602475 - start-up crash on Windows XP [@ arena_dalloc_small | nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener>() | XRE_main ]

Status: RESOLVED DUPLICATE of bug 599603

(Core :: XPCOM, defect)

Description

[Scoobidiver (away)]

Build: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b7pre) Gecko/20101006 Firefox/4.0b7pre

This is a new crash signature that first appears in this build.
It happens only at start-up on Windows XP.
It is #3 top crasher for this build.

Signature	arena_dalloc_small | nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener>() | XRE_main
UUID	a84c4c7b-3300-43d6-a605-c70092101007
Time 	2010-10-07 02:10:22.960275
Uptime	1
Last Crash	3 seconds before submission
Install Age	16938 seconds (4.7 hours) since version was first installed.
Product	Firefox
Version	4.0b7pre
Build ID	20101006041601
Branch	2.0
OS	Windows NT
OS Version	5.1.2600 Service Pack 3
CPU	x86
CPU Info	GenuineIntel family 6 model 23 stepping 7
Crash Reason	0xc000001e / 0x00000000
Crash Address	0x1571c8
Processor Notes 	WARNING: Json file missing Add-ons

Frame 	Module 	Signature [Expand] 	Source
0 		@0x1571c8 	
1 		@0x91a3ff 	
2 	mozcrt19.dll 	arena_dalloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4153
3 	xul.dll 	nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener> 	obj-firefox/xpcom/build/nsCOMPtr.cpp:81
4 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3415

The regression range is :
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=10a6b2c105ae&tochange=dee1e01fd8ed

More report at:
http://crash-stats.mozilla.com/report/list?product=Firefox&version=Firefox%3A4.0b7pre&query_search=signature&query_type=exact&query=arena_dalloc_small%20|%20nsRefPtr%3CnsIDOMEventListener%3E%3A%3A~nsRefPtr%3CnsIDOMEventListener%3E%28%29%20|%20XRE_main&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=arena_dalloc_small%20|%20nsRefPtr%3CnsIDOMEventListener%3E%3A%3A~nsRefPtr%3CnsIDOMEventListener%3E%28%29%20|%20XRE_main

Comment 1

[Benjamin Smedberg]

This is a symbol-folding name different that's actually the same as the following signatures:

arena_dalloc_small | nsCOMPtr_base::~nsCOMPtr_base() | XRE_main
arena_dalloc_small | nsRefPtr<nsPresContext>::~nsRefPtr<nsPresContext>() | XRE_main
arena_dalloc_small | nsRefPtr<mozilla::dom::Element>::~nsRefPtr<mozilla::dom::Element>() | XRE_main
arena_dalloc_small | nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener>() | XRE_main
arena_dalloc_small | nsRefPtr<nsImageLoader>::~nsRefPtr<nsImageLoader>() | XRE_main
arena_dalloc_small | nsRefPtr<XPCWrappedNative>::~nsRefPtr<XPCWrappedNative>() | XRE_main

This is a dup of bug 599603.

When you have nsCOMPtr<Foo> or nsRefPtr<Foo> in the signature, please check for similar signatures with different names.