Closed
Bug 460026
Opened 17 years ago
Closed 15 years ago
Crash and memory leak...
Categories
(Core :: XPCOM, defect)
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: lamsoft, Unassigned)
References
()
Details
(Keywords: crash)
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
see the picture....
Reproducible: Always
Steps to Reproduce:
1.goto that webpage and crash...
2.
3.
Actual Results:
crashed
Expected Results:
browse normally
image for reference: http://xs232.xs.to/xs232/08423/546aer928.jpg
Some Dump from the firefox...
Add-ons: filtersetg@updater:0.3.1.3,{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:0.7.5.5,elemhidehelper@adblockplus.org:1.0.5,{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.03,{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.6.3,firebug@software.joehewitt.com:1.2.1,{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.1.2,foxmarks@kei.com:2.1.0.12,{37E4D8EA-8BDA-4831-8EA1-89053939A250}:2.0.0.0,{888d99e7-e8b5-46a3-851e-1ec45da1e644}:3.0.0,{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}:10.1.0,{c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.6,{22870005-adef-4c9d-ae36-d0e1f2f27e5a}:0.3.9,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.3
BuildID: 2008092417
CrashTime: 1224076118
InstallTime: 1222530836
ProductName: Firefox
StartupTime: 1224076052
Theme: classic/1.0
URL: http://www.google.com.hk/search?hl=zh-TW&q=%E6%96%B0%E4%B8%96%E7%95%8C+idd&btnG=Google+%E6%90%9C%E5%B0%8B&meta=&aq=f&oq=
UserID: 502f4411-3a28-445a-a2b2-1f68a12399bf
Vendor: Mozilla
Version: 3.0.3
This report also contains technical information about the state of the application when it crashed.
More reference,
safe mode & disable all addons
Add-ons: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.3
BuildID: 2008092417
CrashTime: 1224076781
Email: lamhofung@hotmail.com
InstallTime: 1222530836
ProductName: Firefox
SecondsSinceLastCrash: 663
StartupTime: 1224076726
Theme: classic/1.0
URL: http://www.google.com.hk/search?hl=zh-TW&q=%E6%96%B0%E4%B8%96%E7%95%8CIDD&btnG=Google+%E6%90%9C%E5%B0%8B&meta=&aq=f&oq=
UserID: 502f4411-3a28-445a-a2b2-1f68a12399bf
Vendor: Mozilla
Version: 3.0.3
This report also contains technical information about the state of the application when it crashed.
Submitted Crash Reports
No crash reports have been submitted.
using windbg:
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe"
Symbol search path is: C:\a
Executable search path is:
ModLoad: 00400000 0044d000 firefox.exe
ModLoad: 7c900000 7c9af000 ntdll.dll
ModLoad: 7c800000 7c8f6000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 60490000 60dee000 C:\Program Files\Mozilla Firefox\xul.dll
ModLoad: 60210000 60273000 C:\Program Files\Mozilla Firefox\sqlite3.dll
ModLoad: 60000000 600ae000 C:\Program Files\Mozilla Firefox\MOZCRT19.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 60100000 601ad000 C:\Program Files\Mozilla Firefox\js3250.dll
ModLoad: 600b0000 600e0000 C:\Program Files\Mozilla Firefox\nspr4.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f02000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 71ad0000 71ad9000 C:\WINDOWS\system32\WSOCK32.dll
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 77f10000 77f59000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a1000 C:\WINDOWS\system32\USER32.dll
ModLoad: 60430000 60448000 C:\Program Files\Mozilla Firefox\smime3.dll
ModLoad: 60340000 603ea000 C:\Program Files\Mozilla Firefox\nss3.dll
ModLoad: 603f0000 60404000 C:\Program Files\Mozilla Firefox\nssutil3.dll
ModLoad: 600f0000 600f7000 C:\Program Files\Mozilla Firefox\plc4.dll
ModLoad: 600e0000 600e7000 C:\Program Files\Mozilla Firefox\plds4.dll
ModLoad: 60410000 60430000 C:\Program Files\Mozilla Firefox\ssl3.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\WINSPOOL.DRV
ModLoad: 763b0000 763f9000 C:\WINDOWS\system32\COMDLG32.dll
ModLoad: 773d0000 774d3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 60df0000 60df7000 C:\Program Files\Mozilla Firefox\xpcom.dll
(14a0.184): Break instruction exception - code 80000003 (first chance)
eax=001a1eb4 ebx=7ffd4000 ecx=00000005 edx=00000020 esi=001a1f48 edi=001a1eb4
eip=7c90120e esp=0013fb20 ebp=0013fc94 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
ntdll!DbgBreakPoint:
7c90120e cc int 3
0:000> .sympath SRV*c:\symbols*http://symbols.mozilla.org/firefox
Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox
0:000> .symfix+ c:\a
0:000> .reload /f
Reloading current modules
....................................
0:000> g
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 10000000 100ac000 C:\WINDOWS\system32\acaptuser32.dll
ModLoad: 6d710000 6d723000 C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 6d730000 6d743000 C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
ModLoad: 6d020000 6d035000 C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll
ModLoad: 6d4c0000 6d4c6000 C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
ModLoad: 59a60000 59b01000 C:\WINDOWS\system32\dbghelp.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\uxtheme.dll
ModLoad: 74720000 7476c000 C:\WINDOWS\system32\MSCTF.dll
ModLoad: 10000000 10004000 C:\Program Files\Unlocker\UnlockerHook.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 77b40000 77b62000 C:\WINDOWS\system32\apphelp.dll
ModLoad: 755c0000 755ee000 C:\WINDOWS\system32\msctfime.ime
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 601b0000 601b8000 C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\system32\mswsock.dll
ModLoad: 662b0000 66308000 C:\WINDOWS\system32\hnetcfg.dll
ModLoad: 71a90000 71a98000 C:\WINDOWS\System32\wshtcpip.dll
ModLoad: 76d60000 76d79000 C:\WINDOWS\system32\iphlpapi.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 16080000 160a5000 C:\Program Files\Bonjour\mdnsNSP.dll
ModLoad: 01900000 01bc5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 602f0000 60315000 C:\Program Files\Mozilla Firefox\softokn3.dll
ModLoad: 60320000 60338000 C:\Program Files\Mozilla Firefox\nssdbm3.dll
ModLoad: 60450000 60489000 C:\Program Files\Mozilla Firefox\freebl3.dll
ModLoad: 602a0000 602e9000 C:\Program Files\Mozilla Firefox\nssckbi.dll
ModLoad: 601c0000 601e3000 C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 7e290000 7e401000 C:\WINDOWS\system32\shdocvw.dll
ModLoad: 77a80000 77b15000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 754d0000 75550000 C:\WINDOWS\system32\CRYPTUI.dll
ModLoad: 5b860000 5b8b5000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 031b0000 031b9000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 74e30000 74e9d000 C:\WINDOWS\system32\RichEd20.dll
ModLoad: 3b180000 3b278000 C:\WINDOWS\system32\MSTCICJA.IME
(14a0.1264): Break instruction exception - code 80000003 (first chance)
eax=7ffd4000 ebx=00000001 ecx=00000002 edx=00000003 esi=00000004 edi=00000005
eip=7c90120e esp=03aeffcc ebp=03aefff4 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
ntdll!DbgBreakPoint:
7c90120e cc int 3
0:014> kp << (Firefox hanged, paused...)
ChildEBP RetAddr
03aeffc8 7c950010 ntdll!DbgBreakPoint
03aefff4 00000000 ntdll!DbgUiRemoteBreakin+0x2d
0:014> kp << (Same~...)
ChildEBP RetAddr
03aeffc8 7c950010 ntdll!DbgBreakPoint
03aefff4 00000000 ntdll!DbgUiRemoteBreakin+0x2d
0:014> g << (Resume, and continue memory leak... and error)
(14a0.184): C++ EH exception - code e06d7363 (first chance)
(14a0.184): C++ EH exception - code e06d7363 (!!! second chance !!!)
eax=0013e918 ebx=03844be0 ecx=00000000 edx=600a5bc8 esi=0013e9a0 edi=80000000
eip=7c812aeb esp=0013e914 ebp=0013e968 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
kernel32!RaiseException+0x53:
7c812aeb 5e pop esi
0:000> kp
ChildEBP RetAddr
0013e968 60024d5b kernel32!RaiseException+0x53
0013e9a0 6002d743 MOZCRT19!_CxxThrowException(void * pExceptionObject = 0x0013e9b0, struct _s__ThrowInfo * pThrowInfo = 0x60099754)+0x46 [f:\sp\vctools\crt_bld\self_x86\crt\prebuild\eh\throw.cpp @ 161]
0013e9b8 60587ee4 MOZCRT19!operator new(unsigned int size = 0x60c75cb8)+0x73 [e:\fx19rel\winnt_5.2_depend\mozilla\obj-fx-trunk\memory\jemalloc\src\new.cpp @ 61]
0013e9cc 604d123d xul!nsStandardURL::Clone(class nsIURI ** result = 0x0013eb64)+0x24 [e:\fx19rel\winnt_5.2_depend\mozilla\netwerk\base\src\nsstandardurl.cpp @ 1605]
0013ebbc 605d9617 xul!nsHttpChannel::SetReferrer(class nsIURI * referrer = 0x958b0026)+0x18b [e:\fx19rel\winnt_5.2_depend\mozilla\netwerk\protocol\http\src\nshttpchannel.cpp @ 3875]
0013ec04 605da056 xul!NewImageChannel(class nsIChannel ** aResult = 0x03844be0, class nsIURI * aURI = 0x60c51f68, class nsIURI * aInitialDocumentURI = 0x60c51f80, class nsIURI * aReferringURI = 0x60c51f94, class nsILoadGroup * aLoadGroup = 0x0013e918, unsigned int aLoadFlags = 4)+0x1f7 [e:\fx19rel\winnt_5.2_depend\mozilla\modules\libpr0n\src\imgloader.cpp @ 225]
0013ec3c 60550049 xul!imgLoader::LoadImage(class nsIURI * aURI = 0x60c650b8, class nsIURI * aInitialDocumentURI = 0x60c650d0, class nsIURI * aReferrerURI = 0x60c65114, class nsILoadGroup * aLoadGroup = 0x60c65128, class imgIDecoderObserver * aObserver = 0x60c65138, class nsISupports * aCX = 0x60c65150, unsigned int aLoadFlags = 0x60c65160, class nsISupports * cacheKey = 0x60c65174, class imgIRequest * aRequest = 0x60c6518c, class imgIRequest ** _retval = 0x60c6519c)+0xe6 [e:\fx19rel\winnt_5.2_depend\mozilla\modules\libpr0n\src\imgloader.cpp @ 473]
0013ecbc 605a722d xul!nsLoadGroup::AggregatedQueryInterface(struct nsID * aIID = 0x00000000, void ** aInstancePtr = 0x80000000)+0x49 [e:\fx19rel\winnt_5.2_depend\mozilla\netwerk\base\src\nsloadgroup.cpp @ 210]
0013ed24 606bb7f4 xul!nsCOMPtr_base::assign_from_qi(class nsQueryInterface qi = class nsQueryInterface, struct nsID * iid = 0x600a5bc8)+0x1d [e:\fx19rel\winnt_5.2_depend\mozilla\obj-fx-trunk\xpcom\build\nscomptr.cpp @ 96]
0013ed3c 607e8800 xul!nsGenericHTMLElement::SetAttr(int aNameSpaceID = 1623531160, class nsIAtom * aName = 0x60c51f68, class nsAString_internal * aValue = 0x60c51f80, int aNotify = 1623531412)+0x18 [e:\fx19rel\winnt_5.2_depend\mozilla\content\html\content\src\nsgenerichtmlelement.h @ 207]
0013ed4c 607e9e8e xul!nsGenericHTMLElement::SetAttrHelper(class nsIAtom * aAttr = 0x60c51f80, class nsAString_internal * aValue = 0x60c51f94)+0x13 [e:\fx19rel\winnt_5.2_depend\mozilla\content\html\content\src\nsgenerichtmlelement.cpp @ 2301]
0013ed5c 60657dff xul!nsHTMLImageElement::SetSrc(class nsAString_internal * aValue = 0x60c51f80)+0x17 [e:\fx19rel\winnt_5.2_depend\mozilla\content\html\content\src\nshtmlimageelement.cpp @ 216]
0013ed70 605a967e xul!NS_InvokeByIndex_P(class nsISupports * that = 0x60c51f80, unsigned int methodIndex = 0x60c51f94, unsigned int paramCount = 0xad397, struct nsXPTCVariant * params = 0x027ce638)+0x27 [e:\fx19rel\winnt_5.2_depend\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp @ 102]
0013ee80 60120a8b xul!XPCWrappedNative::CallMethod(class XPCCallContext * ccx = 0x00000000, XPCWrappedNative::CallMode mode = 1623531392 (No matching enumerant))+0x4de [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp @ 2393]
0013eef4 606bfb00 js3250!js_NewObject(struct JSContext * cx = 0x00000000, struct JSClass * clasp = 0x00000000, struct JSObject * proto = 0x601a48e1, struct JSObject * parent = 0x02ed0189, unsigned int objectSize = 0x388cc01)+0x5b [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\jsobj.c @ 2471]
0013ef0c 605ad5e5 xul!XPCWrappedNative::GetProto(void)+0x7 [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\xpconnect\src\xpcprivate.h @ 2128]
0013ef54 605af0df xul!XPCCallContext::XPCCallContext(XPCContext::LangType callerLanguage = 36918720 (No matching enumerant), struct JSContext * cx = 0x60d570f9, struct JSObject * obj = 0x02c43ec1, struct JSObject * funobj = 0x80000001, long name = -2147483647, unsigned int argc = 0, long * argv = 0x014dd740, long * rval = 0x014df000)+0x155 [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\xpconnect\src\xpccallcontext.cpp @ 160]
0013f000 605ad089 xul!XPC_WN_GetterSetter(struct JSContext * cx = 0x0117aced, struct JSObject * obj = 0x00000000, unsigned int argc = 0x408, long * argv = 0x60d5ae60, long * vp = 0x02b4ccc0)+0x21f [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp @ 1497]
0013f01c 6010ee0b xul!XPC_WN_OuterObject(struct JSContext * cx = 0x012189c0, struct JSObject * obj = 0x0117aced)+0x19 [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp @ 796]
0013f0d4 6011a485 js3250!js_Invoke(struct JSContext * cx = 0x0117aced, unsigned int argc = 0, long * vp = 0x00000408, unsigned int flags = 0x60d5ae60)+0x2bb [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\jsinterp.c @ 1297]
ok, the crash is NS_NEWXPCOM not catching oom and returning null. in theory that's solvable, but bsmedberg or someone has a plan to fix that somewhere....
offhand the oom cause is probably either parser or dom.
Component: General → XPCOM
Product: Firefox → Core
Whiteboard: DUPEME
Version: unspecified → 1.9.0 Branch
Sorry, so you guys already have plan on it that someone found this bug b4?
will it be solved in the next release? thank you.
there's a plan /somewhere/, but i don't know of a time frame. but that's only for the crash, not the cause of the oom....
|
||
Updated•17 years ago
|
QA Contact: general → xpcom
|
||
Comment 9•16 years ago
|
||
"oom" stands for "out of memory".
But this part of the stack trace in comment 4 makes me suspect this isn't a "running out of memory" bug so much as a "trying to allocate a ridiculous amount of memory at once" bug:
operator new(unsigned int size = 0x60c75cb8)
I wonder what would cause nsStandardURL::Clone to do that. (Or it could be that windbg is lying, I guess.)
|
||
Comment 10•16 years ago
|
||
(In reply to comment #5)
> ok, the crash is NS_NEWXPCOM not catching oom and returning null. in theory
> that's solvable, but bsmedberg or someone has a plan to fix that somewhere....
re: dupme - I didn't find anything specific to xpcom. Are you thinking bug 367474? XPConnect out of memory handling needs to be rearchitected
> offhand the oom cause is probably either parser or dom.
Severity: normal → critical
|
|
||
Comment 11•15 years ago
|
||
timeless/Jesse, do we still care about this issue?
Jesse in comment #9
> ... suspect this isn't a "running out of memory" bug so much as a "trying to allocate a ridiculous amount of memory at once" bug:
>
> operator new(unsigned int size = 0x60c75cb8)
>
> I wonder what would cause nsStandardURL::Clone to do that. (Or it could be
> that windbg is lying, I guess.)
Keywords: crash
Whiteboard: DUPEME
|
|
||
Comment 12•15 years ago
|
||
(In reply to comment #5)
> ok, the crash is NS_NEWXPCOM not catching oom and returning null. in theory
> that's solvable, but bsmedberg or someone has a plan to fix that
> somewhere....
presumably it had a bug. and has been fixed?
> offhand the oom cause is probably either parser or dom.
the testcase URL is dead http://xs232.xs.to/xs232/08423/546aer928.jpg
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Resolution: --- → INCOMPLETE
You need to log in
before you can comment on or make changes to this bug.
Description
•