370738 - crash when exiting the profile manager [@ PL_DHashTableOperate] [@ AtomImpl::~AtomImpl]

Status: RESOLVED DUPLICATE of bug 349463

(Core :: Layout, defect)

Description

[Ori Avtalion (salty-horse)]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9a3pre) Gecko/20070217 Minefield/3.0a3pre
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9a3pre) Gecko/20070217 Minefield/3.0a3pre

Firefox crashes when the profile manager's "exit" button is pressed

Reproducible: Always

Steps to Reproduce:
1. Launch firefox with the -ProfileManager flag
2. Press the exit button
Actual Results:  
Firefox crashes

Expected Results:  
Firefox should silently quit.

Attaching stack trace

Comment 1

[Ori Avtalion (salty-horse)]

Attachment: stack trace of crash

Comment 2

[Adam Guthrie]

This crash looks almost exactly like the one in bug 349463. Duping.

Comment 3

[Ben Fowler]

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a3pre) Gecko/20070217 Minefield/3.0a3pre

Following the recipe in comment 1 , I get this crash:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0xdadadad2
0x2c083a74 in NS_LogCOMPtrRelease_P (aCOMPtr=0x3834cc, aObject=0x1878d38) at ../../../../src/xpcom/base/nsTraceRefcntImpl.cpp:1210
1210      void *object = dynamic_cast<void *>(aObject);
(gdb) p aObject
$1 = (nsISupports *) 0x1878d38
(gdb) p *aObject
$2 = {
  _vptr$nsISupports = 0xdadadada
}
(gdb) 

but only on the second time I launch Firefox.