526224 - Firefox 3.6b1 Crash Report [@ xul.dll@0x435a81 ]

Status: VERIFIED DUPLICATE of bug 529041

(Core :: XPConnect, defect, P2)

Description

[chris hofmann]

very early in data gathering but this looks like a new crash and is near the top of the list for firefox 3.6.b1

distribution of all versions where the xul.dll@0x435a81 crash was found on 20091102-crashdata.csv
  96 Firefox 3.6b1
[no other releases reported]

Frame  	Module  	Signature [Expand]  	Source
0 	xul.dll 	xul.dll@0x435a81 	
1 	xul.dll 	NS_InvokeByIndex_P      http://hg.mozilla.org/releases/mozilla-1.9.2/annotate/3b49c063bb42/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp#l101

2 	xul.dll 	XPCWrappedNative::CallMethod 	js/src/xpconnect/src/xpcwrappednative.cpp:2710

http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=xul.dll%400x435a81&date=&range_value=1&range_unit=weeks&do_query=1&signature=xul.dll%400x435a81

comments indicate its happening while trying to search.

96 total crashes for xul.dll@0x435a81 on 20091102-crashdata.csv
62 start up crashes inside 3 minutes

domains of sites
  25 http://www.google.com
   9 \N//
   7 about:blank//
   5 //
   4 http://www.google.co.uk
   4 http://search.yahoo.com
   2 http://www.youtube.com
   2 http://www.reuters.com
   2 http://www.publishr.de
   2 http://www.mozilla.com
   2 http://www.google.com.mx
   2 http://www.costco.com
   2 http://www.bing.com
   2 http://en-us.www.mozilla.com

Comment 1

[timeless]

so, we need working backtraces and someone to figure out which random third party extensions are either calling or being called

Comment 2

[chris hofmann]

still holding at #3 3.6b1 topcrash this morning as some usage starts to ramp on the beta.

Comment 3

[Marcia Knous [:marcia]]

Comments in the bug indicate that they were operating in the search bar area when the crash occurred. Majority of crashes seem to be on either Win 7 or Windows Vista. I will try to reproduce on my machines in the lab.

Comment 4

[chris hofmann]

this is now #3 topcrash on 3.6b1

thanks to aravind we now have
http://people.mozilla.com/crash_analysis/20091105/20091105_Firefox_3.6b1-interesting-addons-with-versions.txt

McAfee SiteAdvisor and others have strong correlations


  xul.dll@0x435a81|EXCEPTION_ACCESS_VIOLATION (94 crashes)
     99% (93/94) vs.   6% (138/2218) {B7082FAA-CB62-4872-9106-E42DD88EDE45} (McAfee SiteAdvisor, http://www.siteadvisor.com/)
          0% (0/94) vs.   1% (12/2218) 2.8
          1% (1/94) vs.   1% (26/2218) 2.9
         84% (79/94) vs.   4% (85/2218) 3.0
          2% (2/94) vs.   0% (2/2218) 3.0.0.476
         12% (11/94) vs.   1% (13/2218) 3.0.0.479
     69% (65/94) vs.  37% (812/2218) {20a82645-c095-46ed-80e3-08825760534b} (Microsoft .NET Framework Assistant, http://www.windowsclient.net/)
          9% (8/94) vs.   5% (103/2218) 0.0.0
          0% (0/94) vs.   0% (4/2218) 1.0
         61% (57/94) vs.  32% (705/2218) 1.1
     26% (24/94) vs.  16% (350/2218) {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} (Adblock Plus, https://addons.mozilla.org/addon/1865)
          0% (0/94) vs.   0% (1/2218) 0.7.5.4
          0% (0/94) vs.   0% (1/2218) 1.0.2
         26% (24/94) vs.  16% (347/2218) 1.1.1
          0% (0/94) vs.   0% (1/2218) 1.1.1+.2009110507
     13% (12/94) vs.   3% (68/2218) {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} (WOT, https://addons.mozilla.org/addon/3456)
         12% (11/94) vs.   3% (64/2218) 20090918
          1% (1/94) vs.   0% (4/2218) 20091028
     17% (16/94) vs.   8% (183/2218) {3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar, https://addons.mozilla.org/addon/6249)
          7% (7/94) vs.   2% (34/2218) 3.1.20081127W
          0% (0/94) vs.   0% (1/2218) 3.1.20090119W
          1% (1/94) vs.   0% (5/2218) 5.0.20090122Wb2
          1% (1/94) vs.   0% (3/2218) 5.0.20090324
          0% (0/94) vs.   1% (12/2218) 5.0.20090324W
          4% (4/94) vs.   3% (59/2218) 5.0.20090813W
          0% (0/94) vs.   0% (9/2218) 6.1.20090917Wb1
          3% (3/94) vs.   3% (59/2218) 6.1.20091007W
          0% (0/94) vs.   0% (1/2218) 6.1.20091019W
     34% (32/94) vs.  26% (566/2218) [e-mail] (Java Quick Starter, http://java.sun.com/javase/downloads/) (1.0)
     16% (15/94) vs.   8% (176/2218) {ABDE892B-13A8-4d1b-88E6-365A6E755758} (1.0)
     11% (10/94) vs.   4% (95/2218) [e-mail] (Personas, https://addons.mozilla.org/addon/10900)
          0% (0/94) vs.   0% (2/2218) 1.2
         11% (10/94) vs.   4% (93/2218) 1.3.1
     13% (12/94) vs.   6% (143/2218) {635abd67-4fe9-1b23-4f01-e679fa7484c1} (Yahoo! Toolbar, https://addons.mozilla.org/addon/2032)
          0% (0/94) vs.   0% (1/2218) 1.5.2.20080717
          0% (0/94) vs.   0% (1/2218) 1.5.3.20080730
          1% (1/94) vs.   1% (15/2218) 1.5.4.20081105
          0% (0/94) vs.   0% (5/2218) 1.6.1.20080801
         11% (10/94) vs.   2% (50/2218) 1.6.5.200812101546
          1% (1/94) vs.   3% (63/2218) 1.6.6.20090220
          0% (0/94) vs.   0% (8/2218) 2.1.0.20090922023629
      7% (7/94) vs.   2% (38/2218) {EF522540-89F5-46b9-B6FE-1829E2B572C6} (GooglePreview, https://addons.mozilla.org/addon/189)
          0% (0/94) vs.   0% (4/2218) 3.22
          7% (7/94) vs.   2% (34/2218) 4.0
      6% (6/94) vs.   1% (20/2218) {AE93811A-5C9A-4d34-8462-F7B864FC4696} (StumbleUpon, https://addons.mozilla.org/addon/138)
          2% (2/94) vs.   0% (2/2218) 3.38
          4% (4/94) vs.   1% (18/2218) 3.52
      6% (6/94) vs.   1% (20/2218) {0b457cAA-602d-484a-8fe7-c1d894a011ba} (FireShot, https://addons.mozilla.org/addon/5648) (0.80)
      6% (6/94) vs.   1% (21/2218) [e-mail] (British English Dictionary, https://addons.mozilla.org/addon/3366) (1.19)

Comment 5

[chris hofmann]

talking with dolske sounds like we might need a fix for bug 524256 to get a better stack trace to make more sense out of this bug.

Comment 6

[Johnny Stenback (:jst)]

Peter, could you have a look at this? I can get you minidumps if you're not able to get to them yourself.

Comment 7

[Jesse Ruderman]

The #2 topcrash for 3.6b2 is [@ xul.dll@0x438302].  I'm guessing this is the same bug, just with the offset slightly different due to unrelated changes.

The stacks go a little deeper now that bug 524256 is fixed:
bp-cf56e3a6-afa6-4e76-8afa-f2ab02091112

Comment 8

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

This is probably a dupe of bug 529041, with a new signature just because of code moving around.

Comment 9

[Peter Van der Beken [:peterv]]

Leaving this open for now, until we're sure that a fix for bug 529041 also fixes this.

Comment 10

[Peter Van der Beken [:peterv]]

After comparing minidumps this does look like a dupe of bug 529041, we're crashing on the same instruction.