1287119 - More crashes nsCycleCollector::ScanWhiteNodes when references exceed refcount

Status: RESOLVED INCOMPLETE

(Core :: XPCOM, defect, P3)

Description

[Andrew McCreight [:mccr8]]

These crashes have continued after the patch in bug 1266882 landed, so there's some other class or classes that have refcounting issues.

NodeInfo: bp-bf0e8c51-2cb7-4f4f-90f5-b27942160715
nsHTMLDocument: bp-bb60759a-5979-4b0d-9c79-ebc2c2160713
HTMLTableRowElement: bp-5db8769a-195c-4b31-9a0c-c9d572160713
FragmentOrElement: b21b7dab-d7b5-4ceb-9041-e1c422160713

It'll be hard to make any progress on this crash without steps to reproduce.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsCycleCollector::ScanWhiteNodes':
 - nightly (version 51): 1 crash from 2016-08-01.
 - aurora  (version 50): 4 crashes from 2016-08-01.
 - beta    (version 49): 228 crashes from 2016-08-02.
 - release (version 48): 309 crashes from 2016-07-25.
 - esr     (version 45): 108 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       0       0
 - aurora        0       3       0
 - beta         82      71      29
 - release     102      87      59
 - esr          10      10       8

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly           #642
 - aurora            #989
 - beta    #252      #106
 - release #222      #195
 - esr     #551

Comment 2

[Ayan]

Just hit this

https://crash-stats.mozilla.com/report/index/5ee8ba35-919f-437d-98ff-e2e9b2160913

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsCycleCollector::ScanWhiteNodes':
 - nightly (version 52): 4 crashes from 2016-09-19.
 - aurora  (version 51): 6 crashes from 2016-09-19.
 - beta    (version 50): 81 crashes from 2016-09-20.
 - release (version 49): 296 crashes from 2016-09-05.
 - esr     (version 45): 168 crashes from 2016-06-01.

Crash volume on the last weeks (Week N is from 10-03 to 10-09):
            W. N-1  W. N-2
 - nightly       1       3
 - aurora        6       0
 - beta         70      11
 - release     233      63
 - esr           9      16

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly           #977
 - aurora  #709      #258
 - beta    #316      #129
 - release #316      #182
 - esr     #878