352972 - "Assertion failure: !OBJ_GET_PROTO(cx, ctor)" when installing extension

Status: RESOLVED DUPLICATE of bug 352604

(Core :: JavaScript Engine, defect)

Description

[Jürgen Herz]

User-Agent:       Mozilla/5.0 (X11; U; FreeBSD i386; de-DE; rv:1.9a1) Gecko/20060916 SeaMonkey/1.5a
Build Identifier: Mozilla/5.0 (X11; U; FreeBSD i386; de-DE; rv:1.9a1) Gecko/20060916 SeaMonkey/1.5a

I've made a debug build of Seamonkey from CVS (Trunk from 2006091615). Upon installing an extension (tested a hand full) the application closes. After clicking install it takes a few seconds with the install dialogue open.
The error is 
Assertion failure: !OBJ_GET_PROTO(cx, ctor), at /usr/home/jrg/mozilla/js/src/jsapi.c:2284
Trace/BPT trap (core dumped)

Reproducible: Always

Steps to Reproduce:
1. Build Seamonkey
2. Try installing an extension

Actual Results:  
Seamonkey closes with above error.

Expected Results:  
Seamonkey survives, extension gets installed.

Comment 1

[Brendan Eich [:brendan]]

Can you recover a stack backtrace?  Thanks,

/be

Comment 2

[Jürgen Herz]

(In reply to comment #1)
> Can you recover a stack backtrace?  Thanks,

That's what I wasn't able to do. I'm not yet good in debugging, but if you could give me a pointer to a howto, I'll try.
I ran SM in gdb but get "no stack" after the crash (had SM compiled with --enable-debug --disable-optimize). What else do I need?

Comment 3

[Andrew Schultz]

Attachment: stacktrace

This happens in seamonkey for any extension with a non-empty install.js.

Comment 4

[timeless]

((js3250!JSClass*)($!obj->slots[2] & ~1))->name
0x05e1f1e0 "Install"

$!cx->requestDepth
1

((js3250!JSClass*)(((js3250!JSObject*)($!obj->slots[0]))->slots[2] & ~1))->name
0x100ff03c "Object"

(js3250!JSObject*)($!obj->slots[1])
0x00000000 struct JSObject *

Comment 5

[Jacob Bachmeyer]

Attachment: a dump of the text printed to the terminal as the bug happens

I ran into this with a debugging build of release 1.1.1 I had made in an effort to investigate a different bug I had run across.

Comment 6

[Brian Crowder]

Is this one still happening?

Comment 7

[max baker]

I'm still seeing this with SM 1.1.4 while trying to install adblock plus (https://addons.mozilla.org/en-US/firefox/addon/1865)

Assertion failure: !OBJ_GET_PROTO(cx, ctor), at /maxb/seamonkey/seamonkey_1.1.4/js/src/jsapi.c:2219

If someone can point me to a FAQ on producing stacktraces, I would love to oblige.

Comment 8

[max baker]

Got it!   

It's only present when --enable-debug is on.  I had turned debug on to file another bug.  Once i added "ac_add_options --disable-debug" the problem went away.

Seems to be related to Bug 352604 (https://bugzilla.mozilla.org/show_bug.cgi?id=352604) which is titled "The dreaded MLM assertion!"

-m

Comment 9

[Andrew Schultz]

Attachment: test extension

> This happens in seamonkey for any extension with a non-empty install.js.

This also happens in firefox (and seamonkey trunk which now supports install.rdf) if the extension only has install.js.  The attached xpi triggers this bug (in firefox and seamonkey) and just has an install.js with a single line:

var foo;