Closed Bug 403247 Opened 18 years ago Closed 14 years ago

crash changing a list of CC-readers into TO-readers [@ nsQueryInterface::operator] [@ nsGenericElement::HandleDOMEvent]

Categories

(Thunderbird :: Message Compose Window, defect)

Product:
Thunderbird
Component:
Message Compose Window
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED INCOMPLETE

People

(Reporter: wsmwk, Unassigned)

References

Details

(Keywords: crash, topcrash)

Crash Data

nsQueryInterface::operator is a topcrash on talkback for 2.0.0.6, all are windows. There appears to be several different stacks but did not attempt a large sample - so leaving off topcrash keyword for now. I'm filing two distinct stacks - this is one: TB37720154 changing a list of CC-readers into TO-readers nsQueryInterface::operator() [mozilla/xpcom/build/nsCOMPtr.cpp, line 47] nsGenericElement::HandleDOMEvent [mozilla/content/base/src/nsGenericElement.cpp, line 2243] nsGenericDOMDataNode::HandleDOMEvent [mozilla/content/base/src/nsGenericDOMDataNode.cpp, line 847] nsEventStateManager::DispatchNewEvent [mozilla/content/events/src/nsEventStateManager.cpp, line 4745] nsEventListenerManager::DispatchEvent [mozilla/content/events/src/nsEventListenerManager.cpp, line 2138] nsDOMEventRTTearoff::DispatchEvent [mozilla/content/base/src/nsGenericElement.cpp, line 701] nsEventStateManager::DoScrollText [mozilla/content/events/src/nsEventStateManager.cpp, line 1872] nsEventStateManager::PostHandleEvent [mozilla/content/events/src/nsEventStateManager.cpp, line 2299] PresShell::HandleEventInternal [mozilla/layout/base/nsPresShell.cpp, line 6504] PresShell::HandleEvent [mozilla/layout/base/nsPresShell.cpp, line 6268] nsViewManager::HandleEvent [mozilla/view/src/nsViewManager.cpp, line 2566] nsViewManager::DispatchEvent [mozilla/view/src/nsViewManager.cpp, line 2253] HandleEvent [mozilla/view/src/nsView.cpp, line 174] nsWindow::DispatchEvent [mozilla/widget/src/windows/nsWindow.cpp, line 1319] nsWindow::ProcessMessage [mozilla/widget/src/windows/nsWindow.cpp, line 5600] nsWindow::ProcessMessage [mozilla/widget/src/windows/nsWindow.cpp, line 5548] nsWindow::WindowProc [mozilla/widget/src/windows/nsWindow.cpp, line 1507] USER32.dll + 0x8734 (0x7e418734) USER32.dll + 0x8816 (0x7e418816) USER32.dll + 0x89cd (0x7e4189cd) USER32.dll + 0x8a10 (0x7e418a10) nsAppShell::Run [mozilla/widget/src/windows/nsAppShell.cpp, line 159] nsAppStartup::Run [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152] main [mozilla/mail/app/nsMailApp.cpp, line 62] kernel32.dll + 0x16fd7 (0x7c816fd7)
confirming as topcrash. #8 crasher for Thunderbird 2.0.0.14 on talkback. changing to OS=ALL, see Mac and linux crash reports with same line #. (but many crashes have no stack) TB44698990 Mac trying to send an email with a small attachment (pdf) TB43572926 linux Composing email adding address from Address Book linux bug 403248 calls out same line# in the crash, eg TB43572926 so I think that's going to be a duplicate TB44698990 Mac /builds/tinderbox/Tb-Mozilla1.8-Release/Darwin_8.7.0_Depend/build/universal/ppc/xpcom/build/nsCOMPtr.cpp, line 47 Stack Trace nsQueryInterface::operator() nsCOMPtr_base::assign_from_qi() nsMsgAsyncWriteProtocol::UpdateProgress() [mozilla/mailnews/base/util/nsMsgProtocol.cpp, line 8] nsMsgProtocolStreamProvider::OnOutputStreamReady() nsOutputStreamReadyEvent::EventHandler() PL_HandleEvent() [mozilla/xpcom/threads/plevent.c, line 689] PL_ProcessPendingEvents() [mozilla/xpcom/threads/plevent.c, line 623] CoreFoundation.368.32.0 + 0x2430c (0x907e030c) CoreFoundation.368.32.0 + 0x2383c (0x907df83c) CoreFoundation.368.32.0 + 0x232bc (0x907df2bc) HIToolbox.228.0.0 + 0x8b20 (0x9329bb20) HIToolbox.228.0.0 + 0x812c (0x9329b12c) HIToolbox.228.0.0 + 0x4d348 (0x932e0348) HIToolbox.228.0.0 + 0x4d138 (0x932e0138) nsAppShell::Run() [mozilla/widget/src/mac/nsAppShell.cpp, line 94] nsAppStartup::Run() [mozilla/db/sqlite3/src/pragma.c, line 152] XRE_main() [mozilla/toolkit/xre/nsAppRunner.cpp, line 2819] _start() start() TB43572926 linux Composing email; adding address from Address Book nsQueryInterface::operator() [mozilla/xpcom/build/nsCOMPtr.cpp, line 47] nsCOMPtr_base::assign_from_qi() [mozilla/xpcom/build/nsCOMPtr.cpp, line 96] nsXBLService::GetBinding() [mozilla/content/xbl/src/nsXBLService.cpp, line 830] nsXBLService::GetBinding() [mozilla/content/xbl/src/nsXBLService.cpp, line 78] nsXBLService::LoadBindings() [mozilla/content/xbl/src/nsXBLService.cpp, line 1207] nsElementSH::PostCreate() [mozilla/dom/src/base/nsDOMClassInfo.cpp, line 7092] XPCWrappedNative::GetNewOrUsed() [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 1550] XPCConvert::NativeInterface2JSObject() [mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 1079] XPCConvert::NativeData2JS() [mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 1453] XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)() [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 136] XPC_WN_CallMethod() [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455] js_Invoke() [mozilla/js/src/jsinterp.c, line 1384] js_Interpret() [mozilla/js/src/jsinterp.c, line 3953] js_Execute() [mozilla/js/src/jsinterp.c, line 1642] JS_EvaluateUCScriptForPrincipals() [mozilla/js/src/jsapi.c, line 4309] nsJSContext::EvaluateStringWithValue() [mozilla/dom/src/base/nsJSEnvironment.cpp, line 146] nsXBLProtoImplField::InstallMember() [mozilla/content/xbl/src/nsXBLProtoImplField.cpp, line 848] nsXBLProtoImpl::InstallImplementation() [mozilla/content/xbl/src/nsXBLProtoImpl.cpp, line 106] nsXBLPrototypeBinding::InstallImplementation() [mozilla/content/xbl/src/nsXBLPrototypeBinding.cpp, line 444] nsXBLBinding::InstallImplementation() [mozilla/content/xbl/src/nsXBLBinding.cpp, line 758] nsXBLService::LoadBindings() [mozilla/content/xbl/src/nsXBLService.cpp, line 637] nsElementSH::PostCreate() [mozilla/dom/src/base/nsDOMClassInfo.cpp, line 7092] XPCWrappedNative::GetNewOrUsed() [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 1550] XPCConvert::NativeInterface2JSObject() [mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 1079] XPCConvert::NativeData2JS() [mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 1453] XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)() [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 136] XPC_WN_CallMethod() [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455] js_Invoke() [mozilla/js/src/jsinterp.c, line 1384] js_Interpret() [mozilla/js/src/jsinterp.c, line 3953] js_Execute() [mozilla/js/src/jsinterp.c, line 1642] JS_EvaluateUCScriptForPrincipals() [mozilla/js/src/jsapi.c, line 4309] nsJSContext::EvaluateStringWithValue() [mozilla/dom/src/base/nsJSEnvironment.cpp, line 146] nsXBLProtoImplField::InstallMember() [mozilla/content/xbl/src/nsXBLProtoImplField.cpp, line 848] nsXBLProtoImpl::InstallImplementation() [mozilla/content/xbl/src/nsXBLProtoImpl.cpp, line 106] nsXBLPrototypeBinding::InstallImplementation() [mozilla/content/xbl/src/nsXBLPrototypeBinding.cpp, line 444] nsXBLBinding::InstallImplementation() [mozilla/content/xbl/src/nsXBLBinding.cpp, line 758] nsXBLService::LoadBindings() [mozilla/content/xbl/src/nsXBLService.cpp, line 637] nsCSSFrameConstructor::ConstructFrameInternal() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 7829] nsCSSFrameConstructor::ConstructFrame() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 1056] nsCSSFrameConstructor::ProcessChildren() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 59] nsCSSFrameConstructor::ConstructXULFrame() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 6426] nsCSSFrameConstructor::ConstructFrameInternal() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 7916] nsCSSFrameConstructor::ConstructFrame() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 1056] nsCSSFrameConstructor::ProcessChildren() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 59] nsCSSFrameConstructor::ConstructXULFrame() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 6426] nsCSSFrameConstructor::ConstructFrameInternal() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 7916] nsCSSFrameConstructor::CreateListBoxContent() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 867] nsListBoxBodyFrame::GetNextItemBox() [mozilla/layout/xul/base/src/nsListBoxBodyFrame.cpp, line 1202] nsListBoxBodyFrame::CreateRows() [mozilla/layout/xul/base/src/nsListBoxBodyFrame.cpp, line 1053] nsListBoxBodyFrame::OnContentInserted() [mozilla/layout/xul/base/src/nsListBoxBodyFrame.cpp, line 1314] NotifyListBoxBody() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 9207] nsCSSFrameConstructor::ContentInserted() [mozilla/layout/base/nsCSSFrameConstructor.cpp, line 177] PresShell::ContentInserted() [mozilla/layout/base/nsPresShell.cpp, line 5626] nsDocument::ContentInserted() [mozilla/content/base/src/nsDocument.cpp, line 848] nsXULElement::InsertChildAt() [mozilla/content/xul/content/src/nsXULElement.cpp, line 1129] nsGenericElement::doReplaceOrInsertBefore() [mozilla/content/base/src/nsGenericElement.cpp, line 2954] nsGenericElement::ReplaceChild() [mozilla/content/base/src/nsGenericElement.cpp, line 3082] XPTC_InvokeByIndex() XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)() [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 3186] XPC_WN_CallMethod() [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455] js_Invoke() [mozilla/js/src/jsinterp.c, line 1384] js_Interpret() [mozilla/js/src/jsinterp.c, line 3953] js_Invoke() [mozilla/js/src/jsinterp.c, line 1403] js_InternalInvoke() [mozilla/js/src/jsinterp.c, line 1478] JS_CallFunctionValue() [mozilla/js/src/jsapi.c, line 4363] nsJSContext::CallEventHandler() [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1495] nsJSEventListener::HandleEvent() [mozilla/dom/src/events/nsJSEventListener.cpp, line 185] nsEventListenerManager::HandleEventSubType() [mozilla/content/events/src/nsEventListenerManager.cpp, line 848] nsEventListenerManager::HandleEvent() [mozilla/content/events/src/nsEventListenerManager.cpp, line 955] nsXULElement::HandleDOMEvent() [mozilla/content/xul/content/src/nsXULElement.cpp, line 2234] nsXULElement::HandleDOMEvent() [mozilla/content/xul/content/src/nsXULElement.cpp, line 848] nsXULElement::HandleDOMEvent() [mozilla/content/xul/content/src/nsXULElement.cpp, line 848] nsXULElement::HandleDOMEvent() [mozilla/content/xul/content/src/nsXULElement.cpp, line 848] PresShell::HandleEventInternal() [mozilla/layout/base/nsPresShell.cpp, line 848] PresShell::HandleEventWithTarget() [mozilla/layout/base/nsPresShell.cpp, line 6420] nsEventStateManager::CheckForAndDispatchClick() [mozilla/content/events/src/nsEventStateManager.cpp, line 3207] nsEventStateManager::PostHandleEvent() [mozilla/content/events/src/nsEventStateManager.cpp, line 1056] PresShell::HandleEventInternal() [mozilla/layout/base/nsPresShell.cpp, line 848] PresShell::HandleEvent() [mozilla/layout/base/nsPresShell.cpp, line 6357] nsViewManager::HandleEvent() [mozilla/view/src/nsViewManager.cpp, line 848] nsViewManager::DispatchEvent() [mozilla/view/src/nsViewManager.cpp, line 2261] HandleEvent() [mozilla/view/src/nsView.cpp, line 251] nsCommonWidget::DispatchEvent() [mozilla/widget/src/gtk2/nsCommonWidget.cpp, line 219] nsWindow::OnButtonReleaseEvent() [mozilla/widget/src/gtk2/nsWindow.cpp, line 1725] button_release_event_cb() [mozilla/widget/src/gtk2/nsWindow.cpp, line 3924] bug 330081 states FF crash numbers were dropping for nsQueryInterface:operator - so perhaps unrelated
Status: UNCONFIRMED → NEW
Ever confirmed: true
OS: Windows XP → All
Hardware: PC → All
irrc my initial reluctance to confirm this bug was because of comments in bug 330081 and relative lack of trunk crashes. Note: zero nsQueryInterface::operator() TB crashes on crash-stats since 2008012303 build. FF bug 330081 cites same line number 47, but the bug has not progressed in 2 years
Keywords: topcrash
Crash Signature: [@ nsQueryInterface::operator] [@ nsGenericElement::HandleDOMEvent]
no steps to reproduce and this top of stack doesn't exist on crash-stats, so no point in keeping open.
Status: NEW → RESOLVED
Crash Signature: [@ nsQueryInterface::operator] [@ nsGenericElement::HandleDOMEvent] → [@ nsQueryInterface::operator] [@ nsGenericElement::HandleDOMEvent]
Closed: 14 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.