If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Crash JSD_ASSERT_VALID_SCRIPT(JSDScript * 0xdddddddd) line 59 + 3 bytes

VERIFIED FIXED in mozilla0.9.9

Status

Other Applications
Venkman JS Debugger
--
critical
VERIFIED FIXED
16 years ago
13 years ago

People

(Reporter: timeless, Assigned: Robert Ginda)

Tracking

({crash})

Trunk
mozilla0.9.9
x86
Windows 2000
crash

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment, 1 obsolete attachment)

(Reporter)

Description

16 years ago
JSD_ASSERT_VALID_SCRIPT(JSDScript * 0xdddddddd) line 59 + 3 bytes
JSD_SetScriptPrivate(JSDScript * 0xdddddddd, void * 0x00000000) line 160 + 9 
bytes
jsdScript::Invalidate(jsdScript * const 0x075b4ba0) line 1032 + 14 bytes
jsdScript::InvalidateAll() line 1050
jsdService::Off(jsdService * const 0x07b8d060) line 1838
XPTC_InvokeByIndex(nsISupports * 0x07b8d060, unsigned int 25, unsigned int 0, 
nsXPTCVariant * 0x00129798) line 106
XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode 
CALL_METHOD) line 2009 + 42 bytes
XPC_WN_CallMethod(JSContext * 0x07637c90, JSObject * 0x059d2678, unsigned int 
0, long * 0x0355bbd8, long * 0x00129a34) line 1266 + 14 bytes
js_Invoke(JSContext * 0x07637c90, unsigned int 0, unsigned int 0) line 832 + 23 
bytes
js_Interpret(JSContext * 0x07637c90, long * 0x0012a2fc) line 2798 + 15 bytes
js_Invoke(JSContext * 0x07637c90, unsigned int 0, unsigned int 0) line 849 + 13 
bytes
js_Interpret(JSContext * 0x07637c90, long * 0x0012ab7c) line 2798 + 15 bytes
js_Invoke(JSContext * 0x07637c90, unsigned int 1, unsigned int 2) line 849 + 13 
bytes
js_InternalInvoke(JSContext * 0x07637c90, JSObject * 0x058924b8, long 92875640, 
unsigned int 0, unsigned int 1, long * 0x0012adec, long * 0x0012aca4) line 924 
+ 20 bytes
JS_CallFunctionValue(JSContext * 0x07637c90, JSObject * 0x058924b8, long 
92875640, unsigned int 1, long * 0x0012adec, long * 0x0012aca4) line 3405 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x076374c0, void * 
0x058924b8, void * 0x05892b78, unsigned int 1, void * 0x0012adec, int * 
0x0012adf0, int 0) line 1011 + 33 bytes
nsJSEventListener::HandleEvent(nsJSEventListener * const 0x0680cd30, 
nsIDOMEvent * 0x067a4f98) line 180 + 77 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x0680cc90, 
nsIDOMEvent * 0x067a4f98, nsIDOMEventTarget * 0x07634520, unsigned int 2, 
unsigned int 7) line 1205 + 20 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x0680e2f0, 
nsIPresContext * 0x057308c0, nsEvent * 0x0012b510, nsIDOMEvent * * 0x0012b4cc, 
nsIDOMEventTarget * 0x07634520, unsigned int 7, nsEventStatus * 0x0012b538) 
line 1878 + 36 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x07634510, 
nsIPresContext * 0x057308c0, nsEvent * 0x0012b510, nsIDOMEvent * * 0x0012b4cc, 
unsigned int 1, nsEventStatus * 0x0012b538) line 639
DocumentViewerImpl::Unload(DocumentViewerImpl * const 0x076401d0) line 1297 + 
47 bytes
nsDocShell::FireUnloadNotification(nsDocShell * const 0x075c98f0) line 675 + 29 
bytes
nsDocShell::Destroy(nsDocShell * const 0x075c9904) line 2513
nsWebShell::Destroy(nsWebShell * const 0x075c9904) line 1218
nsXULWindow::Destroy(nsXULWindow * const 0x075d1694) line 372
nsWebShellWindow::Destroy(nsWebShellWindow * const 0x075d1694) line 1760 + 9 
bytes
nsChromeTreeOwner::Destroy(nsChromeTreeOwner * const 0x07597bb4) line 227
GlobalWindowImpl::ReallyCloseWindow(GlobalWindowImpl * const 0x07634524) line 
2560
GlobalWindowImpl::CloseWindow(nsISupports * 0x07634514) line 3508
nsJSContext::ScriptEvaluated(nsJSContext * const 0x076374c0, int 1) line 1446 + 
18 bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x076374c0, void * 
0x0588e768, void * 0x0588e7b0, unsigned int 1, void * 0x0012b858, int * 
0x0012b85c, int 0) line 1019
nsJSEventListener::HandleEvent(nsJSEventListener * const 0x079866d0, 
nsIDOMEvent * 0x067a3758) line 180 + 77 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x07986630, 
nsIDOMEvent * 0x067a3758, nsIDOMEventTarget * 0x06fafe58, unsigned int 8, 
unsigned int 7) line 1205 + 20 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x07986720, 
nsIPresContext * 0x057308c0, nsEvent * 0x0012c38c, nsIDOMEvent * * 0x0012c238, 
nsIDOMEventTarget * 0x06fafe58, unsigned int 7, nsEventStatus * 0x0012c3d8) 
line 2195 + 36 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x06fafe50, nsIPresContext * 
0x057308c0, nsEvent * 0x0012c38c, nsIDOMEvent * * 0x0012c238, unsigned int 1, 
nsEventStatus * 0x0012c3d8) line 3359
PresShell::HandleDOMEventWithTarget(PresShell * const 0x05751ce0, nsIContent * 
0x06fafe50, nsEvent * 0x0012c38c, nsEventStatus * 0x0012c3d8) line 6065 + 36 
bytes
nsMenuFrame::Execute() line 1629
nsMenuFrame::HandleEvent(nsMenuFrame * const 0x05a45960, nsIPresContext * 
0x057308c0, nsGUIEvent * 0x0012c82c, nsEventStatus * 0x0012c728) line 487
PresShell::HandleEventInternal(nsEvent * 0x0012c82c, nsIView * 0x07e559d0, 
unsigned int 1, nsEventStatus * 0x0012c728) line 6033 + 38 bytes
PresShell::HandleEvent(PresShell * const 0x05751ce4, nsIView * 0x07e559d0, 
nsGUIEvent * 0x0012c82c, nsEventStatus * 0x0012c728, int 0, int & 1) line 5941 
+ 25 bytes
nsView::HandleEvent(nsView * const 0x07e559d0, nsGUIEvent * 0x0012c82c, 
unsigned int 0, nsEventStatus * 0x0012c728, int 0, int & 1) line 387
nsView::HandleEvent(nsView * const 0x07e56210, nsGUIEvent * 0x0012c82c, 
unsigned int 0, nsEventStatus * 0x0012c728, int 0, int & 1) line 344
nsView::HandleEvent(nsView * const 0x07e52780, nsGUIEvent * 0x0012c82c, 
unsigned int 0, nsEventStatus * 0x0012c728, int 0, int & 1) line 344
nsView::HandleEvent(nsView * const 0x057321b0, nsGUIEvent * 0x0012c82c, 
unsigned int 0, nsEventStatus * 0x0012c728, int 1, int & 1) line 344
nsViewManager::DispatchEvent(nsViewManager * const 0x05732350, nsGUIEvent * 
0x0012c82c, nsEventStatus * 0x0012c728) line 1930
HandleEvent(nsGUIEvent * 0x0012c82c) line 83
nsWindow::DispatchEvent(nsWindow * const 0x07e560d4, nsGUIEvent * 0x0012c82c, 
nsEventStatus & nsEventStatus_eIgnore) line 850 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012c82c) line 871
nsWindow::DispatchMouseEvent(unsigned int 301, nsPoint * 0x00000000) line 4527 
+ 21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 301, nsPoint * 0x00000000) line 
4779
nsWindow::ProcessMessage(unsigned int 514, unsigned int 0, long 655422, long * 
0x0012cc1c) line 3419 + 24 bytes
nsWindow::WindowProc(HWND__ * 0x00670ab4, unsigned int 514, unsigned int 0, 
long 655422) line 1115 + 27 bytes
USER32! 77e12e98()
USER32! 77e130e0()
USER32! 77e15824()
jsdService::EnterNestedEventLoop(jsdService * const 0x07b8d060, 
jsdINestCallback * 0x07e03bf0, unsigned int * 0x0012cf38) line 2155
XPTC_InvokeByIndex(nsISupports * 0x07b8d060, unsigned int 38, unsigned int 2, 
nsXPTCVariant * 0x0012cf28) line 106
XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode 
CALL_METHOD) line 2009 + 42 bytes
XPC_WN_CallMethod(JSContext * 0x02d856a0, JSObject * 0x059d2678, unsigned int 
1, long * 0x05aebecc, long * 0x0012d1c4) line 1266 + 14 bytes
js_Invoke(JSContext * 0x02d856a0, unsigned int 1, unsigned int 0) line 832 + 23 
bytes
js_Interpret(JSContext * 0x02d856a0, long * 0x0012da8c) line 2798 + 15 bytes
js_Invoke(JSContext * 0x02d856a0, unsigned int 3, unsigned int 2) line 849 + 13 
bytes
nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJSClass * const 0x07ba5680, 
nsXPCWrappedJS * 0x07ba55f0, unsigned short 3, const nsXPTMethodInfo * 
0x058f58c0, nsXPTCMiniVariant * 0x0012dfcc) line 1216 + 21 bytes
nsXPCWrappedJS::CallMethod(nsXPCWrappedJS * const 0x07ba55f0, unsigned short 3, 
const nsXPTMethodInfo * 0x058f58c0, nsXPTCMiniVariant * 0x0012dfcc) line 430
PrepareAndDispatch(nsXPTCStubBase * 0x07ba55f0, unsigned int 3, unsigned int * 
0x0012e07c, unsigned int * 0x0012e06c) line 115 + 31 bytes
SharedStub() line 139
jsds_ExecutionHookProc(JSDContext * 0x07b8e530, JSDThreadState * 0x07de2630, 
unsigned int 0, void * 0x00000000, long * 0x0012e820) line 573
jsd_CallExecutionHook(JSDContext * 0x07b8e530, JSContext * 0x02d856a0, unsigned 
int 0, unsigned int (JSDContext *, JSDThreadState *, unsigned int, void *, long 
*)* 0x07c8fee0 jsds_ExecutionHookProc(JSDContext *, JSDThreadState *, unsigned 
int, void *, long *), void * 0x00000000, long * 0x0012e820) line 167 + 23 bytes
jsd_InterruptHandler(JSContext * 0x02d856a0, JSScript * 0x075f2760, unsigned 
char * 0x075f2794, long * 0x0012e820, void * 0x07b8e530) line 80 + 27 bytes
js_Interpret(JSContext * 0x02d856a0, long * 0x0012e99c) line 1347 + 38 bytes
js_Invoke(JSContext * 0x02d856a0, unsigned int 1, unsigned int 2) line 849 + 13 
bytes
nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJSClass * const 0x045c0640, 
nsXPCWrappedJS * 0x07c2cd10, unsigned short 21, const nsXPTMethodInfo * 
0x00dd7c78, nsXPTCMiniVariant * 0x0012eedc) line 1216 + 21 bytes
nsXPCWrappedJS::CallMethod(nsXPCWrappedJS * const 0x07c2cd10, unsigned short 
21, const nsXPTMethodInfo * 0x00dd7c78, nsXPTCMiniVariant * 0x0012eedc) line 
430
PrepareAndDispatch(nsXPTCStubBase * 0x07c2cd10, unsigned int 21, unsigned int * 
0x0012ef8c, unsigned int * 0x0012ef7c) line 115 + 31 bytes
SharedStub() line 139
nsOutlinerBoxObject::SetDocument(nsOutlinerBoxObject * const 0x07c190d4, 
nsIDocument * 0x00000000) line 86
nsXULDocument::SetBoxObjectFor(nsXULDocument * const 0x0824a880, nsIDOMElement 
* 0x075b5184, nsIBoxObject * 0x00000000) line 7112
nsXULElement::SetDocument(nsXULElement * const 0x075b5180, nsIDocument * 
0x00000000, int 1, int 1) line 2060
nsGenericElement::SetDocumentInChildrenOf(nsIContent * 0x075b51f0, nsIDocument 
* 0x00000000, int 1) line 1404
nsGenericElement::SetDocument(nsGenericElement * const 0x075b51f0, nsIDocument 
* 0x00000000, int 1, int 1) line 1468 + 17 bytes
nsXBLBinding::ChangeDocument(nsXBLBinding * const 0x075b5660, nsIDocument * 
0x0824a860, nsIDocument * 0x00000000) line 1149
nsBindingManager::ChangeDocumentFor(nsBindingManager * const 0x0824e820, 
nsIContent * 0x075a8860, nsIDocument * 0x0824a860, nsIDocument * 0x00000000) 
line 551
nsXULElement::SetDocument(nsXULElement * const 0x075a8860, nsIDocument * 
0x00000000, int 1, int 1) line 2057
nsXULElement::SetDocument(nsXULElement * const 0x075a88d0, nsIDocument * 
0x00000000, int 1, int 1) line 2128
nsGenericElement::SetDocumentInChildrenOf(nsIContent * 0x075ab4c0, nsIDocument 
* 0x00000000, int 1) line 1404
nsGenericElement::SetDocument(nsGenericElement * const 0x075ab4c0, nsIDocument 
* 0x00000000, int 1, int 1) line 1468 + 17 bytes
nsXBLBinding::ChangeDocument(nsXBLBinding * const 0x075ab610, nsIDocument * 
0x0824a860, nsIDocument * 0x00000000) line 1149
nsBindingManager::ChangeDocumentFor(nsBindingManager * const 0x0824e820, 
nsIContent * 0x074c6540, nsIDocument * 0x0824a860, nsIDocument * 0x00000000) 
line 551
nsXULElement::SetDocument(nsXULElement * const 0x074c6540, nsIDocument * 
0x00000000, int 1, int 1) line 2057
nsXULElement::SetDocument(nsXULElement * const 0x074c65f0, nsIDocument * 
0x00000000, int 1, int 1) line 2128
nsXULElement::SetDocument(nsXULElement * const 0x074c66a0, nsIDocument * 
0x00000000, int 1, int 1) line 2128
nsXULElement::SetDocument(nsXULElement * const 0x074c6850, nsIDocument * 
0x00000000, int 1, int 1) line 2128
nsXULElement::SetDocument(nsXULElement * const 0x06786720, nsIDocument * 
0x00000000, int 1, int 1) line 2128
nsXULElement::SetDocument(nsXULElement * const 0x0677fa30, nsIDocument * 
0x00000000, int 1, int 1) line 2128
nsXULElement::SetDocument(nsXULElement * const 0x067425a0, nsIDocument * 
0x00000000, int 1, int 1) line 2128
nsXULDocument::SetScriptGlobalObject(nsXULDocument * const 0x0824a860, 
nsIScriptGlobalObject * 0x00000000) line 1524
DocumentViewerImpl::Close(DocumentViewerImpl * const 0x0824a320) line 1336
nsDocShell::SetupNewViewer(nsDocShell * const 0x056e62c0, nsIContentViewer * 
0x07ddf870) line 3843
nsDocShell::Embed(nsDocShell * const 0x056e62e4, nsIContentViewer * 0x07ddf870, 
const char * 0x022993f8, nsISupports * 0x00000000) line 3266 + 23 bytes
nsDocShell::CreateContentViewer(nsDocShell * const 0x056e62c0, const char * 
0x0012fc30, nsIRequest * 0x07dd89c0, nsIStreamListener * * 0x0012fc80) line 
3612 + 32 bytes
nsDSURIContentListener::DoContent(nsDSURIContentListener * const 0x056e6220, 
const char * 0x0012fc30, int 0, nsIRequest * 0x07dd89c0, nsIStreamListener * * 
0x0012fc80, int * 0x0012fc18) line 107 + 33 bytes
nsDocumentOpenInfo::DispatchContent(nsIRequest * 0x07dd89c0, nsISupports * 
0x00000000) line 355 + 90 bytes
nsDocumentOpenInfo::OnStartRequest(nsDocumentOpenInfo * const 0x07dd88b0, 
nsIRequest * 0x07dd89c0, nsISupports * 0x00000000) line 226 + 16 bytes
nsCachedChromeChannel::HandleStartLoadEvent(PLEvent * 0x07dd8720) line 433
PL_HandleEvent(PLEvent * 0x07dd8720) line 590 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00497d20) line 520 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x00f90de8, unsigned int 49849, unsigned int 0, 
long 4816160) line 1071 + 9 bytes
USER32! 77e12e98()
USER32! 77e130e0()
USER32! 77e15824()
nsAppShellService::Run(nsAppShellService * const 0x004b3380) line 303
main1(int 1, char * * 0x00444390, nsISupports * 0x00000000) line 1264 + 32 
bytes
main(int 1, char * * 0x00444390) line 1594 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e97d08()

Quiting venkman after use (same session as other venkman/inspector bugs filed 
this morning). Inspector was already closed.

Updated

16 years ago
Keywords: crash

Updated

16 years ago
Severity: normal → critical
(Assignee)

Comment 1

16 years ago
Were you stopped at a breakpoint when you exited?
On IRC, timeless said he wasn't stopped at a breakpoint because he wasn't able
to set any breakpoints at all in the file.
(Assignee)

Comment 3

16 years ago
Created attachment 65935 [details] [diff] [review]
proposed patch

Looks like I was potentially releasing the final reference to a jsdScript
object from within jsdScript::Invalidate(), which isn't always going to work so
well.
(Assignee)

Comment 4

16 years ago
Small patch seeks willing r/sr for check in review.
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla0.9.9
Comment on attachment 65935 [details] [diff] [review]
proposed patch

Why not simply make jsdis an nsCOMPtr<jsdIScript> ?

/be
(Assignee)

Comment 6

16 years ago
Created attachment 65945 [details] [diff] [review]
new patch, use nsCOMPtr instead

good idea.
Attachment #65935 - Attachment is obsolete: true
Comment on attachment 65945 [details] [diff] [review]
new patch, use nsCOMPtr instead

sr=brendan@mozilla.org
Attachment #65945 - Flags: superreview+
Comment on attachment 65945 [details] [diff] [review]
new patch, use nsCOMPtr instead

r=peterv.
Attachment #65945 - Flags: review+
(Assignee)

Comment 9

16 years ago
checked in
Status: ASSIGNED → RESOLVED
Last Resolved: 16 years ago
Resolution: --- → FIXED
rs vrfy checked in.
Status: RESOLVED → VERIFIED
Product: Core → Other Applications
You need to log in before you can comment on or make changes to this bug.