605750 - crash [@ PL_DHashTableOperate | nsTHashtable<nsPtrHashKey<nsSMILTimeValueSpec> >::RemoveEntry(nsSMILTimeValueSpec*) ]

Status: RESOLVED DUPLICATE of bug 599341

(Core Graveyard :: Plug-ins, defect)

Description

[Scoobidiver (away)]

Build: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b8pre) Gecko/20101019 Firefox/4.0b8pre

It is a new crash signature that is introduced by this build.
It is #6 top crasher for this build.

Signature	PL_DHashTableOperate | nsTHashtable<nsPtrHashKey<nsSMILTimeValueSpec> >::RemoveEntry(nsSMILTimeValueSpec*)
UUID	a3f7bd27-f163-4a1d-b0dd-d47862101019
Time 	2010-10-19 16:25:19.802580
Uptime	515
Last Crash	80595 seconds (22.4 hours) before submission
Install Age	34300 seconds (9.5 hours) since version was first installed.
Product	Firefox
Version	4.0b8pre
Build ID	20101019041714
Branch	2.0
OS	Windows NT
OS Version	6.1.7600
CPU	x86
CPU Info	GenuineIntel family 6 model 26 stepping 5
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x2c8
App Notes 	AdapterVendorID: 10de, AdapterDeviceID: 0659

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	PL_DHashTableOperate 	obj-firefox/xpcom/build/pldhash.c:615
1 	xul.dll 	nsTHashtable<nsPtrHashKey<nsSMILTimeValueSpec> >::RemoveEntry 	obj-firefox/dist/include/nsTHashtable.h:201
2 	xul.dll 	nsObjectFrame::StopPluginInternal 	layout/generic/nsObjectFrame.cpp:2519
3 	xul.dll 	nsObjectFrame::DestroyFrom 	layout/generic/nsObjectFrame.cpp:675
4 	xul.dll 	nsContainerFrame::DestroyFrom 	layout/generic/nsContainerFrame.cpp:272
5 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:320
6 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:316
7 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:320
8 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:320
9 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:316
10 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:320
11 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:320
12 	xul.dll 	nsBlockFrame::DestroyFrom 	layout/generic/nsBlockFrame.cpp:320
13 	xul.dll 	nsContainerFrame::DestroyFrom 	layout/generic/nsContainerFrame.cpp:272
14 	xul.dll 	nsCanvasFrame::DestroyFrom 	layout/generic/nsCanvasFrame.cpp:95
15 	xul.dll 	nsContainerFrame::DestroyFrom 	layout/generic/nsContainerFrame.cpp:272
16 	xul.dll 	nsHTMLScrollFrame::DestroyFrom 	layout/generic/nsGfxScrollFrame.cpp:122
17 	xul.dll 	nsContainerFrame::DestroyFrom 	layout/generic/nsContainerFrame.cpp:272
18 	xul.dll 	ViewportFrame::DestroyFrom 	layout/generic/nsViewportFrame.cpp:73
19 	xul.dll 	nsFrameManager::Destroy 	layout/base/nsFrameManager.cpp:257
20 	xul.dll 	PresShell::Destroy 	layout/base/nsPresShell.cpp:2025
21 	xul.dll 	DocumentViewerImpl::DestroyPresShell 	layout/base/nsDocumentViewer.cpp:4273
22 	xul.dll 	DocumentViewerImpl::DestroyPresShell 	layout/base/nsDocumentViewer.cpp:4274
23 	xul.dll 	DocumentViewerImpl::Destroy 	layout/base/nsDocumentViewer.cpp:1618
24 	xul.dll 	DestroyViewerEvent::Run 	docshell/shistory/src/nsSHEntry.cpp:879
25 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:547
26 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:110
27 	xul.dll 	xul.dll@0xae69eb 	
28 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:202
29 	xul.dll 	XPCWrapper::Unwrap 	js/src/xpconnect/src/XPCWrapper.cpp:133

The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=cfd18201f49b&tochange=c9df0c5cbf8c

More reports at:
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=PL_DHashTableOperate%20|%20nsTHashtable%3CnsPtrHashKey%3CnsSMILTimeValueSpec%3E%20%3E%3A%3ARemoveEntry%28nsSMILTimeValueSpec*%29