429331 - Retrosheet crashes FF3b5

Status: RESOLVED DUPLICATE of bug 303821

(Core :: XPConnect, defect)

Description

[oberon]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5

Going to retrosheet in FF3b5, the page loads fine, then pauses for a moment. Then FireFox crashes.

As a note, I submitted this multiple times with the built-in crash-logger thingy -- not sure if that goes anywhere.

Reproducible: Always

Steps to Reproduce:
1. Go to http://www.retrosheet.org/
2.
3.
Actual Results:  
Firefox crashed.

Expected Results:  
Firefox doesn't crash.

I do have a few extensions installed -- firebug, adblock, flashblock, UA Switcher. None of them were in use for retrosheet (the site doesn't use flash, has no ads, I use the default UA, and I didn't have firebug up), but they were installed and enabled.

Comment 1

[Matthias Versen [:Matti]]

Type about:crashes and provide 1-3 crash ids from such a crash.
Please also run firefox in the Firefox safemode (do that the next time before you write a bug report)  and try it again in the safemode.
- http://kb.mozillazine.org/Safe_Mode

If this works in the safemode you can disable the addons one-by-one.
You could also try a nightly build if this one got already fixed.

Comment 2

[oberon]

Crash reports:

7e0f3680-0b4f-11dd-b7ac-001cc4e2bf68
f123effd-00f4-11dd-85c5-001a4bd43e5c
21e75bae-ff64-11dc-ba39-001a4bd43e5c

That's pretty neat; didn't know I could get a stacktrace like that. I'll try to make the time to use safemode or a nightly at some point, but it looks like this is an infinite recursion in JEMAlloc -- kinda doubt a plug-in could cause that.

Comment 3

[Matthias Versen [:Matti]]

which plugin besides flash, java, Acrobat Reader, the default plugin do you have installed ?

Comment 4

[oberon]

(In reply to comment #3)
> which plugin besides flash, java, Acrobat Reader, the default plugin do you
> have installed ?
> 

AdBlock Plus 0.7.5.4
Firebug 1.1.0b10
Flashblock 1.5.5
User Agent Switcher 0.6.11

Comment 5

[oberon]

(In reply to comment #1)
> Type about:crashes and provide 1-3 crash ids from such a crash.
> Please also run firefox in the Firefox safemode (do that the next time before
> you write a bug report)  and try it again in the safemode.
> - http://kb.mozillazine.org/Safe_Mode
> 
> If this works in the safemode you can disable the addons one-by-one.
> You could also try a nightly build if this one got already fixed.
> 

Tried out in safe mode -- the browser gets to the same point but then freezes and spikes my CPU for about 10 seconds. After that, it seems fine.

Reloading the page produces the same behavior. I'm running on a fairly powerful machine -- I strongly suspect the CPU hogging is a bug. That said, it doesn't crash in safe mode, so it's possible this should go from "critical" to "severe".

Comment 6

[oberon]

(In reply to comment #5)
> (In reply to comment #1)
> > Type about:crashes and provide 1-3 crash ids from such a crash.
> > Please also run firefox in the Firefox safemode (do that the next time before
> > you write a bug report)  and try it again in the safemode.
> > - http://kb.mozillazine.org/Safe_Mode
> > 
> > If this works in the safemode you can disable the addons one-by-one.
> > You could also try a nightly build if this one got already fixed.
> > 
> 
> Tried out in safe mode -- the browser gets to the same point but then freezes
> and spikes my CPU for about 10 seconds. After that, it seems fine.
> 
> Reloading the page produces the same behavior. I'm running on a fairly powerful
> machine -- I strongly suspect the CPU hogging is a bug. That said, it doesn't
> crash in safe mode, so it's possible this should go from "critical" to
> "severe".
> 

Sorry, right term is "critical" to "major".

Comment 7

[timeless]

Signature	arena_malloc_small
UUID	7e0f3680-0b4f-11dd-b7ac-001cc4e2bf68
Time	2008-04-15 17:53:00-07:00
Uptime	33686
Product	Firefox
Version	3.0b5
Build ID	2008032620
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	GenuineIntel family 6 model 15 stepping 2
Crash Reason	EXCEPTION_STACK_OVERFLOW
Crash Address	0x6000680c
Comments	
Crashing Thread
Frame 	Module 	Signature 	Source
0 	mozcrt19.dll 	arena_malloc_small 	jemalloc.c:3610
1 	mozcrt19.dll 	arena_malloc 	jemalloc.c:3717
2 	mozcrt19.dll 	malloc 	jemalloc.c:5813
3 	mozcrt19.dll 	operator new 	new.cpp:54
4 	xul.dll 	XPCJSStackFrame::CreateStack 	mozilla/js/src/xpconnect/src/xpcstack.cpp:135
5 	xul.dll 	XPCJSStackFrame::CreateStack 	mozilla/js/src/xpconnect/src/xpcstack.cpp:144
6 	mozcrt19.dll 	malloc 	jemalloc.c:5813
7 	mozcrt19.dll 	malloc 	jemalloc.c:5813
8 	mozcrt19.dll 	malloc 	jemalloc.c:5813
9 	mozcrt19.dll 	malloc 	jemalloc.c:5813
10 	mozcrt19.dll 	malloc 	jemalloc.c:5813

The signature is XPCJSStackFrame::CreateStack, if you disable firebug the crash will go away. I have a bug somewhere about making CreateStack not be recursive. I even have a patch.

Comment 8

[oberon]

(In reply to comment #7)
> Signature       arena_malloc_small
> bp-7e0f3680-0b4f-11dd-b7ac-001cc4e2bf68
> Time    2008-04-15 17:53:00-07:00
> Uptime  33686
> Product Firefox
> Version 3.0b5
> Build ID        2008032620
> OS      Windows NT
> OS Version      5.1.2600 Service Pack 2
> CPU     x86
> CPU Info        GenuineIntel family 6 model 15 stepping 2
> Crash Reason    EXCEPTION_STACK_OVERFLOW
> Crash Address   0x6000680c
> Comments        
> Crashing Thread
> Frame   Module  Signature       Source
> 0       mozcrt19.dll    arena_malloc_small      jemalloc.c:3610
> 1       mozcrt19.dll    arena_malloc    jemalloc.c:3717
> 2       mozcrt19.dll    malloc  jemalloc.c:5813
> 3       mozcrt19.dll    operator new    new.cpp:54
> 4       xul.dll         XPCJSStackFrame::CreateStack   
> mozilla/js/src/xpconnect/src/xpcstack.cpp:135
> 5       xul.dll         XPCJSStackFrame::CreateStack   
> mozilla/js/src/xpconnect/src/xpcstack.cpp:144
> 6       mozcrt19.dll    malloc  jemalloc.c:5813
> 7       mozcrt19.dll    malloc  jemalloc.c:5813
> 8       mozcrt19.dll    malloc  jemalloc.c:5813
> 9       mozcrt19.dll    malloc  jemalloc.c:5813
> 10      mozcrt19.dll    malloc  jemalloc.c:5813
> 
> The signature is XPCJSStackFrame::CreateStack, if you disable firebug the crash
> will go away. I have a bug somewhere about making CreateStack not be recursive.
> I even have a patch.
> 

While running in safe mode does prevent the crash (assumedly because Firebug is disabled), it does *not* prevent bad behavior (as noted above). Never done anything with an FF bug before, so not sure what to do with this -- refile as a performance issue, change name of this bug? Leave as is?

Comment 9

[Matthias Versen [:Matti]]

Please avoid it to quote the full text if not necessary because it makes the bug less readable. This should be bug 303821, i will mark as dupe.

Please retest this with a nightly build and if the crash is not fixed reopen this bug. The 10s freeze itself matches the crash, a recursive script must be on that page.

-> ftp://ftp.mozilla.org/pub/firefox/nightly/latest-trunk/