861631 - crash in WrappedNativeFinalize

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Wayne Mery (:wsmwk)]

#68 crash for TB 17.0.5

Crashes operating on large numbers of messages?
But not OOM


This bug was filed from the Socorro interface and is 
report bp-d62a9988-9024-4203-bd99-9cb572130322 .
"selecting a few hundred messages in my inbox and dragged to a sub folder and bam the app quit. i do it often although i was on beta 10 till today. The beta channel should at least let me know that the main channel has far exceeded the beta version"

0		@0x192f63e8	
1	xul.dll	WrappedNativeFinalize	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:617
2	xul.dll	XPC_WN_NoHelper_Finalize	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:623
3	mozjs.dll	js::gc::Arena::finalize<JSObject>	js/src/jsgc.cpp:348
4	mozjs.dll	js::gc::FinalizeTypedArenas<JSObject>	js/src/jsgc.cpp:412
5	mozjs.dll	js::gc::ArenaLists::queueObjectsForSweep	js/src/jsgc.cpp:1722
6	mozjs.dll	BeginSweepPhase	js/src/jsgc.cpp:3750
7	mozjs.dll	IncrementalCollectSlice	js/src/jsgc.cpp:4221
8	mozjs.dll	GCCycle	js/src/jsgc.cpp:4399
9	mozjs.dll	Collect	js/src/jsgc.cpp:4507
10	mozjs.dll	js::GCSlice	js/src/jsgc.cpp:4545
11	mozjs.dll	js::IncrementalGC	js/src/jsfriendapi.cpp:171
12	xul.dll	nsJSContext::GarbageCollectNow	dom/base/nsJSEnvironment.cpp:2934 


less typical stack
bp-19a6da05-3d7c-47d8-a412-5eb9d2130409 user was compacting folders
0		@0x4bb2ca0	
1	xul.dll	WrappedNativeFinalize	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:617
2	xul.dll	XPC_WN_NoHelper_Finalize	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:623
3	mozjs.dll	js::gc::Arena::finalize<JSObject>	js/src/jsgc.cpp:348
4	mozjs.dll	js::gc::FinalizeTypedArenas<JSObject>	js/src/jsgc.cpp:412
5	mozjs.dll	js::gc::ArenaLists::queueObjectsForSweep	js/src/jsgc.cpp:1722
6	mozjs.dll	BeginSweepPhase	js/src/jsgc.cpp:3750
7	mozjs.dll	IncrementalCollectSlice	js/src/jsgc.cpp:4221
8	mozjs.dll	GCCycle	js/src/jsgc.cpp:4399
9	mozjs.dll	Collect	js/src/jsgc.cpp:4507
10	mozjs.dll	js::GC	js/src/jsgc.cpp:4531
11	mozjs.dll	js::GCForReason	js/src/jsfriendapi.cpp:159
12	xul.dll	nsXPCComponents_Utils::ForceGC	js/xpconnect/src/XPCComponents.cpp:4039
13	xul.dll	NS_InvokeByIndex_P	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:70
14	xul.dll	nsDisplayList::GetBounds	layout/base/nsDisplayList.cpp:805
15	gkmedias.dll	_moz_cairo_region_create_rectangles	gfx/cairo/cairo/src/cairo-region.c:252

Comment 1

[Wayne Mery (:wsmwk)]

Another example (same user?)

 Moving multiple big mailselections (of 1000+ mails) from folders to (archive) subfolders - splitting down 100MB+ folders to ~40MB subfolders.
Did this without issues inside one account of the profile multiple times. First try in a second account in the profile resulted in crash. Additionally the whole profile is on the network (but is for years without issues) and restarting OS and TB is 2 weeks ago... 

bp-82719a25-0722-4ec6-a8f9-2b2962130827

Comment 2

[Wayne Mery (:wsmwk)]

Almost no crashes, and none of them current versions.
(Tbird crashes end after version 17)
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=FindReplaceLength