379343 - Crashed in mailnews preferences [@ nsXBLPrototypeBinding::GetImmediateChild]

Status: RESOLVED WORKSFORME

(Core :: XBL, defect)

Description

[Wayne Mery (:wsmwk)]

Crashed in mailnews preferences.  shortly before that had just composed some messages which I canceled while testing bug 141417.

TB31701064

Incident ID: 31701064
Stack Signature	0x6e727574 89e182a2
Product ID	MozillaTrunk
Build ID	2007043008
Trigger Time	2007-05-01 04:51:04.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	
URL visited	
User Comments	just did edit, options - shortly after composing some messages which I cancelled 
Since Last Crash	58647 sec
Total Uptime	58647 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
0x6e727574
nsXBLPrototypeBinding::GetImmediateChild  [mozilla/content/xbl/src/nsxblprototypebinding.cpp, line 726]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsBindingManager::ChangeDocumentFor  [mozilla/content/xbl/src/nsbindingmanager.cpp, line 475]
nsXULElement::UnbindFromTree  [mozilla/content/xul/content/src/nsxulelement.cpp, line 910]
nsXULElement::~nsXULElement  [mozilla/content/xul/content/src/nsxulelement.cpp, line 259]
nsGenericElement::Release  [mozilla/content/base/src/nsgenericelement.cpp, line 3067]
nsTHashtable<nsBaseHashtableET<nsISupportsHashKey,nsTemplateMatch *> >::Clear  [mozilla/dist/include/xpcom/nsthashtable.h, line 245]
nsCycleCollector::CollectWhite  [mozilla/xpcom/base/nscyclecollector.cpp, line 1385]
nsCycleCollector::Collect  [mozilla/xpcom/base/nscyclecollector.cpp, line 2012]
nsCycleCollector_collect  [mozilla/xpcom/base/nscyclecollector.cpp, line 2198]
NS_ProcessNextEvent_P  [mozilla/xpcom/build/nsthreadutils.cpp, line 227]
nsBaseAppShell::Run  [mozilla/widget/src/xpwidgets/nsbaseappshell.cpp, line 154]
main  [mozilla/xpfe/bootstrap/nsapprunner.cpp, line 1722]
WinMain  [mozilla/xpfe/bootstrap/nsapprunner.cpp, line 1746]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 1

[Wayne Mery (:wsmwk)]

sorry I don't have specific set of STR. In preferences I had visited a couple advanced panels, and in mailnews I have visited all panels.  I think I can safely say that the panel I crashed in had been visited more than once, i.e. it did not crash the first time I hit the panel in which I crashed.  

Also, I did not edit any fields on any panels.

Comment 2

[Wayne Mery (:wsmwk)]

might this be related to cycle collector checkins?

crashes appears to have started with build 2007032509, TB30628343. but may go back further to at least TB29588178 2007022008

and I found TB30814520 which has nsXBLPrototypeBinding::GetImmediateChild as top of stack

TB30628343
nsXBLPrototypeBinding::GetImmediateChild  [mozilla/content/xbl/src/nsxblprototypebinding.cpp, line 726]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 890]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 890]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 890]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 890]
nsBindingManager::ChangeDocumentFor  [mozilla/content/xbl/src/nsbindingmanager.cpp, line 476]
nsXULElement::UnbindFromTree  [mozilla/content/xul/content/src/nsxulelement.cpp, line 979]
nsXULElement::~nsXULElement  [mozilla/content/xul/content/src/nsxulelement.cpp, line 328]
nsGenericDOMDataNode::Release  [mozilla/content/base/src/nsgenericdomdatanode.cpp, line 112]
nsTHashtable<nsBaseHashtableET<nsURIHashKey,unsigned int> >::Clear  [mozilla/dist/include/xpcom/nsthashtable.h, line 245]
nsCycleCollector::CollectWhite  [mozilla/xpcom/base/nscyclecollector.cpp, line 1038]
nsCycleCollector::Collect  [mozilla/xpcom/base/nscyclecollector.cpp, line 1702]
0x0424548b


this time, same top of stack, but the rest is not the same

TB31771000
User Comments	bugzilla advanced search, query results screen, back page, select summary, ctrl+x, crash s/vseerror
Stack Trace 	
0x00000000
nsXBLPrototypeBinding::GetImmediateChild  [mozilla/content/xbl/src/nsxblprototypebinding.cpp, line 726]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsXBLBinding::ChangeDocument  [mozilla/content/xbl/src/nsxblbinding.cpp, line 894]
nsBindingManager::ChangeDocumentFor  [mozilla/content/xbl/src/nsbindingmanager.cpp, line 475]
nsXULElement::UnbindFromTree  [mozilla/content/xul/content/src/nsxulelement.cpp, line 910]
nsXULElement::~nsXULElement  [mozilla/content/xul/content/src/nsxulelement.cpp, line 259]
nsGenericElement::Release  [mozilla/content/base/src/nsgenericelement.cpp, line 3067]
nsTHashtable<nsBaseHashtableET<nsISupportsHashKey,nsTemplateMatch *> >::Clear  [mozilla/dist/include/xpcom/nsthashtable.h, line 245]
nsCycleCollector::CollectWhite  [mozilla/xpcom/base/nscyclecollector.cpp, line 1385]
nsCycleCollector::Collect  [mozilla/xpcom/base/nscyclecollector.cpp, line 2012]
nsCycleCollector_collect  [mozilla/xpcom/base/nscyclecollector.cpp, line 2198]
NS_ProcessNextEvent_P  [mozilla/xpcom/build/nsthreadutils.cpp, line 227]
nsBaseAppShell::Run  [mozilla/widget/src/xpwidgets/nsbaseappshell.cpp, line 154]
main  [mozilla/xpfe/bootstrap/nsapprunner.cpp, line 1722]
WinMain  [mozilla/xpfe/bootstrap/nsapprunner.cpp, line 1746]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 3

[Boris Zbarsky [:bzbarsky]]

Peter, weren't you going to axe some of this code?

Comment 4

[Wayne Mery (:wsmwk)]

haven't seen this in ages

Comment 5

[Wayne Mery (:wsmwk)]

I've not seen this again. 
ANd I find no stacks on crash-stats that match