606616 - crash [@ XPCConvert::JSObject2NativeInterface(XPCCallContext&, void**, JSObject*, nsID const*, nsISupports*, unsigned int*)]

Status: RESOLVED INCOMPLETE

(Core :: XPConnect, defect)

Description

[Wayne Mery (:wsmwk)]

crash [@ XPCConvert::JSObject2NativeInterface(XPCCallContext&, void**, JSObject*, nsID const*, nsISupports*, unsigned int*)]

the only v3.1.5 THunderbird so far are several from the same user, uptime 0 seconds

bp-334ed5bc-5b9d-49c7-a34e-170072101013
0		@0xcc4835b	
1	thunderbird.exe	XPCConvert::JSObject2NativeInterface	js/src/xpconnect/src/xpcconvert.cpp:1493
2	thunderbird.exe	nsXPConnect::WrapJS	js/src/xpconnect/src/nsXPConnect.cpp:1272
3	thunderbird.exe	mozJSComponentLoader::LoadModule	js/src/xpconnect/loader/mozJSComponentLoader.cpp:791
4	xpcom_core.dll	nsFactoryEntry::GetFactory	xpcom/components/nsComponentManager.cpp:3691
5	xpcom_core.dll	nsComponentManagerImpl::CreateInstanceByContractID	xpcom/components/nsComponentManager.cpp:1680
6	xpcom_core.dll	nsComponentManagerImpl::GetServiceByContractID	xpcom/components/nsComponentManager.cpp:2252
7	xpcom_core.dll	CallGetService	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:94
8	xpcom_core.dll	nsGetServiceByContractIDWithError::operator	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:288
9	xpcom_core.dll	nsCOMPtr_base::assign_from_gs_contractid_with_error	objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:141
10	thunderbird.exe	nsAppStartupNotifier::Observe	embedding/components/appstartup/src/nsAppStartupNotifier.cpp:94 

v3.1.4 stack looks like bp-316ea560-f41b-4467-94cc-fe7052101014 (windows crash, but linux and Mac bp-f3c6b509-4944-4b15-97d9-ee0102101015 looks the same) - and is not yet seen in v3.1.5
Frame	Module	Signature [Expand]	Source
0	thunderbird.exe	XPCConvert::JSObject2NativeInterface	js/src/xpconnect/src/xpcconvert.cpp:1468
1	thunderbird.exe	XPCConvert::JSData2Native	js/src/xpconnect/src/xpcconvert.cpp:1017
2	thunderbird.exe	XPCConvert::JSArray2Native	js/src/xpconnect/src/xpcconvert.cpp:2132
3	thunderbird.exe	nsXPCWrappedJSClass::CallMethod	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1867
4	thunderbird.exe	nsXPCWrappedJS::CallMethod	js/src/xpconnect/src/xpcwrappedjs.cpp:570
5	xpcom_core.dll	PrepareAndDispatch	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114

Comment 1

[Wayne Mery (:wsmwk)]

firefox crashes (not reviewed) https://crash-stats.mozilla.com/report/list?product=Firefox&build_id=&query_search=signature&query_type=exact&query=XPCConvert%3A%3AJSObject2NativeInterface%28XPCCallContext%26%2C%20void**%2C%20JSObject*%2C%20nsID%20const*%2C%20nsISupports*%2C%20unsigned%20int*%29&date=10%2F22%2F2010%2015%3A45%3A45&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=XPCConvert%3A%3AJSObject2NativeInterface%28XPCCallContext%26%2C%20void**%2C%20JSObject*%2C%20nsID%20const*%2C%20nsISupports*%2C%20unsigned%20int*%29&missing_sig=&page=1

Comment 2

[Scoobidiver (away)]

All crashes happen with Video downloadHelper extension (https://addons.mozilla.org/addon/3006).

Comment 3

[Benoit Jacob [:bjacob] (mostly away)]

This was reported again by a user on Linuxfr.org who also gave a screenshot of what he was doing then:
http://linuxfr.org/nodes/84437/comments/1220187

Comment 4

[Benoit Jacob [:bjacob] (mostly away)]

CC'ing Boris, perhaps he knows whom to assign that to.

Comment 5

[Boris Zbarsky [:bzbarsky]]

Peter or Blake?

Comment 6

[Wayne Mery (:wsmwk)]

bp-4b0c11e2-6b0f-4e08-b4cf-b64742160311
suspect this correlates to some other signature

Comment 7

[Wayne Mery (:wsmwk)]

Thinking further ... originally filed as a Thunderbird crash this is so rare, ~10 per week, plus the stacks vary, that I doubt there's anything actionable here. SO closing