112729 - Trunk & M097 crash on Win2K/XP [@ nsCOMPtr_base::assign_with_AddRef][@ 0x00000000 - nsCOMPtr_base::assign_with_AddRef]

Status: RESOLVED DUPLICATE of bug 113949

(Core :: XPCOM, defect)

Description

[Jay Patel [:jay]]

This is a topcrasher for Mozilla 0.9.6 and recent MozillaTrunk builds.  The
stack isn't very long...but we have a few user comments to help us reproduce. 
Here is the last info from Talkback:

Mozilla 0.9.6 crashes:
 Count   Offset    Real Signature
[ 25   0x00000000 b631e0dd - nsCOMPtr_base::assign_with_AddRef ]
 
     Crash date range: 2001-11-22 to 2001-11-28
     Min/Max Seconds since last crash: 76 - 343843
     Min/Max Runtime: 76 - 343843
     Keyword List :  
     Count   Platform List 
     24   Windows NT 5.0 build 2195
     1   Windows NT 5.1 build 2600
 
     Count   Build Id List 
     25   2001112012
 
     No of Unique Users        19
 
 Stack trace(Frame) 

	 0x00000000  
	 nsCOMPtr_base::assign_with_AddRef
[d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp  line 73] 
	 nsProxyObjectCallInfo::nsProxyObjectCallInfo
[d:\builds\seamonkey\mozilla\xpcom\proxy\src\nsProxyEvent.cpp  line 81]  
 
     (38605909)	Comments: Mail News open in background. New mail notification sounded  and
mozilla crashed.
     (38603338)	URL: http://www.tweakers.net/
     (38479058)	URL: http://www.soundblaster.com/products/audigyplatinum/software.asp
     (38479058)	Comments: crashed while reading the page.
     (38433874)	URL: wsj.com
     (38433874)	Comments: several windows open after surfing  but then no activity for along
time  followed by a crash from non-user-input stimulus.
     (38421976)	URL: http://www.intellectual-property.gov.uk/std/resources/copyright/index.htm
     (38412060)	URL: www.xml.com
     (38404198)	Comments: Sorry  I don't know  what happened. Mozilla was running in the
background. From my point of view there was nothing to do...
     (38401287)	Comments: idle  background  may be mail poll.

MozillaTrunk crashes:
 Count   Offset    Real Signature
[ 8   0x00000000 b631e0dd - nsCOMPtr_base::assign_with_AddRef ]
 
     Crash date range: 2001-11-19 to 2001-11-28
     Min/Max Seconds since last crash: 2935 - 156093
     Min/Max Runtime: 8305 - 314047
     Keyword List :  
     Count   Platform List 
     7   Windows NT 5.0 build 2195
     1   Windows NT 5.1 build 2600
 
     Count   Build Id List 
     3   2001111811
     2   2001112009
     2   2001111915
     1   2001112411
 
     No of Unique Users         6
 
 Stack trace(Frame) 

	 0x00000000  
	 nsCOMPtr_base::assign_with_AddRef
[d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp  line 73] 
	 nsProxyObjectCallInfo::nsProxyObjectCallInfo
[d:\builds\seamonkey\mozilla\xpcom\proxy\src\nsProxyEvent.cpp  line 81]  
 
     (38278314)	Comments: nothing. Messenger and Navigator ran in background

Talkback is only reporting these crashes for Windows NT 5.0 build 2195 and
Windows NT 5.1 build 2600 (which I believe are Windows 2000 or XP or ME).  I'm
not sure if this is a mail/news bug or an xpcom bug...please set the correct
component if I'm wrong.

Comment 1

[Jay Patel [:jay]]

adding crash, topcrash keywords and qawanted so we can get a reproducible testcase.

Comment 2

[Jay Patel [:jay]]

Adding [@ nsCOMPtr_base::assign_with_AddRef] to summary, since this crash is
being reported under that stack signature as well.  Here's the more recent
Talkback data for the MozillaTrunk crashes (with a better stacktrace):

nsCOMPtr_base::assign_with_AddRef   15
		 112729 	 NEW 	  	 [e-mail] --- 	 2001-11-29 
BBID range: 6180 - 91931
Min/Max Seconds since last crash: 1 - 551280
Min/Max Runtime: 2 - 551280
Crash data range: 2001-12-03 to 2001-12-05
Build ID range: 2001112610 to 2001120509
Keyword List : 
Stack Trace: 

	 nsCOMPtr_base::assign_with_AddRef
[d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp  line 73]
	 nsProxyObjectCallInfo::nsProxyObjectCallInfo
[d:\builds\seamonkey\mozilla\xpcom\proxy\src\nsProxyEvent.cpp  line 81]
	 nsProxyObject::Post
[d:\builds\seamonkey\mozilla\xpcom\proxy\src\nsProxyEvent.cpp  line 450]
	 nsProxyEventObject::CallMethod
[d:\builds\seamonkey\mozilla\xpcom\proxy\src\nsProxyEventObject.cpp  line 548]
	 PrepareAndDispatch
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp 
line 117]
	 SharedStub
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp 
line 139]
	 nsFileTransport::Process
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsFileTransport.cpp  line 853]
 
 	Source File :
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/xpcom/glue/nsCOMPtr.cpp line
: 73
     (91931)	URL: http://www.world-direct.com/gia/test/feedback.asp
(90733)
URL: www.rational.com
(85751)
URL: www.penny-arcade.com
(83967)
Comments: After having the browser open for about 1 1/2 days with various
amounts of browser windows being used  Mozilla crashed.  Not sure why??  It
actually loaded the page that I was attempting to go to (one that I've gone to
many  many times before without any
     (83967)	Comments:  crash).  However  it seemed to crash after the load.  Probably
just corrupted memory.jake
     (70604)	Comments: join dalnet - perform /list command.poof!
     (6180)	Comments: just attached a file while using Netcape Webmail at
webmail.netcsape.com

Comment 3

[Doug Turner (:dougt)]

I believe this to be a dupilicate bug of 113949 which has been fixed already:

nsFileTransport.cpp 

revision 1.117
date: 2001/12/11 23:05:51;  author: darin%netscape.com;  state: Exp;  lines: +19 -17
fixes bug 113949 "Trunk crash [@ nsFileTransport::Process]"
r=dougt, sr=mscott


*** This bug has been marked as a duplicate of 113949 ***

Comment 4

[Darin Fisher]

i second the dupe

Comment 5

[Jan Carpenter]

113949 has been fixed, yet nsCOMPtr_base::assign_with_AddRef is still occuring
in M097, and 0x00000000 - nsCOMPtr_base::assign_with_AddRef is still occuring in
trunk.  

Reopening.

Comment 6

[Doug Turner (:dougt)]

how about some stack traces to verify that this is a dup of the same trace?

Comment 7

[Jay Patel [:jay]]

Since the fix for bug 113949 was checked into only the Trunk, we'll have to wait
for M098 to verify the fix.  As far as the current MozillaTrunk is concerned,
here's the stack trace for the stack signature Jan mentioned:

0x00000000  
	 nsCOMPtr_base::assign_with_AddRef
[d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp  line 74] 
	 nsCOMPtr_base::~nsCOMPtr_base
[d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp  line 65] 
	 nsGenericElement::QueryInterface
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 2571]  

It looks like a different crash to me.  Marking Dup again...

*** This bug has been marked as a duplicate of 113949 ***