304937 - Crash when running Numion speedtest [@ 0x20202020 - JS_GetClass ]

Status: RESOLVED DUPLICATE of bug 304430

(Core :: XPConnect, defect)

Description

[Peter Weilbacher]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b4) Gecko/20050815 SeaMonkey/1.0a

I get a crash when I run the speedtest at the numion site. To reproduce: select
Germany at above URL, click on Start! and wait 10s or so. The relevant talkback
I submitted is TB8419913H (using a fresh profile and an official trunk nightly)
and points to JS_GetClass ad=nd I found the same position in the code when
running an OS/2 debug build under the debugger but I haven't found out the cause.

There are also several other talkback reports which list the same URL and point
to other parts of the code. (Strange, these crashes are even discussed in the
MozillaZine forums but I couldn't find a bug report about them, so I open as
UNCO for now.)

Comment 1

[timeless]

*** This bug has been marked as a duplicate of 304430 ***

Comment 2

[Peter Weilbacher]

I hope that you haven't duped it just because both crashes are in JS_GetClass().
The call stack is quite different for both cases. The call stack of this one
actually looks a lot more like bug 295090 but then that was already fixed in May.

Comment 3

[timeless]

0x20202020 means your object was garbage collected (failure to root)

Incident ID: 8419913 
Stack Signature 0x20202020 6308a479 
Product ID MozillaTrunk 
Build ID 2005081517 
Trigger Time 2005-08-16 05:35:10.0 
Platform LinuxIntel 
Operating System Linux 2.4.21-286-default 
Module  
URL visited http://numion.com/YourSpeed/index.html 
User Comments I selected Germany and then clicked "Start!" and after 15s or so 
SeaMonkey crashed 
Since Last Crash 0 sec 
Total Uptime 0 sec 
Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) 
Source File, Line No. N/A 
Stack Trace  

0x20202020
JS_GetClass()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/js/src/jsapi.c, line 2106]
GetScopeOfObject()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativescope.cpp, line 519]
XPCWrappedNativeScope::FindInJSObjectScope()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-
28.8_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativescope.cpp, line 586]
XPCConvert::NativeInterface2JSObject()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/js/src/xpconnect/src/xpcconvert.cpp, 
line 1052]
nsXPConnect::WrapNative()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 580]
nsJSEventListener::HandleEvent()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/dom/src/events/nsJSEventListener.cpp, 
line 125]
nsEventListenerManager::HandleEventSubType()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-
28.8_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 848]
nsEventListenerManager::HandleEvent()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-
28.8_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1696]
nsGlobalWindow::HandleDOMEvent()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 
1393]
DocumentViewerImpl::LoadComplete()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/layout/base/nsDocumentViewer.cpp, line 
842]
nsDocShell::EndPageLoad()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/docshell/base/nsDocShell.cpp, line 4650]
nsWebShell::EndPageLoad()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/docshell/base/nsWebShell.cpp, line 496]
nsDocShell::OnStateChange()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/docshell/base/nsDocShell.cpp, line 201]
nsDocLoader::FireOnStateChange()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 
848]
nsDocLoader::doStopDocumentLoad()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 
839]
nsDocLoader::DocLoaderIsEmpty()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 
741]
nsDocLoader::OnStopRequest()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 662]
nsLoadGroup::RemoveRequest()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/netwerk/base/src/nsLoadGroup.cpp, line 848]
nsDocument::UnblockOnload()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/content/base/src/nsDocument.cpp, line 388]
DestroyImagePLEvent()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/content/base/src/nsImageLoadingContent.cpp, line 659]
PL_DestroyEvent()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/xpcom/threads/plevent.c, line 728]
PL_HandleEvent()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/xpcom/threads/plevent.c, line 699]
PL_ProcessPendingEvents()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/xpcom/threads/plevent.c, line 623]
nsEventQueueImpl::ProcessPendingEvents()  [/builds/tinderbox/SeaMonkey-
Release/Linux_2.4.20-28.8_Depend/mozilla/xpcom/threads/nsEventQueue.cpp, line 
421]
event_processor_callback()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/widget/src/gtk2/nsAppShell.cpp, line 71]
libglib-2.0.so.0 + 0x41109 (0x405ad109)
libglib-2.0.so.0 + 0x211c3 (0x4058d1c3)
libglib-2.0.so.0 + 0x22189 (0x4058e189)
libglib-2.0.so.0 + 0x225c4 (0x4058e5c4)
libglib-2.0.so.0 + 0x22c28 (0x4058ec28)
libgtk-x11-2.0.so.0 + 0xbf887 (0x402e7887)
nsAppShell::Run()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/widget/src/gtk2/nsAppShell.cpp, line 141]
nsAppStartup::Run()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/xpfe/components/startup/src/nsAppStartup.cpp, line 208]
main1()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 848]
main()  [/builds/tinderbox/SeaMonkey-Release/Linux_2.4.20-
28.8_Depend/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1739]
libc.so.6 + 0x15d3e (0x407b5d3e)