Closed Bug 612274 Opened 12 years ago Closed 11 years ago

crash [@ nsSHistory::EvictContentViewersInRange(int, int) ]


(Core :: DOM: Navigation, defect)

Windows XP
Not set





(Reporter: scoobidiver, Unassigned)


(Keywords: crash)

Crash Data

It is a residual crash signature that exist in 3.0, 3.5, 3.6 and trunk builds.
It is #229 top crasher in 4.0b8pre for the last week.

Comments say:
"in play on facebook and it constantly says firefox not responding."
"I was inside of who-knows-who had to change a page, or clicked the back arrow!"

Signature	nsSHistory::EvictContentViewersInRange(int, int)
UUID	db2d9dce-b53f-4be4-8d67-a13622101115
Time 	2010-11-15 02:24:41.126025
Uptime	319
Install Age	45236 seconds (12.6 hours) since version was first installed.
Product	Firefox
Version	4.0b8pre
Build ID	20101114042436
Branch	2.0
OS	Windows NT
OS Version	5.1.2600 Service Pack 3
CPU	x86
CPU Info	GenuineIntel family 6 model 23 stepping 10
Crash Address	0x0
App Notes 	AdapterVendorID: 1039, AdapterDeviceID: 6351

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsSHistory::EvictContentViewersInRange 	docshell/shistory/src/nsSHistory.cpp:869
1 	xul.dll 	nsSHistory::EvictWindowContentViewers 	docshell/shistory/src/nsSHistory.cpp:858
2 	xul.dll 	nsSHistory::EvictContentViewers 	docshell/shistory/src/nsSHistory.cpp:671
3 	xul.dll 	DocumentViewerImpl::Show 	layout/base/nsDocumentViewer.cpp:1936
4 	xul.dll 	nsPresContext::EnsureVisible 	layout/base/nsPresContext.cpp:1665
5 	xul.dll 	nsPluginInstanceOwner::Init 	layout/generic/nsObjectFrame.cpp:6071
6 	xul.dll 	nsObjectFrame::PrepareInstanceOwner 	layout/generic/nsObjectFrame.cpp:2236
7 	xul.dll 	nsObjectFrame::Instantiate 	layout/generic/nsObjectFrame.cpp:2308
8 	xul.dll 	nsObjectLoadingContent::Instantiate 	content/base/src/nsObjectLoadingContent.cpp:1895
9 	xul.dll 	nsObjectLoadingContent::EnsureInstantiation 	content/base/src/nsObjectLoadingContent.cpp:919
10 	xul.dll 	nsHTMLPluginObjElementSH::GetPluginInstanceIfSafe 	dom/base/nsDOMClassInfo.cpp:9435
11 	xul.dll 	nsHTMLPluginObjElementSH::NewResolve 	dom/base/nsDOMClassInfo.cpp:9802
12 	xul.dll 	XPC_WN_Helper_NewResolve 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1146
13 	mozjs.dll 	CallResolveOp 	js/src/jsobj.cpp:4536
14 	xul.dll 	nsWeakReference::QueryReferent 	obj-firefox/xpcom/build/nsWeakReference.cpp:152
15 	mozjs.dll 	ScopeNameCompiler::retrieve 	js/src/methodjit/PolyIC.cpp:1470
16 	mozjs.dll 	mozjs.dll@0x127ecf 	
17 	mozjs.dll 	js::mjit::EnterMethodJIT 	js/src/methodjit/MethodJIT.cpp:739
18 	mozjs.dll 	CheckStackAndEnterMethodJIT 	js/src/methodjit/MethodJIT.cpp:764
19 	mozjs.dll 	js::mjit::JaegerShot 	js/src/methodjit/MethodJIT.cpp:781
20 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:662
21 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:768
22 	mozjs.dll 	js::ExternalInvoke 	js/src/jsinterp.cpp:881
23 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:4908
24 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1694
25 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:577
26 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
27 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
28 	xul.dll 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:1112

More reports at:
861 void
862 nsSHistory::EvictContentViewersInRange(PRInt32 aStart, PRInt32 aEnd)
863 {
864   nsCOMPtr<nsISHTransaction> trans;
865   GetTransactionAtIndex(aStart, getter_AddRefs(trans));

this can return failure codes (indicating null pointers).

867   for (PRInt32 i = aStart; i < aEnd; ++i) {
868     nsCOMPtr<nsISHEntry> entry;
869     trans->GetSHEntry(getter_AddRefs(entry));
Looks like a dup of bug 624758.
Crash Signature: [@ nsSHistory::EvictContentViewersInRange(int, int) ]
Over the last four weeks, it happened once in 7.0.1 and several times in 4.0.1.
I close it as WFM.
Closed: 11 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.