530291 - crash [@ objc_msgSend | nsBaseAppShell::Release()] [Mac]

Status: RESOLVED WORKSFORME

(Thunderbird :: General, defect)

Description

[Wayne Mery (:wsmwk)]

crash [@ objc_msgSend | nsBaseAppShell::Release()]
3.0 RC1 build1 and build2
Mac only 

bp-a0e5ea43-0a76-49aa-a059-551842091120
Happening every time I Quit Thunderbird.
0	libobjc.A.dylib	objc_msgSend	
1	thunderbird-bin	nsBaseAppShell::Release	widget/src/xpwidgets/nsBaseAppShell.cpp:49
2	libxpcom_core.dylib	nsTHashtable<nsBaseHashtableET<nsCStringHashKey, nsCString> >::s_InitEntry	nsCOMPtr.cpp:81
3	thunderbird-bin	nsAppStartup::Release	nsCOMPtr.h:469
4	libxpcom_core.dylib	nsTHashtable<nsBaseHashtableET<nsCStringHashKey, nsCString> >::s_InitEntry	nsCOMPtr.cpp:81
5	thunderbird-bin	ScopedXPCOMStartup::RegisterProfileService	r.h:469
6	thunderbird-bin	XRE_main	toolkit/xre/nsAppRunner.cpp:3364
7	thunderbird-bin	main	mail/app/nsMailApp.cpp:103 


this one is on startup...slightly different stack
bp-4b21aa78-9f4c-4034-844a-418652091116

Comment 1

[Mark Banner (:standard8)]

I'm guessing the obj_msgSend isn't actually where it crashed but an invalid symbol. I've got no clue as to what the rest of it might be relating to.

Comment 2

[Wayne Mery (:wsmwk)]

extension related perhaps?  
all harken back to 
 nsTHashtable<nsBaseHashtableET<nsCStringHashKey, nsCString> >::s_InitEntry
 ScopedXPCOMStartup::RegisterProfileService

sigs with  ScopedXPCOMStartup::RegisterProfileService in top 10 frames (all are Mac crashes
 nsXPCWrappedJS::GetNewOrUsed(XPCCallContext&, JSObject*, nsID const&, nsISupports*, nsXPCWrappedJS**)
nsPrefBranch::Observe(nsISupports*, char const*, unsigned short const*)
nsPrefBranch::freeObserverList() | nsPrefBranch::Observe(nsISupports*, char const*, unsigned short const*)
nsScriptSecurityManager::Release()
nsMsgFilterAfterTheFact::ApplyFilter(int*)
@0x0 | nsPrefBranch::Observe(nsISupports*, char const*, unsigned short const*)
nsTimerImpl::Shutdown()
XPCWrappedNative::FlatJSObjectFinalized(JSContext*)
nsThread::ProcessNextEvent(int, int*)
morkRowObject::CloseRowObject(morkEnv*)
nsXPConnect::InitClassesWithNewWrappedGlobal(JSContext*, nsISupports*, nsID const&, unsigned int, nsIXPConnectJSObjectHolder**) 

some FF crashes with ScopedXPCOMStartup::RegisterProfileService() but they are windows

Comment 3

[Sriram Rajan]

I tried installing Thunderbird 3 over the Thunderbird 2 mail profile I have been using for some time now on my iMac. However, upon launching the application promptly crashes.

I then installed Th3 on my Macbook Air, and it works fine. I copied over the entire profile from the Macbook Air to my iMac, and all works well now.

I have saved the original profile files, should you like to see one of them. However, I have no insight as to why the crash occurs beyond what I have written.

Comment 4

[Wayne Mery (:wsmwk)]

Sriram's crash (which lists no extensions) is bp-2d204f4c-be1e-4654-b92f-e13262091225 nsXPCWrappedJS::GetNewOrUsed(XPCCallContext&, JSObject*, nsID const&, nsISupports*, nsXPCWrappedJS**)
0	thunderbird-bin	nsXPCWrappedJS::GetNewOrUsed	 js/src/xpconnect/src/xpcprivate.h:634
1	thunderbird-bin	nsPrefBranch::Observe	modules/libpref/src/nsPrefBranch.cpp:722
2	libxpcom_core.dylib	nsObserverList::NotifyObservers	xpcom/ds/nsObserverList.cpp:128
3	libxpcom_core.dylib	nsObserverService::NotifyObservers	xpcom/ds/nsObserverService.cpp:181
4	libxpcom_core.dylib	mozilla::ShutdownXPCOM	xpcom/build/nsXPComInit.cpp:776
5	thunderbird-bin	ScopedXPCOMStartup::RegisterProfileService	toolkit/xre/nsAppRunner.cpp:956

Comment 5

[Wayne Mery (:wsmwk)]

I couldn't find any better stacks or crash report comments

Comment 6

[Wayne Mery (:wsmwk)]

still very much rare (~8/month), and no reporter addresses.
bp-278e49c2-93a9-4b5d-8685-237562100608 3.1 (the only found for 3.1)

Comment 7

[Wayne Mery (:wsmwk)]

no crashes found after version 3.11 
v3.11 example bp-13bde7e4-2d55-49bb-a44e-f8a562110715