Closed Bug 637274 Opened 13 years ago Closed 8 years ago

Crash [@ nsDocShellEditorData::TearDownEditor() ]

Categories

(Core :: DOM: Editor, defect)

x86
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

It is a new crash signature that first appeared in 4.0b12pre/20110220.
It is #41 top crasher in 4.0b12.
It is probably fixed as there have been no crashes in 4.0b13pre.

Signature	nsDocShellEditorData::TearDownEditor()
UUID	381deeaf-4040-49ae-ba96-f15242110228
Time 	2011-02-28 03:24:03.79156
Uptime	1400
Last Crash	13190725 seconds (more than 3 months) before submission
Install Age	151199 seconds (1.7 days) since version was first installed.
Product	Firefox
Version	4.0b12
Build ID	20110222210221
Branch	2.0
OS	Windows NT
OS Version	6.1.7600
CPU	x86
CPU Info	AuthenticAMD family 16 model 6 stepping 2
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x20
App Notes 	AdapterVendorID: 1002, AdapterDeviceID: 9498, AdapterDriverVersion: 8.56.1.15

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsDocShellEditorData::TearDownEditor 	docshell/base/nsDocShellEditorData.cpp:79
1 	xul.dll 	nsDocShellEditorData::~nsDocShellEditorData 	docshell/base/nsDocShellEditorData.cpp:72
2 	xul.dll 	nsDocShellEditorData::`scalar deleting destructor' 	
3 	xul.dll 	nsAutoPtr<nsDocShellEditorData>::assign 	obj-firefox/dist/include/nsAutoPtr.h:71
4 	xul.dll 	nsSHEntry::SetEditorData 	
5 	xul.dll 	nsFrameLoader::Finalize 	content/base/src/nsFrameLoader.cpp:578
6 	xul.dll 	nsDocument::MaybeInitializeFinalizeFrameLoaders 	content/base/src/nsDocument.cpp:5497
7 	xul.dll 	nsRunnableMethodImpl<void 	obj-firefox/dist/include/nsThreadUtils.h:345
8 	xul.dll 	nsContentUtils::AddScriptRunner 	content/base/src/nsContentUtils.cpp:4752
9 	xul.dll 	nsDocument::FinalizeFrameLoader 	content/base/src/nsDocument.cpp:5453
10 	xul.dll 	nsFrameLoader::Destroy 	content/base/src/nsFrameLoader.cpp:1289
11 	xul.dll 	nsGenericHTMLFrameElement::DestroyContent 	content/html/content/src/nsGenericHTMLElement.cpp:3234
12 	xul.dll 	nsGenericElement::DestroyContent 	content/base/src/nsGenericElement.cpp:3809
...
27 	xul.dll 	nsGenericElement::DestroyContent 	content/base/src/nsGenericElement.cpp:3809
28 	xul.dll 	nsDocument::Destroy 	content/base/src/nsDocument.cpp:7107
29 	xul.dll 	DocumentViewerImpl::Destroy 	layout/base/nsDocumentViewer.cpp:1647
30 	xul.dll 	DocumentViewerImpl::Show 	layout/base/nsDocumentViewer.cpp:1952
31 	xul.dll 	nsPresContext::EnsureVisible 	layout/base/nsPresContext.cpp:1691
32 	xul.dll 	PresShell::UnsuppressAndInvalidate 	layout/base/nsPresShell.cpp:4628
33 	xul.dll 	PresShell::UnsuppressPainting 	layout/base/nsPresShell.cpp:4677
34 	xul.dll 	DocumentViewerImpl::LoadComplete 	layout/base/nsDocumentViewer.cpp:1096
35 	xul.dll 	nsDocShell::EndPageLoad 	docshell/base/nsDocShell.cpp:6080
36 	xul.dll 	nsCOMPtr_base::assign_from_qi 	obj-firefox/xpcom/build/nsCOMPtr.cpp:96
37 	xul.dll 	nsDocShell::OnStateChange 	docshell/base/nsDocShell.cpp:5934

The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=657c2a92ee2b&tochange=e77f4eda0bad

More reports at:
https://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=nsDocShellEditorData%3A%3ATearDownEditor%28%29
Component: Document Navigation → Editor
QA Contact: docshell → editor
The stack for this crash doesn't look familiar to me.  I can't imagine how any of the recent editor fixes could have fixed this...
Note to myself: the candidates that might have fixed this are bug 636074 and bug 635420..
Now #24 top crasher in 4.0b12.
Assignee: nobody → ehsan
Whiteboard: [WFM?] → [post-2.0]
Crash Signature: [@ nsDocShellEditorData::TearDownEditor() ]
There have been only 3 crashes in 8.0* for the last four weeks.
Does this still need to be worked on?
Looking at https://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=nsDocShellEditorData%3A%3ATearDownEditor%28%29 it's still around in some way in recent versions, but it surely doesn't have any urgency.
Assignee: ehsan → nobody
Whiteboard: [post-2.0]
Crash Signature: [@ nsDocShellEditorData::TearDownEditor() ] → [@ nsDocShellEditorData::TearDownEditor() ] [@ nsDocShellEditorData::TearDownEditor ]
only one crash in 3 months, and it's versoin 4
bp-07a7b4b5-ba58-4e90-b8c1-d9b0a2160224
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.