Closed Bug 370403 Opened 18 years ago Closed 13 years ago

crash when closing a tab below [@ XPCWrappedNative::GetNewOrUsed]

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: moco, Unassigned)

Details

(Keywords: crash)

Crash Data

Attachments

(1 file)

saved query (zipped up)
21.14 KB, application/zip
Details
the trunk official trunk bits have been somewhat crashy for me when I close tabs. I believe it was with Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a3pre) Gecko/20070212 Minefield/3.0a3pre on Windows XP. unfortunately, I don't have any steps to reproduce beyond it happen when I close a tab. but, if you search talkback for "closing a tab", you'll see I'm not alone. Here comes a few stack traces (and talkback ids) which I think are all mine. (I entered my email address, jay, can't we search on that?) They seem to diverge at XPCWrappedNative::GetNewOrUsed(). JS gurus (brendan / dbaron / crowder / mrbkap): any ideas? TB29277533 GetScopeOfObject [mozilla\js\src\xpconnect\src\xpcwrappednativescope.cpp, line 554] XPCWrappedNativeScope::FindInJSObjectScope [mozilla\js\src\xpconnect\src\xpcwrappednativescope.cpp, line 617] XPCWrappedNative::GetNewOrUsed [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 375] XPCConvert::NativeInterface2JSObject [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1098] XPCConvert::NativeData2JS [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 474] XPCWrappedNative::CallMethod [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2305] TB29275514 XPCNativeWrapper::GetNewOrUsed [mozilla\js\src\xpconnect\src\xpcnativewrapper.cpp, line 1388] MirrorWrappedNativeParent [mozilla\js\src\xpconnect\src\xpcnativewrapper.cpp, line 1012] XPCConvert::NativeInterface2JSObject [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1166] XPCConvert::NativeData2JS [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 474] XPCWrappedNative::CallMethod [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2305] TB29037539 0x00000020 js_GetSlotThreadSafe [mozilla\js\src\jslock.c, line 599] JS_GetClass [mozilla\js\src\jsapi.c, line 2271] XPCWrappedNativeScope::FindInJSObjectScope [mozilla\js\src\xpconnect\src\xpcwrappednativescope.cpp, line 617] XPCWrappedNative::GetNewOrUsed [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 375] XPCConvert::NativeInterface2JSObject [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1098] XPCConvert::NativeData2JS [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 474] XPCWrappedNative::CallMethod [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2305] 0x00000020 js_GetSlotThreadSafe [mozilla\js\src\jslock.c, line 599] JS_GetClass [mozilla\js\src\jsapi.c, line 2271] XPCWrappedNativeScope::FindInJSObjectScope [mozilla\js\src\xpconnect\src\xpcwrappednativescope.cpp, line 617] XPCWrappedNative::GetNewOrUsed [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 375] XPCConvert::NativeInterface2JSObject [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1098] XPCConvert::NativeData2JS [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 474] XPCWrappedNative::CallMethod [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2305]
Component: Tabbed Browser → XPConnect
Product: Firefox → Core
QA Contact: tabbed.browser → xpconnect
Flags: blocking1.9?
ditto - and I rarely crash closing tabs, no extensions on this crash, which doesn't have anything useful (also a little unusual) TB29432542 Stack Signature 0x04830026 4d57cc16 Product ID FirefoxTrunk Build ID 2007021604 Trigger Time 2007-02-17 13:59:37.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module URL visited User Comments closing a couple tabs s/vseerror Since Last Crash 90981 sec Total Uptime 90981 sec Trigger Reason Access violation Source File, Line No. N/A Stack Trace 0x04830026 0xd060181d TB29409059 and TB229409059 may be representative of what seth is talking about. there are far more that are about switching tabs, like TB29412252 not sure these are related... TB29401386 npietab.dll + 0x2a9e (0x04c22a9e) d296082f 2007-02-16 11:55:32.0 MozillaOrgFirefoxTrunkWin322007020617 I close a tab with IEtab page loaded TB29335404 nsSubDocumentFrame::Reflow 43a77e17 2007-02-14 11:50:56.0 MozillaOrgFirefoxTrunkWin322007021404 Browsing news.google.com for keyword shoretel, opened up a few articles in tabs. When attempting to close the tabs by middle click browser crashed
Severity: normal → critical
Keywords: crash
Seth Spitzer in comment #0 > (I entered my email address, jay, can't we search on that?) jay says email is not searchable (a shame). comment of course is searchable. another crash TB29483258 top of stack is GetScopeOfObject I was closing tabs (not switching), not able to reproduce in several attempts http://www.programmazione.it/index.php plugin player=Shockwave Flash 8.0 r22=old
wayne, thanks for the info. I just crashed again, but this time switching (not closing). see bug #370928 I've started to put "sspitzer" in my reports in the comment section, to work around the email search problem.
it isn't searchable for normal people, because we're afraid of privacy issues. some people can search. here are the only other two w/ your address: Incident ID: 29484295 Incident ID: 29265322
timeless, thanks! > Incident ID: 29484295 see bug #370928 > Incident ID: 29265322 I think that crash was this bug? here's the stack: 0x00000020 js_GetSlotThreadSafe [mozilla\js\src\jslock.c, line 599] JS_GetClass [mozilla\js\src\jsapi.c, line 2269] XPCWrappedNativeScope::FindInJSObjectScope [mozilla\js\src\xpconnect\src\xpcwrappednativescope.cpp, line 617] XPCWrappedNative::GetNewOrUsed [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 375] XPCConvert::NativeInterface2JSObject [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1098] XPCConvert::NativeData2JS [mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 474] XPCWrappedNative::CallMethod [mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2305]
other bugs to keep in mind: bug 368916 it's hard keeping track of different stacks, i think some of your crashes are probably that one....
Keywords: crash → topcrash
Summary: crash when closing a tab [below XPCWrappedNative::GetNewOrUsed()] → crash when closing a tab below [@ XPCWrappedNative::GetNewOrUsed]
I just hit this with my debug build on windows. (Note, my debug build is a little stale, checkout start: Wed Feb 14 16:48:25 PST 2007) Unhandled exception at 0xcdcdcd20 in firefox.exe: 0xC0000005: Access violation reading location 0xcdcdcd20. cdcdcd20() > js3250.dll!js_GetSlotThreadSafe(JSContext * cx=0x02df1f70, JSObject * obj=0x07a84920, unsigned long slot=2) Line 599 + 0x27 bytes C js3250.dll!JS_GetClass(JSContext * cx=0x02df1f70, JSObject * obj=0x07a84920) Line 2269 + 0xfb bytes C xpc3250.dll!XPCNativeWrapper::IsNativeWrapper(JSContext * cx=0x02df1f70, JSObject * obj=0x07a84920) Line 58 + 0xe bytes C++ xpc3250.dll!XPCWrappedNative::GetNewOrUsed(XPCCallContext & ccx={...}, nsISupports * Object=0x055a0688, XPCWrappedNativeScope * Scope=0x02e21878, XPCNativeInterface * Interface=0x02d08d28, int isGlobal=0, XPCWrappedNative * * resultWrapper=0x00128f74) Line 370 + 0x12 bytes C++ xpc3250.dll!XPCConvert::NativeInterface2JSObject(XPCCallContext & ccx={...}, nsIXPConnectJSObjectHolder * * dest=0x0012900c, nsISupports * src=0x055a0688, const nsID * iid=0x00129318, JSObject * scope=0x04faf760, int allowNativeWrapper=1, int isGlobal=0, unsigned int * pErr=0x00129260) Line 1098 + 0x22 bytes C++ xpc3250.dll!XPCConvert::NativeData2JS(XPCCallContext & ccx={...}, long * d=0x00129154, const void * s=0x001291c4, const nsXPTType & type={...}, const nsID * iid=0x00129318, JSObject * scope=0x04faf760, unsigned int * pErr=0x00129260) Line 474 + 0x35 bytes C++ xpc3250.dll!XPCWrappedNative::CallMethod(XPCCallContext & ccx={...}, XPCWrappedNative::CallMode mode=CALL_GETTER) Line 2305 + 0x32 bytes C++ xpc3250.dll!XPCWrappedNative::GetAttribute(XPCCallContext & ccx={...}) Line 1994 + 0xe bytes C++ xpc3250.dll!XPC_WN_GetterSetter(JSContext * cx=0x02df1f70, JSObject * obj=0x04faf760, unsigned int argc=0, long * argv=0x0ad8e448, long * vp=0x00129480) Line 1502 + 0xc bytes C++ js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=0, unsigned int flags=2) Line 1348 + 0x20 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x04faf760, long fval=82439424, unsigned int flags=0, unsigned int argc=0, long * argv=0x00000000, long * rval=0x00129b8c) Line 1442 + 0x14 bytes C js3250.dll!js_InternalGetOrSet(JSContext * cx=0x02df1f70, JSObject * obj=0x04faf760, long id=48523312, long fval=82439424, JSAccessMode mode=JSACC_READ, unsigned int argc=0, long * argv=0x00000000, long * rval=0x00129b8c) Line 1514 + 0x1f bytes C js3250.dll!js_NativeGet(JSContext * cx=0x02df1f70, JSObject * obj=0x04faf760, JSObject * pobj=0x03e06540, JSScopeProperty * sprop=0x03eadda0, long * vp=0x00129b8c) Line 3424 + 0x30 bytes C js3250.dll!js_GetProperty(JSContext * cx=0x02df1f70, JSObject * obj=0x04faf760, long id=48523312, long * vp=0x00129b8c) Line 3567 + 0x19 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03ae65eb, long * result=0x00129cb0) Line 3784 + 0x23 bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07520, long fval=82439488, unsigned int flags=0, unsigned int argc=1, long * argv=0x0ad8e33c, long * rval=0x00129e2c) Line 1442 + 0x14 bytes C js3250.dll!JS_CallFunctionValue(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07520, long fval=82439488, unsigned int argc=1, long * argv=0x0ad8e33c, long * rval=0x00129e2c) Line 4368 + 0x1f bytes C gklayout.dll!nsJSContext::CallEventHandler(nsISupports * aTarget=0x03ad33a0, void * aScope=0x02e1b380, void * aHandler=0x04e9ed40, nsIArray * aargv=0x07b09540, nsIVariant * * arv=0x00129f9c) Line 1774 + 0x24 bytes C++ gklayout.dll!nsJSEventListener::HandleEvent(nsIDOMEvent * aEvent=0x078a51b8) Line 208 + 0x67 bytes C++ gklayout.dll!nsEventListenerManager::HandleEventSubType(nsListenerStruct * aListenerStruct=0x03a85208, nsIDOMEventListener * aListener=0x03ad3408, nsIDOMEvent * aDOMEvent=0x078a51b8, nsISupports * aCurrentTarget=0x03ad33a0, unsigned int aPhaseFlags=2) Line 1230 + 0x12 bytes C++ gklayout.dll!nsEventListenerManager::HandleEvent(nsPresContext * aPresContext=0x02d5f310, nsEvent * aEvent=0x0507d100, nsIDOMEvent * * aDOMEvent=0x0012a25c, nsISupports * aCurrentTarget=0x03ad33a0, unsigned int aFlags=2, nsEventStatus * aEventStatus=0x0012a260) Line 1350 C++ gklayout.dll!nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor & aVisitor={...}, unsigned int aFlags=2) Line 356 C++ gklayout.dll!nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor & aVisitor={...}, unsigned int aFlags=6, nsDispatchingCallback * aCallback=0x00000000) Line 456 C++ gklayout.dll!nsEventDispatcher::Dispatch(nsISupports * aTarget=0x03ad11f8, nsPresContext * aPresContext=0x02d5f310, nsEvent * aEvent=0x0507d100, nsIDOMEvent * aDOMEvent=0x078a51b8, nsEventStatus * aEventStatus=0x0012a340, nsDispatchingCallback * aCallback=0x00000000, int aTargetIsChromeHandler=0) Line 639 + 0x12 bytes C++ gklayout.dll!nsEventDispatcher::DispatchDOMEvent(nsISupports * aTarget=0x03ad11f8, nsEvent * aEvent=0x00000000, nsIDOMEvent * aDOMEvent=0x078a51b8, nsPresContext * aPresContext=0x02d5f310, nsEventStatus * aEventStatus=0x0012a340) Line 697 + 0x1d bytes C++ gklayout.dll!nsEventListenerManager::DispatchEvent(nsIDOMEvent * aEvent=0x078a51b8, int * _retval=0x0012a4f8) Line 1468 + 0x21 bytes C++ gklayout.dll!nsDOMEventRTTearoff::DispatchEvent(nsIDOMEvent * evt=0x078a51b8, int * _retval=0x0012a4f8) Line 884 + 0x21 bytes C++ xpcom_core.dll!NS_InvokeByIndex(nsISupports * that=0x00000005, unsigned int methodIndex=2, unsigned int paramCount=1221864, nsXPTCVariant * params=0x00000001) Line 102 C++ xpc3250.dll!XPCWrappedNative::CallMethod(XPCCallContext & ccx={...}, XPCWrappedNative::CallMode mode=5) Line 2215 + 0x1e bytes C++ xpc3250.dll!XPCWrappedNative::CallMethod(XPCCallContext & ccx={...}, XPCWrappedNative::CallMode mode=CALL_METHOD) Line 2215 + 0x1e bytes C++ xpc3250.dll!XPC_WN_CallMethod(JSContext * cx=0x02df1f70, JSObject * obj=0x03b5e420, unsigned int argc=1, long * argv=0x0ad8e328, long * vp=0x0012a790) Line 1470 + 0xe bytes C++ js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=0) Line 1348 + 0x20 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03af4c15, long * result=0x0012ae3c) Line 4047 + 0xf bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x03b5e420, long fval=62252384, unsigned int flags=0, unsigned int argc=1, long * argv=0x0012b4a0, long * rval=0x0012b4a0) Line 1442 + 0x14 bytes C js3250.dll!js_InternalGetOrSet(JSContext * cx=0x02df1f70, JSObject * obj=0x03b5e420, long id=33590056, long fval=62252384, JSAccessMode mode=JSACC_WRITE, unsigned int argc=1, long * argv=0x0012b4a0, long * rval=0x0012b4a0) Line 1514 + 0x1f bytes C js3250.dll!js_SetProperty(JSContext * cx=0x02df1f70, JSObject * obj=0x03b5e420, long id=33590056, long * vp=0x0012b4a0) Line 3664 + 0x32 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03acb6ea, long * result=0x0012b5c4) Line 3798 + 0x12f bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x03b5e420, long fval=62252448, unsigned int flags=0, unsigned int argc=1, long * argv=0x0012bc28, long * rval=0x0012bc28) Line 1442 + 0x14 bytes C js3250.dll!js_InternalGetOrSet(JSContext * cx=0x02df1f70, JSObject * obj=0x03b5e420, long id=61786984, long fval=62252448, JSAccessMode mode=JSACC_WRITE, unsigned int argc=1, long * argv=0x0012bc28, long * rval=0x0012bc28) Line 1514 + 0x1f bytes C js3250.dll!js_SetProperty(JSContext * cx=0x02df1f70, JSObject * obj=0x03b5e420, long id=61786984, long * vp=0x0012bc28) Line 3664 + 0x32 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03aba9d5, long * result=0x0012bd4c) Line 3798 + 0x12f bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07e40, long fval=61898944, unsigned int flags=0, unsigned int argc=1, long * argv=0x0012c3b0, long * rval=0x0012c3b0) Line 1442 + 0x14 bytes C js3250.dll!js_InternalGetOrSet(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07e40, long id=33590056, long fval=61898944, JSAccessMode mode=JSACC_WRITE, unsigned int argc=1, long * argv=0x0012c3b0, long * rval=0x0012c3b0) Line 1514 + 0x1f bytes C js3250.dll!js_SetProperty(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07e40, long id=33590056, long * vp=0x0012c3b0) Line 3664 + 0x32 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03b2982c, long * result=0x0012c4d4) Line 3798 + 0x12f bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07e40, long fval=61899008, unsigned int flags=0, unsigned int argc=1, long * argv=0x0012cb38, long * rval=0x0012cb38) Line 1442 + 0x14 bytes C js3250.dll!js_InternalGetOrSet(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07e40, long id=61780192, long fval=61899008, JSAccessMode mode=JSACC_WRITE, unsigned int argc=1, long * argv=0x0012cb38, long * rval=0x0012cb38) Line 1514 + 0x1f bytes C js3250.dll!js_SetProperty(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07e40, long id=61780192, long * vp=0x0012cb38) Line 3664 + 0x32 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03ac0725, long * result=0x0012cc5c) Line 3798 + 0x12f bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07520, long fval=61897696, unsigned int flags=0, unsigned int argc=1, long * argv=0x0012d2c0, long * rval=0x0012d2c0) Line 1442 + 0x14 bytes C js3250.dll!js_InternalGetOrSet(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07520, long id=33686832, long fval=61897696, JSAccessMode mode=JSACC_WRITE, unsigned int argc=1, long * argv=0x0012d2c0, long * rval=0x0012d2c0) Line 1514 + 0x1f bytes C js3250.dll!js_SetProperty(JSContext * cx=0x02df1f70, JSObject * obj=0x03b07520, long id=33686832, long * vp=0x0012d2c0) Line 3664 + 0x32 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03ae91c6, long * result=0x0012d3e4) Line 3798 + 0x12f bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x038f93a0, long fval=62253888, unsigned int flags=0, unsigned int argc=1, long * argv=0x0012da48, long * rval=0x0012da48) Line 1442 + 0x14 bytes C js3250.dll!js_InternalGetOrSet(JSContext * cx=0x02df1f70, JSObject * obj=0x038f93a0, long id=33686832, long fval=62253888, JSAccessMode mode=JSACC_WRITE, unsigned int argc=1, long * argv=0x0012da48, long * rval=0x0012da48) Line 1514 + 0x1f bytes C js3250.dll!js_SetProperty(JSContext * cx=0x02df1f70, JSObject * obj=0x038f93a0, long id=33686832, long * vp=0x0012da48) Line 3664 + 0x32 bytes C js3250.dll!js_Interpret(JSContext * cx=0x02df1f70, unsigned char * pc=0x03af2982, long * result=0x0012db6c) Line 3798 + 0x12f bytes C js3250.dll!js_Invoke(JSContext * cx=0x02df1f70, unsigned int argc=1, unsigned int flags=2) Line 1367 + 0x13 bytes C js3250.dll!js_InternalInvoke(JSContext * cx=0x02df1f70, JSObject * obj=0x08f37740, long fval=150173472, unsigned int flags=0, unsigned int argc=1, long * argv=0x0ad8dff0, long * rval=0x0012dce8) Line 1442 + 0x14 bytes C js3250.dll!JS_CallFunctionValue(JSContext * cx=0x02df1f70, JSObject * obj=0x08f37740, long fval=150173472, unsigned int argc=1, long * argv=0x0ad8dff0, long * rval=0x0012dce8) Line 4368 + 0x1f bytes C gklayout.dll!nsJSContext::CallEventHandler(nsISupports * aTarget=0x02fbf098, void * aScope=0x02e1b380, void * aHandler=0x08f37720, nsIArray * aargv=0x059415a0, nsIVariant * * arv=0x0012de58) Line 1774 + 0x24 bytes C++ gklayout.dll!nsJSEventListener::HandleEvent(nsIDOMEvent * aEvent=0x08e21bdc) Line 208 + 0x67 bytes C++ gklayout.dll!nsEventListenerManager::HandleEventSubType(nsListenerStruct * aListenerStruct=0x02fbf1c8, nsIDOMEventListener * aListener=0x02fbf168, nsIDOMEvent * aDOMEvent=0x08e21bdc, nsISupports * aCurrentTarget=0x02fbf098, unsigned int aPhaseFlags=6) Line 1230 + 0x12 bytes C++ gklayout.dll!nsEventListenerManager::HandleEvent(nsPresContext * aPresContext=0x02d5f310, nsEvent * aEvent=0x0012e1b8, nsIDOMEvent * * aDOMEvent=0x0012e118, nsISupports * aCurrentTarget=0x02fbf098, unsigned int aFlags=6, nsEventStatus * aEventStatus=0x0012e11c) Line 1350 C++ gklayout.dll!nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor & aVisitor={...}, unsigned int aFlags=6) Line 356 C++ gklayout.dll!nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor & aVisitor={...}, unsigned int aFlags=6, nsDispatchingCallback * aCallback=0x00000000) Line 433 C++ gklayout.dll!nsEventDispatcher::Dispatch(nsISupports * aTarget=0x02fbf098, nsPresContext * aPresContext=0x02d5f310, nsEvent * aEvent=0x0012e1b8, nsIDOMEvent * aDOMEvent=0x00000000, nsEventStatus * aEventStatus=0x0012e200, nsDispatchingCallback * aCallback=0x00000000, int aTargetIsChromeHandler=0) Line 639 + 0x12 bytes C++ gklayout.dll!nsXULElement::PreHandleEvent(nsEventChainPreVisitor & aVisitor={...}) Line 1650 + 0x2b bytes C++ gklayout.dll!nsEventTargetChainItem::PreHandleEvent(nsEventChainPreVisitor & aVisitor={...}) Line 317 + 0x17 bytes C++ gklayout.dll!nsEventDispatcher::Dispatch(nsISupports * aTarget=0x02fc59b8, nsPresContext * aPresContext=0x02d5f310, nsEvent * aEvent=0x0012e4d4, nsIDOMEvent * aDOMEvent=0x00000000, nsEventStatus * aEventStatus=0x0012e4d0, nsDispatchingCallback * aCallback=0x00000000, int aTargetIsChromeHandler=0) Line 597 C++ gklayout.dll!nsXBLPrototypeHandler::ExecuteHandler(nsIDOMEventReceiver * aReceiver=0x081b1e78, nsIDOMEvent * aEvent=0x0a2a5d60) Line 404 + 0x2c bytes C++ gklayout.dll!nsXBLWindowKeyHandler::WalkHandlersInternal(nsIDOMEvent * aEvent=0x0a2a5d60, nsIAtom * aEventType=0x00d2bd30, nsXBLPrototypeHandler * aHandler=0x03df9ab0) Line 545 + 0x15 bytes C++ gklayout.dll!nsXBLWindowKeyHandler::WalkHandlers(nsIDOMEvent * aKeyEvent=0x0a2a5d60, nsIAtom * aEventType=0x00d2bd30) Line 346 C++ gklayout.dll!nsXBLWindowKeyHandler::KeyPress(nsIDOMEvent * aKeyEvent=0x0a2a5d60) Line 401 C++ gklayout.dll!DispatchToInterface(nsIDOMEvent * aEvent=0x0a2a5d60, nsIDOMEventListener * aListener=0x02fc7b40, unsigned int (nsIDOMEvent *)* aMethod=0x0251d8f0, const nsID & aIID={...}) Line 182 + 0xb bytes C++ gklayout.dll!nsEventListenerManager::HandleEvent(nsPresContext * aPresContext=0x02d5f310, nsEvent * aEvent=0x0012efe0, nsIDOMEvent * * aDOMEvent=0x0012ec34, nsISupports * aCurrentTarget=0x00d7fdd8, unsigned int aFlags=514, nsEventStatus * aEventStatus=0x0012ec38) Line 1341 + 0x22 bytes C++ gklayout.dll!nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor & aVisitor={...}, unsigned int aFlags=514) Line 356 C++ gklayout.dll!nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor & aVisitor={...}, unsigned int aFlags=518, nsDispatchingCallback * aCallback=0x0012ece8) Line 456 C++ gklayout.dll!nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor & aVisitor={...}, unsigned int aFlags=6, nsDispatchingCallback * aCallback=0x0012ece8) Line 486 C++ gklayout.dll!nsEventDispatcher::Dispatch(nsISupports * aTarget=0x03c3b9a8, nsPresContext * aPresContext=0x02d5f310, nsEvent * aEvent=0x0012efe0, nsIDOMEvent * aDOMEvent=0x00000000, nsEventStatus * aEventStatus=0x0012eddc, nsDispatchingCallback * aCallback=0x0012ece8, int aTargetIsChromeHandler=0) Line 639 + 0x12 bytes C++ gklayout.dll!PresShell::HandleEventInternal(nsEvent * aEvent=0x0012efe0, nsIView * aView=0x02e17ba8, nsEventStatus * aStatus=0x0012eddc) Line 5659 + 0x2b bytes C++ gklayout.dll!PresShell::HandleEvent(nsIView * aView=0x02e17ba8, nsGUIEvent * aEvent=0x0012efe0, nsEventStatus * aEventStatus=0x0012eddc) Line 5447 + 0x17 bytes C++ gklayout.dll!nsViewManager::HandleEvent(nsView * aView=0x02e17ba8, nsPoint aPoint={...}, nsGUIEvent * aEvent=0x0012efe0, int aCaptured=0) Line 1656 C++ gklayout.dll!nsViewManager::DispatchEvent(nsGUIEvent * aEvent=0x0012efe0, nsEventStatus * aStatus=0x0012ef1c) Line 1609 + 0x22 bytes C++ gklayout.dll!HandleEvent(nsGUIEvent * aEvent=0x0012efe0) Line 174 C++ gkwidget.dll!nsWindow::DispatchEvent(nsGUIEvent * event=0x0012efe0, nsEventStatus & aStatus=nsEventStatus_eIgnore) Line 1103 + 0xc bytes C++ gkwidget.dll!nsWindow::DispatchWindowEvent(nsGUIEvent * event=0x0012efe0) Line 1124 C++ gkwidget.dll!nsWindow::DispatchKeyEvent(unsigned int aEventType=131, unsigned short aCharCode=119, unsigned int aVirtualCharCode=0, long aKeyData=1114113, unsigned int aFlags=0) Line 3462 + 0x11 bytes C++ gkwidget.dll!nsWindow::OnKeyDown(unsigned int aVirtualKeyCode=87, unsigned int aScanCode=17, long aKeyData=1114113) Line 3678 + 0x2e bytes C++ gkwidget.dll!nsWindow::ProcessMessage(unsigned int msg=256, unsigned int wParam=87, long lParam=1114113, long * aRetValue=0x0012f520) Line 4612 + 0x1d bytes C++ gkwidget.dll!nsWindow::WindowProc(HWND__ * hWnd=0x00020b3c, unsigned int msg=256, unsigned int wParam=87, long lParam=1114113) Line 1316 + 0x1d bytes C++ user32.dll!77d48734() [Frames below may be incorrect and/or missing, no symbols loaded for user32.dll] user32.dll!77d48816() user32.dll!77d489cd() user32.dll!77d49402() user32.dll!77d48a10() gkwidget.dll!nsAppShell::ProcessNextNativeEvent(int mayWait=1) Line 149 C++ gkwidget.dll!nsBaseAppShell::DoProcessNextNativeEvent(int mayWait=1) Line 136 + 0x11 bytes C++ gkwidget.dll!nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal * thr=0x00baf728, int mayWait=1, unsigned int recursionDepth=0) Line 231 + 0xf bytes C++ xpcom_core.dll!nsThread::ProcessNextEvent(int mayWait=1, int * result=0x0012f70c) Line 472 C++ xpcom_core.dll!NS_ProcessNextEvent_P(nsIThread * thread=0x00baf728, int mayWait=1) Line 225 + 0x16 bytes C++ gkwidget.dll!nsBaseAppShell::Run() Line 153 + 0xc bytes C++ tkitcmps.dll!nsAppStartup::Run() Line 171 + 0x1c bytes C++ xul.dll!XRE_main(int argc=1, char * * argv=0x00bab710, const nsXREAppData * aAppData=0x004036b4) Line 2838 + 0x25 bytes C++ firefox.exe!main(int argc=1, char * * argv=0x00bab710) Line 61 + 0x13 bytes C++ firefox.exe!__tmainCRTStartup() Line 586 + 0x19 bytes C firefox.exe!mainCRTStartup() Line 403 C kernel32.dll!7c816fd7()
Seth, could you add -DTOO_MUCH_GC to DEFINES in js/src/Makefile.in and rebuild in js/src and see if you can reproduce a crash then? Your build will be really slow, but if it's a problem with JS objects getting deleted too early you're likely to hit the crash much earlier than you would if you're running a normal build.
johnny: updating my tree and rebuilding with TOO_MUCH_GC now. I'll report back with the results.
johnny: I have updated an rebuilt, and it is slow, you were right. but, no crashes yet. if I crash, i'll attach a stack.
Seth, or anyone, any updates on this? Not blocking on this unless we get more info to go on.
Flags: blocking1.9? → blocking1.9-
> Seth, or anyone, any updates on this? Not blocking on this unless we get more > info to go on. johnny, I've kept my eye for it, but I haven't seen this crash in a while and I've been using trunk on minefield on windows xp. assuming XPCWrappedNative::GetNewOrUsed is not showing up in talkback anymore, I think we should mark this as workforme? running a talkback query now at http://talkback-public.mozilla.org to find out
I'm seeing a lot of hits in talkback. the following query for crashes with XPCWrappedNative::GetNewOrUsed in the stack between 2/22 and 5/22 returned 500 id (the limit of the query). note, most are for Firefox2. http://talkback-public.mozilla.org/search/start.jsp?search=1&searchby=stacksig&match=contains&searchfor=XPCWrappedNative%3A%3AGetNewOrUsed&vendor=MozillaOrg&product=All&platform=All&buildid=&sdate=02%2F22%2F2007&stime=&edate=05%2F22%2F2007&etime=&sortby=bbid&rlimit=500 I'll attach the query results so you don't have to re-run it. For FF30a2 (FirefoxTrunk), it is also in the list of top crashes, see http://talkback-public.mozilla.org/reports/firefox/FF30a2/index.html
I hit the same crash some minutes ago while trying to open the following URL in a new tab: https://developer.mozilla.org/en/Mozilla_Source_Code_%28Mercurial%29 Crash report: bp-7a404025-7546-4dac-afb1-c74972090408 Doing the same a second time doesn't crash the browser.
Keywords: crash
OS: Windows XP → All
Hardware: x86 → All
I got what I think is this crash when doing a wikipedia search from the searchbar: http://crash-stats.mozilla.com/report/index/fed051c2-9b69-43a2-860d-716eb2090414
tomcat, this bug "XPCWrappedNative::GetNewOrUsed" [1] is no longer a firefox topcrash unless the old (1.8) signature morphed into one of the other GetNewOrUsed signatures - like your bug 544640 is - XPCWrappedNative::GetNewOrUsed(XPCCallContext&, nsISupports*, XPCWrappedNativeScope*, XPCNativeInterface*, nsWrapperCache*, int, XPCWrappedNative**) time to close this bug? [1] http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=XPCWrappedNative%3A%3AGetNewOrUsed&date=12%2F01%2F2010%2014%3A19%3A31&range_value=4&range_unit=weeks&hang_type=any&process_type=all&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=XPCWrappedNative%3A%3AGetNewOrUsed
Crash Signature: [@ XPCWrappedNative::GetNewOrUsed]
We have a few other bugs that have a similar signature and are top crashers - bug 603075, bug 544640 and bug 487619. This doesn't show up linking to a signature so does it still exist or do we just need to link it to the right crash. Wayne, you imply closing it. Is that still the right thing to do? I am going to remove the top crash keyword.
Keywords: topcrash
(In reply to Sheila Mooney from comment #18) > This doesn't show up linking to a > signature so does it still exist or do we just need to link it to the right > crash. Wayne, you imply closing it. Is that still the right thing to do? I > am going to remove the top crash keyword. The full signature may not have been added to the summary. That said, if other bugs adequately capture our current crashes, then there's nothing wrong with closing this bug. especially if current crashes don't overwhelmingly mention closing tabs
there are plenty of other bugs to cover this
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: