612094 - Firefox 4.0b7 crash [@ nsGenericHTMLFormElement::IsDisabled ]

Status: RESOLVED DUPLICATE of bug 598907

(Core :: DOM: Core & HTML, defect)

Description

[Scoobidiver (away)]

It is a crash signature in 4.0b7 on Mac OS X.
It is #15 top crasher on Mac OS X in 4.0b7 for the last week.

Some comments say:
"God damit, I was at the end of processing a ebay payment. I have no idea if i have to repay again!!!!!!!"
"editing bookmarks"
"lols new beta 7? didnt do anything. was running in background."

Signature	nsGenericHTMLFormElement::IsDisabled
UUID	251512fd-0229-4493-a1be-e18c42101113
Time 	2010-11-13 18:53:19.917925
Uptime	104854
Last Crash	652624 seconds (1.1 weeks) before submission
Install Age	104854 seconds (1.2 days) since version was first installed.
Product	Firefox
Version	4.0b7
Build ID	20101104131842
Branch	2.0
OS	Mac OS X
OS Version	10.6.4 10F569
CPU	amd64
CPU Info	family 6 model 30 stepping 5
Crash Reason	EXC_BAD_ACCESS / 0x0000000d
Crash Address	0x0
User Comments	God damit, I was at the end of processing a ebay payment. I have no idea if i have to repay again!!!!!!!
App Notes 	Renderers: 0x21a00,0x20400

Frame 	Module 	Signature [Expand] 	Source
0 	XUL 	nsGenericHTMLFormElement::IsDisabled 	content/html/content/src/nsGenericHTMLElement.h:855
1 	XUL 	nsGenericHTMLFormElement::IsDisabled 	content/html/content/src/nsGenericHTMLElement.h:855
2 	XUL 	nsGenericHTMLFormElement::IsDisabled 	content/html/content/src/nsGenericHTMLElement.h:855
3 	XUL 	nsHTMLInputElement::UnbindFromTree 	content/html/content/src/nsHTMLInputElement.cpp:3893
4 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
5 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
6 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
7 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
8 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
9 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
10 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
11 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
12 	XUL 	nsGenericHTMLFormElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:2508
13 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
14 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
15 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
16 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
17 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
18 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
19 	XUL 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:3041
20 	XUL 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:970
21 	XUL 	nsGenericHTMLFormElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:2508
22 	XUL 	nsGenericElement::cycleCollection::Unlink 	content/base/src/nsGenericElement.cpp:4315
23 	XUL 	nsCycleCollector::CollectWhite 	xpcom/base/nsCycleCollector.cpp:1876
24 	XUL 	nsCycleCollector::Collect 	xpcom/base/nsCycleCollector.cpp:2691
25 	XUL 	nsJSContext::CC 	dom/base/nsJSEnvironment.cpp:3628
26 	XUL 	nsJSContext::MaybeCC 	dom/base/nsJSEnvironment.cpp:3716
27 	XUL 	nsUserActivityObserver::Observe 	dom/base/nsJSEnvironment.cpp:294
28 	XUL 	nsObserverList::NotifyObservers 	xpcom/ds/nsObserverList.cpp:130
29 	XUL 	nsObserverService::NotifyObservers 	xpcom/ds/nsObserverService.cpp:182
30 	XUL 	nsUITimerCallback::Notify 	content/events/src/nsEventStateManager.cpp:294
31 	XUL 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:428
32 	XUL 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:517
33 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:609
34 	XUL 	NS_ProcessPendingEvents_P 	nsThreadUtils.cpp:200
35 	XUL 	nsBaseAppShell::NativeEventCallback 	widget/src/xpwidgets/nsBaseAppShell.cpp:131
36 	XUL 	nsAppShell::ProcessGeckoEvents 	widget/src/cocoa/nsAppShell.mm:399
37 	CoreFoundation 	CoreFoundation@0x4de90 	
38 	CoreFoundation 	CoreFoundation@0x4c088 	

More reports at:
http://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=nsGenericHTMLFormElement%3A%3AIsDisabled&version=Firefox%3A4.0b7

Comment 1

[Mounir Lamouri (:mounir)]

Obviously, bug 598907 wasn't really fixed or it's something else we didn't see?

Comment 2

[Mounir Lamouri (:mounir)]

This should have been fixed in nightly / b8. The crash is expected on b7. Let's mark it as duplicate and see in bug 598907 if this is really fixed or not.