Broken opt profile build crashed [@ FindConstructor] creating a navigator window (missing xbl binding?)

VERIFIED WORKSFORME

Status

()

Core
XPConnect
VERIFIED WORKSFORME
15 years ago
15 years ago

People

(Reporter: timeless, Assigned: David Bradley)

Tracking

({crash})

Trunk
x86
Windows 2000
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

(Reporter)

Description

15 years ago
raistlin opt profile build w/ some things broken. and a somewhat dated source
tree (5/20/2003 from the looks of it)
i ran mozilla from msdev:
mozilla -P spell -jsconsole -console -chatzilla -editor

(spell is profile #3 created a while ago to test n7's spellchecker), this build
actually has the mozdev spellchecker but that's not very relevant.

i opened dominspector (broken content area [cvs conflict], broken status area
[bad intl string]), chatzilla (missing menus), venkman (looked fine), help
(looked fine), component viewer (looked fine), and download manager (looked fine).

The crash was triggered while trying to open browser.

Normally w/ this broken build a simple launch will result in an error dialog
from navigator.js about it being unable to get the xbl browser binding.

-	((cx->fp->scopeChain)->map)	0x014ed889
|	nrefs	-1962097533
|-	ops	0xc183084d
||	newObjectMap	CXX0030: Error: expression cannot be evaluated
||	destroyObjectMap	CXX0030: Error: expression cannot be evaluated
||	lookupProperty	CXX0030: Error: expression cannot be evaluated
||	defineProperty	CXX0030: Error: expression cannot be evaluated
||	getProperty	CXX0030: Error: expression cannot be evaluated
||	setProperty	CXX0030: Error: expression cannot be evaluated
||	getAttributes	CXX0030: Error: expression cannot be evaluated
||	setAttributes	CXX0030: Error: expression cannot be evaluated
||	deleteProperty	CXX0030: Error: expression cannot be evaluated
||	defaultValue	CXX0030: Error: expression cannot be evaluated
||	enumerate	CXX0030: Error: expression cannot be evaluated
||	checkAccess	CXX0030: Error: expression cannot be evaluated
||	thisObject	CXX0030: Error: expression cannot be evaluated
||	dropProperty	CXX0030: Error: expression cannot be evaluated
||	call	CXX0030: Error: expression cannot be evaluated
||	construct	CXX0030: Error: expression cannot be evaluated
||	xdrObject	CXX0030: Error: expression cannot be evaluated
||	hasInstance	CXX0030: Error: expression cannot be evaluated
||	setProto	CXX0030: Error: expression cannot be evaluated
||	setParent	CXX0030: Error: expression cannot be evaluated
||	mark	CXX0030: Error: expression cannot be evaluated
||	clear	CXX0030: Error: expression cannot be evaluated
||	getRequiredSlot	CXX0030: Error: expression cannot be evaluated
|\	setRequiredSlot	CXX0030: Error: expression cannot be evaluated
|	nslots	261744648
\	freeslot	3230007286

FindConstructor(JSContext * 0x004b8df0, JSObject * 0x0012d918, const char *
0x01259194, long * 0x0012b36c) line 1748 + 33 bytes

+	ctor	0x055f5d5a
+	cx	0x004b8df0
+	name	0x01259194 "Function"
+	*protop	0x00000000
+	scope	0x00000000
+	&v	0x0012b36c
	v	0
GetClassPrototype(JSContext * 0x004b8df0, JSObject * 0x00000000, const char *
0x01259194, JSObject * * 0x0012b3c4) line 3272 + 21 bytes
js_NewObject(JSContext * 0x004b8df0, JSClass * 0x01263118, JSObject *
0x00000000, JSObject * 0x00000000) line 1651 + 23 bytes
js_NewFunction(JSContext * 0x004b8df0, JSObject * 0x00000000, int (JSContext *,
JSObject *, unsigned int, long *, long *)* 0x012da4f0
XPC_WN_CallMethod(JSContext *, JSObject *, unsigned int, long *, long *),
unsigned int 1, unsigned int 0, JSObject * 0x00000000, JSAtom * 0x00508400) line
1927 + 20 bytes
JS_NewFunction(JSContext * 0x004b8df0, int (JSContext *, JSObject *, unsigned
int, long *, long *)* 0x012da4f0 XPC_WN_CallMethod(JSContext *, JSObject *,
unsigned int, long *, long *), unsigned int 1, unsigned int 0, JSObject *
0x00000000, const char * 0x028a6480) line 2856 + 31 bytes
XPCNativeMember::Resolve(XPCCallContext & {...}, XPCNativeInterface *
0x0389bcf0) line 204 + 41 bytes
XPCNativeMember::GetValue(XPCCallContext & {...}, XPCNativeInterface *
0x0389bcf0, long * 0x0012b4ec) line 1086 + 35 bytes
DefinePropertyIfFound(XPCCallContext & {...}, JSObject * 0x02439b20, long
17211348, XPCNativeSet * 0x0389a140, XPCNativeInterface * 0x0389bcf0,
XPCNativeMember * 0x0389be28, XPCWrappedNativeScope * 0x02dcf880, int 1,
XPCWrappedNative * 0x00000000, XPCWrappedNative * 0x00000000,
XPCNativeScriptableInfo * 0x0389a0b0, unsigned int 1, int * 0x00000000) line 439
+ 23 bytes
XPC_WN_ModsAllowed_Proto_Resolve(JSContext * 0x02dcfc60, JSObject * 0x02439b20,
long 17211348) line 1414 + 55 bytes
js_LookupProperty(JSContext * 0x02dcfc60, JSObject * 0x02439b20, long 5276672,
JSObject * * 0x0012b7b0, JSProperty * * 0x0012b7b4) line 2320 + 42 bytes
js_Interpret(JSContext * 0x02dcfc60, long * 0x0012b8a0) line 1682 + 24 bytes
js_Invoke(JSContext * 0x00000001, unsigned int 1, unsigned int 2) line 860 + 10
bytes
js_InternalInvoke(JSContext * 0x02dcfc88, JSObject * 0x023b6788, long 37462856,
unsigned int 0, unsigned int 1, long * 0x0012baf4, long * 0x0012b9c4) line 935 +
13 bytes
JS_CallFunctionValue(JSContext * 0x02dcfc60, JSObject * 0x023b6788, long
37462856, unsigned int 1, long * 0x0012baf4, long * 0x0012b9c4) line 3528 + 31 bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x02dcff20, void * 0x023b6788,
void * 0x023ba348, unsigned int 1, void * 0x0012baf4, int * 0x0012baf8, int 1)
line 1111 + 33 bytes
nsJSEventListener::HandleEvent(nsJSEventListener * const 0x02e2d9f0, nsIDOMEvent
* 0x0765b7d8) line 181 + 77 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x02e2d950,
nsIDOMEvent * 0x0765b7d8, nsIDOMEventTarget * 0x02dcc6b0, unsigned int 16,
unsigned int 2) line 1191 + 20 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x02e2c780,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
nsIDOMEventTarget * 0x02dcc6b0, unsigned int 2, nsEventStatus * 0x0012f07c) line
1360 + 36 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x02dcc6a0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 819
nsXULDocument::HandleDOMEvent(nsXULDocument * const 0x02ddbc00, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 1290
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2c7e0, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3325 + 47 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2d430, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2d350, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2d270, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2fb20, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x025d1910, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x038bdfc0, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleChromeEvent(nsXULElement * const 0x038bdfcc, nsIPresContext
* 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 4446 + 39 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x038afc30,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 841
nsDocument::HandleDOMEvent(nsDocument * const 0x03a12720, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3639
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a16040,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1961 + 46 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x039416b0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x038b5430,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x038b3d10,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a0b2b0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a0d450,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a0e8d0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 7, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsEventStateManager::DispatchMouseEvent(nsIPresContext * 0x039e39a0, nsGUIEvent
* 0x0012f780, unsigned int 331, nsIContent * 0x03a0e8d0, nsIFrame * &
0x0322774c, nsIContent * 0x00000000) line 2553
nsEventStateManager::GenerateMouseEnterExit(nsIPresContext * 0x039e39a0,
nsGUIEvent * 0x0012f780) line 2679
nsEventStateManager::PreHandleEvent(nsEventStateManager * const 0x03954f28,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f780, nsIFrame * 0x0322774c,
nsEventStatus * 0x0012f5bc, nsIView * 0x039557c0) line 404
PresShell::HandleEventInternal(nsEvent * 0x0012f780, nsIView * 0x039557c0,
unsigned int 1, nsEventStatus * 0x0012f5bc) line 6381 + 54 bytes
PresShell::HandleEvent(PresShell * const 0x03a191d4, nsIView * 0x039557c0,
nsGUIEvent * 0x0012f780, nsEventStatus * 0x0012f5bc, int 0, int & 1) line 6288 +
25 bytes
nsViewManager::HandleEvent(nsView * 0x039559f0, nsGUIEvent * 0x0012f780, int 0)
line 2316
nsView::HandleEvent(nsViewManager * 0x02dd93b0, nsGUIEvent * 0x0012f780, int 0)
line 308
nsViewManager::DispatchEvent(nsViewManager * const 0x02dd93b0, nsGUIEvent *
0x0012f780, nsEventStatus * 0x0012f6c8) line 2046 + 23 bytes
HandleEvent(nsGUIEvent * 0x0012f780) line 82
nsWindow::DispatchEvent(nsWindow * const 0x03955904, nsGUIEvent * 0x0012f780,
nsEventStatus & nsEventStatus_eIgnore) line 1056 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f780) line 1077
nsWindow::DispatchMouseEvent(unsigned int 300, unsigned int 0, nsPoint *
0x00000000) line 5199 + 21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 300, unsigned int 0, nsPoint *
0x00000000) line 5456
nsWindow::ProcessMessage(unsigned int 512, unsigned int 0, long 10748224, long *
0x0012fbe0) line 3971 + 28 bytes
nsWindow::WindowProc(HWND__ * 0x000408b8, unsigned int 512, unsigned int 0, long
10748224) line 1350 + 27 bytes
USER32! SetTimer + 1077 bytes
USER32! DispatchMessageW + 278 bytes
USER32! DispatchMessageW + 11 bytes
nsAppShellService::Run(nsAppShellService * const 0x004605d0) line 474
main1(int 7, char * * 0x00424420, nsISupports * 0x00438170) line 1268 + 32 bytes
main(int 7, char * * 0x00424420) line 1647 + 37 bytes
WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00400000, char * 0x00133393,
HINSTANCE__ * 0x00400000) line 1671 + 23 bytes
WinMainCRTStartup() line 330 + 54 bytes
KERNEL32! SetUnhandledExceptionFilter + 92 bytes

1748:             scope = OBJ_GET_PARENT(cx, obj);
0122B840   mov         edx,dword ptr [obj]
0122B843   mov         eax,dword ptr [edx]
0122B845   cmp         dword ptr [eax+4],offset js_ObjectOps (012636d0)
0122B84C   je          FindConstructor+8Bh (0122b86b)
0122B84E   mov         ecx,dword ptr [obj]
0122B851   mov         edx,dword ptr [ecx]
0122B853   cmp         dword ptr [edx+4],0
0122B857   je          FindConstructor+0A6h (0122b886)
0122B859   mov         eax,dword ptr [obj]
0122B85C   mov         ecx,dword ptr [eax]
0122B85E   mov         edx,dword ptr [ecx+4]
0122B861   mov         eax,dword ptr [edx] <- crash

I'm going to keep this crash around in msdev for a few days, hopefully there is
some useful information available from this crash that dbradley or brendan can
get me to extract.
(Assignee)

Comment 1

15 years ago
timeless, was this the same build we were seeing the strange debug/release
issues with strdup and free? If so, we can probably close this, unless you
rebuilt and are still having problems.
(Assignee)

Comment 2

15 years ago
Marking WORKSFORME.

Timeless if you get this duplicated please reopen.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 15 years ago
Resolution: --- → WORKSFORME

Comment 3

15 years ago
Marking Verified -
Status: RESOLVED → VERIFIED
Crash Signature: [@ FindConstructor]
You need to log in before you can comment on or make changes to this bug.