Closed Bug 308419 Opened 19 years ago Closed 19 years ago

mystery crash in ff 1.5b1

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Version:
1.0 Branch
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 311717

People

(Reporter: bmo, Unassigned)

Details

(Keywords: crash) 

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 (No IDN) Firefox/1.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 (No IDN) Firefox/1.4

first crash i've had with the beta...
TB9290359E

hopefully the call stack will dupe on a better bug report ;)

Reproducible: Didn't try

Steps to Reproduce:
this stack trace is unhappy

Incident ID: 9290359 
Stack Signature 0x1f8c7005 6d80ccea 
Product ID Firefox10 
Build ID 2005071605 
Trigger Time 2005-09-12 17:03:05.0 
Platform Win32 
Operating System Windows NT 5.1 build 2600 
Module  
URL visited http://support.microsoft.com/support/kb/articles/Q196/7/84.ASP 
User Comments clicked on an external link to 
http://support.microsoft.com/support/kb/articles/Q196/7/84.ASP 
Since Last Crash 1941145 sec 
Total Uptime 2492069 sec 
Trigger Reason Access violation 
Source File, Line No. N/A 
Stack Trace  

0x1f8c7005
with_GetProperty  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 1610]
JS_GetParent  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/js/src/jsapi.c, line 2049]
XPCConvert::JSArray2Native  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 
1727]
XPCPerThreadData::SetException  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcprivate.h, line 
2625]
nsTableFrame::CalcBCBorders  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableFrame.cpp, 
line 6104]
nsCSSFrameConstructor::ConstructFieldSetFrame  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor
.cpp, line 4448]
nsCSSFrameConstructor::ConstructTextFrame  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor
.cpp, line 4583]
nsCSSFrameConstructor::IsValidSibling  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor
.cpp, line 7858]
nsHTMLTableCellElement::QueryInterface  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLTableCellEle
ment.cpp, line 142]
nsHTMLTableCellElement::GetCellIndex  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLTableCellEle
ment.cpp, line 256]
nsHTMLTableCellElement::SetAbbr  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLTableCellEle
ment.cpp, line 288]
nsHTMLTableRowElement::QueryInterface  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLTableRowElem
ent.cpp, line 262]
CSSStyleSheetImpl::GetOwnerRule  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/style/src/nsCSSStyleSheet.cpp,
 line 2528]
CSSStyleSheetImpl::AppendStyleRule  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/style/src/nsCSSStyleSheet.cpp,
 line 2091]
nsDOMException::QueryInterface  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/dom/src/base/nsDOMException.cpp, line 142]
nsClipboardBaseCommand::DoCommandParams  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindowCommands.cpp, 
line 464]
nsTableRowGroupFrame::RecoverState  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowGroupFrame.
cpp, line 1617]
nsToolkitConstructor  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/build/nsWinWidgetFactory.cpp, 
line 69]
nsWindow::OnPaint  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5024]
nsWindow::DispatchMouseEvent  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5304]
nsWindow::DispatchMouseEvent  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5304]
$E50  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 165]
USER32.dll + 0x8734 (0x77d48734)
USER32.dll + 0x8816 (0x77d48816)
USER32.dll + 0x89cd (0x77d489cd)
USER32.dll + 0x8a10 (0x77d48a10)
nsClipboard::GetNativeDataOffClipboard  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsClipboard.cpp, line 
501]
nsDownloadManager::Init  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/toolkit/components/downloads/src/nsDownload
Manager.cpp, line 203]
main  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 58]
kernel32.dll + 0x16d4f (0x7c816d4f)

just had another crash using a nightly of this branch
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050918 Firefox/1.4

talkback: TB9564638W

same call stack?
Keywords: talkbackid
still unhappy. but that's two unhappys in a row.

Incident ID: 9564638 
Stack Signature 0x01000008 83ba41e4 
Product ID Firefox10 
Build ID 2005071605 
Trigger Time 2005-09-20 19:20:49.0 
Platform Win32 
Operating System Windows NT 5.1 build 2600 
Module  
URL visited http://support.microsoft.com/support/kb/articles/Q196/7/84.ASP 
User Comments i has just clicked an external link that was loading up and i 
clicked on a different tab. must be some race condition... 
Since Last Crash 202261 sec 
Total Uptime 2694330 sec 
Trigger Reason Privileged instruction 
Source File, Line No. N/A 
Stack Trace  

0x01000008
JS_GetParent  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/js/src/jsapi.c, line 2049]
XPCConvert::JSArray2Native  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 
1734]
AutoMarkingWrappedNativeProtoPtr::`scalar deleting destructor'
nsCSSFrameConstructor::ConstructFieldSetFrame  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor
.cpp, line 4555]
nsCSSFrameConstructor::ConstructHTMLFrame  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor
.cpp, line 4750]
nsCSSFrameConstructor::ConstructHTMLFrame  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor
.cpp, line 4854]
nsCSSFrameConstructor::ContentAppended  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor
.cpp, line 8227]
nsSpaceManager::ClearFloats  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/base/src/nsSpaceManager.cpp, line 
1208]
nsXULTooltipListener::LaunchTooltip  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsXULTooltipListener.cp
p, line 509]
MapAttributesIntoRule  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLTableCellEle
ment.cpp, line 442]
nsHTMLTableCellElement::GetChildNodes
nsHTMLTableCellElement::HasAttributes
MapAttributesIntoRule  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLTableRowElem
ent.cpp, line 596]
CSSStyleSheetImpl::InsertRule  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/style/src/nsCSSStyleSheet.cpp,
 line 2766]
CSSStyleSheetImpl::GetCssRules  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/style/src/nsCSSStyleSheet.cpp,
 line 2563]
BodyRule::MapRuleInfoInto  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLBodyElement.
cpp, line 201]
nsDOMScriptObjectFactory::QueryInterface  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/dom/src/base/nsDOMScriptObjectFactory.cpp, 
line 68]
nsTableRowGroupFrame::GetLine  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowGroupFrame.
cpp, line 1944]
nsDragServiceConstructor  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/build/nsWinWidgetFactory.cpp, 
line 77]
nsWindow::DispatchMouseEvent  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5188]
nsWindow::DispatchFocus  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5435]
nsWindow::nsWindow  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 797]
USER32.dll + 0x8734 (0x77d48734)
USER32.dll + 0x8816 (0x77d48816)
USER32.dll + 0x89cd (0x77d489cd)
USER32.dll + 0x8a10 (0x77d48a10)
nsClipboard::GetDataFromDataObject  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/widget/src/windows/nsClipboard.cpp, line 
663]
nsDownloadManager::AddDownload  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/toolkit/components/downloads/src/nsDownload
Manager.cpp, line 550]
main  [c:/builds/tinderbox/Fx-
Aviary1.0.1/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 58]
kernel32.dll + 0x16d4f (0x7c816d4f)
Keywords: talkbackid → crash
Sounds too me like talkback is confused....
Marc:  It looks like your actual 1.5b1 user-agent isn't matching up with the
build information in the Talkback reports...which makes me think that your
Firefox beta install is using an older Talkback instance on your computer.  Can
you provide us with more information about what version you had previously, when
you installed the beta and exactly where you put it (did you install it over an
old Trunk build in the same directory?), and whether or not you are using an old
profile (or if this is a problem even with a fresh profile)?  Let us know so
that we can figure out what's going on here, because Talkback does seem very
confused. :-)
the first crash came from the firefox 1.5beta1 release installed over firefox
1.0.6, i believe.  i though that the installer was going to put everything in a
deer park directory like the alpha.  oops.

the second crash was after that same directory (the default) had been clobbered
by firefox-1.4.en-US.win32.installer.exe from
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2005-09-17-08-mozilla1.8/
and then updated a few time through the schnazzy new binary updater.

i'm still using the same profile i've been using for ages.  i'm happy to provide
remote access, a copy of my profile, or anything else useful to a clued in
investigator :)

fyi: i'll be out of town and out of touch for a week starting tomorrow.

marc
back in town and in touch with a brand new crash.

firefox was just starting up after an update using new update system and session
saver was loading lots of pages.  i did help -> about and boom :(

talkback: TB10123672X
That stack looks pretty bogus -- either it got completely stomped on, or the
wrong symbols are being used.
boris: that's three confused talkbacks in a row :(

jay: any ideas?  like i said, i'm happy to provide remote access.  if i've
managed to confuse talkback, others probably have and we should try and figure
out why.
ok.  i uninstalled firefox.  blew away its directory.  installed 1.5b2.

got my first crash trying to install the extension launchy v.4.01 from the
developer's site.

talkback: TB10591954H

any better?

ps: why does the installer no longer give me a "c:\program files\mozilla
firefox\components\talkback.exe"?
Marc:  With the latest builds on the Trunk and 1.5.x, the Talkback files are
located in /extensions/talkback@mozilla.org/components.   Take a look there and
 you should find the Talkback executable.  Also, I just checked in a fix for bug
311717, which is what you might have been seeing.
Status: UNCONFIRMED → NEW
Ever confirmed: true
> talkback: TB10591954H

That's a crash in XPInstall; I'd suggest filing a new bug on that specific
crash, since XPInstall has never come up in this bug before.
jay: bug 311717 does likely explain my bad talkback stacks

boris: i filed bug 312535 for the new crash

i'm marking this bug as a duplicate of bug 311717 since there's not much else we
can do with the first three talkbacks

*** This bug has been marked as a duplicate of 311717 ***
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.