169233 - Crash when giving window focus/creating new window [@ BitsToMap]

Status: RESOLVED FIXED

(Camino Graveyard :: General, defect)

Description

[Neil Lee [:neilio]]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US; rv:1.0.1) Gecko/20020917
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US; rv:1.0.1) Gecko/20020917

I get sporadic crashes with the latest nightlies - either when I give a browser
window focus (after it being in the background), or when I CMD-N to create a new
window. Console output follows:

**********

Date/Time:  2002-09-17 13:58:16 -0500
OS Version: 10.2 (Build 6C115)
Host:       macowner.com

Command:    Navigator
PID:        1080

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
 #0   0x91a5440c in BitsToMap
 #1   0x91a57ee0 in QDPlatformGlobalToLocal
 #2   0x00f6d190 in 0xf6d190
 #3   0x00f6cbd8 in 0xf6cbd8
 #4   0x00f6c210 in 0xf6c210
 #5   0x00f72654 in APEBundleMessage
 #6   0x00f6b14c in 0xf6b14c
 #7   0x93372d04 in -[NSWindow
_reallyDoOrderWindow:relativeTo:findKey:forCounter:force:isModal:]
 #8   0x9317637c in -[NSDrawerWindow orderOut:]
 #9   0x93174054 in -[NSDrawer(DrawerInternals)
_doPositionDrawerAndSize:parentFrame:stashSize:]
 #10  0x93173fa4 in -[NSDrawer(DrawerInternals)
_doPositionDrawerAndSize:parentFrame:]
 #11  0x9317284c in -[NSDrawer setLeadingOffset:]
 #12  0x93171538 in -[NSDrawer initWithCoder:]
 #13  0x907e4cf8 in _decodeObject
 #14  0x907e552c in _decodeValueOfObjCType
 #15  0x907e6ab0 in -[NSUnarchiver decodeValuesOfObjCTypes:]
 #16  0x931ba54c in _old_initWithCoder
 #17  0x907e4cf8 in _decodeObject
 #18  0x932380b0 in old_loadNib
 #19  0x93237cf4 in +[NSBundle(NSNibLoading)
_loadNibFile:nameTable:withZone:ownerBundle:]
 #20  0x93237de8 in +[NSBundle(NSNibLoading)
loadNibFile:externalNameTable:withZone:]
 #21  0x933801ac in -[NSWindowController loadWindow]
 #22  0x9337f918 in -[NSWindowController window]
 #23  0x9337fbec in -[NSWindowController showWindow:]
 #24  0x00007f54 in -[MainController openBrowserWindowWithURL:andReferrer:]
 #25  0x00007270 in -[MainController newWindow:]
 #26  0x930cfe2c in -[NSApplication sendAction:to:from:]
 #27  0x9320fd18 in -[NSMenu performActionForItemAtIndex:]
 #28  0x9310a164 in -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:]
 #29  0x9320f0c8 in -[NSMenu performKeyEquivalent:]
 #30  0x930cdd7c in -[NSApplication sendEvent:]
 #31  0x930ca524 in -[NSApplication run]
 #32  0x930d2598 in NSApplicationMain
 #33  0x0000486c in _start (crt.c:267)
 #34  0x000046ec in start

Thread 1:
 #0   0x90074328 in mach_msg_trap
 #1   0x90006670 in mach_msg
 #2   0xc00076cc in __ape_internal
 #3   0xc0000dd0 in __ape_agent
 #4   0x90021428 in _pthread_body

Thread 2:
 #0   0x90074328 in mach_msg_trap
 #1   0x90006670 in mach_msg
 #2   0x901490b0 in __CFRunLoopRun
 #3   0x90181578 in CFRunLoopRunSpecific
 #4   0x905e2d90 in
XIOAudioDeviceManager::NotificationThread(XIOAudioDeviceManager*)
 #5   0x905e2cac in CAPThread::Entry(CAPThread*)
 #6   0x90021428 in _pthread_body

Thread 3:
 #0   0x90025e8c in select
 #1   0x0101c5a0 in poll
 #2   0x01018d74 in _pr_poll_with_poll
 #3   0x00171c50 in nsSocketTransportService::Run()
 #4   0x05052ac4 in nsThread::Main(void*)
 #5   0x0101a1e0 in _pt_root
 #6   0x90021428 in _pthread_body

Thread 4:
 #0   0x9003f188 in semaphore_wait_signal_trap
 #1   0x9003efa4 in _pthread_cond_wait
 #2   0x0101541c in PR_WaitCondVar
 #3   0x00140c48 in nsDNSService::DequeuePendingQ()
 #4   0x00140674 in nsDNSService::Run()
 #5   0x05052ac4 in nsThread::Main(void*)
 #6   0x0101a1e0 in _pt_root
 #7   0x90021428 in _pthread_body

Thread 5:
 #0   0x90042d68 in semaphore_timedwait_signal_trap
 #1   0x9003ef94 in _pthread_cond_wait
 #2   0x010151e0 in pt_TimedWait
 #3   0x01015430 in PR_WaitCondVar
 #4   0x050563d8 in TimerThread::Run()
 #5   0x05052ac4 in nsThread::Main(void*)
 #6   0x0101a1e0 in _pt_root
 #7   0x90021428 in _pthread_body

Thread 6:
 #0   0x9003f188 in semaphore_wait_signal_trap
 #1   0x9003efa4 in _pthread_cond_wait
 #2   0x90824180 in -[NSConditionLock lockWhenCondition:]
 #3   0x933515f4 in -[NSUIHeartBeat _heartBeatThread:]
 #4   0x9081cd38 in forkThreadForFunction
 #5   0x90021428 in _pthread_body

Thread 7:
 #0   0x9003f188 in semaphore_wait_signal_trap
 #1   0x9003efa4 in _pthread_cond_wait
 #2   0x0101541c in PR_WaitCondVar
 #3   0x05053bb0 in nsThreadPool::GetRequest(nsIThread*)
 #4   0x0505449c in nsThreadPoolRunnable::Run()
 #5   0x05052ac4 in nsThread::Main(void*)
 #6   0x0101a1e0 in _pt_root
 #7   0x90021428 in _pthread_body

PPC Thread State:
  srr0: 0x91a5440c srr1: 0x0200f030                vrsave: 0x00000000
   xer: 0x00000000   lr: 0x91a57ee0  ctr: 0x90221828   mq: 0x00000000
    r0: 0x0000c000   r1: 0xbfffe430   r2: 0x00f6cbd8   r3: 0x026a1c42
    r4: 0xbfffe4f8   r5: 0x000003df   r6: 0x00000000   r7: 0x00000000
    r8: 0x00000000   r9: 0x00000000  r10: 0x00000000  r11: 0xa1a50cc4
   r12: 0x90221828  r13: 0x00000000  r14: 0x00000000  r15: 0x00000000
   r16: 0x00d6e840  r17: 0xa309799c  r18: 0xa309799c  r19: 0xa309799c
   r20: 0x00000001  r21: 0x00000000  r22: 0x00000000  r23: 0x00000001
   r24: 0x00ef4920  r25: 0x00ef4980  r26: 0x026eb000  r27: 0x00000000
   r28: 0x00001000  r29: 0x026a1c40  r30: 0xbfffe4f8  r31: 0x00f6d174


Reproducible: Sometimes

Steps to Reproduce:
1.
2.
3.

Comment 1

[Greg K.]

Reporter, for future reference, crash reports should be attached to your bugs as
a text file, and not quoted in a bug comment.

WorksForMe using Chimera/2002091704 on 10.1.5. I spawned 10 new windows, and
then returned focus to each.

Comment 2

[Neil Lee [:neilio]]

Sorry about the inline crash report.

I've been getting a LOT of suddenly crashes with 2002091704 on two separate
systems (G4 tower and Tibook). All revolve around giving focus to a window
(whether a new popup, or a presently existing one).

I've dumped everything Chimera installs (preferences, .plist, Profile folder,
etc.) and I'm still getting them. Console output to follow.

Comment 3

[Neil Lee [:neilio]]

Attachment: Text file of crash report

Comment 4

[dean blackketter]

This suddenly started happening to me frequently both with the 0.5 release and
the latest nightly build.  Pismo Powerbook 10.2.1, latest software updates.  

This is rendering Chimera almost unusable on my system.

Comment 5

[Greg K.]

Neil, that's a different stack. You should report it as a separate bug.

Comment 6

[dean blackketter]

Attachment: Typical crash log I'm seeing every few minutes.

I've tried cleaning out all my prefs, cache, etc.  Back to IE until this is
resolved. Sigh...

Comment 7

[Greg K.]

Dean, what build ID generated that stack?

Comment 8

[Avi Drissman]

I know what this is. The symbol "APEBundleMessage" means that some call made by
an APE extension killed Chimera. Disable haxies one by one until the problem
goes away. A particularly nasty one is Xounds. That one causes Chimera to die
for me all the time.

Comment 9

[Simon Fraser [no longer active]]

I think this is fixed with the QuickDraw fixes. Please reopen  if you see it.