330081 - crashes due to bad baseProto->BindingURI() [@ nsQueryInterface::operator()]

Status: RESOLVED WORKSFORME

(Core :: XBL, defect)

Description

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

The following stack is a topcrash (not at the top of the list) for Fx 1.5.0.1:

  	 nsQueryInterface::operator()   	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/build/nsCOMPtr.cpp, line 47]
    	nsXBLService::GetBinding 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xbl/src/nsXBLService.cpp, line 859]
    	nsXBLService::GetBinding 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xbl/src/nsXBLService.cpp, line 913]
    	nsXBLService::GetBinding 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xbl/src/nsXBLService.cpp, line 988]
    	nsXBLService::LoadBindings 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xbl/src/nsXBLService.cpp, line 590]
    	nsCSSFrameConstructor::ConstructFrameInternal 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp, line 7667]

...

    	 nsCSSFrameConstructor::ContentInserted   	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp, line 9151]
    	PresShell::InitialReflow 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 2829]
    	nsXULDocument::StartLayout 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp, line 2173]
    	nsXULDocument::ResumeWalk 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp, line 3201]
    	nsXULDocument::EndLoad 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp, line 746]
    	XULContentSinkImpl::DidBuildModel 	[c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULContentSink.cpp, line 408]


Comments vary widely; the only patterns I noticed are that a bunch mention gmail and a bunch mention printing to PDF.

Comment 1

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

This may be related to bug 334430.

Comment 2

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

See also bug 320045; perhaps this is a duplicate.

Comment 3

[Daniel Veditz [:dveditz]]

Looks like this is missing 1.8.0.3, try 1.8.0.4

Comment 4

[Daniel Veditz [:dveditz]]

Would love a fix for 1.8.0.x but won't block on it.

Comment 5

[Samuel Sidler (old account; do not CC)]

There are similar reports on trunk, but they appear to have trickled away...

http://crash-stats.mozilla.com/report/list?range_unit=weeks&version=Firefox%3A3.0b3pre&range_value=2&signature=nsQueryInterface%3A%3Aoperator%28%29%28nsID+const%26%2C+void%2A%2A%29

This is currently number 18 for Firefox 2.0.0.11.

Comment 6

[Jesse Ruderman]

These crashes are pretty much gone in Firefox 3.0+.