355857 - Addon Manager Drag and Drop Crash [JS_GetPrivate 85cd4a3c]

Status: RESOLVED WORKSFORME

(Toolkit :: Add-ons Manager, defect)

Description

[Oliver Saier]

User-Agent:       Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061007 BonEcho/2.0

Drop at least 1 theme and 2 extensions (whichever) from the Desktop to the addon manager (extension tab) and my Bon echo will invariably crash. No crash in Linux though.
TB24250168H

Reproducible: Always

Comment 1

[Adam Guthrie]

Incident ID: 24250168
Stack Signature	JS_GetPrivate 85cd4a3c
Product ID	Firefox2
Build ID	2006100703
Trigger Time	2006-10-07 06:43:07.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	js3250.dll + (00002fa7)
URL visited	
User Comments	drag and drop 2 extensions and one theme to the extension manager.
Since Last Crash	94 sec
Total Uptime	94 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsapi.c, line 2359
Stack Trace 	
JS_GetPrivate  [mozilla/js/src/jsapi.c, line 2359]
nsScriptSecurityManager::GetFramePrincipal  [mozilla/caps/src/nsScriptSecurityManager.cpp, line 2046]
nsScriptSecurityManager::GetPrincipalAndFrame  [mozilla/caps/src/nsScriptSecurityManager.cpp, line 2077]
nsScriptSecurityManager::GetSubjectPrincipal  [mozilla/caps/src/nsScriptSecurityManager.cpp, line 2119]
nsScriptSecurityManager::CheckPropertyAccessImpl  [mozilla/caps/src/nsScriptSecurityManager.cpp, line 615]
nsScriptSecurityManager::CheckPropertyAccess  [mozilla/caps/src/nsScriptSecurityManager.cpp, line 495]
nsScriptSecurityManager::CheckObjectAccess  [mozilla/caps/src/nsScriptSecurityManager.cpp, line 479]
js_InternalGetOrSet  [mozilla/js/src/jsinterp.c, line 1523]
js_GetProperty  [mozilla/js/src/jsobj.c, line 3439]
JS_GetProperty  [mozilla/js/src/jsapi.c, line 2915]
nsXPCWrappedJSClass::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 1394]
nsXPCWrappedJS::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 468]
SharedStub  [mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp, line 147]
nsXULElement::IsFocusable  [mozilla/content/xul/content/src/nsXULElement.cpp, line 645]
nsIFrame::IsFocusable  [mozilla/layout/generic/nsFrame.cpp, line 4783]
nsEventStateManager::PostHandleEvent  [mozilla/content/events/src/nsEventStateManager.cpp, line 2118]
PresShell::HandleEventInternal  [mozilla/layout/base/nsPresShell.cpp, line 6497]
PresShell::HandleEvent  [mozilla/layout/base/nsPresShell.cpp, line 6261]
nsViewManager::HandleEvent  [mozilla/view/src/nsViewManager.cpp, line 2559]
nsViewManager::DispatchEvent  [mozilla/view/src/nsViewManager.cpp, line 2246]
HandleEvent  [mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 1377]
nsWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6336]
ChildWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6583]
nsWindow::WindowProc  [mozilla/widget/src/windows/nsWindow.cpp, line 1565]
USER32.dll + 0x8734 (0x77d48734)
USER32.dll + 0x8816 (0x77d48816)
USER32.dll + 0x89cd (0x77d489cd)
USER32.dll + 0x8a10 (0x77d48a10)
nsAppShell::Run  [mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 2

[Oliver Saier]

Renaming so the stack signature isn't cut.
BTW Minefield 10/7 doesn't crash.

Comment 3

[Robin Monks]

This bug is an apparent duplicate of Bugzilla bug 269568 because:
A) Stack trace of two bugs is similar and/or identical
B) Steps to reproduce of both bugs is similar and/or identical and/or the steps to reproduce of this bug is a portion of the steps to reproduce of aforementioned bug.
C) The aforementioned bug is older than this bug and has more activity.
D) This bug meets the minimum requirements to be marked as a duplicate under http://www.mozilla.org/quality/help/screening-duplicates.html.

Bug Reporter, if you feel this was done in error PLEASE REOPEN!  We're only human here and bugs occasionally are mismarked.

(This duplication message automatically generated by BugSpeak)

*** This bug has been marked as a duplicate of 269568 ***

Comment 4

[Oliver Saier]

Reopening. Bug 269568 is only seen in Linux and was filled in 2004 whereas this one is only seen in Windows and is relatively new a regression.

Comment 5

[Robin Monks]

OK, thanks Oliver!  Removing the DUPE note so this bug won't be further prodded.

Robin

Comment 6

[Jackie Liu]

I can reproduce in "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061014 BonEcho/2.0". 

Comment 7

[Jackie Liu]

(In reply to comment #6)
> I can reproduce in "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1)
> Gecko/20061014 BonEcho/2.0". 
> 

Doesn't crash in Trunk, but seems to be quite defunct.  

Comment 8

[Jackie Liu]

I'm tempted to set this as blocking-firefox2.  Please voice your opinion...

Comment 9

[Robert Strong (they/them - no direct email)]

I highly suspect this is happening before it ever makes it back to the add-ons mgr. from xpinstall. There are also several other crashes at JS_GetPrivate which this could be a duplicate of.

Comment 10

[Oliver Saier]

Can't reproduce with Fx 3.0.1 on Vista Business SP1, and still OK on Linux.