1366626 - Crash in objc_msgSend | -[GeckoNSMenu performSuperKeyEquivalent:]

Status: RESOLVED DUPLICATE of bug 1365825

(Core :: Widget: Cocoa, defect)

Description

[Nicholas Nethercote [inactive]]

This bug was filed from the Socorro interface and is 
report bp-4ed0b853-0325-4b23-af26-9fd0e0170521.
=============================================================

New crash, the two very similar signatures consitute Mac topcrashes #3 and #5 in Nightly 20170519030205.

Looks very likely that bug 429824 is at fault. spohl, can you please investigate?

Note that the crash address is always 0xffffffffe5e5e5f8. 0xe5 is the poison pattern that mozjemalloc uses when it frees memory, so that might be relevant.

Comment 2

[Nicholas Nethercote [inactive]]

Adrian, this crash report view:

https://crash-stats.mozilla.com/search/?build_id=20170519030205&release_channel=nightly&product=Firefox&platform=Mac%20OS%20X&date=%3E%3D2017-05-19T00%3A00%3A00.000Z&date=%3C2017-05-22T02%3A34%3A00.000Z&_sort=-date&_facets=signature&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#facet-signature

isn't linking to the existing bug 1365825 for these signatures:

> [@ objc_msgSend | -[GeckoNSMenu performSuperKeyEquivalent:] ]
> [@ objc_msgSend | -[NSMenu performKeyEquivalent:] ] 

Any idea why? These are Objective C signatures so they contain chars like '-' and ':' and '['/']' that C and C++ signatures don't, which may be relevant.

Comment 3

[[DEACTIVATED] Adrian Gaudebert]

Yeah, these won't work with the way we currently run our bugzilla cron job, because of the ']' sign in there. It's easily fixable though. I filed bug 1366814.