Closed Bug 1104166 Opened 10 years ago Closed 10 years ago

crash in CPOWProxyHandler::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) const

Categories

(Core :: IPC, defect)

36 Branch
All
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1104160
Tracking Status
e10s ? ---
firefox36 --- affected

People

(Reporter: jbecerra, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-8208fd7f-55b0-4b46-855d-c4baf2141120.
=============================================================

This is a recent signature on Fx36 nightly starting 11/20. All reports so far are coming from Mac OS X, mostly from 10.10.1 installations. This appeared in the list of explosive reports. There are no comments yet.

Please put it in the right bucket, because I'm not sure where to file it. I have a feeling this is tickled by e10s. 

More reports at: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=CPOWProxyHandler%3A%3Aget%28JSContext%2A%2C+JS%3A%3AHandle%3CJSObject%2A%3E%2C+JS%3A%3AHandle%3CJSObject%2A%3E%2C+JS%3A%3AHandle%3Cjsid%3E%2C+JS%3A%3AMutableHandle%3CJS%3A%3AValue%3E%29+const

0 	XUL 	CPOWProxyHandler::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) const 	js/ipc/CPOWTimer.cpp
1 	XUL 	js::Proxy::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) 	js/src/proxy/Proxy.cpp
2 	XUL 	js::proxy_GetGeneric(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) 	js/src/proxy/Proxy.cpp
3 	XUL 	JS_ForwardGetPropertyTo(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>) 	js/src/vm/NativeObject.h
4 	XUL 	JS_GetPropertyById(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp
5 	XUL 	nsXPCWrappedJSClass::CallQueryInterfaceOnJSObject(JSContext*, JSObject*, nsID const&) 	js/xpconnect/src/XPCWrappedJSClass.cpp
6 	XUL 	nsXPCWrappedJS::GetNewOrUsed(JS::Handle<JSObject*>, nsID const&, nsXPCWrappedJS**) 	js/xpconnect/src/XPCWrappedJSClass.cpp
7 	XUL 	XPCConvert::JSObject2NativeInterface(void**, JS::Handle<JSObject*>, nsID const*, nsISupports*, tag_nsresult*) 	js/xpconnect/src/XPCConvert.cpp
8 	XUL 	XPCConvert::JSData2Native(void*, JS::Handle<JS::Value>, nsXPTType const&, nsID const*, tag_nsresult*) 	js/xpconnect/src/XPCConvert.cpp
9 	XUL 	XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) 	js/xpconnect/src/XPCWrappedNative.cpp
10 	XUL 	XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
11 	XUL 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/jscntxtinlines.h
12 	XUL 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
13 	XUL 	JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp
14 	XUL 	mozilla::jsipc::WrapperAnswer::RecvCallOrConstruct(mozilla::jsipc::ObjectId const&, nsTArray<mozilla::jsipc::JSParam> const&, bool const&, mozilla::jsipc::ReturnStatus*, mozilla::jsipc::JSVariant*, nsTArray<mozilla::jsipc::JSParam>*) 	js/ipc/WrapperAnswer.cpp
15 	XUL 	_ZThn24_N7mozilla5jsipc14JavaScriptBaseINS0_16PJavaScriptChildEE19RecvCallOrConstructERKyRK8nsTArrayINS0_7JSParamEERKbPNS0_12ReturnStatusEPNS0_9JSVariantEPS8_ 	js/ipc/JavaScriptBase.h
16 	XUL 	mozilla::jsipc::PJavaScriptChild::OnMessageReceived(IPC::Message const&, IPC::Message*&) 	obj-firefox/x86_64/ipc/ipdl/PJavaScriptChild.cpp
17 	XUL 	mozilla::ipc::MessageChannel::DispatchSyncMessage(IPC::Message const&) 	ipc/glue/MessageChannel.cpp
18 	XUL 	mozilla::ipc::MessageChannel::OnMaybeDequeueOne() 	ipc/glue/MessageChannel.cpp
19 	XUL 	MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) 	ipc/chromium/src/base/message_loop.cc
20 	XUL 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
21 	XUL 	mozilla::ipc::DoWorkRunnable::Run() 	ipc/glue/MessagePump.cpp
22 	XUL 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
23 	XUL 	NS_ProcessPendingEvents(nsIThread*, unsigned int) 	xpcom/glue/nsThreadUtils.cpp
24 	XUL 	nsBaseAppShell::NativeEventCallback() 	widget/nsBaseAppShell.cpp
25 	XUL 	nsAppShell::ProcessGeckoEvents(void*) 	widget/cocoa/nsAppShell.mm
Ø 26 	CoreFoundation 	CoreFoundation@0x80660 	
Ø 27 	CoreFoundation 	CoreFoundation@0x727ec 	
Ø 28 	CoreFoundation 	CoreFoundation@0x71e1e 	
Ø 29 	CoreFoundation 	CoreFoundation@0x71837 	
Ø 30 	HIToolbox 	HIToolbox@0x2e43e 	
Ø 31 	HIToolbox 	HIToolbox@0x2e1b9 	
Ø 32 	HIToolbox 	HIToolbox@0x2dffa 	
Ø 33 	AppKit 	AppKit@0x246d0 	
Ø 34 	AppKit 	AppKit@0x23e7f 	
35 	XUL 	-[GeckoNSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] 	widget/cocoa/nsAppShell.mm
Ø 36 	AppKit 	AppKit@0x17e22 	
37 	XUL 	nsAppShell::Run() 	widget/cocoa/nsAppShell.mm
38 	XUL 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp
39 	XUL 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
40 	XUL 	XRE_InitChildProcess 	toolkit/xre/nsEmbedFunctions.cpp
41 	plugin-container 	main 	ipc/contentproc/plugin-container.cpp
42 	plugin-container 	start
Same underlying issue, just different signature due to compile differences
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.