1001905 - crash in NS_ABORT_OOM(unsigned int) | nsTHashtable<nsCStringHashKey>::Init(unsigned int)

Status: RESOLVED WORKSFORME

(Core :: DOM: Events, defect)

Description

[alex_mayorga]

This bug was filed from the Socorro interface and is 
report bp-973e7085-ed14-4bbc-8c77-c872a2140425.
=============================================================

Comment 1

[Robert Kaiser]

More crashes at https://crash-stats.mozilla.com/report/list?signature=NS_ABORT_OOM%28unsigned+int%29+%7C+nsTHashtable%3CnsCStringHashKey%3E%3A%3AInit%28unsigned+int%29

I see this in 27, 28, and 29 at this point, but newer releases haven't made it to a larger audience yet.


Top frames:

0 	xul.dll 	NS_ABORT_OOM(unsigned int) 	xpcom/base/nsDebugImpl.cpp
1 	xul.dll 	nsTHashtable<nsCStringHashKey>::Init(unsigned int) 	obj-firefox/dist/include/nsTHashtable.h
2 	mozjs.dll 	js::InvokeConstructor(JSContext *,JS::CallArgs) 	js/src/vm/Interpreter.cpp
3 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
4 	mozjs.dll 	js::RunScript(JSContext *,js::RunState &) 	js/src/vm/Interpreter.cpp
5 	mozjs.dll 	js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
6 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
7 	mozjs.dll 	js::Invoke(JSContext *,JS::Value const &,JS::Value const &,unsigned int,JS::Value *,JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
8 	mozjs.dll 	JS_CallFunctionValue(JSContext *,JSObject *,JS::Value,unsigned int,JS::Value *,JS::Value *) 	js/src/jsapi.cpp
9 	xul.dll 	mozilla::dom::MutationCallback::Call(JSContext *,JS::Handle<JSObject *>,mozilla::dom::Sequence<mozilla::dom::OwningNonNull<nsDOMMutationRecord> > const &,nsDOMMutationObserver &,mozilla::ErrorResult &) 	obj-firefox/dom/bindings/MutationObserverBinding.cpp
10 	xul.dll 	mozilla::dom::MutationCallback::Call<nsDOMMutationObserver *>(nsDOMMutationObserver * const &,mozilla::dom::Sequence<mozilla::dom::OwningNonNull<nsDOMMutationRecord> > const &,nsDOMMutationObserver &,mozilla::ErrorResult &,mozilla::dom::CallbackObject::ExceptionHandling) 	obj-firefox/dist/include/mozilla/dom/MutationObserverBinding.h
11 	xul.dll 	nsDOMMutationObserver::HandleMutation() 	content/base/src/nsDOMMutationObserver.cpp
12 	xul.dll 	nsDOMMutationObserver::HandleMutationsInternal() 	content/base/src/nsDOMMutationObserver.cpp
13 	xul.dll 	nsEventListenerManager::HandleEventSubType(nsListenerStruct *,nsIDOMEvent *,mozilla::dom::EventTarget *,nsCxPusher *) 	content/events/src/nsEventListenerManager.cpp
[...]

There is some JS stuff in there but that sounds rather generic to me, so I guess on this being a DOM bug.

Comment 2

[Wayne Mery (:wsmwk)]

Alex have you seen anything like this since?

If not, please close the bug, because there's nothing in the last 4 weeks on crash-stats that has a similar stack and nsTHashtable<nsCStringHashKey>::Init(unsigned int) in the signature.

https://crash-stats.mozilla.com/report/list?signature=nsTHashtable%3CnsCStringHashKey%3E%3A%3AInit%28unsigned+int%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2015-02-03+02%3A00%3A00&range_value=4#tab-reports