Closed Bug 262509 Opened 20 years ago Closed 7 years ago

[@ XPCWrappedNative::SweepTearOffs]

Categories

(Core :: XPConnect, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: timeless, Unassigned)

Details

(Keywords: crash, Whiteboard: [tbird crash])

Crash Data

Stack Signature XPCWrappedNative::SweepTearOffs 41b0cb0a Product ID MozillaTrunk Build ID 2004100105 Trigger Time 2004-10-01 14:20:07.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module xpc3250.dll + (000171b2) URL visited gmail.com User Comments Since Last Crash 4718 sec Total Uptime 4718 sec Trigger Reason Access violation Source File, Line No. c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcinlines.h, line 657 Stack Trace XPCWrappedNative::SweepTearOffs [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcinlines.h, line 657] WrappedNativeTearoffSweeper [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednativescope.cpp, line 372] JS_DHashTableEnumerate [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsdhash.c, line 619] XPCWrappedNativeScope::SweepAllWrappedNativeTearOffs [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednativescope.cpp, line 379] XPCJSRuntime::GCCallback [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcjsruntime.cpp, line 489] jsds_GCCallbackProc [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/jsd/jsd_xpc.cpp, line 525] js_GC [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line 1413] js_ForceGC [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line 1025] js_DestroyContext [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jscntxt.c, line 256] JS_DestroyContext [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsapi.c, line 930] nsXPConnect::ReleaseJSContext [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 1087] nsJSContext::`scalar deleting destructor' nsTimerImpl::~nsTimerImpl [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/nsTimerImpl.cpp, line 166] nsTimerManager::FireNextIdleTimer [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/nsTimerImpl.cpp, line 620] nsAppShell::Run [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsAppShell.cpp, line 142] nsAppShellService::Run [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpfe/appshell/src/nsAppShellService.cpp, line 489] main1 [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1331] main [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1802] WinMain [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1828] WinMainCRTStartup() kernel32.dll + 0x16d4f (0x7c816d4f)
Severity: normal → critical
Summary: - → [@ XPCWrappedNative::SweepTearOffs]
Assignee: dbradley → nobody
QA Contact: pschwartau → xpconnect
seen in Thunderbird - I had just clicked on the newest inbox message (at the bottom of the list as I use ascending date) and then hit delete. The message was still there when I restarted TB. Is bug 254161 related? (garbage collection seems a possibility) TB26085363Q Stack Signature XPCWrappedNative::SweepTearOffs 3630510c Product ID ThunderbirdTrunk Build ID 2006111503 Trigger Time 2006-11-16 06:28:21.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module thunderbird.exe + (0006e91e) URL visited User Comments hit delete key in 3-pane while viewing a message s/vseerror Since Last Crash 71963 sec Total Uptime 71963 sec Trigger Reason Access violation Source File, Line No. d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\js\src\xpconnect\src\xpcinlines.h, line 685 Stack Trace XPCWrappedNative::SweepTearOffs [mozilla\js\src\xpconnect\src\xpcinlines.h, line 685] XPCWrappedNativeScope::SweepAllWrappedNativeTearOffs [mozilla\js\src\xpconnect\src\xpcwrappednativescope.cpp, line 424] jsds_GCCallbackProc [mozilla\js\jsd\jsd_xpc.cpp, line 519] JS_GC [mozilla\js\src\jsapi.c, line 1882] NS_ProcessNextEvent_P [mozilla\xpcom\build\nsthreadutils.cpp, line 225] nsBaseAppShell::Run [mozilla\widget\src\xpwidgets\nsbaseappshell.cpp, line 153] MSVCR80.dll + 0x8a21 (0x78138a21)
I've not seen this since. But a several crashes are on talkback, and stacks of 6 I looked at are much the same. But two are short TB38705735 and TB38623479 Stack Signature XPCWrappedNative::SweepTearOffs 705d8dc3 Product ID Thunderbird2 Build ID 2007103104 Trigger Time 2007-11-30 05:47:16.0 Platform Win32 Operating System Windows NT 5.2 build 3790 Module thunderbird.exe + (00015ca1) URL visited User Comments just starting thunderbird Since Last Crash 34249 sec Total Uptime 148572 sec Trigger Reason Access violation Source File, Line No. e:/builds/tinderbox/Tb-Mozilla1.8-Release/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcinlines.h, line 673 Stack Trace XPCWrappedNative::SweepTearOffs [mozilla/js/src/xpconnect/src/xpcinlines.h, line 673] XPCWrappedNativeScope::SweepAllWrappedNativeTearOffs [mozilla/js/src/xpconnect/src/xpcwrappednativescope.cpp, line 401] DOMGCCallback [mozilla/dom/src/base/nsJSEnvironment.cpp, line 2269]
Crash Signature: [@ XPCWrappedNative::SweepTearOffs]
(In reply to eherokles from comment #4) > Could it be related to https://bugzilla.mozilla.org/show_bug.cgi?id=625351 unclear. Crash signature is quite rare for both firefox and thunderbird. almost all crashes reference same source lines in top 2 frames as in bp-f7861fa8-2ac1-4b43-b9f5-8f0562130114 Thunderbird and bp-985a3915-00e4-4628-9b05-0af2e2130103 firefox 0 libxul.so XPCWrappedNative::SweepTearOffs XPCInlines.h:580 1 libxul.so WrappedNativeTearoffSweeper XPCWrappedNativeScope.cpp:493 2 libxul.so JS_DHashTableEnumerate jsdhash.cpp:710 3 libxul.so XPCWrappedNativeScope::SweepAllWrappedNativeTearOffs XPCMaps.h:137 4 libxul.so XPCJSRuntime::FinalizeCallback XPCJSRuntime.cpp:920 5 libxul.so IncrementalCollectSlice jsgc.cpp:3779 6 libxul.so GCCycle jsgc.cpp:4395 7 libxul.so Collect jsgc.cpp:4503 8 libxul.so nsJSContext::GarbageCollectNow nsJSEnvironment.cpp:2942 bp-cc841a89-3a0a-42f4-8b0c-9f1e12130107 has different line numbers 0 libxul.so XPCWrappedNative::SweepTearOffs xpcprivate.h:2566 << 1 libxul.so WrappedNativeTearoffSweeper XPCWrappedNativeScope.cpp:493 2 libxul.so JS_DHashTableEnumerate jsdhash.cpp:710 Note XPCWrappedNative::SweepTearOffs() doesn't seem to occur for current releases
Whiteboard: [tbird crash]
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.