284182 - [E] ABW: Array bounds write in nsTimerImpl::nsTimerImpl(void) {1 occurrence}

Status: RESOLVED INCOMPLETE

(Core :: XPCOM, defect)

Description

[timeless]

[E] ABW: Array bounds write in nsTimerImpl::nsTimerImpl(void) {1 occurrence}
        Writing 4 bytes to 0x0446ca30 (4 bytes at 0x0446ca30 illegal)
        Address 0x0446ca30 is 1 byte past the end of a 48 byte block at 0x0446ca00
        Address 0x0446ca30 points to a C++ new block in heap 0x01c20000
        Thread ID: 0x9f4
        Error location
            nsTimerImpl::nsTimerImpl(void)
[r:\mozilla\xpcom\threads\nstimerimpl.cpp:158]
                  mCallback.c = nsnull;
                
                #ifdef DEBUG_TIMERS
             =>   mStart = 0;
                  mStart2 = 0;
                #endif
                }
            nsTimerImplConstructor [r:\mozilla\xpcom\build\nsxpcominit.cpp:183]
                NS_DECL_CLASSINFO(nsConsoleService)
                NS_GENERIC_FACTORY_CONSTRUCTOR(nsAtomService)
                NS_GENERIC_FACTORY_CONSTRUCTOR(nsExceptionService)
             => NS_GENERIC_FACTORY_CONSTRUCTOR(nsTimerImpl)
                NS_GENERIC_FACTORY_CONSTRUCTOR(nsTimerManager)
                NS_GENERIC_FACTORY_CONSTRUCTOR(nsBinaryOutputStream)
                NS_GENERIC_FACTORY_CONSTRUCTOR(nsBinaryInputStream)
            nsGenericFactory::CreateInstance(nsISupports *,nsID const&,void * *)
[r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nsgenericfactory.cpp:82]
            nsComponentManagerImpl::CreateInstanceByContractID(char
const*,nsISupports *,nsID const&,void * *)
[r:\mozilla\xpcom\components\nscomponentmanager.cpp:1976]
            CallCreateInstance(char const*,nsISupports *,nsID const&,void * *)
[r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nscomponentmanagerutils.cpp:168]
            nsCreateInstanceByContractID::()(nsID const&,void * *)const
[r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nscomponentmanagerutils.cpp:208]
            nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&,nsID
const&) [r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nscomptr.cpp:150]
            nsCOMPtr<nsITimer>::=(nsCOMPtr_helper const&)
[r:\mozilla\opt71-i686-pc-cygwin\dist\include\xpcom\nscomptr.h:780]
            nsHttpHandler::StartPruneDeadConnectionsTimer(void)
[r:\mozilla\netwerk\protocol\http\src\nshttphandler.cpp:297]
            nsHttpHandler::Init(void)
[r:\mozilla\netwerk\protocol\http\src\nshttphandler.cpp:266]
        Allocation location
            !>(void *)     [C:\Documents and
Settings\josh\Desktop\bin\xpcom_core.dll]
            nsTimerImplConstructor [r:\mozilla\xpcom\build\nsxpcominit.cpp:183]
            nsGenericFactory::CreateInstance(nsISupports *,nsID const&,void * *)
[r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nsgenericfactory.cpp:82]
            nsComponentManagerImpl::CreateInstanceByContractID(char
const*,nsISupports *,nsID const&,void * *)
[r:\mozilla\xpcom\components\nscomponentmanager.cpp:1976]
            CallCreateInstance(char const*,nsISupports *,nsID const&,void * *)
[r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nscomponentmanagerutils.cpp:168]
            nsCreateInstanceByContractID::()(nsID const&,void * *)const
[r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nscomponentmanagerutils.cpp:208]
            nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&,nsID
const&) [r:\mozilla\opt71-i686-pc-cygwin\xpcom\build\nscomptr.cpp:150]
            nsCOMPtr<nsITimer>::=(nsCOMPtr_helper const&)
[r:\mozilla\opt71-i686-pc-cygwin\dist\include\xpcom\nscomptr.h:780]
            nsHttpHandler::StartPruneDeadConnectionsTimer(void)
[r:\mozilla\netwerk\protocol\http\src\nshttphandler.cpp:297]
            nsHttpHandler::Init(void)
[r:\mozilla\netwerk\protocol\http\src\nshttphandler.cpp:266]

-- this is a logging / define issue

Comment 1

[timeless]

Attachment: mozconfig

Comment 2

[timeless]

Attachment: nsTimerImpl.cpp

Comment 3

[timeless]

Attachment: top of nsXPComInit.cpp