411068 - nsUrlClassifierDBServiceWorker::Lookup proxy uses uninitialized data for PRBool Parameter on x86_64

Status: VERIFIED DUPLICATE of bug 409294

(Core :: XPCOM, defect)

Description

[Robert Sayre]

The symptom is something like this:
==20775== Conditional jump or move depends on uninitialised value(s)
==20775==    by 0x58BE46A: nsProxyObjectCallInfo::CopyStrings(int) (nsProxyEvent.cpp:231)
==20775==    by 0x58BE811: nsProxyObjectCallInfo::nsProxyObjectCallInfo(nsProxyEventObject*, XPTMethodDescriptor const*, unsigned, nsXPTCVariant*, unsigned) (nsProxyEvent.cpp:148)
==20775==    by 0x58BFE05: nsProxyEventObject::CallMethod(unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) (nsProxyEventObject.cpp:237)
==20775==    by 0x58CF718: PrepareAndDispatch (xptcstubs_x86_64_linux.cpp:152)
==20775==    by 0x58CE77E: SharedStub (in /home/sayrer/dev/debug_firefox/mozilla/ff-debug-libxul/xpcom/build/libxpcom_core.so)
==20775==    by 0x145E216C: nsUrlClassifierDBService::LookupURI(nsIURI*, nsIUrlClassifierCallback*, int) (nsUrlClassifierDBService.cpp:2464)

Comment 1

[Robert Sayre]

Attachment: valgrind w/ printfs showing param values

Notice that the second byte of the PRBool param is zero.

Comment 2

[Robert Sayre]

The call that causes this is in nsUrlClassifierDBService.cpp:

2450   // The actual worker uses the background thread.
2451   nsCOMPtr<nsIUrlClassifierDBServiceWorker> proxy;
...
2464   return proxy->Lookup(EmptyCString(), nsnull, PR_FALSE);

Comment 3

[Mats Palmgren (inactive)]

Dupe of bug 409294?

Comment 4

[Robert Sayre]

For sure