Closed Bug 592220 Opened 15 years ago Closed 15 years ago

Crash in [@ memcpy | memcpy_s | std::basic_string<char, std::char_traits<char>, std::allocator<char> >::assign(std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, unsigned int, unsigned int) ]

Categories

(Core Graveyard :: Plug-ins, defect)

Product:
Core Graveyard
Component:
Plug-ins
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

Build : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b5pre) Gecko/20100828 Firefox/4.0b5pre This is a new crash signature which has been introduced by this build. For the last week, it is the #7 crasher for b5pre. Signature memcpy | memcpy_s | std::basic_string<char, std::char_traits<char>, std::allocator<char> >::assign(std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, unsigned int, unsigned int) UUID 2ad584e0-7c69-49de-9903-8aefa2100830 Time 2010-08-30 12:44:27.258310 Uptime 2912 Last Crash 3004 seconds (50.1 minutes) before submission Install Age 4798 seconds (1.3 hours) since version was first installed. Product Firefox Version 4.0b5pre Build ID 20100828040640 Branch 2.0 OS Windows NT OS Version 6.1.7600 CPU x86 CPU Info GenuineIntel family 6 model 15 stepping 13 Crash Reason EXCEPTION_ACCESS_VIOLATION Crash Address 0x1a4ffffc User Comments Processor Notes EMCheckCompatibility False Crashing Thread Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:407 1 mozcrt19.dll memcpy_s obj-firefox/memory/jemalloc/crtsrc/memcpy_s.c:67 2 mozcpp19.dll std::basic_string<char,std::char_traits<char>,std::allocator<char> >::assign obj-firefox/memory/jemalloc/crtsrc/xstring:1059 3 mozcpp19.dll std::basic_string<char,std::char_traits<char>,std::allocator<char> >::operator= obj-firefox/memory/jemalloc/crtsrc/xstring:1043 4 xul.dll base::Thread::ThreadMain ipc/chromium/src/base/thread.cc:145 5 xul.dll nsLoadGroup::MergeLoadFlags netwerk/base/src/nsLoadGroup.cpp:810 6 xul.dll nsLoadGroup::AddRequest netwerk/base/src/nsLoadGroup.cpp:561 7 xul.dll nsHttpChannel::AsyncOpen netwerk/protocol/http/nsHttpChannel.cpp:3588 8 xul.dll nsPluginHost::NewEmbeddedPluginStream modules/plugin/base/src/nsPluginHost.cpp:3126 9 xul.dll nsPluginHost::InstantiateEmbeddedPlugin modules/plugin/base/src/nsPluginHost.cpp:1088 10 xul.dll nsObjectFrame::InstantiatePlugin layout/generic/nsObjectFrame.cpp:975 The regression window is: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=e1d55bbd1d1d&tochange=6e3f6d18c124
blocking2.0: --- → ?
Keywords: crash, regression
MergeLoadFlags doesn't call into that other stuff. More comdat bustage? And more fallout from the nsIChannel change? The report has IDM 7.1.1 installed...
Very likely IDM. COMDAT isn't "bustage", just symbol-folding. That's making a virtual call, so if IDM is implementing any channels that's almost certainly the reason.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b5pre) Gecko/20100831 Firefox/4.0b5pre The crash is gone. I assume that the fix of bug 591657 fixes also this bug.
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → WORKSFORME
blocking2.0: ? → ---
Crash Signature: [@ memcpy | memcpy_s | std::basic_string<char, std::char_traits<char>, std::allocator<char> >::assign(std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, unsigned int, unsigned int) ]
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.