31666 - crash on commercial tree tip startup

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect, P3)

Description

[Syd Logan]

#0  0x4049e111 in ?? () from /lib/libc.so.6
#1  0x4049f447 in ?? () from /lib/libc.so.6
#2  0x4021a6c4 in PR_Assert (s=0x4024a92a "0 == rv", 
    file=0x4024a920 "ptsynch.c", ln=168) at prlog.c:448
#3  0x402370ec in PR_Lock (lock=0x84b3620) at ptsynch.c:168
#4  0x400ace3c in js_LockScope1 (cx=0x831f9d0, scope=0x84956f0, me=134581208)
    at jslock.c:647
#5  0x400ad0d9 in js_LockObj (cx=0x831f9d0, obj=0x84956e8) at jslock.c:717
#6  0x400ac00c in js_GetSlotWhileLocked (cx=0x831f9d0, obj=0x84956e8, slot=2)
    at jslock.c:275
#7  0x40092f7e in js_ValueToFunction (cx=0x831f9d0, vp=0xbfffec98, 
    constructing=0) at jsfun.c:1662
#8  0x40063f87 in JS_ValueToFunction (cx=0x831f9d0, v=139024104) at jsapi.c:492
#9  0x40320c56 in nsJSContext::CallEventHandler (this=0x83710b8, 
    aTarget=0x83290d0, aHandler=0x84956e8, argc=1, argv=0xbfffed54, 
    aBoolResult=0xbfffed44) at nsJSEnvironment.cpp:539
#10 0x4035bc0e in nsJSDOMEventListener::HandleEvent (this=0x84b53f8, 
    aEvent=0x8693f84) at nsJSDOMEventListener.cpp:94
#11 0x40ef67f1 in nsEventListenerManager::HandleEventSubType (this=0x845a520, 
    aListenerStruct=0x84b9f48, aDOMEvent=0x8693f84, aSubType=1, aPhaseFlags=7)
    at nsEventListenerManager.cpp:698
#12 0x40ef7dae in nsEventListenerManager::HandleEvent (this=0x845a520, 
    aPresContext=0x8356060, aEvent=0xbffff56c, aDOMEvent=0xbffff12c, aFlags=7, 
    aEventStatus=0xbffff5ac) at nsEventListenerManager.cpp:1249
#13 0x4032c2db in GlobalWindowImpl::HandleDOMEvent (this=0x8370ff0, 
    aPresContext=0x8356060, aEvent=0xbffff56c, aDOMEvent=0xbffff12c, aFlags=1, 
    aEventStatus=0xbffff5ac) at nsGlobalWindow.cpp:373
#14 0x402898ca in nsWebShell::OnEndDocumentLoad (this=0x837e7b0, 
    loader=0x8370d28, channel=0x83465b8, aStatus=0) at nsWebShell.cpp:2380
#15 0x40c65ed6 in nsDocLoaderImpl::FireOnEndDocumentLoad (this=0x8370d28, 
    aLoadInitiator=0x8370d28, aDocChannel=0x83465b8, aStatus=0)
    at nsDocLoader.cpp:602
#16 0x40c65b63 in nsDocLoaderImpl::DocLoaderIsEmpty (this=0x8370d28, aStatus=0)
    at nsDocLoader.cpp:492
#17 0x40c65a93 in nsDocLoaderImpl::DocLoaderIsEmpty (this=0x8625c00, aStatus=0)
    at nsDocLoader.cpp:461
#18 0x40c659d8 in nsDocLoaderImpl::OnStopRequest (this=0x8625c00, 
    aChannel=0x8626180, aCtxt=0x0, aStatus=0, aMsg=0x0) at nsDocLoader.cpp:437
#19 0x40bba402 in nsLoadGroup::RemoveChannel (this=0x8625c60, 
    channel=0x8626180, ctxt=0x0, status=0, errorMsg=0x0) at nsLoadGroup.cpp:535
#20 0x40bbb9fb in nsInputStreamChannel::OnStopRequest (this=0x8626180, 
    transportChannel=0x8626210, context=0x0, aStatus=0, aMsg=0x0)
    at nsInputStreamChannel.cpp:362
#21 0x40ba2e3f in nsOnStopRequestEvent::HandleEvent (this=0x8547908)
    at nsAsyncStreamListener.cpp:287
#22 0x40ba2537 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x86113e8)
    at nsAsyncStreamListener.cpp:97
#23 0x40191b5e in ?? () from /opt/raptor/ns/dist/bin/libxpcom.so
#24 0x40191a0c in ?? () from /opt/raptor/ns/dist/bin/libxpcom.so
#25 0x401936a0 in ?? () from /opt/raptor/ns/dist/bin/libxpcom.so
#26 0x406c1dd8 in ?? () from /opt/raptor/ns/dist/bin/libwidget_gtk.so
#27 0x406c1a2f in ?? () from /opt/raptor/ns/dist/bin/libwidget_gtk.so
#28 0x4086e23a in ?? () from /usr/local/lib/libglib-1.2.so.0
#29 0x4086f776 in ?? () from /usr/local/lib/libglib-1.2.so.0
#30 0x4086fd31 in ?? () from /usr/local/lib/libglib-1.2.so.0
#31 0x4086fea9 in ?? () from /usr/local/lib/libglib-1.2.so.0
#32 0x4079fada in ?? () from /usr/local/lib/libgtk-1.2.so.0
#33 0x406c23d7 in ?? () from /opt/raptor/ns/dist/bin/libwidget_gtk.so
#34 0x4061ca1d in ?? ()
   from /opt/raptor/ns/dist/bin/components/libnsappshell.so
#35 0x804e934 in main1 (argc=1, argv=0xbffffb14, splashScreen=0x0)
    at nsAppRunner.cpp:761
#36 0x804eec0 in main (argc=1, argv=0xbffffb14) at nsAppRunner.cpp:881
#37 0x40497cb3 in ?? () from /lib/libc.so.6

Comment 1

[travis]

Why do you think this is mine?

Comment 2

[Syd Logan]

robert, not quite sure who gets this.

Comment 3

[Robert Ginda]

rogerl is out this week, mccabe?

Comment 4

[Syd Logan]

Pavlov's backout of security in ns fixed this.

Comment 5

[Paul MacQuiddy]

late verification