597969 - crash [@ WrappedJSDyingJSObjectFinder ]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Scoobidiver (away)]

Build : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b7pre) Gecko/20100919
Firefox/4.0b7pre

This is a residual crash signature that exists in 3.6.9 and trunk builds.
It is #56 top crasher for 4.0b7pre for the last two weeks.

Signature	WrappedJSDyingJSObjectFinder
UUID	28b0171f-0bf7-48cc-a66e-79b462100916
Time 	2010-09-16 11:03:59.84689
Uptime	4548
Last Crash	394970 seconds (4.6 days) before submission
Install Age	85393 seconds (23.7 hours) since version was first installed.
Product	Firefox
Version	4.0b6
Build ID	20100914083612
Branch	2.0
OS	Windows NT
OS Version	5.1.2600 Service Pack 3
CPU	x86
CPU Info	GenuineIntel family 6 model 23 stepping 10
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x65
App Notes 	AdapterVendorID: 10de, AdapterDeviceID: 0640

Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	WrappedJSDyingJSObjectFinder 	js/src/xpconnect/src/xpcjsruntime.cpp:92
1 	xul.dll 	JS_DHashTableEnumerate 	js/src/jsdhash.cpp:743
2 	xul.dll 	XPCJSRuntime::GCCallback 	js/src/xpconnect/src/xpcjsruntime.cpp:536
3 	xul.dll 	DOMGCCallback 	dom/base/nsJSEnvironment.cpp:3821
4 	xul.dll 	GC 	js/src/jsgc.cpp:2800
5 	xul.dll 	GCUntilDone 	js/src/jsgc.cpp:3045
6 	xul.dll 	js_GC 	js/src/jsgc.cpp:3099
7 	xul.dll 	JS_GC 	js/src/jsapi.cpp:2461
8 	xul.dll 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:402
9 	xul.dll 	nsXPConnect::GarbageCollect 	js/src/xpconnect/src/nsXPConnect.cpp:410
10 	xul.dll 	nsJSContext::CC 	dom/base/nsJSEnvironment.cpp:3634
11 	xul.dll 	nsJSContext::IntervalCC 	dom/base/nsJSEnvironment.cpp:3723
12 	xul.dll 	nsJSContext::CCIfUserInactive 	dom/base/nsJSEnvironment.cpp:3711
13 	xul.dll 	DocumentViewerImpl::LoadComplete 	layout/base/nsDocumentViewer.cpp:1082
14 	xul.dll 	nsDocShell::EndPageLoad 	docshell/base/nsDocShell.cpp:5964
15 	xul.dll 	nsCOMPtr_base::assign_from_qi 	obj-firefox/xpcom/build/nsCOMPtr.cpp:96
16 	xul.dll 	nsDocShell::OnStateChange 	docshell/base/nsDocShell.cpp:5824

Comment 1

[Marcia Knous [:marcia]]

Crash stats query shows this crash currently happens on Windows and Linux for 4.x builds - http://tinyurl.com/28yfk3d

Comment 2

[Luke Wagner [:luke]]

There don't appear to be any crashes containing WrappedJSDyingJSObjectFinder for b8pre builds.  b8pre includes the compartments work which spruced up this whole area.