458171 - crash [@ BL_Cleanup]

Status: RESOLVED INCOMPLETE

(NSS :: Libraries, defect)

Description

[(mostly gone) XtC4UaLL [:xtc4uall]]

this crashreport was reported by a user on the german support forum using Fx 3.0.3.
the crash happens when browsing some sites/trying to update Fx using the built-in updater.
the user also mentioned the skype extension.
after deinstalling the skype extension and installing Fx 3.0.3 again (without removing the prior install) the crashing was mentioned to be gone.

bp-86b9943a-8ed3-11dd-aa97-001cc4e2bf68
Signature	BL_Cleanup
UUID	86b9943a-8ed3-11dd-aa97-001cc4e2bf68
Time	2008-09-30 02:38:16-07
Uptime	47
Product	Firefox
Version	3.0.3
Build ID	2008092417
OS	Windows NT
OS Version	5.1.2600 Service Pack 3
CPU	x86
CPU Info	GenuineIntel family 6 model 23 stepping 10
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0xffffffffedfbd4e2

Frame 	Module 	Signature [Expand] 	Source
0 	freebl3.dll 	BL_Cleanup 	
1 	xul.dll 	nsNSSComponent::DoProfileBeforeChange 	mozilla/security/manager/ssl/src/nsNSSComponent.cpp:2388
2 	xul.dll 	nsNSSComponent::Observe 	mozilla/security/manager/ssl/src/nsNSSComponent.cpp:1972
3 	xul.dll 	nsObserverService::NotifyObservers 	mozilla/xpcom/ds/nsObserverService.cpp:181
4 	xul.dll 	xul.dll@0x7b992b 	
5 	xul.dll 	xul.dll@0x7b99fb 

gonna try to gather more information from the user, leaving UNCONFIRMED for now.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

That stack is bogus.  
nsNSSComponent::DoProfileBeforeChange does not call BL_Cleanup.
BL_Cleanup is a private internal function of NSS.
It is possible that a function called by 
nsNSSComponent::DoProfileBeforeChange has led to a call to BL_Cleanup, 
but in that case there would be a much deeper stack, with many levels
of calls between those two functions.  
So, that stack is simply not accurate.
Knowing that, I am inclined to disbelieve it. 

If it actually is correct that nsNSSComponent::DoProfileBeforeChange has 
called a function that (after many levels of stack) has called BL_Cleanup,
then it would be worthwhile to find out why Mozilla browser builds of 
NSS do not show complete stacks (on windows).  

Finally, I will add that the most likely cause of a crash in BL_Cleanup,
IMO, is heap corruption.  Given that the problem is thought to not occur
when a certain third party's extension is not used, I opine that heap
corruption caused by that third party software is a likely suspect.

Comment 2

[(mostly gone) XtC4UaLL [:xtc4uall]]

resolving due to lack of further informations (extension etc.).