Closed Bug 401641 Opened 18 years ago Closed 16 years ago

crash [@ nsCSubstring::Equals - nsCacheEntryHashTable::MatchEntry]

Categories

(Core :: Networking: Cache, defect)

Product:
Core
Component:
Networking: Cache
Version:
1.8 Branch
Platform:
x86
Windows Vista
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: peternied, Unassigned)

References

(
URL
)

Details

(Keywords: crash)

Crash Data

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322; InfoPath.2; MS-RTC LM 8) Build Identifier: 2.0.0.6 WinDBG !analyze -v with full symbols: ******************************************************************************* * * * Exception Analysis * * * ******************************************************************************* FAULTING_IP: xpcom_core!nsCSubstring::Equals+4 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/string/src/nsTSubstring.cpp @ 572] 603a18f9 8b4108 mov eax,dword ptr [ecx+8] EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff) ExceptionAddress: 603a18f9 (xpcom_core!nsCSubstring::Equals+0x00000004) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 00000000 Parameter[1]: 00000009 Attempt to read from address 00000009 FAULTING_THREAD: 00000c7c PROCESS_NAME: firefox.exe ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. READ_ADDRESS: 00000009 BUGCHECK_STR: ACCESS_VIOLATION DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE LAST_CONTROL_TRANSFER: from 004b2a64 to 603a18f9 STACK_TEXT: 0012f464 004b2a64 0a0d2a08 6036149a 0256cf3c xpcom_core!nsCSubstring::Equals+0x4 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/string/src/nsTSubstring.cpp @ 572] 0012f46c 6036149a 0256cf3c 1480f5e0 0a0d2a08 firefox!nsCacheEntryHashTable::MatchEntry+0x14 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/cache/src/nsCacheEntry.cpp @ 538] 0012f498 6036144d 00000017 0a0d2a08 54d9b396 xpcom_core!SearchTable+0x41 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/build/pldhash.c @ 421] 0012f4bc 004b29d0 0256cf3c 0a0d2a08 00000000 xpcom_core!PL_DHashTableOperate+0x13b [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/build/pldhash.c @ 557] 0012f4d0 00483ce7 0a0d2a08 80000000 0abddc58 firefox!nsCacheEntryHashTable::GetEntry+0x18 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/cache/src/nsCacheEntry.cpp @ 447] 0012f4ec 00483a02 0abddc58 0012f510 0abddc58 firefox!nsCacheService::ActivateEntry+0x5d [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/cache/src/nsCacheService.cpp @ 941] 0012f514 00483c16 0abddc58 00000001 0dca5654 firefox!nsCacheService::ProcessRequest+0x32 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/cache/src/nsCacheService.cpp @ 838] 0012f534 004b2be4 03e6e208 0012f57c 00000003 firefox!nsCacheService::OpenCacheEntry+0x65 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/cache/src/nsCacheService.cpp @ 917] 0012f554 004c102d 03e6e208 0012f57c 00000003 firefox!nsCacheSession::OpenCacheEntry+0x19 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/cache/src/nsCacheSession.cpp @ 98] 0012f5dc 004bf5d7 00000003 0012f608 0dca5544 firefox!nsHttpChannel::OpenCacheEntry+0x13a [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp @ 1329] 0012f614 004c44c9 0032e2c8 00000000 80000000 firefox!nsHttpChannel::Connect+0x10e [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp @ 345] 0012f634 004babf0 0dca5518 0abe6588 00000000 firefox!nsHttpChannel::AsyncOpen+0x16c [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp @ 3389] 0012f658 004c4358 0dca5544 0012f69c 6039d2d8 firefox!NS_ImplementChannelOpen+0x37 [../../../../dist/include/necko\nsNetUtil.h @ 510] 0012f664 6039d2d8 0dca5544 0012f69c 0012f69c firefox!nsHttpChannel::Open+0x17 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp @ 3327] 0012f678 00422a87 0dca5544 0000001b 00000001 xpcom_core!XPTC_InvokeByIndex+0x27 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp @ 102] 0012f830 00420629 01000000 92d34418 0289db88 firefox!XPCWrappedNative::CallMethod+0x6b6 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp @ 2169] 0012f8c8 600f1832 0289db88 0ad34418 00000000 firefox!XPC_WN_CallMethod+0x8e [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp @ 1455] 0012f984 600f6dc2 0289db88 00000000 00000000 js3250!js_Invoke+0x55e [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c @ 1375] 0012faf0 600f1ede 0289db88 0ad34590 0012fb30 js3250!js_Interpret+0x49f3 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c @ 3946] 0012fb78 600d56ce 025d34e0 02600868 0622b7f0 js3250!js_Execute+0x1a6 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c @ 1634] 0012fba4 0061a8b9 0289db88 02600868 003eac24 js3250!JS_EvaluateUCScriptForPrincipals+0x55 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/js/src/jsapi.c @ 4296] 0012fc04 00629fea 0012fc38 02600868 00000000 firefox!nsJSContext::EvaluateString+0x1d6 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp @ 1100] 0012fcc8 0062a56b 030d03d0 04a414b8 6038ff04 firefox!nsGlobalWindow::RunTimeout+0x1ca [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp @ 6790] 0012fcd4 6038ff04 04a414b8 128e4e18 02646804 firefox!nsGlobalWindow::TimerCallback+0x14 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp @ 7181] 0012fce4 603902d1 00000001 00000000 003d6bd8 xpcom_core!nsTimerImpl::Fire+0x69 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp @ 394] 0012fcf4 0055cc9b 026467f8 80000000 003e2710 xpcom_core!nsTimerManager::FireNextIdleTimer+0x65 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp @ 628] 0012fd48 00851677 026467f8 603617d4 004027a2 firefox!nsAppShell::Run+0xbe [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/widget/src/windows/nsAppShell.cpp @ 142] 0012fd54 004027a2 003e2710 00000000 76811764 firefox!nsAppStartup::Run+0x18 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp @ 152] 0012fee4 00401012 00318e34 0287ee58 003e2710 firefox!XRE_main+0xaf8 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/toolkit/xre/nsAppRunner.cpp @ 2727] 0012fef4 0040102e 00000001 002f8be8 00162347 firefox!main+0x12 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp @ 61] 0012ff04 009666e2 00400000 00000000 00162347 firefox!WinMain+0x18 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp @ 70] 0012ffa0 76d93833 7ffd4000 0012ffec 77a8a9bd firefox!WinMainCRTStartup+0x134 0012ffac 77a8a9bd 7ffd4000 0012b2c5 00000000 kernel32!BaseThreadInitThunk+0xe 0012ffec 00000000 009665ae 7ffd4000 00000000 ntdll!_RtlUserThreadStart+0x23 FOLLOWUP_IP: xpcom_core!nsCSubstring::Equals+4 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/string/src/nsTSubstring.cpp @ 572] 603a18f9 8b4108 mov eax,dword ptr [ecx+8] SYMBOL_STACK_INDEX: 0 FOLLOWUP_NAME: MachineOwner MODULE_NAME: xpcom_core IMAGE_NAME: xpcom_core.dll DEBUG_FLR_IMAGE_TIMESTAMP: 470acd81 SYMBOL_NAME: xpcom_core!nsCSubstring::Equals+4 STACK_COMMAND: ~0s ; kb FAILURE_BUCKET_ID: ACCESS_VIOLATION_xpcom_core!nsCSubstring::Equals+4 BUCKET_ID: ACCESS_VIOLATION_xpcom_core!nsCSubstring::Equals+4 Followup: MachineOwner --------- Reproducible: Didn't try Steps to Reproduce: I was in a running in multiple tabs, and I was filling in some forum data on a website (the site itself seems to be irrelvant from the callstack) Note: I was running 'Pandora's flash music player in a tab (http://www.pandora.com), when the crash happened. Actual Results: I hit a access violation. Expected Results: No AV Not hit an access violation.
Version: unspecified → 2.0 Branch
typically there's no reason to cc yourself to a bug you file, you'll get mail for life anyway. (yes, https://bugzilla.mozilla.org/userprefs.cgi?tab=email could enable you to file bugs and choose to ignore them in the case they go haywire, however the pain of doing this really isn't worth trying, and to most people it would make you look like a confused newbie.)
Component: General → Networking: Cache
Keywords: crash
Product: Firefox → Core
QA Contact: general → networking.cache
Version: 2.0 Branch → 1.8 Branch
URL: http://bonsai.mozilla.org/cvsblame.cg...
Summary: Access Violation in xpcom_core!nsCSubstring::Equals+4 [c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/xpcom/string/src/nsTSubstring.cpp @ 572] → crash [@ nsCSubstring::Equals - nsCacheEntryHashTable::MatchEntry]
No null derefs in this function in the last week.
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → INCOMPLETE
Crash Signature: [@ nsCSubstring::Equals - nsCacheEntryHashTable::MatchEntry]
You need to log in before you can comment on or make changes to this bug.