Closed Bug 1346642 Opened 8 years ago Closed 2 years ago

Crash in nsWindow::Destroy (due to infinite recursion?)

Categories

(Core :: Widget: Win32, defect, P3)

Product:
Core
Component:
Widget: Win32
Platform:
x86
Windows 10
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: MatsPalmgren_bugz, Unassigned)

Details

(Keywords: crash, Whiteboard: tpi:+)

Crash Data

This bug was filed from the Socorro interface and is report bp-17b04ecd-a7a1-4303-96c2-1d2472170312. ============================================================= 130 reported crashes in the past 7 days (~1900 in past 6 months). Crash Reason: EXCEPTION_STACK_OVERFLOW Stack: Frame Signature 0 nsWindow::Destroy() 1 nsWindow::~nsWindow() 2 nsWindow::`scalar deleting destructor'(unsigned int) 3 nsWindow::Release() 4 nsCOMPtr_base::~nsCOMPtr_base() 5 nsBaseWidget::~nsBaseWidget() 6 nsWindow::`scalar deleting destructor'(unsigned int) 7 nsWindow::Release() 8 nsCOMPtr_base::~nsCOMPtr_base() 9 nsBaseWidget::~nsBaseWidget() 10 nsWindow::`scalar deleting destructor'(unsigned int) 11 nsWindow::Release() 12 nsCOMPtr_base::~nsCOMPtr_base() ... 1021 nsBaseWidget::~nsBaseWidget() 1022 nsWindow::`scalar deleting destructor'(unsigned int) 1023 nsWindow::Release() 1024 nsCOMPtr_base::~nsCOMPtr_base()
Here's crash a similar looking stack: bp-688f41c8-f029-4761-9219-7ac332170312
And yet another signature: bp-3dcbb8b4-b5fe-40c8-af94-7e6612170312 (so, an additional ~120 crashes in the past 7 days with those two signatures)
... and another ~60 crashes in the past 7 days with other similar stacks: bp-459a864f-8c63-497a-85f6-1bf222170312 bp-e7705e2e-a5c4-4b28-87a3-bc4012170305 bp-c8e1a5d8-454d-4f3d-bd98-4f4fd2170310 bp-29026119-d276-4533-85f8-52c422170310
Crash Signature: [@ nsWindow::Destroy] → [@ nsWindow::Destroy] [@ nsWindow::~nsWindow ] [@ nsTArray_base<T>::ShiftData<T> | nsWindow::~nsWindow ] [@ nsCOMPtr_base::~nsCOMPtr_base | nsWindow::~nsWindow ] [@ nsWindow::`scalar deleting destructor'' ] [@ nsTArray_Impl<T>::DestructRange | nsWind…
Priority: -- → P2
Whiteboard: tpi:+
Moving to p3 because no activity for at least 1 year(s). See https://github.com/mozilla/bug-handling/blob/master/policy/triage-bugzilla.md#how-do-you-triage for more information
Priority: P2 → P3
QA Whiteboard: qa-not-actionable
Severity: critical → S2

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Severity: S2 → S3

This seems to no longer occur as described. The majority of crashes in the last six months under any of these signatures are on Linux — apparently assertion failures due to a window being destroyed off-main-thread in nsWindow::Destroy(). Crashes due to EXCEPTION_STACK_OVERFLOW with nsWindow in the signature are exceedingly rare, and don't present as infinite-recursion issues, anyway.

Closing.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.