344553 - Thunderbird crashes on shutdown after installing Image Zoom [@ thunderbird-bin + 0x402] [@ js_FinalizeStringRT]

Status: RESOLVED DUPLICATE of bug 322131

(Core :: General, defect)

Description

[Adam Guthrie]

version 1.5.0.5 (20060706)

Steps to reproduce:
1. Download and install the Image Zoom extension from Add-ons: https://addons.mozilla.org/thunderbird/139/.
2. Close Thunderbird to complete the installation.

This is where I crash. glibc seems like it actually detects the crash and stops the program. I get

*** glibc detected *** ./thunderbird-bin: munmap_chunk(): invalid pointer: 0x0a993288 ***

followed by a stack printed out to the console. Interestingly enough I cannot get this crash on my Ubuntu box. Haven't checked what version of libc it's running, though.

Incident ID: 20910878
Stack Signature	thunderbird-bin + 0x402 (0xb7fa4402) 6a767db3
Product ID	Thunderbird15
Build ID	2006070616
Trigger Time	2006-07-13 10:06:37.0
Platform	LinuxIntel
Operating System	Linux 2.6.15-1.2054_FC5
Module	thunderbird-bin + (00000402)
URL visited	
User Comments	ispiked - crash on shutdown installing Image Zoom
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGIOT: Abort or IOT Instruction: (signal 6)
Source File, Line No.	N/A
Stack Trace 	
thunderbird-bin + 0x402 (0xb7fa4402)
libc.so.6 + 0x296e3 (0x006bf6e3)
libc.so.6 + 0x5ca1b (0x006f2a1b)
libc.so.6 + 0x6751f (0x006fd51f)
js_FinalizeStringRT()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/js/src/jsstr.c, line 2725]
js_atom_uninterner()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/js/src/jsatom.c, line 403]
JS_HashTableEnumerateEntries()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/js/src/jshash.c, line 363]
js_FinishAtomState()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/js/src/jsatom.c, line 428]
JS_Finish()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/js/src/jsapi.c, line 738]
nsJSRuntimeServiceImpl::~nsJSRuntimeServiceImpl()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/js/src/xpconnect/src/xpcruntimesvc.cpp, line 94]
nsJSRuntimeServiceImpl::Release()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/js/src/xpconnect/src/xpcruntimesvc.cpp, line 101]
XPCJSRuntime::~XPCJSRuntime()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/js/src/xpconnect/src/xpcjsruntime.cpp, line 707]
nsXPConnect::~nsXPConnect()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 154]
nsXPConnect::Release()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 48]
nsScriptSecurityManager::Shutdown()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/caps/src/nsScriptSecurityManager.cpp, line 3055]
nsGenericModule::Shutdown()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/xpcom/build/nsGenericFactory.cpp, line 339]
nsGenericModule::~nsGenericModule()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/xpcom/build/nsGenericFactory.cpp, line 242]
nsGenericModule::Release()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/xpcom/build/nsGenericFactory.cpp, line 244]
nsCOMPtr_base::assign_with_AddRef()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/xpcom/build/nsCOMPtr.cpp, line 90]
info_ClearEntry()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/xpcom/components/nsStaticComponentLoader.cpp, line 101]
PL_DHashTableFinish()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/xpcom/build/pldhash.c, line 345]
nsStaticComponentLoader::Release()  [/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/xpcom/components/nsStaticComponentLoader.cpp, line 82]
nsComponentManagerImpl::Shutdown()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/xpcom/components/nsComponentManager.cpp, line 923]
NS_ShutdownXPCOM_P()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/xpcom/build/nsXPComInit.cpp, line 854]
ScopedXPCOMStartup::~ScopedXPCOMStartup()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/toolkit/xre/nsAppRunner.cpp, line 554]
XRE_main()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/toolkit/xre/nsAppRunner.cpp, line 2414]
main()  [/builds/tinderbox/Tb-Mozilla1.8.0/Linux_2.4.18-14_Depend/mozilla/mail/app/nsMailApp.cpp, line 63]
libc.so.6 + 0x157e4 (0x006ab7e4)

Comment 1

[Adam Guthrie]

Bug 294372 and bug 322131 have similar stacks.

Comment 2

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** This bug has been marked as a duplicate of 322131 ***