Closed Bug 270554 Opened 20 years ago Closed 19 years ago

timeless thunderbird crash while exiting [@ 0x00000000 - DocumentViewerImpl::Destroy]

Categories

(Core :: DOM: Navigation, defect)

PowerPC
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: timeless, Assigned: adamlock)

Details

(Keywords: crash)

Crash Data

Thunderbird Nightly 20041117

Date/Time:      2004-11-17 23:29:13 -0800
OS Version:     10.3.6 (Build 7R28)
Report Version: 2

Command: thunderbird-bin
Path:    /Applications/Communications/Thunderbird.app/Contents/MacOS/thunderbird-bin
Version: 0.6+ (0.6+)
PID:     14420
Thread:  0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   <<00000000>> 	0x00000000 0 + 0
1   libgklayout.dylib       	0x0271d8e4 DocumentViewerImpl::Destroy() + 0x174
2   libdocshell.dylib       	0x01087c40 nsDocShell::Destroy() + 0x100
3   libdocshell.dylib       	0x01093dfc nsWebShell::Destroy() + 0x18
4   libgklayout.dylib       	0x027724bc nsFrameLoader::Destroy() + 0x110
5   libgklayout.dylib       	0x027946c0
nsGenericHTMLFrameElement::SetDocument(nsIDocument*, int, int) + 0x78
6   libgklayout.dylib       	0x0272f78c
nsGenericElement::SetDocumentInChildrenOf(nsIContent*, nsIDocument*, int) + 0x78
7   libgklayout.dylib       	0x0272f99c
nsGenericElement::SetDocument(nsIDocument*, int, int) + 0x1f0
8   libgklayout.dylib       	0x0278f4d8
nsGenericHTMLElement::SetDocument(nsIDocument*, int, int) + 0x50
9   libgklayout.dylib       	0x0272f78c
nsGenericElement::SetDocumentInChildrenOf(nsIContent*, nsIDocument*, int) + 0x78
10  libgklayout.dylib       	0x0272f99c
nsGenericElement::SetDocument(nsIDocument*, int, int) + 0x1f0
11  libgklayout.dylib       	0x0278f4d8
nsGenericHTMLElement::SetDocument(nsIDocument*, int, int) + 0x50
12  libgklayout.dylib       	0x02710d5c
nsDocument::SetScriptGlobalObject(nsIScriptGlobalObject*) + 0x78
13  libgklayout.dylib       	0x0271d6e4 DocumentViewerImpl::Close() + 0xdc
14  libdocshell.dylib       	0x01087c2c nsDocShell::Destroy() + 0xec
15  libdocshell.dylib       	0x01093dfc nsWebShell::Destroy() + 0x18
16  libgklayout.dylib       	0x027724bc nsFrameLoader::Destroy() + 0x110
17  libgklayout.dylib       	0x027946c0
nsGenericHTMLFrameElement::SetDocument(nsIDocument*, int, int) + 0x78
18  libgklayout.dylib       	0x0272f78c
nsGenericElement::SetDocumentInChildrenOf(nsIContent*, nsIDocument*, int) + 0x78
19  libgklayout.dylib       	0x0272f99c
nsGenericElement::SetDocument(nsIDocument*, int, int) + 0x1f0
20  libgklayout.dylib       	0x0278f4d8
nsGenericHTMLElement::SetDocument(nsIDocument*, int, int) + 0x50
21  libgklayout.dylib       	0x0272f78c
nsGenericElement::SetDocumentInChildrenOf(nsIContent*, nsIDocument*, int) + 0x78
22  libgklayout.dylib       	0x0272f99c
nsGenericElement::SetDocument(nsIDocument*, int, int) + 0x1f0
23  libgklayout.dylib       	0x0278f4d8
nsGenericHTMLElement::SetDocument(nsIDocument*, int, int) + 0x50
24  libgklayout.dylib       	0x0272f78c
nsGenericElement::SetDocumentInChildrenOf(nsIContent*, nsIDocument*, int) + 0x78
25  libgklayout.dylib       	0x0272f99c
nsGenericElement::SetDocument(nsIDocument*, int, int) + 0x1f0
26  libgklayout.dylib       	0x0278f4d8
nsGenericHTMLElement::SetDocument(nsIDocument*, int, int) + 0x50
27  libgklayout.dylib       	0x02710d5c
nsDocument::SetScriptGlobalObject(nsIScriptGlobalObject*) + 0x78
28  libgklayout.dylib       	0x0271d6e4 DocumentViewerImpl::Close() + 0xdc
29  libdocshell.dylib       	0x01087c2c nsDocShell::Destroy() + 0xec
30  libdocshell.dylib       	0x01093dfc nsWebShell::Destroy() + 0x18
31  libgklayout.dylib       	0x027724bc nsFrameLoader::Destroy() + 0x110
32  libgklayout.dylib       	0x02649278
nsSubDocumentFrame::Destroy(nsPresContext*) + 0xf4
33  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
34  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
35  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
36  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
37  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
38  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
39  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
40  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
41  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
42  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
43  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
44  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
45  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
46  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
47  libgklayout.dylib       	0x026e9d30
nsFrameList::DestroyFrames(nsPresContext*) + 0x40
48  libgklayout.dylib       	0x025fd58c
nsContainerFrame::Destroy(nsPresContext*) + 0x54
49  libgklayout.dylib       	0x02607cb0 nsFrameManager::Destroy() + 0x5c
50  libgklayout.dylib       	0x0262f7ac PresShell::Destroy() + 0x1d0
51  libgklayout.dylib       	0x0271d8e4 DocumentViewerImpl::Destroy() + 0x174
52  libdocshell.dylib       	0x01087c40 nsDocShell::Destroy() + 0x100
53  libdocshell.dylib       	0x01093dfc nsWebShell::Destroy() + 0x18
54  libnsappshell.dylib     	0x00488754 nsXULWindow::Destroy() + 0x18c
55  libnsappshell.dylib     	0x00492168 nsWebShellWindow::Destroy() + 0x1dc
56  libgklayout.dylib       	0x02875750 GlobalWindowImpl::ReallyCloseWindow() + 0x50
57  libgklayout.dylib       	0x0287828c
GlobalWindowImpl::CloseWindow(nsISupports*) + 0x50
58  libgklayout.dylib       	0x0286a898 nsJSContext::ScriptEvaluated(int) + 0x38
59  libgklayout.dylib       	0x0286a11c nsJSContext::CallEventHandler(JSObject*,
JSObject*, unsigned, long*, long*) + 0x138
60  libgklayout.dylib       	0x028993c4
nsJSEventListener::HandleEvent(nsIDOMEvent*) + 0x3c8
61  libgklayout.dylib       	0x02778968
nsEventListenerManager::HandleEventSubType(nsListenerStruct*, nsIDOMEvent*,
nsIDOMEventTarget*, unsigned, unsigned) + 0x244
62  libgklayout.dylib       	0x02778c50
nsEventListenerManager::HandleEvent(nsPresContext*, nsEvent*, nsIDOMEvent**,
nsIDOMEventTarget*, unsigned, nsEventStatus*) + 0x294
63  libgklayout.dylib       	0x028ba0cc
nsXULElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned,
nsEventStatus*) + 0x9b0
64  libwidget_mac.dylib     	0x005c4da4
MenuHelpersX::DispatchCommandTo(nsIWeakReference*, nsIContent*) + 0x208
65  libwidget_mac.dylib     	0x005c353c
nsMenuBarX::CommandEventHandler(OpaqueEventHandlerCallRef*, OpaqueEventRef*,
void*) + 0xd8
66  com.apple.HIToolbox     	0x927d1fc8 DispatchEventToHandlers + 0x150
67  com.apple.HIToolbox     	0x927d223c SendEventToEventTargetInternal + 0x174
68  com.apple.HIToolbox     	0x927e46e4 SendEventToEventTarget + 0x28
69  com.apple.HIToolbox     	0x927f96dc SendHICommandEvent(unsigned long,
HICommand const*, unsigned long, unsigned long, unsigned char,
OpaqueEventTargetRef*, OpaqueEventTargetRef*, OpaqueEventRef**) + 0x170
70  com.apple.HIToolbox     	0x9289189c SendMenuItemSelectedEvent + 0x88
71  com.apple.HIToolbox     	0x928783d4 HandleKeyboardEvent(OpaqueEventRef*,
unsigned char) + 0x148
72  com.apple.HIToolbox     	0x927d1fc8 DispatchEventToHandlers + 0x150
73  com.apple.HIToolbox     	0x927d223c SendEventToEventTargetInternal + 0x174
74  com.apple.HIToolbox     	0x927d66bc SendEventToEventTargetWithOptions + 0x28
75  com.apple.HIToolbox     	0x9280b05c HandleKeyboardEvent(OpaqueEventRef*,
unsigned long) + 0x140
76  com.apple.HIToolbox     	0x927e2c94
ToolboxEventDispatcherHandler(OpaqueEventHandlerCallRef*, OpaqueEventRef*,
void*) + 0x1f8
77  com.apple.HIToolbox     	0x927d2084 DispatchEventToHandlers + 0x20c
78  com.apple.HIToolbox     	0x927d223c SendEventToEventTargetInternal + 0x174
79  com.apple.HIToolbox     	0x927e46e4 SendEventToEventTarget + 0x28
80  com.apple.HIToolbox     	0x927e8600 ToolboxEventDispatcher + 0x5c
81  com.apple.HIToolbox     	0x927f8740 TryEventDispatcher + 0x6c
82  com.apple.HIToolbox     	0x927d8db0 GetOrPeekEvent + 0x134
83  com.apple.HIToolbox     	0x927d908c GetNextEventMatchingMask + 0x1c8
84  com.apple.HIToolbox     	0x927eca18 WNEInternal + 0xa0
85  com.apple.HIToolbox     	0x927fd730 WaitNextEvent + 0x4c
86  libwidget_mac.dylib     	0x005b9e70 nsMacMessagePump::GetEvent(EventRecord&)
+ 0x74
87  libwidget_mac.dylib     	0x005b9d4c nsMacMessagePump::DoMessagePump() + 0x30
88  libwidget_mac.dylib     	0x005ae0c0 nsAppShell::Run() + 0x38
89  org.mozilla.thunderbird 	0x0000d1b0 xre_main(int, char**, nsXREAppData
const*) + 0xadc
90  org.mozilla.thunderbird 	0x0000934c _start + 0x17c
91  org.mozilla.thunderbird 	0x000091cc start + 0x30

i was trying to crash/quit, and had mostly given up, oh well :)

no steps, sorry. no talkback, sorry that's not included in this trunk disk image.
PPC Thread State:
  srr0: 0x00000000 srr1: 0x4200f030                vrsave: 0x00000000
    cr: 0x28442444  xer: 0x00000000   lr: 0x0262f750  ctr: 0x00000000
    r0: 0x00000001   r1: 0xbfffcce0   r2: 0x0399d8db   r3: 0x0399d790
    r4: 0x00000000   r5: 0x00000000   r6: 0x00000000   r7: 0x00000001
    r8: 0x00000003   r9: 0xa00011ac  r10: 0x00001898  r11: 0x03c02004
   r12: 0x00000000  r13: 0x00000000  r14: 0x00000000  r15: 0xbfffe9c0
   r16: 0xbfffed40  r17: 0xbfffe6f0  r18: 0x02979004  r19: 0x03b13350
   r20: 0xbfffe6b0  r21: 0xbfffe2e0  r22: 0x004985d8  r23: 0x00000001
   r24: 0x033e0f10  r25: 0x00000000  r26: 0xbfffcd20  r27: 0x01bc9adc
   r28: 0x00000000  r29: 0x00000000  r30: 0x01bc9a00  r31: 0x0262f5ec
Exception:  EXC_BAD_INSTRUCTION (0x0002)
Code[0]:    0x00000002
Code[1]:    0x00079598


Thread 0 Crashed:
0   <<00000000>> 	0x00079598 0 + 0x79598
1   libgklayout.dylib     	0x031808e4 DocumentViewerImpl::Destroy() + 0x174

i crash while quiting fairly consistently
timeless, what should we do with bug?
Summary: [@ 0x00000000 - DocumentViewerImpl::Destroy] → timeless thunderbird crash while exiting [@ 0x00000000 - DocumentViewerImpl::Destroy]
i gave up on thunderbird a long time ago, it can't open my inbox, so i don't use it.

i couldn't find a place in the code that had an unprotected pointer :(.
doesn't seem enough info here to take this bug any further.  reopen or open a new one if anyone gets any ideas on how to proceed.

jay, maybe some analysis of tbird talkback data with comment "close" and "exit" would be the place to start for any problems that might still remain.
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ 0x00000000 - DocumentViewerImpl::Destroy]
You need to log in before you can comment on or make changes to this bug.