Closed
Bug 379547
Opened 18 years ago
Closed 17 years ago
Seldom random crashes related to js_FindProperty/js_NativeGet
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: sgautherie, Unassigned)
Details
(Keywords: crash)
Attachments
(5 files)
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a5pre) Gecko/20070502 SeaMonkey/1.5a] (nightly) (W2Ksp4)
This could be due to my computer/setup/overclocking/whatever;
but reporting, just in case.
See <http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB31754216Q>
[
Incident ID: 31754216
Stack Signature js_NativeGet 401e8c75
Product ID MozillaTrunk
Build ID 2007050209
Trigger Time 2007-05-02 17:59:07.0
Platform Win32
Operating System Windows NT 5.0 build 2195
Module js3250.dll + (0002e77c)
URL visited
User Comments My guess (but may be unrelated): Started a Java (applet) a few seconds before, then loaded another page while the applet was still supposed to be loading data. [ Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32 Numéro d'exception :
Since Last Crash 5549 sec
Total Uptime 5549 sec
Trigger Reason Access violation
Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3457
Stack Trace
js_NativeGet [mozilla/js/src/jsobj.c, line 3457]
js_Interpret [mozilla/js/src/jsinterp.c, line 4098]
0x02641bd4
]
Reporter | ||
Comment 1•18 years ago
|
||
Reporter | ||
Comment 2•18 years ago
|
||
See
<http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=30586602>
[
Incident ID: 30586602
Stack Signature js_NativeGet 8cd64378
Product ID MozillaTrunk
Build ID 2007032509
Trigger Time 2007-03-25 15:02:46.0
Platform Win32
Operating System Windows NT 5.0 build 2195
Module js3250.dll + (0002e5c1)
URL visited
User Comments (Maybe due to my overclocking ?) I was writing a message in Compose(r) for some time.
Since Last Crash 6911 sec
Total Uptime 6911 sec
Trigger Reason Access violation
Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3419
Stack Trace
js_NativeGet [mozilla/js/src/jsobj.c, line 3419]
js_GetProperty [mozilla/js/src/jsobj.c, line 3569]
js_Interpret [mozilla/js/src/jsinterp.c, line 5757]
0x033a28f0
]
Reporter | ||
Comment 3•18 years ago
|
||
I don't have the (too old) Talkback Incident ID for this one.
Reporter | ||
Comment 4•18 years ago
|
||
No "Java" in this session.
See
<http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB31765658Q>
[
Incident ID: 31765658
Stack Signature js_NativeGet ec3fccc3
Product ID MozillaTrunk
Build ID 2007050209
Trigger Time 2007-05-03 04:57:56.0
Platform Win32
Operating System Windows NT 5.0 build 2195
Module js3250.dll + (0002e77c)
URL visited
User Comments Composing a text email.
Since Last Crash 6543 sec
Total Uptime 12092 sec
Trigger Reason Access violation
Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3457
Stack Trace
js_NativeGet [mozilla/js/src/jsobj.c, line 3457]
js_Interpret [mozilla/js/src/jsinterp.c, line 4098]
0x03285e6c
]
Reporter | ||
Comment 5•18 years ago
|
||
See
<http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB31766657W>
[
Incident ID: 31766657
Stack Signature js_NativeGet 5cfa2d18
Product ID MozillaTrunk
Build ID 2007050209
Trigger Time 2007-05-03 05:38:58.0
Platform Win32
Operating System Windows NT 5.0 build 2195
Module js3250.dll + (0002e77c)
URL visited
User Comments composing (another) text email
Since Last Crash 2402 sec
Total Uptime 14494 sec
Trigger Reason Access violation
Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3457
Stack Trace
js_NativeGet [mozilla/js/src/jsobj.c, line 3457]
js_Interpret [mozilla/js/src/jsinterp.c, line 4098]
0x019580cc
]
***
Reinstalling previous nightly, to see if this issue stops or not.
Reporter | ||
Comment 6•18 years ago
|
||
(No new crashes with 20070501 then 20070503 nightlies.)
Comment 7•17 years ago
|
||
I don't know if the crash I'm observing is the same or related to this bug, but here's the stacktrace:
(fb8.f44): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000001 ebx=00000b55 ecx=00000b52 edx=00000002 esi=07e161ac edi=07db7b69
eip=77c47322 esp=0012e2a4 ebp=0012e2ac iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00210202
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\msvcrt.dll -
msvcrt!memmove+0x72:
77c47322 8a06 mov al,[esi] ds:0023:07e161ac=??
0:000> kb
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Mozilla Firefox\js3250.dll -
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
0012e2ac 60104a79 07db7b69 07e161ac 00000b55 msvcrt!memmove+0x72
0012e398 60104f13 0000066e 00000001 000002db js3250!js_FindProperty+0x26fb
0012e3f0 6010a170 0326c288 07bb1438 07bb153f js3250!js_FindProperty+0x2b95
0012e460 600d5499 07bb153f 00000000 60139fe8 js3250!js_FindProperty+0x7df2
0012e498 600edc67 05dea418 03700d40 00000000 js3250!JS_DecompileFunction+0x3e
0012e4b8 600f18ab 05dea418 03700d40 00000000 js3250!js_GetSrcNoteOffset+0x3671
0012e574 600f6e40 05dea418 00000000 00000000 js3250!js_Invoke+0x564
0012e6e0 600f1903 05dea418 05ee9908 0012e770 js3250!js_Invoke+0x5af9
*** ERROR: Symbol file could not be found. Defaulted to export symbols for firefox.exe -
0012e794 0042a9c6 05dea418 00000001 00000002 js3250!js_Invoke+0x5bc
0012e94c 00428d8a 07c94010 01da7ce0 00000008 firefox!NS_RegistryGetFactory+0x1fb03
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Mozilla Firefox\xpcom_core.dll -
0012ea18 6039c7b5 00000000 00000008 0012ea40 firefox!NS_RegistryGetFactory+0x1dec7
0012ea34 6039d2d7 05da7ce0 05c2af90 0012ea6c xpcom_core!nsXPTCStubBase::Stub3+0x20
0012ea48 00422c64 05da7ce0 00000008 00000001 xpcom_core!XPTC_InvokeByIndex+0x27
0012ec00 00420802 01000000 927fdf30 05dea418 firefox!NS_RegistryGetFactory+0x17da1
0012ec98 600f18ab 05dea418 037fdf30 00000001 firefox!NS_RegistryGetFactory+0x1593f
0012ed54 600f6e40 05dea418 00000001 00000000 js3250!js_Invoke+0x564
0012eec0 600f1903 05dea418 080b7188 0012ef50 js3250!js_Invoke+0x5af9
0012ef74 600edfa7 05dea418 00000003 00000006 js3250!js_Invoke+0x5bc
0012efa4 600f18ab 05dea418 0261b650 00000003 js3250!js_GetSrcNoteOffset+0x39b1
0012f060 600f6e40 05dea418 00000002 00000000 js3250!js_Invoke+0x564
It is _very_ repeatable for me. I'm on WinXP/Firefox 2.0.0.12. It seems to be related to Firebug, as when I disable Firebug, the crashes stop ... but "don't use Firebug" isn't a solution. There's a crash bug in FF here.
you need to fix this:
WARNING: Stack unwind information not available. Following frames may be wrong.
please follow:
http://developer.mozilla.org/en/docs/How_to_get_a_stacktrace_with_WinDbg
your problem is almost certainly a gc hazard induced by the js debugger (jsd_xpc) used by firebug, and such crashes are reported.
i don't know if the reporter of this bug has venkman/firebug installed.
Reporter | ||
Comment 9•17 years ago
|
||
(In reply to comment #8)
> i don't know if the reporter of this bug has venkman/firebug installed.
I have never used Firebug.
I seldom use Venkman, and I'm rather sure it was not the case for this bug.
Yet, as I noted in comment 6, I haven't seem (any) crashes for a long time:
R.WorksForMe.
Dossy, please file a separate bug, as your report is with FF v2 branch,
while mine was with SM 1.9 Trunk.
Status: UNCONFIRMED → RESOLVED
Closed: 17 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•