213325 - Total crash [@nsFixedSizeAllocator::FindBucket]

Status: VERIFIED DUPLICATE of bug 207636

(SeaMonkey :: Bookmarks & History, defect)

Description

[David McMillan]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5b) Gecko/20030721
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5b) Gecko/20030721

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5b) Gecko/20030721

Whenever I try to search bookmarks I get the spinning ball followed by a crash
within about 10 secs. This happens in every instance without exception.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Olivier Cahagne]

can you post a MacOSX stack log ?

Comment 2

[David McMillan]

Date/Time:  2003-07-21 21:17:55 +0100
OS Version: 10.2.6 (Build 6L60)
Host:       G4-OSX.local.

Command:    mozilla-bin
PID:        3733

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000028

Thread 0 Crashed:
 #0   0x0016e0b4 in nsFixedSizeAllocator::FindBucket(unsigned long)
 #1   0x0016e124 in nsFixedSizeAllocator::Alloc(unsigned long)
 #2   0x011ae210 in
nsRDFConMemberTestNode::FilterInstantiations(InstantiationSet&, void*) const
 #3   0x011b15e4 in TestNode::Propagate(InstantiationSet const&, void*)
 #4   0x011b1674 in TestNode::Propagate(InstantiationSet const&, void*)
 #5   0x011b0dc8 in RootNode::Propagate(InstantiationSet const&, void*)
 #6   0x011bcb3c in nsXULTreeBuilder::OpenSubtreeOf(nsTreeRows::Subtree*, int,
nsIRDFResource*, int*)
 #7   0x011bca08 in nsXULTreeBuilder::OpenContainer(int, nsIRDFResource*)
 #8   0x011bc264 in nsXULTreeBuilder::RebuildAll()
 #9   0x011c3b90 in nsXULTemplateBuilder::Rebuild()
 #10  0x011c3e14 in nsXULTemplateBuilder::AttributeChanged(nsIDocument*,
nsIContent*, int, nsIAtom*, int)
 #11  0x0115b9f8 in nsXULDocument::AttributeChanged(nsIContent*, int, nsIAtom*, int)
 #12  0x0119f604 in nsXULElement::SetAttr(nsINodeInfo*, nsAString const&, int)
 #13  0x0119c2b8 in nsXULElement::SetAttribute(nsAString const&, nsAString const&)
 #14  0x001c455c in _XPTC_InvokeByIndex
 #15  0x0052dea0 in XPCWrappedNative::CallMethod(XPCCallContext&,
XPCWrappedNative::CallMode)
 #16  0x00533dcc in XPC_WN_CallMethod(JSContext*, JSObject*, unsigned, long*, long*)
 #17  0x00100f40 in js_Invoke
 #18  0x0010863c in js_Interpret
 #19  0x00100f80 in js_Invoke
 #20  0x0010118c in js_InternalInvoke
 #21  0x000dfad8 in JS_CallFunctionValue
 #22  0x0342b064 in nsJSContext::CallEventHandler(void*, void*, unsigned, void*,
int*, int)
 #23  0x0345b448 in nsJSEventListener::HandleEvent(nsIDOMEvent*)
 #24  0x0104d058 in
nsEventListenerManager::HandleEventSubType(nsListenerStruct*, nsIDOMEvent*,
nsIDOMEventTarget*, unsigned, unsigned)
 #25  0x0104f55c in nsEventListenerManager::HandleEvent(nsIPresContext*,
nsEvent*, nsIDOMEvent**, nsIDOMEventTarget*, unsigned, nsEventStatus*)
 #26  0x011a1560 in nsXULElement::HandleDOMEvent(nsIPresContext*, nsEvent*,
nsIDOMEvent**, unsigned, nsEventStatus*)
 #27  0x011a543c in nsXULElement::DoCommand()
 #28  0x001c455c in _XPTC_InvokeByIndex
 #29  0x0052dea0 in XPCWrappedNative::CallMethod(XPCCallContext&,
XPCWrappedNative::CallMode)
 #30  0x00533dcc in XPC_WN_CallMethod(JSContext*, JSObject*, unsigned, long*, long*)
 #31  0x00100f40 in js_Invoke
 #32  0x0010863c in js_Interpret
 #33  0x00100f80 in js_Invoke
 #34  0x0010118c in js_InternalInvoke
 #35  0x000dfad8 in JS_CallFunctionValue
 #36  0x0342b064 in nsJSContext::CallEventHandler(void*, void*, unsigned, void*,
int*, int)
 #37  0x0343c04c in GlobalWindowImpl::RunTimeout(nsTimeoutImpl*)
 #38  0x0343c810 in GlobalWindowImpl::TimerCallback(nsITimer*, void*)
 #39  0x001afdc8 in nsTimerImpl::Fire()
 #40  0x001afef0 in handleTimerEvent(TimerEventType*)
 #41  0x001ab1ec in PL_HandleEvent
 #42  0x001ab110 in PL_ProcessPendingEvents
 #43  0x001ab5f4 in _md_EventReceiverProc
 #44  0x969a2c54 in DispatchEventToHandlers
 #45  0x969a2fbc in SendEventToEventTargetInternal
 #46  0x969a63d0 in SendEventToEventTargetWithOptions
 #47  0x969b2940 in ToolboxEventDispatcherHandler(OpaqueEventHandlerCallRef*,
OpaqueEventRef*, void*)
 #48  0x969a2d0c in DispatchEventToHandlers
 #49  0x969a2fbc in SendEventToEventTargetInternal
 #50  0x969b5494 in SendEventToEventTarget
 #51  0x969b7258 in ToolboxEventDispatcher(OpaqueEventRef*)
 #52  0x969c8740 in CallEventDispatchHook
 #53  0x969b3c90 in TryEventDispatcher
 #54  0x969a4570 in GetOrPeekEvent
 #55  0x969a4330 in GetNextEventMatchingMask
 #56  0x969a8054 in WNEInternal
 #57  0x969adf0c in WaitNextEvent
 #58  0x00bda984 in nsMacMessagePump::GetEvent(EventRecord&)
 #59  0x00bda860 in nsMacMessagePump::DoMessagePump()
 #60  0x00bce318 in nsAppShell::Run()
 #61  0x000053c8 in main1(int, char**, nsISupports*)
 #62  0x00005924 in main
 #63  0x0000224c in _start
 #64  0x000020cc in start

Thread 1:
 #0   0x900257ac in select
 #1   0x002d79e4 in poll
 #2   0x002d41d8 in _pr_poll_with_poll
 #3   0x00729c74 in nsSocketTransportService::Run()
 #4   0x001adafc in nsThread::Main(void*)
 #5   0x002d5640 in _pt_root
 #6   0x90020d48 in _pthread_body

Thread 2:
 #0   0x9003eaa8 in semaphore_wait_signal_trap
 #1   0x9003e8c4 in _pthread_cond_wait
 #2   0x002d0750 in PR_WaitCondVar
 #3   0x00732b58 in nsDNSService::DequeuePendingQ()
 #4   0x0073258c in nsDNSService::Run()
 #5   0x001adafc in nsThread::Main(void*)
 #6   0x002d5640 in _pt_root
 #7   0x90020d48 in _pthread_body

Thread 3:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0xc0007758 in __ape_internal
 #3   0xc0001160 in __ape_agent
 #4   0x90020d48 in _pthread_body

Thread 4:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0x928ec28c in JNI_CreateJavaVM_Impl
 #3   0x928ec224 in JNI_CreateJavaVM_Impl
 #4   0x928a51fc in JVM_GetClassMethodsCount
 #5   0x90020d48 in _pthread_body

Thread 5:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0x9283de9c in JVM_NewInstance
 #3   0x9285eae4 in JVM_FillInStackTrace
 #4   0x928647a0 in JVM_Send
 #5   0x9290114c in JNI_CreateJavaVM_Impl
 #6   0x928a51fc in JVM_GetClassMethodsCount
 #7   0x90020d48 in _pthread_body

Thread 6:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x92845d80 in JVM_ArrayCopy
 #4   0x9285d620 in JVM_MonitorNotify
 #5   0x9285e2f8 in JVM_MonitorWait
 #6   0x04343668 in 0x4343668
 #7   0x0434168c in 0x434168c
 #8   0x0434168c in 0x434168c
 #9   0xa2843c38 in typeinfo name for std::bad_exception
 #10  0x92838bdc in JVM_CurrentTimeMillis
 #11  0x92878c28 in JVM_FindClassFromClass
 #12  0x92892c90 in JVM_IsSameClassPackage
 #13  0x9288cf70 in JVM_GetMethodIxExceptionTableEntry
 #14  0x928787a0 in JVM_FindClassFromClass
 #15  0x928a51fc in JVM_GetClassMethodsCount
 #16  0x90020d48 in _pthread_body

Thread 7:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x92845d80 in JVM_ArrayCopy
 #4   0x9285d620 in JVM_MonitorNotify
 #5   0x9285e2f8 in JVM_MonitorWait
 #6   0x04343668 in 0x4343668
 #7   0x0434168c in 0x434168c
 #8   0x043415cc in 0x43415cc
 #9   0x043415cc in 0x43415cc
 #10  0xa2843c38 in typeinfo name for std::bad_exception
 #11  0x92838bdc in JVM_CurrentTimeMillis
 #12  0x92878c28 in JVM_FindClassFromClass
 #13  0x92892c90 in JVM_IsSameClassPackage
 #14  0x9288cf70 in JVM_GetMethodIxExceptionTableEntry
 #15  0x928787a0 in JVM_FindClassFromClass
 #16  0x928a51fc in JVM_GetClassMethodsCount
 #17  0x90020d48 in _pthread_body

Thread 8:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0x9283de9c in JVM_NewInstance
 #3   0x92844e18 in JVM_GetClassLoader
 #4   0x92844ba4 in JVM_GetClassLoader
 #5   0x928a51fc in JVM_GetClassMethodsCount
 #6   0x90020d48 in _pthread_body

Thread 9:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x9285eb40 in JVM_FillInStackTrace
 #4   0x92903300 in JVM_InitProperties
 #5   0x92903138 in JVM_InitProperties
 #6   0x928787a0 in JVM_FindClassFromClass
 #7   0x928a51fc in JVM_GetClassMethodsCount
 #8   0x90020d48 in _pthread_body

Thread 10:
 #0   0x90073c48 in mach_msg_trap
 #1   0x90005f90 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x9285eb40 in JVM_FillInStackTrace
 #4   0x9288890c in JVM_StartThread
 #5   0x92876c10 in JVM_FindLoadedClass
 #6   0x928787a0 in JVM_FindClassFromClass
 #7   0x928a51fc in JVM_GetClassMethodsCount
 #8   0x90020d48 in _pthread_body

Thread 11:
 #0   0x90042688 in semaphore_timedwait_signal_trap
 #1   0x9003e8b4 in _pthread_cond_wait
 #2   0x002d0514 in pt_TimedWait
 #3   0x002d0764 in PR_WaitCondVar
 #4   0x001b1548 in TimerThread::Run()
 #5   0x001adafc in nsThread::Main(void*)
 #6   0x002d5640 in _pt_root
 #7   0x90020d48 in _pthread_body

Thread 12:
 #0   0x9003eaa8 in semaphore_wait_signal_trap
 #1   0x9003e8c4 in _pthread_cond_wait
 #2   0x002d0750 in PR_WaitCondVar
 #3   0x001aec24 in nsThreadPool::GetRequest(nsIThread*)
 #4   0x001af4f0 in nsThreadPoolRunnable::Run()
 #5   0x001adafc in nsThread::Main(void*)
 #6   0x002d5640 in _pt_root
 #7   0x90020d48 in _pthread_body

PPC Thread State:
  srr0: 0x0016e0b4 srr1: 0x0200f930                vrsave: 0x00000000
   xer: 0x00000000   lr: 0x0016e124  ctr: 0x0016e108   mq: 0x00000000
    r0: 0x011ae210   r1: 0xbfffc1a0   r2: 0x28824246   r3: 0x0000000c
    r4: 0x0000000c   r5: 0x00000000   r6: 0x00000000   r7: 0x00000000
    r8: 0x00000001   r9: 0x06f276a0  r10: 0x077475d0  r11: 0x012917fc
   r12: 0x0016e108  r13: 0xbfffc280  r14: 0x00000001  r15: 0xbfffc4c0
   r16: 0xbfffc314  r17: 0xbfffc310  r18: 0xbfffc2b0  r19: 0xbfffc2d0
   r20: 0x002081a0  r21: 0x012880d8  r22: 0x06f276a0  r23: 0x0124c98c
   r24: 0x078047b0  r25: 0x002081a0  r26: 0x07802f70  r27: 0xbfffc2e0
   r28: 0xbfffc300  r29: 0x0000000c  r30: 0x0000000c  r31: 0x011ad374

Comment 3

[Olivier Cahagne]

*** This bug has been marked as a duplicate of 207636 ***

Comment 4

[timeless]

vrfy dupe