26436 - Crash on ListenerEvent cleanup...

Status: VERIFIED DUPLICATE of bug 26276

(SeaMonkey :: General, defect, P3)

Description

[e75644]

This is "actually" bug 26276, just discovered it's a randomly(periodically?) 
occuring event so the guesses I took there as to what caused it (Filling a text 
box, another bug) don't hold. This is SMP machine, so it could be SMP-specific, 
but seems pretty consistent. Anyway, the latest trace:

nsStreamListenerEvent::~nsStreamListenerEvent() line 76 + 24 bytes
nsOnStopRequestEvent::~nsOnStopRequestEvent() line 258
nsOnStopRequestEvent::`scalar deleting destructor'(unsigned int 1) + 15 bytes
nsStreamListenerEvent::DestroyPLEvent(PLEvent * 0x03a84650) line 104 + 30 bytes
PL_DestroyEvent(PLEvent * 0x03a84650) line 549 + 10 bytes
PL_HandleEvent(PLEvent * 0x03a84650) line 536 + 9 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00fd4e10) line 487 + 9 bytes
_md_EventReceiverProc(void * 0x0165056a, unsigned int 49533, unsigned int 0, 
long 16600592) line 975 + 9 bytes
USER32! 77e7124c()

Same situation as in the earlier bug, mChannel has invalid __vfptr.

Comment 1

[leger]

Adding "crash" keyword.

Comment 2

[cbegle]

[e-mail]: I'm going to mark this as a dupe of 26276.  if you can give us 
steps to reproduce the bug and it warrants having two bugs for the same stack 
trace, then please reopen with those steps to reproduce each bug.

*** This bug has been marked as a duplicate of 26276 ***

Comment 3

[leger]

Mark Verified as a dup.