Closed Bug 119865 Opened 24 years ago Closed 24 years ago

Crash JSD_ASSERT_VALID_SCRIPT(JSDScript * 0xdddddddd) line 59 + 3 bytes

Categories

(Other Applications Graveyard :: Venkman JS Debugger, defect)

x86
Windows 2000
defect
Not set
critical

Tracking

(Not tracked)

VERIFIED FIXED
mozilla0.9.9

People

(Reporter: timeless, Assigned: rginda)

Details

(Keywords: crash)

Attachments

(1 file, 1 obsolete file)

JSD_ASSERT_VALID_SCRIPT(JSDScript * 0xdddddddd) line 59 + 3 bytes JSD_SetScriptPrivate(JSDScript * 0xdddddddd, void * 0x00000000) line 160 + 9 bytes jsdScript::Invalidate(jsdScript * const 0x075b4ba0) line 1032 + 14 bytes jsdScript::InvalidateAll() line 1050 jsdService::Off(jsdService * const 0x07b8d060) line 1838 XPTC_InvokeByIndex(nsISupports * 0x07b8d060, unsigned int 25, unsigned int 0, nsXPTCVariant * 0x00129798) line 106 XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode CALL_METHOD) line 2009 + 42 bytes XPC_WN_CallMethod(JSContext * 0x07637c90, JSObject * 0x059d2678, unsigned int 0, long * 0x0355bbd8, long * 0x00129a34) line 1266 + 14 bytes js_Invoke(JSContext * 0x07637c90, unsigned int 0, unsigned int 0) line 832 + 23 bytes js_Interpret(JSContext * 0x07637c90, long * 0x0012a2fc) line 2798 + 15 bytes js_Invoke(JSContext * 0x07637c90, unsigned int 0, unsigned int 0) line 849 + 13 bytes js_Interpret(JSContext * 0x07637c90, long * 0x0012ab7c) line 2798 + 15 bytes js_Invoke(JSContext * 0x07637c90, unsigned int 1, unsigned int 2) line 849 + 13 bytes js_InternalInvoke(JSContext * 0x07637c90, JSObject * 0x058924b8, long 92875640, unsigned int 0, unsigned int 1, long * 0x0012adec, long * 0x0012aca4) line 924 + 20 bytes JS_CallFunctionValue(JSContext * 0x07637c90, JSObject * 0x058924b8, long 92875640, unsigned int 1, long * 0x0012adec, long * 0x0012aca4) line 3405 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x076374c0, void * 0x058924b8, void * 0x05892b78, unsigned int 1, void * 0x0012adec, int * 0x0012adf0, int 0) line 1011 + 33 bytes nsJSEventListener::HandleEvent(nsJSEventListener * const 0x0680cd30, nsIDOMEvent * 0x067a4f98) line 180 + 77 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x0680cc90, nsIDOMEvent * 0x067a4f98, nsIDOMEventTarget * 0x07634520, unsigned int 2, unsigned int 7) line 1205 + 20 bytes nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x0680e2f0, nsIPresContext * 0x057308c0, nsEvent * 0x0012b510, nsIDOMEvent * * 0x0012b4cc, nsIDOMEventTarget * 0x07634520, unsigned int 7, nsEventStatus * 0x0012b538) line 1878 + 36 bytes GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x07634510, nsIPresContext * 0x057308c0, nsEvent * 0x0012b510, nsIDOMEvent * * 0x0012b4cc, unsigned int 1, nsEventStatus * 0x0012b538) line 639 DocumentViewerImpl::Unload(DocumentViewerImpl * const 0x076401d0) line 1297 + 47 bytes nsDocShell::FireUnloadNotification(nsDocShell * const 0x075c98f0) line 675 + 29 bytes nsDocShell::Destroy(nsDocShell * const 0x075c9904) line 2513 nsWebShell::Destroy(nsWebShell * const 0x075c9904) line 1218 nsXULWindow::Destroy(nsXULWindow * const 0x075d1694) line 372 nsWebShellWindow::Destroy(nsWebShellWindow * const 0x075d1694) line 1760 + 9 bytes nsChromeTreeOwner::Destroy(nsChromeTreeOwner * const 0x07597bb4) line 227 GlobalWindowImpl::ReallyCloseWindow(GlobalWindowImpl * const 0x07634524) line 2560 GlobalWindowImpl::CloseWindow(nsISupports * 0x07634514) line 3508 nsJSContext::ScriptEvaluated(nsJSContext * const 0x076374c0, int 1) line 1446 + 18 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x076374c0, void * 0x0588e768, void * 0x0588e7b0, unsigned int 1, void * 0x0012b858, int * 0x0012b85c, int 0) line 1019 nsJSEventListener::HandleEvent(nsJSEventListener * const 0x079866d0, nsIDOMEvent * 0x067a3758) line 180 + 77 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x07986630, nsIDOMEvent * 0x067a3758, nsIDOMEventTarget * 0x06fafe58, unsigned int 8, unsigned int 7) line 1205 + 20 bytes nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x07986720, nsIPresContext * 0x057308c0, nsEvent * 0x0012c38c, nsIDOMEvent * * 0x0012c238, nsIDOMEventTarget * 0x06fafe58, unsigned int 7, nsEventStatus * 0x0012c3d8) line 2195 + 36 bytes nsXULElement::HandleDOMEvent(nsXULElement * const 0x06fafe50, nsIPresContext * 0x057308c0, nsEvent * 0x0012c38c, nsIDOMEvent * * 0x0012c238, unsigned int 1, nsEventStatus * 0x0012c3d8) line 3359 PresShell::HandleDOMEventWithTarget(PresShell * const 0x05751ce0, nsIContent * 0x06fafe50, nsEvent * 0x0012c38c, nsEventStatus * 0x0012c3d8) line 6065 + 36 bytes nsMenuFrame::Execute() line 1629 nsMenuFrame::HandleEvent(nsMenuFrame * const 0x05a45960, nsIPresContext * 0x057308c0, nsGUIEvent * 0x0012c82c, nsEventStatus * 0x0012c728) line 487 PresShell::HandleEventInternal(nsEvent * 0x0012c82c, nsIView * 0x07e559d0, unsigned int 1, nsEventStatus * 0x0012c728) line 6033 + 38 bytes PresShell::HandleEvent(PresShell * const 0x05751ce4, nsIView * 0x07e559d0, nsGUIEvent * 0x0012c82c, nsEventStatus * 0x0012c728, int 0, int & 1) line 5941 + 25 bytes nsView::HandleEvent(nsView * const 0x07e559d0, nsGUIEvent * 0x0012c82c, unsigned int 0, nsEventStatus * 0x0012c728, int 0, int & 1) line 387 nsView::HandleEvent(nsView * const 0x07e56210, nsGUIEvent * 0x0012c82c, unsigned int 0, nsEventStatus * 0x0012c728, int 0, int & 1) line 344 nsView::HandleEvent(nsView * const 0x07e52780, nsGUIEvent * 0x0012c82c, unsigned int 0, nsEventStatus * 0x0012c728, int 0, int & 1) line 344 nsView::HandleEvent(nsView * const 0x057321b0, nsGUIEvent * 0x0012c82c, unsigned int 0, nsEventStatus * 0x0012c728, int 1, int & 1) line 344 nsViewManager::DispatchEvent(nsViewManager * const 0x05732350, nsGUIEvent * 0x0012c82c, nsEventStatus * 0x0012c728) line 1930 HandleEvent(nsGUIEvent * 0x0012c82c) line 83 nsWindow::DispatchEvent(nsWindow * const 0x07e560d4, nsGUIEvent * 0x0012c82c, nsEventStatus & nsEventStatus_eIgnore) line 850 + 10 bytes nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012c82c) line 871 nsWindow::DispatchMouseEvent(unsigned int 301, nsPoint * 0x00000000) line 4527 + 21 bytes ChildWindow::DispatchMouseEvent(unsigned int 301, nsPoint * 0x00000000) line 4779 nsWindow::ProcessMessage(unsigned int 514, unsigned int 0, long 655422, long * 0x0012cc1c) line 3419 + 24 bytes nsWindow::WindowProc(HWND__ * 0x00670ab4, unsigned int 514, unsigned int 0, long 655422) line 1115 + 27 bytes USER32! 77e12e98() USER32! 77e130e0() USER32! 77e15824() jsdService::EnterNestedEventLoop(jsdService * const 0x07b8d060, jsdINestCallback * 0x07e03bf0, unsigned int * 0x0012cf38) line 2155 XPTC_InvokeByIndex(nsISupports * 0x07b8d060, unsigned int 38, unsigned int 2, nsXPTCVariant * 0x0012cf28) line 106 XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode CALL_METHOD) line 2009 + 42 bytes XPC_WN_CallMethod(JSContext * 0x02d856a0, JSObject * 0x059d2678, unsigned int 1, long * 0x05aebecc, long * 0x0012d1c4) line 1266 + 14 bytes js_Invoke(JSContext * 0x02d856a0, unsigned int 1, unsigned int 0) line 832 + 23 bytes js_Interpret(JSContext * 0x02d856a0, long * 0x0012da8c) line 2798 + 15 bytes js_Invoke(JSContext * 0x02d856a0, unsigned int 3, unsigned int 2) line 849 + 13 bytes nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJSClass * const 0x07ba5680, nsXPCWrappedJS * 0x07ba55f0, unsigned short 3, const nsXPTMethodInfo * 0x058f58c0, nsXPTCMiniVariant * 0x0012dfcc) line 1216 + 21 bytes nsXPCWrappedJS::CallMethod(nsXPCWrappedJS * const 0x07ba55f0, unsigned short 3, const nsXPTMethodInfo * 0x058f58c0, nsXPTCMiniVariant * 0x0012dfcc) line 430 PrepareAndDispatch(nsXPTCStubBase * 0x07ba55f0, unsigned int 3, unsigned int * 0x0012e07c, unsigned int * 0x0012e06c) line 115 + 31 bytes SharedStub() line 139 jsds_ExecutionHookProc(JSDContext * 0x07b8e530, JSDThreadState * 0x07de2630, unsigned int 0, void * 0x00000000, long * 0x0012e820) line 573 jsd_CallExecutionHook(JSDContext * 0x07b8e530, JSContext * 0x02d856a0, unsigned int 0, unsigned int (JSDContext *, JSDThreadState *, unsigned int, void *, long *)* 0x07c8fee0 jsds_ExecutionHookProc(JSDContext *, JSDThreadState *, unsigned int, void *, long *), void * 0x00000000, long * 0x0012e820) line 167 + 23 bytes jsd_InterruptHandler(JSContext * 0x02d856a0, JSScript * 0x075f2760, unsigned char * 0x075f2794, long * 0x0012e820, void * 0x07b8e530) line 80 + 27 bytes js_Interpret(JSContext * 0x02d856a0, long * 0x0012e99c) line 1347 + 38 bytes js_Invoke(JSContext * 0x02d856a0, unsigned int 1, unsigned int 2) line 849 + 13 bytes nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJSClass * const 0x045c0640, nsXPCWrappedJS * 0x07c2cd10, unsigned short 21, const nsXPTMethodInfo * 0x00dd7c78, nsXPTCMiniVariant * 0x0012eedc) line 1216 + 21 bytes nsXPCWrappedJS::CallMethod(nsXPCWrappedJS * const 0x07c2cd10, unsigned short 21, const nsXPTMethodInfo * 0x00dd7c78, nsXPTCMiniVariant * 0x0012eedc) line 430 PrepareAndDispatch(nsXPTCStubBase * 0x07c2cd10, unsigned int 21, unsigned int * 0x0012ef8c, unsigned int * 0x0012ef7c) line 115 + 31 bytes SharedStub() line 139 nsOutlinerBoxObject::SetDocument(nsOutlinerBoxObject * const 0x07c190d4, nsIDocument * 0x00000000) line 86 nsXULDocument::SetBoxObjectFor(nsXULDocument * const 0x0824a880, nsIDOMElement * 0x075b5184, nsIBoxObject * 0x00000000) line 7112 nsXULElement::SetDocument(nsXULElement * const 0x075b5180, nsIDocument * 0x00000000, int 1, int 1) line 2060 nsGenericElement::SetDocumentInChildrenOf(nsIContent * 0x075b51f0, nsIDocument * 0x00000000, int 1) line 1404 nsGenericElement::SetDocument(nsGenericElement * const 0x075b51f0, nsIDocument * 0x00000000, int 1, int 1) line 1468 + 17 bytes nsXBLBinding::ChangeDocument(nsXBLBinding * const 0x075b5660, nsIDocument * 0x0824a860, nsIDocument * 0x00000000) line 1149 nsBindingManager::ChangeDocumentFor(nsBindingManager * const 0x0824e820, nsIContent * 0x075a8860, nsIDocument * 0x0824a860, nsIDocument * 0x00000000) line 551 nsXULElement::SetDocument(nsXULElement * const 0x075a8860, nsIDocument * 0x00000000, int 1, int 1) line 2057 nsXULElement::SetDocument(nsXULElement * const 0x075a88d0, nsIDocument * 0x00000000, int 1, int 1) line 2128 nsGenericElement::SetDocumentInChildrenOf(nsIContent * 0x075ab4c0, nsIDocument * 0x00000000, int 1) line 1404 nsGenericElement::SetDocument(nsGenericElement * const 0x075ab4c0, nsIDocument * 0x00000000, int 1, int 1) line 1468 + 17 bytes nsXBLBinding::ChangeDocument(nsXBLBinding * const 0x075ab610, nsIDocument * 0x0824a860, nsIDocument * 0x00000000) line 1149 nsBindingManager::ChangeDocumentFor(nsBindingManager * const 0x0824e820, nsIContent * 0x074c6540, nsIDocument * 0x0824a860, nsIDocument * 0x00000000) line 551 nsXULElement::SetDocument(nsXULElement * const 0x074c6540, nsIDocument * 0x00000000, int 1, int 1) line 2057 nsXULElement::SetDocument(nsXULElement * const 0x074c65f0, nsIDocument * 0x00000000, int 1, int 1) line 2128 nsXULElement::SetDocument(nsXULElement * const 0x074c66a0, nsIDocument * 0x00000000, int 1, int 1) line 2128 nsXULElement::SetDocument(nsXULElement * const 0x074c6850, nsIDocument * 0x00000000, int 1, int 1) line 2128 nsXULElement::SetDocument(nsXULElement * const 0x06786720, nsIDocument * 0x00000000, int 1, int 1) line 2128 nsXULElement::SetDocument(nsXULElement * const 0x0677fa30, nsIDocument * 0x00000000, int 1, int 1) line 2128 nsXULElement::SetDocument(nsXULElement * const 0x067425a0, nsIDocument * 0x00000000, int 1, int 1) line 2128 nsXULDocument::SetScriptGlobalObject(nsXULDocument * const 0x0824a860, nsIScriptGlobalObject * 0x00000000) line 1524 DocumentViewerImpl::Close(DocumentViewerImpl * const 0x0824a320) line 1336 nsDocShell::SetupNewViewer(nsDocShell * const 0x056e62c0, nsIContentViewer * 0x07ddf870) line 3843 nsDocShell::Embed(nsDocShell * const 0x056e62e4, nsIContentViewer * 0x07ddf870, const char * 0x022993f8, nsISupports * 0x00000000) line 3266 + 23 bytes nsDocShell::CreateContentViewer(nsDocShell * const 0x056e62c0, const char * 0x0012fc30, nsIRequest * 0x07dd89c0, nsIStreamListener * * 0x0012fc80) line 3612 + 32 bytes nsDSURIContentListener::DoContent(nsDSURIContentListener * const 0x056e6220, const char * 0x0012fc30, int 0, nsIRequest * 0x07dd89c0, nsIStreamListener * * 0x0012fc80, int * 0x0012fc18) line 107 + 33 bytes nsDocumentOpenInfo::DispatchContent(nsIRequest * 0x07dd89c0, nsISupports * 0x00000000) line 355 + 90 bytes nsDocumentOpenInfo::OnStartRequest(nsDocumentOpenInfo * const 0x07dd88b0, nsIRequest * 0x07dd89c0, nsISupports * 0x00000000) line 226 + 16 bytes nsCachedChromeChannel::HandleStartLoadEvent(PLEvent * 0x07dd8720) line 433 PL_HandleEvent(PLEvent * 0x07dd8720) line 590 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x00497d20) line 520 + 9 bytes _md_EventReceiverProc(HWND__ * 0x00f90de8, unsigned int 49849, unsigned int 0, long 4816160) line 1071 + 9 bytes USER32! 77e12e98() USER32! 77e130e0() USER32! 77e15824() nsAppShellService::Run(nsAppShellService * const 0x004b3380) line 303 main1(int 1, char * * 0x00444390, nsISupports * 0x00000000) line 1264 + 32 bytes main(int 1, char * * 0x00444390) line 1594 + 37 bytes mainCRTStartup() line 338 + 17 bytes KERNEL32! 77e97d08() Quiting venkman after use (same session as other venkman/inspector bugs filed this morning). Inspector was already closed.
Keywords: crash
Severity: normal → critical
Were you stopped at a breakpoint when you exited?
On IRC, timeless said he wasn't stopped at a breakpoint because he wasn't able to set any breakpoints at all in the file.
Attached patch proposed patch (obsolete) — — Splinter Review
Looks like I was potentially releasing the final reference to a jsdScript object from within jsdScript::Invalidate(), which isn't always going to work so well.
Small patch seeks willing r/sr for check in review.
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla0.9.9
Comment on attachment 65935 [details] [diff] [review] proposed patch Why not simply make jsdis an nsCOMPtr<jsdIScript> ? /be
good idea.
Attachment #65935 - Attachment is obsolete: true
Comment on attachment 65945 [details] [diff] [review] new patch, use nsCOMPtr instead sr=brendan@mozilla.org
Attachment #65945 - Flags: superreview+
Comment on attachment 65945 [details] [diff] [review] new patch, use nsCOMPtr instead r=peterv.
Attachment #65945 - Flags: review+
checked in
Status: ASSIGNED → RESOLVED
Closed: 24 years ago
Resolution: --- → FIXED
rs vrfy checked in.
Status: RESOLVED → VERIFIED
Product: Core → Other Applications
Product: Other Applications → Other Applications Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: