crash in WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr(nsIAtom*, nsAttrValue&, nsMappedAttributeElement*, nsHTMLStyleSheet*)

RESOLVED WORKSFORME

Status

()

Firefox
Untriaged
--
critical
RESOLVED WORKSFORME
3 years ago
2 years ago

People

(Reporter: alex_mayorga, Unassigned)

Tracking

({crash})

Trunk
Unspecified
Windows NT
crash
Points:
---

Firefox Tracking Flags

(firefox41 affected)

Details

(crash signature)

(Reporter)

Description

3 years ago
This bug was filed from the Socorro interface and is 
report bp-da1161ba-f70b-44e7-b6d7-2492b2150609.
=============================================================

Crashing Thread
Frame 	Module 	Signature 	Source
0 	ntdll.dll 	ZwWaitForSingleObject 	
1 	kernelbase.dll 	WaitForSingleObjectEx 	
2 	xul.dll 	nsAttrAndChildArray::SetAndTakeMappedAttr(nsIAtom*, nsAttrValue&, nsMappedAttributeElement*, nsHTMLStyleSheet*) 	dom/base/nsAttrAndChildArray.cpp
3 		@0x0 	
4 	nss3.dll 	PR_WaitCondVar 	nsprpub/pr/src/threads/combined/prucv.c
5 	xul.dll 	mozilla::CondVar::Wait(unsigned int) 	xpcom/glue/CondVar.h
6 	xul.dll 	mozilla::ipc::MessageChannel::WaitForSyncNotify() 	ipc/glue/WindowsMessageLoop.cpp
7 	xul.dll 	mozilla::ipc::MessageChannel::Send(IPC::Message*, IPC::Message*) 	ipc/glue/MessageChannel.cpp
8 	xul.dll 	mozilla::dom::PContentChild::SendGetBlocklistState(unsigned int const&, unsigned int*) 	obj-firefox/ipc/ipdl/PContentChild.cpp
9 	xul.dll 	nsPluginTag::GetBlocklistState(unsigned int*) 	dom/plugins/base/nsPluginTags.cpp
10 	xul.dll 	nsPluginTag::IsBlocklisted() 	dom/plugins/base/nsPluginTags.cpp
11 	xul.dll 	nsPluginTag::IsActive() 	dom/plugins/base/nsPluginTags.cpp
12 	xul.dll 	nsPluginHost::FindNativePluginForExtension(nsACString_internal const&, nsACString_internal&, bool) 	dom/plugins/base/nsPluginHost.cpp
13 	xul.dll 	nsPluginHost::HavePluginForExtension(nsACString_internal const&, nsACString_internal&, nsPluginHost::PluginFilter) 	dom/plugins/base/nsPluginHost.cpp
14 	xul.dll 	IsPluginEnabledByExtension(nsIURI*, nsCString&) 	dom/base/nsObjectLoadingContent.cpp
15 	xul.dll 	nsObjectLoadingContent::UpdateObjectParameters(bool) 	dom/base/nsObjectLoadingContent.cpp
16 	xul.dll 	nsObjectLoadingContent::LoadObject(bool, bool, nsIRequest*) 	dom/base/nsObjectLoadingContent.cpp
17 	xul.dll 	mozilla::dom::HTMLSharedObjectElement::StartObjectLoad(bool) 	dom/html/HTMLSharedObjectElement.cpp
18 	xul.dll 	nsRunnableMethodImpl<void ( nsDocument::*)(void), 1>::Run() 	xpcom/glue/nsThreadUtils.h
19 	xul.dll 	nsHTMLDocument::EndUpdate(unsigned int) 	dom/html/nsHTMLDocument.cpp
20 	xul.dll 	mozAutoDocUpdate::~mozAutoDocUpdate() 	dom/base/mozAutoDocUpdate.h
21 	xul.dll 	mozilla::dom::FragmentOrElement::SetInnerHTMLInternal(nsAString_internal const&, mozilla::ErrorResult&) 	dom/base/FragmentOrElement.cpp
22 	xul.dll 	mozilla::dom::ElementBinding::set_innerHTML 	obj-firefox/dom/bindings/ElementBinding.cpp
23 	xul.dll 	mozilla::dom::GenericBindingSetter(JSContext*, unsigned int, JS::Value*) 	dom/bindings/BindingUtils.cpp
24 	xul.dll 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
25 	xul.dll 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
26 	xul.dll 	SetExistingProperty 	js/src/vm/NativeObject.cpp
27 	xul.dll 	js::NativeSetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<jsid>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::QualifiedBool, JS::ObjectOpResult&) 	js/src/vm/NativeObject.cpp
28 	xul.dll 	js::PutProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::Handle<JS::Value>, bool) 	js/src/jsobj.h
29 	xul.dll 	js::jit::DoSetPropFallback 	js/src/jit/BaselineIC.cpp
30 		@0x2fcd8bc668c

Updated

2 years ago
Crash Signature: [@ WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr(nsIAtom*, nsAttrValue&, nsMappedAttributeElement*, nsHTMLStyleSheet*)] → [@ WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr(nsIAtom*, nsAttrValue&, nsMappedAttributeElement*, nsHTMLStyleSheet*)] [@ WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr]
Checked the Socorro reports and I couldn't find any crashes for the last 28 days. Checked the reports for both the signatures attached to this bug report.
[@ WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr(nsIAtom*, nsAttrValue&, nsMappedAttributeElement*, nsHTMLStyleSheet*) ]
[@ WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr ]

Setting the status of this bug to Resolved Worksforme. 
Please re-open if the crashes re-appear.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr(nsIAtom*, nsAttrValue&, nsMappedAttributeElement*, nsHTMLStyleSheet*)] [@ WaitForSingleObjectEx | nsAttrAndChildArray::SetAndTakeMappedAttr] → [@ IPCError-browser | (msgtype=0x3A0051,name=PContent::Msg_GetBlocklistState) Processing error: message was deserialized, ]
You need to log in before you can comment on or make changes to this bug.