Closed Bug 591880 Opened 14 years ago Closed 14 years ago

Crash in [RunnableMethod<IPC::Channel, bool ( IPC::Channel::*)(IPC::Message*), Tuple1<IPC::Message*> >::~RunnableMethod<IPC::Channel, bool ( IPC::Channel::*)(IPC::Message*), Tuple1<IPC::Message*> >() ]

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
blocking2.0 --- beta5+

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Whiteboard: [likely caused by IDM 7.*])

Build : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b5pre) Gecko/20100828 Firefox/4.0b5pre This is a new crash signature which has been introduced by this build and it is still the #13 crasher for this build. Signature RunnableMethod<IPC::Channel, bool ( IPC::Channel::*)(IPC::Message*), Tuple1<IPC::Message*> >::~RunnableMethod<IPC::Channel, bool ( IPC::Channel::*)(IPC::Message*), Tuple1<IPC::Message*> >() UUID 65f92634-9af4-47e9-809e-e0bb22100829 Time 2010-08-29 08:48:04.319946 Uptime 9141 Last Crash 11611 seconds (3.2 hours) before submission Install Age 9141 seconds (2.5 hours) since version was first installed. Product Firefox Version 4.0b5pre Build ID 20100829040614 Branch 2.0 OS Windows NT OS Version 6.1.7600 CPU x86 CPU Info GenuineIntel family 6 model 15 stepping 13 Crash Reason EXCEPTION_ACCESS_VIOLATION Crash Address 0x5ae8c210 User Comments App Notes AdapterVendorID: 34f030AdapterDeviceID: 34f034 Processor Notes EMCheckCompatibility False Crashing Thread Frame Module Signature [Expand] Source 0 xul.dll RunnableMethod<IPC::Channel,bool ipc/chromium/src/base/task.h:302 1 xul.dll xul.dll@0xbcc20f 2 xul.dll XPCConvert::NativeData2JS js/src/xpconnect/src/xpcprivate.h:3176 3 xul.dll nsXPCWrappedJSClass::CallMethod js/src/xpconnect/src/xpcwrappedjsclass.cpp:1582 4 xul.dll nsXPCWrappedJS::CallMethod js/src/xpconnect/src/xpcwrappedjs.cpp:570 5 xul.dll PrepareAndDispatch xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114 6 xul.dll SharedStub xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141 7 xul.dll nsObserverList::NotifyObservers xpcom/ds/nsObserverList.cpp:130 The regression window is: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=e1d55bbd1d1d&tochange=6e3f6d18c124
blocking2.0: --- → ?
This looks like a jseng issue or maybe an observer service one.... but there have been no observer service changes for a while, nor any js or xpconnect changes in the range from comment 0.... The stack certainly looks busted at the top there, though!
Stack according to MSVC: > xul.dll!RunnableMethod<IPC::Channel,bool (__thiscall IPC::Channel::*)(IPC::Message *),Tuple1<IPC::Message *> >::~RunnableMethod<IPC::Channel,bool (__thiscall IPC::Channel::*)(IPC::Message *),Tuple1<IPC::Message *> >() Line 302 C++ xul.dll!RunnableMethod<IPC::Channel,bool (__thiscall IPC::Channel::*)(IPC::Message *),Tuple1<IPC::Message *> >::`scalar deleting destructor'() C++ xul.dll!CallQueryInterface<nsISupports,nsWrapperCache>(aSource=0x00000000, aDestination=0x00000000) Line 185 C++ xul.dll!xpcObjectHelper::xpcObjectHelper(aObject=0x00000000, aCache=0x00000000) Line 3067 C++ xul.dll!XPCConvert::NativeData2JS(lccx={...}, d=0x0034c470, s=0x0034c720, type={...}, iid=0x0034c4a8, scope=0x0730ef60, pErr=0x00000000) Line 475 C++ xul.dll!XPCConvert::NativeData2JS(ccx={...}, d=0x0034c470, s=0x0034c720, type={...}, iid=0x0034c4a8, scope=0x0730ef60, pErr=0x00000000) Line 3176 C++ xul.dll!nsXPCWrappedJSClass::CallMethod(wrapper=0x25c6c8c0, methodIndex=0x0003, info=0x03dcc1f8, nativeParams=0x0034c720) Line 1582 C++ xul.dll!nsXPCWrappedJS::CallMethod(methodIndex=0x0003, info=0x03dcc1f8, params=0x0034c720) Line 571 C++ xul.dll!PrepareAndDispatch(self=0x1adb6780, methodIndex=0x00000003, args=0x0034c7d8, stackBytesToPop=0x0034c7c8) Line 114 C++ xul.dll!SharedStub() Line 142 C++ xul.dll!nsObserverList::NotifyObservers(aSubject=0x05214c2c, aTopic=0x5aeb32cc, someData=0x00000000) Line 130 C++ xul.dll!nsObserverService::NotifyObservers(aSubject=0x05214c2c, aTopic=0x5aeb32cc, someData=0x00000000) Line 182 C++ xul.dll!nsHttpHandler::NotifyObservers(chan=0x05214c2c, event=0x5aeb32cc) Line 551 C++ xul.dll!nsHttpChannel::AsyncOpen(listener=0x24898fb0, context=0x00000000) Line 3572 C++ xul.dll!nsPluginHost::NewEmbeddedPluginStream(aURL=0x25e8cab0, aOwner=0x05214c2c, aInstance=0x05214c2c) Line 3128 C++ xul.dll!nsPluginHost::InstantiateEmbeddedPlugin(aMimeType=0x1b7fd648, aURL=0x25e8cab0, aOwner=0x05ed7c40) Line 1088 C++ xul.dll!nsCOMPtr_base::assign_from_qi(qi={...}, iid={...}) Line 98 C++ xul.dll!nsObjectLoadingContent::Instantiate(aFrame=0x25d0b8c0, aMIMEType={...}, aURI=0x25e8cab0) Line 1895 C++ xul.dll!nsObjectLoadingContent::EnsureInstantiation(aInstance=0x0034cb94) Line 920 C++ xul.dll!nsHTMLPluginObjElementSH::GetPluginInstanceIfSafe(wrapper=0x1bb44070, obj=0x06735b40, _result=0x25e329a8) Line 9691 C++ xul.dll!nsHTMLPluginObjElementSH::NewResolve(wrapper=0x1bb44070, cx=0x03e1d090, obj=0x06735b40, id=0x0481ab80, flags=0x00000001, objp=0x0034cbe4, _retval=0x0034cbdc) Line 10051 C++ xul.dll!XPCWrapper::ResolveNativeProperty(cx=0x03e1d090, wrapperObj=0x00000000, innerObj=0x06735b10, wn=0x1bb44070, id=0x0481ab80, flags=0x00000001, objp=0x00000000, isNativeWrapper=0x00000001) Line 624 C++ xul.dll!XPC_NW_NewResolve(cx=0x03e1d090, obj=0x06735b40, id=0x0481ab80, flags=0x00000001, objp=0x0034cd48) Line 635 C++ xul.dll!CallResolveOp(cx=0x19262430, start=0x06735b40, obj=0x06735b40, id=0x0481ab80, flags=0x00000001, objp=0x0034cda0, propp=0x0034cdac, recursedp=0x0034cd9f) Line 4348 C++ xul.dll!js_GetPropertyHelper(cx=, obj=, id=, getHow=, vp=) Line 4779 C++ I believe that this is a duplicate of bug 591678, and is probably also the same as bug 589296.
Nevermind, bug 589296 is different.
Depends on: 591678
For the moment, this crash signature is present with builds : 20100828040640 20100829040614 20100830040705
The specific symbol that this crash is charged to will probably change from day to day, because of differences in comdat folding and PGO generation. That makes it harder to track, but no less serious.
blocking2.0: ? → beta5+
Looked at every crash with this signature. All of them have this add-on installed: mozilla_cc@internetdownloadmanager.com 7.1.1 I've seen a few with version 7.1.2 as well. There were four exceptions, but those had no add-ons listed: bp-76ce8081-2988-48e9-adb3-3dc3b2100829 bp-f9d6ac20-9974-40eb-a147-709f72100828 bp-7c4b6912-f837-4447-82e2-09fa32100829 bp-90ca5ddf-076c-43ee-be0a-d59312100829
Didn't we blocklist IDM with bug 580393?
(In reply to comment #7) > Didn't we blocklist IDM with bug 580393? Bug 578443 comment 69 seems to indicate that it should, in fact, be blocked. Is it maybe not working?
IDM 0 through 6.9.8 is blocked for Firefox "3.7a1pre through * (e.g. all future versions). This is about 7.1.1 and 7.1.2.
Depends on: 592125
Whiteboard: [likely caused by IDM 7.*]
Not seeing any crashes on the 20100831 nightly. This looks fixed.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → WORKSFORME
Issue is resolved - clearing old keywords - qa-wanted clean-up
Keywords: regressionwindow-wanted
You need to log in before you can comment on or make changes to this bug.