Closed Bug 318121 Opened 19 years ago Closed 16 years ago

crash [@ js_FindConstructor 08e2b3f5]

Categories

(Core :: XBL, defect, P5)

1.8 Branch
x86
Windows XP
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: tonymec, Assigned: sicking)

References

Details

(Keywords: crash)

Crash Data

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051128 Firefox/1.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051128 Firefox/1.5

see Talkback incident TB12371153K


Reproducible: Didn't try

Steps to Reproduce:

Actual Results:  
crash

Expected Results:  
no crash

Sorry, I have no idea was caused this. I had switched to another application, waiting for Fx to finish loading some link (can't remember which one) and suddenly DrWatson and Talkback popped up.
Version: unspecified → 1.5 Branch
Incident ID: 12371153
Stack Signature	js_FindConstructor 08e2b3f5
Product ID	Firefox15
Build ID	2005112803
Trigger Time	2005-11-28 21:30:32.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	js3250.dll + (0002ce8d)
URL visited	
User Comments	
Since Last Crash	55862 sec
Total Uptime	55862 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 2058
Stack Trace 	
js_FindConstructor  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 2058]
GetClassPrototype  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 3802]
js_NewObject  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 1950]
js_NewFunction  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsfun.c, line 1980]
JS_CompileUCFunctionForPrincipals  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsapi.c, line 3892]
nsJSContext::CompileEventHandler  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1319]
nsXBLPrototypeHandler::ExecuteHandler  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xbl/src/nsXBLPrototypeHandler.cpp, line 486]
nsXBLEventHandler::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xbl/src/nsXBLEventHandler.cpp, line 86]
nsEventListenerManager::HandleEventSubType  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1685]
nsEventListenerManager::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1786]
nsXULElement::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2153]
PresShell::HandleDOMEventWithTarget  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6466]
nsPopupSetFrame::OnCreate  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsPopupSetFrame.cpp, line 600]
nsPopupSetFrame::ShowPopup  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsPopupSetFrame.cpp, line 346]
nsPopupBoxObject::ShowPopup  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsPopupBoxObject.cpp, line 188]
nsXULTooltipListener::LaunchTooltip  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsXULTooltipListener.cpp, line 518]
nsXULTooltipListener::ShowTooltip  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsXULTooltipListener.cpp, line 408]
nsTimerImpl::Fire  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 394]
nsAppStartup::Run  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 151]
main  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16d4f (0x7c816d4f)
Keywords: crash
Summary: crash [@js_FindConstructor 08e2b3f5] → crash [@ js_FindConstructor 08e2b3f5]
Component: General → JavaScript Engine
Product: Firefox → Core
Version: 1.5 Branch → 1.8 Branch
*** Bug 319525 has been marked as a duplicate of this bug. ***
There are 5 total crashes with this identical stack. 4 on FF1.5 final and on from 20051128, all on Windows. On on fark and one on gmail. I scanned fark and clicked around, but couldn't crash.
*** Bug 315934 has been marked as a duplicate of this bug. ***
Flags: testcase-
Assignee: nobody → general
QA Contact: general → general
This smells like it's more likely to be an XBL-doesn't-manage-GC-well bug than a core JS engine bug, so I'm reassigning there, though this bug does not fill me with hope.
Assignee: general → general
Component: JavaScript Engine → XBL
QA Contact: general → ian
We could try changing CompileEventHandler to root more like EvaluateStringWithValue, but I have no idea whether that would help here... and I'd rather not touch this code until markh lands.
bz in comment #6:
> We could try changing CompileEventHandler to root more like
> EvaluateStringWithValue, but I have no idea whether that would help here... and
> I'd rather not touch this code until markh lands.

bz, markh being __________ ?
> bz, markh being __________ ?

Bug 255942.
Flags: blocking1.9?
Flags: blocking1.8.1.5?
Flags: blocking1.8.0.13?
Ok, I'll have a looksee at this
Assignee: xbl → jonas
Flags: in-testsuite?
Flags: in-testsuite-
Flags: blocking1.9?
Flags: blocking1.9+
Moving to the "wanted" list, but hasn't blocked previous releases.
Flags: wanted1.8.1.x+
Flags: wanted1.8.0.x+
Flags: blocking1.8.1.5?
Flags: blocking1.8.0.13?
5 crashes on FF 1.5.0.12 talkback
0 crashes on FF 2 talkback

fwiw, bug 322056 has top of stack js_FindConstructor, but rest of its stack looks different.  no other bugs mention js_FindConstructor in summary
Moving off list
Flags: blocking1.9+ → blocking1.9-
No-one ever confirmed? ;)
Status: UNCONFIRMED → NEW
Ever confirmed: true
From a check on Talkback, js_FindConstructor is listed 113 times in Firefox15 and Thunderbird15 combined (twice on MacOSX, twice on LinuxIntel, all the rest on Win32), not a single time for anything else. Shall we assume that "something" fixed it when going to Fx2/Tb2 and resolve this WORKSFORME? Or can someone identify "what" fixed it, mention it here, and resolve this FIXED?
right. none are thunderbird2. Or firefox2. And none in crash-stats (trunk)
so closing WFM.
unless someone wants to go dumpster diving
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ js_FindConstructor 08e2b3f5]
You need to log in before you can comment on or make changes to this bug.