler::HandleEvent(nsIDOMEvent *) 	dom/events/JSEventHandler.cpp
29 	xul.dll 	mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener *,nsIDOMEvent *,mozilla::dom::EventTarget *) 	dom/events/EventListenerManager.cpp
30 	xul.dll 	mozilla::EventListenerManager::HandleEventInternal(nsPresContext *,mozilla::WidgetEvent *,nsIDOMEvent * *,mozilla::dom::EventTarget *,nsEventStatus *) 	dom/events/EventListenerManager.cpp
31 	xul.dll 	mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor &,mozilla::ELMCreationDetector &) 	dom/events/EventDispatcher.cpp
32 	xul.dll 	mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem> &,mozilla::EventChainPostVisitor &,mozilla::EventDispatchingCallback *,mozilla::ELMCreationDetector &) 	dom/events/EventDispatcher.cpp
33 	xul.dll 	mozilla::EventDispatcher::Dispatch(nsISupports *,nsPresContext *,mozilla::WidgetEvent *,nsIDOMEvent *,nsEventStatus *,mozilla::EventDispatchingCallback *,nsCOMArray<mozilla::dom::EventTarget> *) 	dom/events/EventDispatcher.cpp
34 	xul.dll 	mozilla::EventDispatcher::DispatchDOMEvent(nsISupports *,mozilla::WidgetEvent *,nsIDOMEvent *,nsPresContext *,nsEventStatus *) 	dom/events/EventDispatcher.cpp
35 	xul.dll 	nsINode::DispatchEvent(nsIDOMEvent *,bool *) 	content/base/src/nsINode.cpp
36 	xul.dll 	mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event &,mozilla::ErrorResult &) 	content/base/src/nsINode.cpp
37 	xul.dll 	mozilla::dom::EventTargetBinding::dispatchEvent 	obj-firefox/dom/bindings/EventTargetBinding.cpp
38 	xul.dll 	mozilla::dom::EventTargetBinding::genericMethod 	obj-firefox/dom/bindings/EventTargetBinding.cpp
39 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
40 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
41 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
42 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
43 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
44 	mozjs.dll 	js::InvokeGetterOrSetter(JSContext *,JSObject *,JS::Value,unsigned int,JS::Value *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
45 	mozjs.dll 	js::Shape::set(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,bool,JS::MutableHandle<JS::Value>) 	js/src/vm/Shape-inl.h
46 	mozjs.dll 	js::baseops::SetPropertyHelper<0>(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<jsid>,js::baseops::QualifiedBool,JS::MutableHandle<JS::Value>,bool) 	js/src/jsobj.cpp
47 	mozjs.dll 	SetPropertyOperation 	js/src/vm/Interpreter.cpp
48 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
49 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
50 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
51 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
52 	mozjs.dll 	js::InvokeGetterOrSetter(JSContext *,JSObject *,JS::Value,unsigned int,JS::Value *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
53 	mozjs.dll 	js::Shape::set(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,bool,JS::MutableHandle<JS::Value>) 	js/src/vm/Shape-inl.h
54 	mozjs.dll 	js::baseops::SetPropertyHelper<0>(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<jsid>,js::baseops::QualifiedBool,JS::MutableHandle<JS::Value>,bool) 	js/src/jsobj.cpp
55 	mozjs.dll 	SetPropertyOperation 	js/src/vm/Interpreter.cpp
56 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
57 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
58 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
59 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
60 	mozjs.dll 	js::InvokeGetterOrSetter(JSContext *,JSObject *,JS::Value,unsigned int,JS::Value *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
61 	mozjs.dll 	js::Shape::set(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,bool,JS::MutableHandle<JS::Value>) 	js/src/vm/Shape-inl.h
62 	mozjs.dll 	js::baseops::SetPropertyHelper<0>(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<jsid>,js::baseops::QualifiedBool,JS::MutableHandle<JS::Value>,bool) 	js/src/jsobj.cpp
63 	mozjs.dll 	SetPropertyOperation 	js/src/vm/Interpreter.cpp
64 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
65 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
66 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
67 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
68 	mozjs.dll 	js::InvokeGetterOrSetter(JSContext *,JSObject *,JS::Value,unsigned int,JS::Value *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
69 	mozjs.dll 	js::Shape::set(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,bool,JS::MutableHandle<JS::Value>) 	js/src/vm/Shape-inl.h
70 	mozjs.dll 	js::baseops::SetPropertyHelper<0>(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<jsid>,js::baseops::QualifiedBool,JS::MutableHandle<JS::Value>,bool) 	js/src/jsobj.cpp
71 	mozjs.dll 	SetPropertyOperation 	js/src/vm/Interpreter.cpp
72 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
73 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
74 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
75 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
76 	mozjs.dll 	js::InvokeGetterOrSetter(JSContext *,JSObject *,JS::Value,unsigned int,JS::Value *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
77 	mozjs.dll 	js::Shape::set(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,bool,JS::MutableHandle<JS::Value>) 	js/src/vm/Shape-inl.h
78 	mozjs.dll 	js::baseops::SetPropertyHelper<0>(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<jsid>,js::baseops::QualifiedBool,JS::MutableHandle<JS::Value>,bool) 	js/src/jsobj.cpp
79 	mozjs.dll 	SetPropertyOperation 	js/src/vm/Interpreter.cpp
80 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
81 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
82 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
83 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value const *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
84 	mozjs.dll 	js::InvokeGetterOrSetter(JSContext *,JSObject *,JS::Value,unsigned int,JS::Value *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
85 	mozjs.dll 	js::Shape::set(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,bool,JS::MutableHandle<JS::Value>) 	js/src/vm/Shape-inl.h
86 	mozjs.dll 	js::baseops::SetPropertyHelper<0>(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<jsid>,js::baseops::QualifiedBool,JS::MutableHandle<JS::Value>,bool) 	js/src/jsobj.cpp
87 	mozjs.dll 	SetPropertyOperation 	js/src/vm/Interpreter.cpp
88 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
89 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
110 	xul.dll 	nsXPCWrappedJS::CallMethod(unsigned short,XPTMethodDescriptor const *,nsXPTCMiniVariant *) 	js/xpconnect/src/XPCWrappedJS.cpp
111 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs_x86_64.cpp
112 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs_asm_x86_64.asm
113 	xul.dll 	nsCommandLine::EnumerateHandlers(tag_nsresult (*)(nsICommandLineHandler *,nsICommandLine *,void *),void *) 	toolkit/components/commandlines/nsCommandLine.cpp
114 	xul.dll 	nsCommandLine::Run() 	toolkit/components/commandlines/nsCommandLine.cpp
115 	xul.dll 	nsNativeAppSupportWin::HandleCommandLine(char const *,nsIFile *,unsigned int) 	toolkit/xre/nsNativeAppSupportWin.cpp
116 	xul.dll 	MessageWindow::WindowProc(HWND__ *,unsigned int,unsigned __int64,__int64) 	toolkit/xre/nsNativeAppSupportWin.cpp
117 	user32.dll 	UserCallWinProcCheckWow 	
118 	user32.dll 	UserCallWinProcCheckWow 	
119 	xul.dll 	`anonymous namespace'::CallWindowProcedureHook(int,unsigned __int64,__int64)

Comment 1

[(Away)]

 ###!!! ABORT: mismatched CxxStackFrame ctor/dtors: file c:\builds\moz2_slave\m-cen-w32-ntly-000000000000000\build\ipc\glue\MessageChannel.cpp, line 1732

Potentially a duplicate of bug 1021149, but the frame below ~MessageChannel() is different. (I guess it depends on whether these need to be fixed one-by-one, or whether there's a root-cause fix that takes care of them all.)

Comment 2

[u279076]

Closing since there are no crashes beyond Firefox 47. Please reopen if you can reproduce this in a current version.