Closed Bug 379547 Opened 18 years ago Closed 17 years ago

Seldom random crashes related to js_FindProperty/js_NativeGet

Categories

(Core :: JavaScript Engine, defect)

x86
Windows 2000
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: sgautherie, Unassigned)

Details

(Keywords: crash)

Attachments

(5 files)

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a5pre) Gecko/20070502 SeaMonkey/1.5a] (nightly) (W2Ksp4) This could be due to my computer/setup/overclocking/whatever; but reporting, just in case. See <http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB31754216Q> [ Incident ID: 31754216 Stack Signature js_NativeGet 401e8c75 Product ID MozillaTrunk Build ID 2007050209 Trigger Time 2007-05-02 17:59:07.0 Platform Win32 Operating System Windows NT 5.0 build 2195 Module js3250.dll + (0002e77c) URL visited User Comments My guess (but may be unrelated): Started a Java (applet) a few seconds before, then loaded another page while the applet was still supposed to be loading data. [ Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32 Numéro d'exception : Since Last Crash 5549 sec Total Uptime 5549 sec Trigger Reason Access violation Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3457 Stack Trace js_NativeGet [mozilla/js/src/jsobj.c, line 3457] js_Interpret [mozilla/js/src/jsinterp.c, line 4098] 0x02641bd4 ]
See <http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=30586602> [ Incident ID: 30586602 Stack Signature js_NativeGet 8cd64378 Product ID MozillaTrunk Build ID 2007032509 Trigger Time 2007-03-25 15:02:46.0 Platform Win32 Operating System Windows NT 5.0 build 2195 Module js3250.dll + (0002e5c1) URL visited User Comments (Maybe due to my overclocking ?) I was writing a message in Compose(r) for some time. Since Last Crash 6911 sec Total Uptime 6911 sec Trigger Reason Access violation Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3419 Stack Trace js_NativeGet [mozilla/js/src/jsobj.c, line 3419] js_GetProperty [mozilla/js/src/jsobj.c, line 3569] js_Interpret [mozilla/js/src/jsinterp.c, line 5757] 0x033a28f0 ]
I don't have the (too old) Talkback Incident ID for this one.
No "Java" in this session. See <http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB31765658Q> [ Incident ID: 31765658 Stack Signature js_NativeGet ec3fccc3 Product ID MozillaTrunk Build ID 2007050209 Trigger Time 2007-05-03 04:57:56.0 Platform Win32 Operating System Windows NT 5.0 build 2195 Module js3250.dll + (0002e77c) URL visited User Comments Composing a text email. Since Last Crash 6543 sec Total Uptime 12092 sec Trigger Reason Access violation Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3457 Stack Trace js_NativeGet [mozilla/js/src/jsobj.c, line 3457] js_Interpret [mozilla/js/src/jsinterp.c, line 4098] 0x03285e6c ]
See <http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB31766657W> [ Incident ID: 31766657 Stack Signature js_NativeGet 5cfa2d18 Product ID MozillaTrunk Build ID 2007050209 Trigger Time 2007-05-03 05:38:58.0 Platform Win32 Operating System Windows NT 5.0 build 2195 Module js3250.dll + (0002e77c) URL visited User Comments composing (another) text email Since Last Crash 2402 sec Total Uptime 14494 sec Trigger Reason Access violation Source File, Line No. d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\js\src\jsobj.c, line 3457 Stack Trace js_NativeGet [mozilla/js/src/jsobj.c, line 3457] js_Interpret [mozilla/js/src/jsinterp.c, line 4098] 0x019580cc ] *** Reinstalling previous nightly, to see if this issue stops or not.
(No new crashes with 20070501 then 20070503 nightlies.)
I don't know if the crash I'm observing is the same or related to this bug, but here's the stacktrace: (fb8.f44): Access violation - code c0000005 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=00000001 ebx=00000b55 ecx=00000b52 edx=00000002 esi=07e161ac edi=07db7b69 eip=77c47322 esp=0012e2a4 ebp=0012e2ac iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00210202 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\msvcrt.dll - msvcrt!memmove+0x72: 77c47322 8a06 mov al,[esi] ds:0023:07e161ac=?? 0:000> kb *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Mozilla Firefox\js3250.dll - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 0012e2ac 60104a79 07db7b69 07e161ac 00000b55 msvcrt!memmove+0x72 0012e398 60104f13 0000066e 00000001 000002db js3250!js_FindProperty+0x26fb 0012e3f0 6010a170 0326c288 07bb1438 07bb153f js3250!js_FindProperty+0x2b95 0012e460 600d5499 07bb153f 00000000 60139fe8 js3250!js_FindProperty+0x7df2 0012e498 600edc67 05dea418 03700d40 00000000 js3250!JS_DecompileFunction+0x3e 0012e4b8 600f18ab 05dea418 03700d40 00000000 js3250!js_GetSrcNoteOffset+0x3671 0012e574 600f6e40 05dea418 00000000 00000000 js3250!js_Invoke+0x564 0012e6e0 600f1903 05dea418 05ee9908 0012e770 js3250!js_Invoke+0x5af9 *** ERROR: Symbol file could not be found. Defaulted to export symbols for firefox.exe - 0012e794 0042a9c6 05dea418 00000001 00000002 js3250!js_Invoke+0x5bc 0012e94c 00428d8a 07c94010 01da7ce0 00000008 firefox!NS_RegistryGetFactory+0x1fb03 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Mozilla Firefox\xpcom_core.dll - 0012ea18 6039c7b5 00000000 00000008 0012ea40 firefox!NS_RegistryGetFactory+0x1dec7 0012ea34 6039d2d7 05da7ce0 05c2af90 0012ea6c xpcom_core!nsXPTCStubBase::Stub3+0x20 0012ea48 00422c64 05da7ce0 00000008 00000001 xpcom_core!XPTC_InvokeByIndex+0x27 0012ec00 00420802 01000000 927fdf30 05dea418 firefox!NS_RegistryGetFactory+0x17da1 0012ec98 600f18ab 05dea418 037fdf30 00000001 firefox!NS_RegistryGetFactory+0x1593f 0012ed54 600f6e40 05dea418 00000001 00000000 js3250!js_Invoke+0x564 0012eec0 600f1903 05dea418 080b7188 0012ef50 js3250!js_Invoke+0x5af9 0012ef74 600edfa7 05dea418 00000003 00000006 js3250!js_Invoke+0x5bc 0012efa4 600f18ab 05dea418 0261b650 00000003 js3250!js_GetSrcNoteOffset+0x39b1 0012f060 600f6e40 05dea418 00000002 00000000 js3250!js_Invoke+0x564 It is _very_ repeatable for me. I'm on WinXP/Firefox 2.0.0.12. It seems to be related to Firebug, as when I disable Firebug, the crashes stop ... but "don't use Firebug" isn't a solution. There's a crash bug in FF here.
you need to fix this: WARNING: Stack unwind information not available. Following frames may be wrong. please follow: http://developer.mozilla.org/en/docs/How_to_get_a_stacktrace_with_WinDbg your problem is almost certainly a gc hazard induced by the js debugger (jsd_xpc) used by firebug, and such crashes are reported. i don't know if the reporter of this bug has venkman/firebug installed.
(In reply to comment #8) > i don't know if the reporter of this bug has venkman/firebug installed. I have never used Firebug. I seldom use Venkman, and I'm rather sure it was not the case for this bug. Yet, as I noted in comment 6, I haven't seem (any) crashes for a long time: R.WorksForMe. Dossy, please file a separate bug, as your report is with FF v2 branch, while mine was with SM 1.9 Trunk.
Status: UNCONFIRMED → RESOLVED
Closed: 17 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: