Closed Bug 207177 Opened 21 years ago Closed 21 years ago

Broken opt profile build crashed [@ FindConstructor] creating a navigator window (missing xbl binding?)

Categories

(Core :: XPConnect, defect)

x86
Windows 2000
defect
Not set
normal

Tracking

()

VERIFIED WORKSFORME

People

(Reporter: timeless, Assigned: dbradley)

Details

(Keywords: crash)

Crash Data

raistlin opt profile build w/ some things broken. and a somewhat dated source
tree (5/20/2003 from the looks of it)
i ran mozilla from msdev:
mozilla -P spell -jsconsole -console -chatzilla -editor

(spell is profile #3 created a while ago to test n7's spellchecker), this build
actually has the mozdev spellchecker but that's not very relevant.

i opened dominspector (broken content area [cvs conflict], broken status area
[bad intl string]), chatzilla (missing menus), venkman (looked fine), help
(looked fine), component viewer (looked fine), and download manager (looked fine).

The crash was triggered while trying to open browser.

Normally w/ this broken build a simple launch will result in an error dialog
from navigator.js about it being unable to get the xbl browser binding.

-	((cx->fp->scopeChain)->map)	0x014ed889
|	nrefs	-1962097533
|-	ops	0xc183084d
||	newObjectMap	CXX0030: Error: expression cannot be evaluated
||	destroyObjectMap	CXX0030: Error: expression cannot be evaluated
||	lookupProperty	CXX0030: Error: expression cannot be evaluated
||	defineProperty	CXX0030: Error: expression cannot be evaluated
||	getProperty	CXX0030: Error: expression cannot be evaluated
||	setProperty	CXX0030: Error: expression cannot be evaluated
||	getAttributes	CXX0030: Error: expression cannot be evaluated
||	setAttributes	CXX0030: Error: expression cannot be evaluated
||	deleteProperty	CXX0030: Error: expression cannot be evaluated
||	defaultValue	CXX0030: Error: expression cannot be evaluated
||	enumerate	CXX0030: Error: expression cannot be evaluated
||	checkAccess	CXX0030: Error: expression cannot be evaluated
||	thisObject	CXX0030: Error: expression cannot be evaluated
||	dropProperty	CXX0030: Error: expression cannot be evaluated
||	call	CXX0030: Error: expression cannot be evaluated
||	construct	CXX0030: Error: expression cannot be evaluated
||	xdrObject	CXX0030: Error: expression cannot be evaluated
||	hasInstance	CXX0030: Error: expression cannot be evaluated
||	setProto	CXX0030: Error: expression cannot be evaluated
||	setParent	CXX0030: Error: expression cannot be evaluated
||	mark	CXX0030: Error: expression cannot be evaluated
||	clear	CXX0030: Error: expression cannot be evaluated
||	getRequiredSlot	CXX0030: Error: expression cannot be evaluated
|\	setRequiredSlot	CXX0030: Error: expression cannot be evaluated
|	nslots	261744648
\	freeslot	3230007286

FindConstructor(JSContext * 0x004b8df0, JSObject * 0x0012d918, const char *
0x01259194, long * 0x0012b36c) line 1748 + 33 bytes

+	ctor	0x055f5d5a
+	cx	0x004b8df0
+	name	0x01259194 "Function"
+	*protop	0x00000000
+	scope	0x00000000
+	&v	0x0012b36c
	v	0
GetClassPrototype(JSContext * 0x004b8df0, JSObject * 0x00000000, const char *
0x01259194, JSObject * * 0x0012b3c4) line 3272 + 21 bytes
js_NewObject(JSContext * 0x004b8df0, JSClass * 0x01263118, JSObject *
0x00000000, JSObject * 0x00000000) line 1651 + 23 bytes
js_NewFunction(JSContext * 0x004b8df0, JSObject * 0x00000000, int (JSContext *,
JSObject *, unsigned int, long *, long *)* 0x012da4f0
XPC_WN_CallMethod(JSContext *, JSObject *, unsigned int, long *, long *),
unsigned int 1, unsigned int 0, JSObject * 0x00000000, JSAtom * 0x00508400) line
1927 + 20 bytes
JS_NewFunction(JSContext * 0x004b8df0, int (JSContext *, JSObject *, unsigned
int, long *, long *)* 0x012da4f0 XPC_WN_CallMethod(JSContext *, JSObject *,
unsigned int, long *, long *), unsigned int 1, unsigned int 0, JSObject *
0x00000000, const char * 0x028a6480) line 2856 + 31 bytes
XPCNativeMember::Resolve(XPCCallContext & {...}, XPCNativeInterface *
0x0389bcf0) line 204 + 41 bytes
XPCNativeMember::GetValue(XPCCallContext & {...}, XPCNativeInterface *
0x0389bcf0, long * 0x0012b4ec) line 1086 + 35 bytes
DefinePropertyIfFound(XPCCallContext & {...}, JSObject * 0x02439b20, long
17211348, XPCNativeSet * 0x0389a140, XPCNativeInterface * 0x0389bcf0,
XPCNativeMember * 0x0389be28, XPCWrappedNativeScope * 0x02dcf880, int 1,
XPCWrappedNative * 0x00000000, XPCWrappedNative * 0x00000000,
XPCNativeScriptableInfo * 0x0389a0b0, unsigned int 1, int * 0x00000000) line 439
+ 23 bytes
XPC_WN_ModsAllowed_Proto_Resolve(JSContext * 0x02dcfc60, JSObject * 0x02439b20,
long 17211348) line 1414 + 55 bytes
js_LookupProperty(JSContext * 0x02dcfc60, JSObject * 0x02439b20, long 5276672,
JSObject * * 0x0012b7b0, JSProperty * * 0x0012b7b4) line 2320 + 42 bytes
js_Interpret(JSContext * 0x02dcfc60, long * 0x0012b8a0) line 1682 + 24 bytes
js_Invoke(JSContext * 0x00000001, unsigned int 1, unsigned int 2) line 860 + 10
bytes
js_InternalInvoke(JSContext * 0x02dcfc88, JSObject * 0x023b6788, long 37462856,
unsigned int 0, unsigned int 1, long * 0x0012baf4, long * 0x0012b9c4) line 935 +
13 bytes
JS_CallFunctionValue(JSContext * 0x02dcfc60, JSObject * 0x023b6788, long
37462856, unsigned int 1, long * 0x0012baf4, long * 0x0012b9c4) line 3528 + 31 bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x02dcff20, void * 0x023b6788,
void * 0x023ba348, unsigned int 1, void * 0x0012baf4, int * 0x0012baf8, int 1)
line 1111 + 33 bytes
nsJSEventListener::HandleEvent(nsJSEventListener * const 0x02e2d9f0, nsIDOMEvent
* 0x0765b7d8) line 181 + 77 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x02e2d950,
nsIDOMEvent * 0x0765b7d8, nsIDOMEventTarget * 0x02dcc6b0, unsigned int 16,
unsigned int 2) line 1191 + 20 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x02e2c780,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
nsIDOMEventTarget * 0x02dcc6b0, unsigned int 2, nsEventStatus * 0x0012f07c) line
1360 + 36 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x02dcc6a0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 819
nsXULDocument::HandleDOMEvent(nsXULDocument * const 0x02ddbc00, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 1290
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2c7e0, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3325 + 47 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2d430, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2d350, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2d270, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02e2fb20, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x025d1910, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x038bdfc0, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3319 + 61 bytes
nsXULElement::HandleChromeEvent(nsXULElement * const 0x038bdfcc, nsIPresContext
* 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 4446 + 39 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x038afc30,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 841
nsDocument::HandleDOMEvent(nsDocument * const 0x03a12720, nsIPresContext *
0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8, unsigned int 2,
nsEventStatus * 0x0012f07c) line 3639
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a16040,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1961 + 46 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x039416b0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x038b5430,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x038b3d10,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a0b2b0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a0d450,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 2, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03a0e8d0,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f034, nsIDOMEvent * * 0x0012efe8,
unsigned int 7, nsEventStatus * 0x0012f07c) line 1954 + 61 bytes
nsEventStateManager::DispatchMouseEvent(nsIPresContext * 0x039e39a0, nsGUIEvent
* 0x0012f780, unsigned int 331, nsIContent * 0x03a0e8d0, nsIFrame * &
0x0322774c, nsIContent * 0x00000000) line 2553
nsEventStateManager::GenerateMouseEnterExit(nsIPresContext * 0x039e39a0,
nsGUIEvent * 0x0012f780) line 2679
nsEventStateManager::PreHandleEvent(nsEventStateManager * const 0x03954f28,
nsIPresContext * 0x039e39a0, nsEvent * 0x0012f780, nsIFrame * 0x0322774c,
nsEventStatus * 0x0012f5bc, nsIView * 0x039557c0) line 404
PresShell::HandleEventInternal(nsEvent * 0x0012f780, nsIView * 0x039557c0,
unsigned int 1, nsEventStatus * 0x0012f5bc) line 6381 + 54 bytes
PresShell::HandleEvent(PresShell * const 0x03a191d4, nsIView * 0x039557c0,
nsGUIEvent * 0x0012f780, nsEventStatus * 0x0012f5bc, int 0, int & 1) line 6288 +
25 bytes
nsViewManager::HandleEvent(nsView * 0x039559f0, nsGUIEvent * 0x0012f780, int 0)
line 2316
nsView::HandleEvent(nsViewManager * 0x02dd93b0, nsGUIEvent * 0x0012f780, int 0)
line 308
nsViewManager::DispatchEvent(nsViewManager * const 0x02dd93b0, nsGUIEvent *
0x0012f780, nsEventStatus * 0x0012f6c8) line 2046 + 23 bytes
HandleEvent(nsGUIEvent * 0x0012f780) line 82
nsWindow::DispatchEvent(nsWindow * const 0x03955904, nsGUIEvent * 0x0012f780,
nsEventStatus & nsEventStatus_eIgnore) line 1056 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f780) line 1077
nsWindow::DispatchMouseEvent(unsigned int 300, unsigned int 0, nsPoint *
0x00000000) line 5199 + 21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 300, unsigned int 0, nsPoint *
0x00000000) line 5456
nsWindow::ProcessMessage(unsigned int 512, unsigned int 0, long 10748224, long *
0x0012fbe0) line 3971 + 28 bytes
nsWindow::WindowProc(HWND__ * 0x000408b8, unsigned int 512, unsigned int 0, long
10748224) line 1350 + 27 bytes
USER32! SetTimer + 1077 bytes
USER32! DispatchMessageW + 278 bytes
USER32! DispatchMessageW + 11 bytes
nsAppShellService::Run(nsAppShellService * const 0x004605d0) line 474
main1(int 7, char * * 0x00424420, nsISupports * 0x00438170) line 1268 + 32 bytes
main(int 7, char * * 0x00424420) line 1647 + 37 bytes
WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00400000, char * 0x00133393,
HINSTANCE__ * 0x00400000) line 1671 + 23 bytes
WinMainCRTStartup() line 330 + 54 bytes
KERNEL32! SetUnhandledExceptionFilter + 92 bytes

1748:             scope = OBJ_GET_PARENT(cx, obj);
0122B840   mov         edx,dword ptr [obj]
0122B843   mov         eax,dword ptr [edx]
0122B845   cmp         dword ptr [eax+4],offset js_ObjectOps (012636d0)
0122B84C   je          FindConstructor+8Bh (0122b86b)
0122B84E   mov         ecx,dword ptr [obj]
0122B851   mov         edx,dword ptr [ecx]
0122B853   cmp         dword ptr [edx+4],0
0122B857   je          FindConstructor+0A6h (0122b886)
0122B859   mov         eax,dword ptr [obj]
0122B85C   mov         ecx,dword ptr [eax]
0122B85E   mov         edx,dword ptr [ecx+4]
0122B861   mov         eax,dword ptr [edx] <- crash

I'm going to keep this crash around in msdev for a few days, hopefully there is
some useful information available from this crash that dbradley or brendan can
get me to extract.
timeless, was this the same build we were seeing the strange debug/release
issues with strdup and free? If so, we can probably close this, unless you
rebuilt and are still having problems.
Marking WORKSFORME.

Timeless if you get this duplicated please reopen.
Status: UNCONFIRMED → RESOLVED
Closed: 21 years ago
Resolution: --- → WORKSFORME
Marking Verified -
Status: RESOLVED → VERIFIED
Crash Signature: [@ FindConstructor]
You need to log in before you can comment on or make changes to this bug.