322143 - Firefox crashes when refreshing multiple tabs [@ Detecting]

Status: RESOLVED WORKSFORME

(Core :: XPConnect, defect)

Description

[inuyasha6332]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5

this happens on almost every web site, if you have multiple tabs open, for example, I will normally have about 15-25 tabs opened because I offer technical support online and I often help multiple people at one time.

if I right-click on the tab bar and click on reload all tabs, Firefox will hang and all network activity related to Firefox will stop.  And after that, Firefox will suddenly close itself after a few seconds (usually 15 to 20 seconds)

this problem also happens when you open multiple tabs, for example if you were doing a Google search edit then you use the mouse wheel and click on multiple links with the mouse wheel very quickly, Firefox will hang and then crash.

Reproducible: Always

Steps to Reproduce:
1.go to http://forums.techguy.org/
2.go to any of the forums
3. using the mouse wheen, open 15-25 of the topics and wait for them to load
4. after their finished loading, right-click on the tab bar and then click on reload all tabs

Actual Results:  
Firefox will begin to refresh all of the tabs and then it will suddenly stop
and after a short period of time, Firefox will just close itself without any warnings or anything.

Expected Results:  
what should the software have done instead?  the software should've just refreshed all the pages without crashing.

with avant browser, I am able to refresh 50 to a hundred tabs without the browser crashing

the browser will just hang for a few seconds and then continue to work normally.

this problem also happens to Firefox when there are no extensions or any settings changed.

about:buildconfig

Build platform
target
i586-pc-msvc

Build tools
Compiler 	Version 	Compiler flags
$(CYGWIN_WRAPPER) cl 	12.00.8804 	-TC -nologo -W3 -Gy -Fd$(PDBFILE)
$(CYGWIN_WRAPPER) cl 	12.00.8804 	-TP -nologo -W3 -Gy -Fd$(PDBFILE)

Configure arguments
--enable-application=browser --enable-update-channel=release --enable-optimize --disable-debug --disable-tests --enable-static --disable-shared --enable-official-branding --enable-svg --enable-canvas --enable-update-packaging

Comment 1

[Ria Klaassen (not reading all bugmail)]

WFM. Although it takes some seconds to reload 25 sites at the same time.
Screenshot of the work in process: http://img.photobucket.com/albums/v337/tamarix/firefox/forum.png

Do you really get a crash? In that case could you reinstall Firefox with talkback (choose Custom install > Quality Feedback Agent) and provide a talkback ID for the crash?

Comment 2

[inuyasha6332]

it usally happens when loading many tabs there other sites that it happens on more but i think the rules here wont allow me to post torrent sites

the crash basically happens on websites that will usally take a long time in general to liad

so it a site  normally loads slow for just 1 page and you have around 25 links from that site opened in different tabs then refresh them, firefox will hang and then crash.

ill install that talkback thing for the crash info.

but usally when this happens, i will have a lot of tabs opened  most of the time the first and second row of tabs will be filled up (i am using tabmix plus) 

Comment 3

[crf]

I tried with 28 tabs all to different websites, but the program didn't crash, or even go unresponsive, when I reloaded them all at once. 
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.9a1) Gecko/20051230 Firefox/1.6a1

--
None of the open tabs were from the forums.techguy.org site though. Maybe it is something special about that site, or having all the tabs from one shared domain, that is making the browser crash for the reporter. Perhaps there is also something to do with windows XP and its limitations.
 

Comment 4

[inuyasha6332]

(In reply to comment #3)
> I tried with 28 tabs all to different websites, but the program didn't crash,
> or even go unresponsive, when I reloaded them all at once. 
> Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.9a1) Gecko/20051230 Firefox/1.6a1
> 
> --
> None of the open tabs were from the forums.techguy.org site though. Maybe it is
> something special about that site, or having all the tabs from one shared
> domain, that is making the browser crash for the reporter. Perhaps there is
> also something to do with windows XP and its limitations.
> 
> 



i used the quality feedback thing and it sent in a report,  what do i do now?

it didnt give me a log of what it collected about the crash

Comment 5

[Adam Guthrie]

[e-mail], open up talkback.exe which should be in Program Files/Mozilla Firefox/extensions/[e-mail] or thereabouts, then right click to copy the ID.

Comment 6

[inuyasha6332]

(In reply to comment #5)
> [e-mail], open up talkback.exe which should be in Program
> Files/Mozilla Firefox/extensions/[e-mail] or thereabouts, then
> right click to copy the ID.
> 

TB13513051W   thats the id that it had

Comment 7

[Adam Guthrie]

Incident ID: 13513051
Stack Signature	Detecting 89686575
Product ID	Firefox15
Build ID	2005111116
Trigger Time	2006-01-02 18:46:05.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	js3250.dll + (0002dc1c)
URL visited	
User Comments	
Since Last Crash	12016 sec
Total Uptime	12016 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 2537
Stack Trace 	
Detecting  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 2537]
js_LookupProperty  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 2580]
js_GetProperty  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 2865]
nsXPCWrappedJSClass::CallQueryInterfaceOnJSObject  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 243]
nsXPCWrappedJSClass::DelegatedQueryInterface  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 591]
nsXPCWrappedJS::QueryInterface  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 97]
nsEventListenerManager::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1779]
nsGlobalWindow::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 1546]
nsXULDocument::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp, line 1239]
nsXULElement::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2135]
nsXULElement::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2132]
nsXULElement::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2132]
nsXULElement::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2132]
nsXULElement::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2132]
nsXULElement::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2132]
nsEventStateManager::DispatchMouseEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 2628]
nsEventStateManager::NotifyMouseOut  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 2697]
nsEventStateManager::NotifyMouseOver  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 2747]
nsEventStateManager::GenerateMouseEnterExit  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 2786]
nsEventStateManager::PreHandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 523]
PresShell::HandleEventInternal  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6361]
PresShell::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6203]
nsViewManager::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/view/src/nsViewManager.cpp, line 2559]
nsViewManager::DispatchEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/view/src/nsViewManager.cpp, line 2246]
HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1252]
nsWindow::DispatchMouseEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5982]
ChildWindow::DispatchMouseEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 6233]
nsWindow::WindowProc  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1434]
USER32.dll + 0x8734 (0x77d48734)
USER32.dll + 0x8816 (0x77d48816)
USER32.dll + 0x89cd (0x77d489cd)
USER32.dll + 0x8a10 (0x77d48a10)
nsAppShell::Run  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 151]
main  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16d4f (0x7c816d4f)

Comment 8

[inuyasha6332]

hmm long log, is there a way to fix it?

Comment 9

[inuyasha6332]

(In reply to comment #8)
> hmm long log, is there a way to fix it?
> 

firefox crashed again, another report was sent in, heres the id number

TB13656439E

Comment 10

[inuyasha6332]

TB13657776M

second time today

something is wrong

please i beg everyone, please help

Comment 11

[Brendan Eich [:brendan]]

(In reply to comment #9)
> (In reply to comment #8)
> > hmm long log, is there a way to fix it?
> > 
> 
> firefox crashed again, another report was sent in, heres the id number
> 
> TB13656439E

Here's the top stack, with JS stuff not of interest edited out:

copy_string  [../../../dist/include/string/nsAlgorithm.h, line 97]
XPCConvert::NativeData2JS  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 396]
XPCWrappedNative::CallMethod  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2228]
XPC_WN_GetterSetter  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1476]

[calling a JS method, which is scripted, which calls a native getter]

nsXPCWrappedJSClass::CallMethod  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 1369]
nsXPCWrappedJS::CallMethod  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 462]
SharedStub  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp, line 147]
nsContentPolicy::CheckPolicy  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/base/src/nsContentPolicy.cpp, line 219]
nsContentPolicy::ShouldLoad  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/base/src/nsContentPolicy.cpp, line 282]
NS_CheckContentLoadPolicy  [../../../dist/include/content/nsContentPolicyUtils.h, line 165]
nsContentUtils::CanLoadImage  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/base/src/nsContentUtils.cpp, line 1850]
nsImageLoadingContent::ImageURIChanged  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/base/src/nsImageLoadingContent.cpp, line 449]
nsHTMLImageElement::BindToTree  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLImageElement.cpp, line 604]
nsGenericElement::AppendChildTo  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 2803]
SinkContext::AddLeaf  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 1473]

[sinking content from the HTML parser]

bz, jst, mrbkap, peterv, sicking: does this look known?

(In reply to comment #10)
> TB13657776M
> 
> second time today
> 
> something is wrong

This is a different stack:

nsSVGLinearGradientElement::GetY2  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/svg/content/src/nsSVGGradientElement.cpp, line 224]
nsHTMLInputElement::SetFocus  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLInputElement.cpp, line 1089]
nsEventStateManager::ChangeFocusWith  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 3081]
nsEventStateManager::PostHandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 1976]

So a different bug, in all probability.  Cc'ing tor and jwatt.

> please i beg everyone, please help

Trying to help.  You should file a separate bug for each talkback where the stacks don't seem related.  If you can't tell what's related, filing here is ok at first.  We'll get things sorted out.

/be

Comment 12

[Brendan Eich [:brendan]]

The first talkback identifier in this bug has the Detecting signature at top of stack, but the last two talkbacks are unrelated to that as well as to each other.

Are there three bugs at work here?  If no one else is seeing these, and there's no reproducibility (is there?), then we should start looking for funny extensions and such.  [e-mail], what extensions do you have installed?

/be

Comment 13

[inuyasha6332]

(In reply to comment #12)
> The first talkback identifier in this bug has the Detecting signature at top of
> stack, but the last two talkbacks are unrelated to that as well as to each
> other.
> 
> Are there three bugs at work here?  If no one else is seeing these, and there's
> no reproducibility (is there?), then we should start looking for funny
> extensions and such.  [e-mail], what extensions do you have
> installed?
> 
> /be
> 

ok, i checked it and here are all of the extenshins i have

heres a screenshot

http://img378.imageshack.us/img378/5804/untitled10qz.jpg

by the way, about 5 minutes before i posted saw your e-mail another crash happened again

TB13660536X

Comment 14

[Brendan Eich [:brendan]]

(In reply to comment #13)
> ok, i checked it and here are all of the extenshins i have
> 
> heres a screenshot
> 
> http://img378.imageshack.us/img378/5804/untitled10qz.jpg

Start disabling them one by one (right-mouse click over each, select disable from the context menu, restart).

If you get to a much stabler state, please say which was the last extension disabled.

> by the way, about 5 minutes before i posted saw your e-mail another crash
> happened again
> 
> TB13660536X 

Yet another one.  Cc'ing dbaron.

0x028594fc
nsRuleNode::~nsRuleNode  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/style/nsRuleNode.cpp, line 433]
DocumentViewerImpl::Destroy  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsDocumentViewer.cpp, line 1438]
nsSHistory::EvictWindowContentViewers  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/xpfe/components/shistory/src/nsSHistory.cpp, line 809]
nsSHistory::EvictContentViewers  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/xpfe/components/shistory/src/nsSHistory.cpp, line 645]
nsPresContext::EnsureVisible  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresContext.cpp, line 1294]
PresShell::UnsuppressAndInvalidate  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 5022]
PresShell::ProcessReflowCommands  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6938]
ReflowEvent::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6696]

/be

Comment 15

[Boris Zbarsky [:bzbarsky]]

> bz, jst, mrbkap, peterv, sicking: does this look known?

Not to me...

Comment 16

[Asaf Romano (gone)]

This affects the CallingID-firefox beta, after opening way-too-many browser windows.

    script = cx->fp->script;
"script" is nullish.
    for (endpc = script->code + script->length; pc < endpc; pc++)

Comment 17

[Brendan Eich [:brendan]]

(In reply to comment #16)
> This affects the CallingID-firefox beta, after opening way-too-many browser
> windows.
> 
>     script = cx->fp->script;
> "script" is nullish.

Then cx is dead.  What's the full stack?  This is not a bug in Detecting or its (static, all in jsobj.c) callers.  It's a bug in the JS API user up the stack somewhere.

/be

Comment 18

[Philip Withnall (unavailable)]

*** Bug 334890 has been marked as a duplicate of this bug. ***

Comment 19

[Marc Bejarano]

dupe of bug 319533 ?

Comment 21

[Henrik Skupin [:whimboo][⌚️UTC+2]]

(In reply to comment #19)
> dupe of bug 319533 ?

No. See bug 319533 comment 21.

Comment 22

[Wayne Mery (:wsmwk)]

Allan, do you still see this "always" when using FF3?

Comment 23

[Allan Hobbs]

Hi Wayne

This issue has been resolved.

Thanks
Allan

Comment 24

[Wayne Mery (:wsmwk)]

Henrik any idea what fixed this?

Comment 25

[Henrik Skupin [:whimboo][⌚️UTC+2]]

No, but one question to Allen. You've said entering "super" crashes the browser. Where have you entered this word? Within the location bar, search bar, find bar,...)?

Comment 26

[Wayne Mery (:wsmwk)]

=> WFM per comment 23