Closed Bug 555618 Opened 14 years ago Closed 12 years ago

crash [@ memmove | nsTArray_base::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int)] - [@ nsTArray<nsListenerStruct>::RemoveElementsAt] - [@ nsAutoTObserverArray<nsListenerStruct,2>::Clear]

Categories

(Thunderbird :: General, defect)

Product:
Thunderbird
Component:
General
Platform:
x86
Windows Vista
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: wsmwk, Unassigned)

References

Details

(Keywords: crash)

Crash Data

crash  [@ memmove | nsTArray_base::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int)] - [@ nsTArray<nsListenerStruct>::RemoveElementsAt] - [@ nsAutoTObserverArray<nsListenerStruct,2>::Clear] 

By spot check, I estimate 2/3 of our memmove | nsTArray_base::ShiftData crashes are this stack, and therefore not fixed by the recent patches in Bug 534858 nor Bug 534858/bug 537551 

Is this OOM? (which might be helped by bug 493779)

bp-8c966cf6-d9d2-4f16-9147-8b03a2100328
0	mozcrt19.dll	memmove	 MEMCPY.ASM:188
1	xpcom_core.dll	nsTArray_base::ShiftData	objdir-tb/mozilla/xpcom/build/nsTArray.cpp:173
2	thunderbird.exe	nsTArray<nsListenerStruct>::RemoveElementsAt	objdir-tb/mozilla/dist/include/xpcom/nsTArray.h:664
3	thunderbird.exe	nsAutoTObserverArray<nsListenerStruct,2>::Clear	objdir-tb/mozilla/dist/include/xpcom/nsTObserverArray.h:242
4	thunderbird.exe	nsEventListenerManager::Disconnect	content/events/src/nsEventListenerManager.cpp:1230
5	thunderbird.exe	nsEventListenerManager::cycleCollection::Unlink	content/events/src/nsEventListenerManager.cpp:400
6	xpcom_core.dll	nsCycleCollector::CollectWhite	xpcom/base/nsCycleCollector.cpp:1721
7	xpcom_core.dll	nsCycleCollector::FinishCollection	xpcom/base/nsCycleCollector.cpp:2573
8	thunderbird.exe	XPCCycleCollectGCCallback	js/src/xpconnect/src/nsXPConnect.cpp:403
9	js3250.dll	js_GC	js/src/jsgc.cpp:3792
10	js3250.dll	JS_GC	js/src/jsapi.cpp:2459
11	thunderbird.exe	nsXPConnect::Collect	js/src/xpconnect/src/nsXPConnect.cpp:477
12	xpcom_core.dll	nsCycleCollector::Collect	xpcom/base/nsCycleCollector.cpp:2389
13	xpcom_core.dll	nsCycleCollector_collect	xpcom/base/nsCycleCollector.cpp:3048
14	thunderbird.exe	nsJSContext::CC	dom/src/base/nsJSEnvironment.cpp:3534
15	thunderbird.exe	GCTimerFired	dom/src/base/nsJSEnvironment.cpp:3642
16	xpcom_core.dll	nsTimerImpl::Fire	xpcom/threads/nsTimerImpl.cpp:420
17	xpcom_core.dll	nsTimerEvent::Run	xpcom/threads/nsTimerImpl.cpp:512
18	xpcom_core.dll	nsThread::ProcessNextEvent	xpcom/threads/nsThread.cpp:521
19	xpcom_core.dll	NS_ProcessPendingEvents_P	objdir-tb/mozilla/xpcom/build/nsThreadUtils.cpp:203
20	xpcom_core.dll	mozilla::ShutdownXPCOM	xpcom/build/nsXPComInit.cpp:780
Crash Signature: [@ memmove | nsTArray_base::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int)] [@ nsTArray<nsListenerStruct>::RemoveElementsAt] [@ nsAutoTObserverArray<nsListenerStruct,2>::Clear]
Crash Signature: [@ memmove | nsTArray_base::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int)] [@ nsTArray<nsListenerStruct>::RemoveElementsAt] [@ nsAutoTObserverArray<nsListenerStruct,2>::Clear] → [@ memmove | nsTArray_base::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int)] [@ nsTArray<nsListenerStruct>::RemoveElementsAt] [@ nsAutoTObserverArray<nsListenerStruct,2>::Clear]
Keywords: topcrash
signature no longer exists,  bug never got QA and I don't know what current crash it might be related to, if any. so => WFM
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.