360855 - Google Notebook crashes when used with LiveHTTPHeaders [@ nsDOMClassInfo::PreCreate]

Status: RESOLVED DUPLICATE of bug 358755

(Core :: DOM: Core & HTML, defect)

Description

[Wladimir Palant]

Steps to reproduce this crash:
1. Install Google Notebook extension from http://www.google.com/tools/firefox/
2. Install LiveHTTPHeaders 0.13 from http://livehttpheaders.mozdev.org/installation.html (version 0.13.1 currently isn't available for some reason)
3. Restart your browser
4. Right-click on the page (any page) and choose "Note this" from the context menu.
5. Dismiss the appearing Google Notebook box and choose "Note this" from the context menu again.
6. Observe a crash.

I can see this in Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/2006111503 BonEcho/2.0 and Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/2006111504. Note that the extensions had to be made compatible for the latter. Official Firefox 2 release seems to be unaffected so that this is a recent regression.

Talkbacks:
TB26062474X
TB26064438E

Comment 1

[Adam Guthrie]

Want to see if this regressed between 2006-11-08 and 2006-11-09 on 1.8.1 (when the patch for bug 355161 was checked in)? Please report your findings to bug 358755.

Incident ID: 26062474
Stack Signature	nsDOMClassInfo::PreCreate 6437172e
Product ID	Firefox2
Build ID	2006111503
Trigger Time	2006-11-15 16:00:16.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (001f53f9)
URL visited	
User Comments	Using Google Notebook extension, clicking "Note this" for the second time in row constantly crashes. Adblock Plus 0.7.2.2 was installed as well, might have an influence on this.
Since Last Crash	16 sec
Total Uptime	528 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/dom/src/base/nsDOMClassInfo.cpp, line 3186
Stack Trace 	
nsDOMClassInfo::PreCreate  [mozilla/dom/src/base/nsDOMClassInfo.cpp, line 3186]
XPCWrappedNative::GetNewOrUsed  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 324]
XPCConvert::NativeInterface2JSObject  [mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 1156]
XPCConvert::NativeData2JS  [mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 473]
XPCWrappedNative::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2259]
XPC_WN_GetterSetter  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1487]
js_Invoke  [mozilla/js/src/jsinterp.c, line 1377]
js_InternalInvoke  [mozilla/js/src/jsinterp.c, line 1471]
js_InternalGetOrSet  [mozilla/js/src/jsinterp.c, line 1531]
js_GetProperty  [mozilla/js/src/jsobj.c, line 3476]
js_Interpret  [mozilla/js/src/jsinterp.c, line 3857]
js_Invoke  [mozilla/js/src/jsinterp.c, line 1396]
nsXPCWrappedJSClass::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 1415]
nsXPCWrappedJS::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 468]
SharedStub  [mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp, line 147]
nsDocLoader::FireOnStateChange  [mozilla/uriloader/base/nsDocLoader.cpp, line 1210]
nsDocLoader::doStopDocumentLoad  [mozilla/uriloader/base/nsDocLoader.cpp, line 844]
nsDocLoader::OnStopRequest  [mozilla/uriloader/base/nsDocLoader.cpp, line 665]
nsLoadGroup::RemoveRequest  [mozilla/netwerk/base/src/nsLoadGroup.cpp, line 732]
nsLoadGroup::Cancel  [mozilla/netwerk/base/src/nsLoadGroup.cpp, line 400]
nsDocLoader::Stop  [mozilla/uriloader/base/nsDocLoader.cpp, line 312]
nsDocShell::Stop  [mozilla/docshell/base/nsDocShell.cpp, line 3267]
nsDocShell::InternalLoad  [mozilla/docshell/base/nsDocShell.cpp, line 6638]
nsDocShell::LoadURI  [mozilla/docshell/base/nsDocShell.cpp, line 830]
nsFrameLoader::LoadFrame  [mozilla/content/base/src/nsFrameLoader.cpp, line 189]
nsSubDocumentFrame::ReloadURL  [mozilla/layout/generic/nsFrameFrame.cpp, line 814]
nsCSSFrameConstructor::AttributeChanged  [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 10710]
PresShell::AttributeChanged  [mozilla/layout/base/nsPresShell.cpp, line 5493]
nsXULElement::SetAttrAndNotify  [mozilla/content/xul/content/src/nsXULElement.cpp, line 1518]
nsXULElement::SetAttr  [mozilla/content/xul/content/src/nsXULElement.cpp, line 1439]
nsGenericElement::SetAttribute  [mozilla/content/base/src/nsGenericElement.cpp, line 1498]
XPTC_InvokeByIndex  [mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, line 102]
XPCWrappedNative::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2169]
XPC_WN_CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455]
js_Invoke  [mozilla/js/src/jsinterp.c, line 1377]
js_Interpret  [mozilla/js/src/jsinterp.c, line 4121]
js_Invoke  [mozilla/js/src/jsinterp.c, line 1396]
js_InternalInvoke  [mozilla/js/src/jsinterp.c, line 1471]
JS_CallFunctionValue  [mozilla/js/src/jsapi.c, line 4419]
nsJSContext::CallEventHandler  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1493]
nsJSEventListener::HandleEvent  [mozilla/dom/src/events/nsJSEventListener.cpp, line 195]
nsEventListenerManager::HandleEventSubType  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1655]
nsEventListenerManager::HandleEvent  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1762]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2228]
PresShell::HandleDOMEventWithTarget  [mozilla/layout/base/nsPresShell.cpp, line 6524]
nsMenuFrame::Execute  [mozilla/layout/xul/base/src/nsMenuFrame.cpp, line 1763]
nsMenuFrame::HandleEvent  [mozilla/layout/xul/base/src/nsMenuFrame.cpp, line 522]
PresShell::HandleEventInternal  [mozilla/layout/base/nsPresShell.cpp, line 6466]
PresShell::HandleEvent  [mozilla/layout/base/nsPresShell.cpp, line 6261]
nsViewManager::HandleEvent  [mozilla/view/src/nsViewManager.cpp, line 2559]
nsViewManager::DispatchEvent  [mozilla/view/src/nsViewManager.cpp, line 2246]
HandleEvent  [mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 1377]
nsWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6336]
ChildWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6583]
nsWindow::WindowProc  [mozilla/widget/src/windows/nsWindow.cpp, line 1565]
USER32.dll + 0x8734 (0x77d38734)
USER32.dll + 0x8816 (0x77d38816)
USER32.dll + 0x89cd (0x77d389cd)
USER32.dll + 0x8a10 (0x77d38a10)
nsAppShell::Run  [mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 2

[Adam Guthrie]

*** This bug has been marked as a duplicate of 358755 ***

Comment 3

[Wladimir Palant]

Regression window on trunk is 2006-10-27 to 2006-10-29 (2006-10-28 nightly hangs at startup), that's when bug 355161 was checked in. Confirmed duplicate.