492234 - 3.6a1pre crashes on update @ nsAlertsIconListener::SendClosed()

Status: RESOLVED DUPLICATE of bug 492211

(Firefox :: General, defect)

Description

[Bryan Bach]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2a1pre) Gecko/20090509
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2a1pre) Gecko/20090509

For the past few automatic updates, Minefield has been crashing as soon as the "update available" bubble closed.

http://crash-stats.mozilla.com/report/index/be17875a-3750-4b27-a6dd-b4c0b2090509

My apologizes if this has been already reported.

Reproducible: Always

Steps to Reproduce:
1. Use minefield normally
2. observe an update notification once updates are available
3. crashes right after the notification is closed
Actual Results:  
Minefield crashed.

Expected Results:  
The bubble should have closed and minefield working normally again.

Comment 1

[Johnny Stenback (:jst)]

Confirmed. This happens when downloading files too. The user_data argument passed to notify_closed_cb() is 0x1, which is cast to an nsAlertsIconListener, on which we the go ahead and call a method and crash. Not sure why 0x1 is passed in, the code that registers the callback does pass in a pointer to a valid nsAlertsIconListener object.