crashes at nsTObserverArray_base::AdjustIterators(int, int)




11 years ago
9 years ago


(Reporter: beltzner, Unassigned)


Mac OS X

Firefox Tracking Flags

(Not tracked)




(1 attachment)

(Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.9a9pre) Gecko/2007102904 Minefield/3.0a9pre, on OS X 10.5 9A559)

I've been getting a lot of crashes lately, all with the same stack trace. I don't have solid STR, but it seems to happen more when I'm using Bugzilla, like now!

The symptoms are:
 - the in focus tab fails to load (half-renders, throbber just spins)
 - I click any UI element
 - crash!
Created attachment 286642 [details]
contents of safe-mode console output

Attached the console output from safe-mode in case it's indicative of something ...
Component: General → General
Product: Firefox → Core
QA Contact: general → general

Comment 2

11 years ago
the comments list a number of bugs, are you sure we needed one more?
Component: General → XBL
QA Contact: general → xbl
I don't see what XBL has to do with it.  All document mutations go through the binding manager, but that's the only XBL involvement I see in the stack.  Putting back in General pending someone having some idea what's going on.

If we have other bugs with the same stack, perhaps they should all depend on one of them.  Do any of those other bugs have any reliable steps to reproduce?
Component: XBL → General
QA Contact: xbl → general
Again, not sure if it helps, but when I attach gdb to a build and watch it crash, I get:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x0000003f
0x0139247f in GetSecurityContext ()

Not running a debug build (can't get XCode 3.0 to install on this machine atm), sorry that I don't have symbols.
I hit this same crasher a bunch of times with 2007112004 and 2007112104  on Mac OS X 10.4.11

Like beltzner, I don't have any steps to reproduce.  

I think I was either closing tabs, closing windows, or clicking on links?  Sorry, that isn't very helpful.

On the top of the stacks, I usually see something like:

0     nsTObserverArray_base::AdjustIterators(int, int)     nsTObserverArray.cpp:50
1     nsBindingManager::RemoveObserver(nsIMutationObserver*)     mozilla/content/xbl/src/nsBindingManager.cpp:159
2     nsDocument::RemoveMutationObserver(nsIMutationObserver*)     mozilla/content/base/src/nsDOMSerializer.cpp:2684
3     nsDocument::RemoveObserver(nsIDocumentObserver*)     mozilla/content/base/src/nsDOMSerializer.cpp:2705


0  	nsTObserverArray_base::AdjustIterators(int, int)  	 nsTObserverArray.cpp:51
1 	nsDocument::DeleteShell(nsIPresShell*) 	mozilla/content/base/src/nsDOMSerializer.cpp:159

But beyond that, it varies.

So, for a while I tried disabling extensions, but it kept happening.
I tried ditching my sessionstore, but it kept happening.

Then it stopped for a while. I haven't felt it since.

It saddens me that Seth is affected.

Josh: anything in that stack inspire you?
I'm not using extensions.  I don't think I was using the proto theme, either.

note, I haven't crashed Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9b2pre) Gecko/2007112104 Minefield/3.0b2pre since I've rebooted.

I'll keep an eye out.

Comment 8

9 years ago
There were only 5 crash reports in nsTObserverArray_base::AdjustIterators this week, and most of those were from Firefox 3.0 Beta 3 (!).  I think I can confidently say this is no longer a frequent crash.
Last Resolved: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.