Closed Bug 327947 Opened 19 years ago Closed 9 years ago

crash viewing properties of image & copy url [@ 0x00000000 734451e1] [@ 0x00000000 - destroyTimerEvent]

Categories

(Core :: XPCOM, defect)

Product:
Core
Component:
XPCOM
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: bmo, Unassigned)

Details

(Keywords: crash)

Crash Data

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1 talkback: TB15388121M Stack Signature 0x00000000 734451e1 Product ID Firefox15 Build ID 2006011112 Trigger Time 2006-02-20 08:48:24.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module URL visited http://dev.mysql.com/downloads/mysql/4.1.html User Comments i hit ctrl-L, ctrl-C to copy the URL and boom :( Since Last Crash 125044 sec Total Uptime 1544788 sec Trigger Reason Access violation Source File, Line No. N/A Stack Trace 0x00000000 destroyTimerEvent [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 468] shdocvw.dll + 0x150c24 (0x778b0c24) nsHTMLFormElement::GetPositionInGroup [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 1548] 0x20982ddc Reproducible: Sometimes Steps to Reproduce:
WFM in Trunk Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060220 Firefox/1.6a1
When viewing the properties of an Image: Incident ID: TB15318176 Stack Signature 0x00000000 0fb950af Product ID FirefoxTrunk Build ID 2006021306 Trigger Time 2006-02-18 05:54:15.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module URL visited User Comments Crash on viewing the properties of an image. TBID: monks Since Last Crash 1579 sec Total Uptime 42237 sec Trigger Reason Access violation Source File, Line No. N/A Stack Trace 0x00000000 destroyTimerEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 478] 0x778b0c24 nsRDFPropertyTestNode::FilterInstantiations [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/xul/templates/src/nsRDFPropertyTestNode.cpp, line 310] 0x56ff6a06
Status: UNCONFIRMED → NEW
Ever confirmed: true
anyone have a better handle on reproducing this crash?
it has only happened once for me :( probably some rarely tickled race condition or something.
Summary: crash [@ 0x00000000 734451e1] [@ destroyTimerEvent] → crash viewing properties of image & copy url [@ 0x00000000 734451e1] [@ destroyTimerEvent]
think I might have just reproduced this, or something like it, by bringing up a talkback report page from this query http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=comments&match=contains&searchfor=print+preview&vendor=MozillaOrg&product=Firefox15&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=stack and then going as fast as I could to: mouse over/highlight incident id's in the left column right click select "copy link location" then move to another window with this page open https://bugzilla.mozilla.org/show_bug.cgi?id=241809 and then paste the links into the "additional comment" field with [ctrl]v after about the 4th paste I hit http://talkback-reports.mozilla.org/talkback/quicksearch.jsp?search=2&type=iid&id=16419571 0x00000000 destroyTimerEvent [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 468] shdocvw.dll + 0x150c24 (0x778b0c24) nsHTMLFormElement::DoSubmitOrReset [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 763] 0xf845d8d4
> after about the 4th paste I hit er, 4th iteration of the copy and paste sequence
i just hit it again using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1 ID:2006011112 from the my comment in TB17057445K == the last thing i did was right click on email address to copy it and alt-tab away by mistake before choosing the context menu option == anybody know why the talkback stack signature for this shows up as 0x00000000 ? it makes it difficult for people to find this bug when they view the crash report at talkback-public.mozilla.org :(
because it's calling a null function pointer. anyway, searching for it isn't hard today: QuickSearch Search By: ( ) Stack Signature (*) Stack (top 5 frames) ...
hi, timeless. thanks for the info. i was actually talking about searching bugzilla for existing bug reports from talkback-public, not searching talkback-public, itself. in talkback-public, you can click on the stack signature and automagically get a list of supposedly matching bugs. ufortunately, for the null function pointer call case, the query ends up being: https://bugzilla.mozilla.org/buglist.cgi?query_format=&short_desc_type=allwordssubstr&short_desc=0x00000000&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&keywords_type=allwords&keywords=&emailtype1=exact&email1=&emailtype2=exact&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Reuse+same+sort+as+last+time&field0-0-0=noop&type0-0-0=noop&value0-0-0= which boils down to: https://bugzilla.mozilla.org/buglist.cgi?short_desc_type=allwordssubstr&short_desc=0x00000000 currently, that gives you a list of 112 bugs... not terribly helpful :( i just noticed you can also click on the other frames in the stack, which is much more helpful in this case :)
oh, well, the syntax is supposed to be [@ frame0 - frame1] if a second frame is available and necessary to help people find things, and then searching is trivial.... this assumes that destroytimerevent is never the top frame. i don't know what to do w/ the hex signature bit after 0x00000000, you'd have to ask jay how useful it is.
Keywords: crash
Summary: crash viewing properties of image & copy url [@ 0x00000000 734451e1] [@ destroyTimerEvent] → crash viewing properties of image & copy url [@ 0x00000000 734451e1] [@ 0x00000000 - destroyTimerEvent]
i'm not sure whether this is a global top-crasher, but it now my top-crasher ;) TB17582460W Stack Signature 0x00000000 c0489b7a Product ID Firefox15 Build ID 2006011112 Trigger Time 2006-04-14 11:08:45.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module URL visited no URL User Comments clicked on a paypal link and boom Since Last Crash 46802 sec Total Uptime 3999638 sec Trigger Reason Access violation Source File, Line No. N/A Stack Trace 0x00000000 destroyTimerEvent [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 468] 0x778b0c24 nsHTMLFormElement::GetPositionInGroup [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 1548] 0x20982ddc
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1a2) Gecko/20060513 BonEcho/2.0a2 ID:2006051303 hmmm, got a similar crash: TB18819232H A search in Firefox 1.5 talkbacks for destroyTimerEvent in the top 5 frames reveal at least 500 crashes for the last 2 days. Dunno if bug 220959 could be of any help for reproducing?
mass reassigning to nobody.
Assignee: dougt → nobody
I tried for awhile and was unable to reproduce a crash using steps in comment 5. its probably time to close this bug.
I looked for anyone commenting about copy of paste actions in socorro for the month of sept. not too many reports. here are the signatures, links to reports and the comments. there are probably several good test cases here that we might want to include to protect against future regression, or dig deeper into any remainning copy and paste problems. 172:crashdata chofmann$ awk -F\t '$16 ~ /paste/ || $16 ~ /copy/' 200909* | sort | awk -F\t '{printf "%s\n%s\n%s\n\n",$1,$3,$16}' @0xd0f3360 http://crash-stats.mozilla.com/report/index/4715755a-f692-4574-8a1f-09bee2090901 I am not sure what happened, I was in the process of copying something and going back to mail so I could forward it when a pop-up came on that Firefox had crashed.. DPA_GetPtr http://crash-stats.mozilla.com/report/index/123d6d4e-e602-4283-9be4-46c432090906 Icouldn't copy a photo in an advertisment GetContext() http://crash-stats.mozilla.com/report/index/18f57383-af94-474c-afe0-db47b2090908 I was trying to add a photo to an online profile. In the File selection pop-up, I pasted a HTTP URL into the file location instead of selecting a file or folder. The browser cras hed when I hit OK (or whatever the button says). HIToolbox@0x2e9ba7 http://crash-stats.mozilla.com/report/index/ac099264-2a57-4cde-b0e7-43f022090902 While trying to copy the embed code for the Burning Man Video Stream FireFox Crashed: the Burning Man Spirit needs to be supported by Firefox though. NPSWF32.dll@0xda96b http://crash-stats.mozilla.com/report/index/f3f9c872-0100-435f-8901-c2bd12090903 2nd time in a row. 1st time laptop blue screened. Seems to be caused as I copy and paste a password from a password valut into a webpage RaiseException http://crash-stats.mozilla.com/report/index/dd21586f-cb74-49a8-b627-b9e682090903 I was trying paste more than 10 000 characters from my clipboard and it kind of crashed Firefox. RaiseException http://crash-stats.mozilla.com/report/index/a5cc7be6-a495-43b5-b8dd-2e94a2090908 cut and pasted in a link when it crashed RuleHash_IdTable_GetKey http://crash-stats.mozilla.com/report/index/c21b6a5d-1421-4ce4-b7ca-915492090908 When attempting to print comfirmation page of Online Payment TXU Energy, the printable copy came up, but I could not access a print command. I printed the screen, but it is so sm all I have to use a magnifying glass to see anything. Afterwards, there is just my desktop underneath. SaveAsRTF.api@0x237a http://crash-stats.mozilla.com/report/index/64834675-10b0-478d-b434-2d1612090831 I do not know if the report will contain that I was trying to copy text out of the acrobat page i was viewing. Anytime I would press Cntl-C or Right click Copy it would crash ver y odd. UserCallWinProcCheckWow http://crash-stats.mozilla.com/report/index/f9c5fa37-ebbe-462f-a305-3514a2090910 was reading an article at the following link: | | http://www.bayobserver.ca/index.php?post_id=346 | | did a copy of the link in the address bar and poof, firefox crashed js_Interpret http://crash-stats.mozilla.com/report/index/440d3a8a-de79-4cb8-89a9-abe392090902 I was copying a string of text into the reddit submission title box. nsBaseWidget::Destroy() http://crash-stats.mozilla.com/report/index/a4bf63d6-e4fd-40aa-89b6-1608b2090831 I was making a copy of email from Karen Sgrinia | I was in mail . nsBaseWidget::Destroy() http://crash-stats.mozilla.com/report/index/f3e43f21-6462-4bdf-982e-1b2142090902 Firefox keeps crashing when I try to make a copy? nsBaseWidget::Destroy() http://crash-stats.mozilla.com/report/index/dca67a59-e198-4e68-93e4-9ae942090904 Crashed when attempting to save a PDF copy of screen on Hotels.com nsEventReceiverSH::AddEventListenerHelper(JSContext*, JSObject*, unsigned int, long*, long*) http://crash-stats.mozilla.com/report/index/586d7b42-b829-4607-9c0b-aa2c22090904 I cannot use Firefox for my Mac, does not work even after downloading a new copy. nsPrefetchService::EnqueueNode(nsPrefetchNode*) http://crash-stats.mozilla.com/report/index/21f77138-6a1e-4519-9611-0c3052090906 Opened a second copy of firefox and they both dissapeared. nsScriptSecurityManager::doGetObjectPrincipal(JSObject*) http://crash-stats.mozilla.com/report/index/dd05df2d-8267-4809-ab36-42e5d2090909 "Tried to copy paste out of an open pdf document. | | The pdf document was displayed using the Add-on ""Firefox PDF Plugin for Mac OS X"" https://addons.mozilla.org/en-US/firefo x/addon/7518" objc_msgSend | HPSmartPrint@0xe1ef http://crash-stats.mozilla.com/report/index/b830975a-f4de-4244-a61e-02b112090911 FireFox crashed when I was copying in information to pay a bill. objc_msgSend | imgRequestProxy::OnStopFrame(gfxIImageFrame*) http://crash-stats.mozilla.com/report/index/f55d776a-b0ea-4882-9937-d80a12090901 copying text from a page
Keywords: testcase-wanted
Crash Signature: [@ 0x00000000 734451e1] [@ 0x00000000 - destroyTimerEvent]
Nothing actionable to go off in this bug, and destroyTimerEvent doesn't even exist anymore.
Status: NEW → RESOLVED
Crash Signature: [@ 0x00000000 734451e1] [@ 0x00000000 - destroyTimerEvent] → [@ 0x00000000 734451e1] [@ 0x00000000 - destroyTimerEvent]
Closed: 9 years ago
Keywords: testcase-wanted
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.