612534 - crash [@ js::PropertyTree::removeChild(JSContext*, js::Shape*) ]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Scoobidiver (away)]

It is a new crash signature that exists in 4.0b7, 4.0b8pre builds.
The regression range is older than one month.
It is #292 top crasher in 4.0b8pre for the last week.

One comment says: "Coming out of standby, the firefox window refused to redraw, remaining competely black. Upon closing, it crashed."

Signature	js::PropertyTree::removeChild(JSContext*, js::Shape*)
UUID	1e882007-bebd-4963-bb1e-960432101115
Time 	2010-11-15 16:24:53.252675
Uptime	934
Last Crash	1202 seconds (20.0 minutes) before submission
Install Age	5772 seconds (1.6 hours) since version was first installed.
Product	Firefox
Version	4.0b8pre
Build ID	20101115042202
Branch	2.0
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	AuthenticAMD family 6 model 8 stepping 1
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0xa4
App Notes 	AdapterVendorID: 1039, AdapterDeviceID: 6330

Frame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	js::PropertyTree::removeChild 	js/src/jspropertytree.cpp:241
1 	mozjs.dll 	js::PropertyTree::sweepShapes 	js/src/jspropertytree.cpp:770
2 	mozjs.dll 	MarkAndSweep 	js/src/jsgc.cpp:2269
3 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
4 	mozjs.dll 	GCUntilDone 	js/src/jsgc.cpp:2515
5 	mozjs.dll 	JS_GC 	js/src/jsapi.cpp:2513
6 	xul.dll 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:404
7 	xul.dll 	nsXPConnect::GarbageCollect 	js/src/xpconnect/src/nsXPConnect.cpp:412
8 	xul.dll 	nsJSContext::CC 	dom/base/nsJSEnvironment.cpp:3628
9 	xul.dll 	nsJSContext::IntervalCC 	dom/base/nsJSEnvironment.cpp:3733
10 	xul.dll 	nsJSContext::MaybeCC 	dom/base/nsJSEnvironment.cpp:3702
11 	xul.dll 	nsUserActivityObserver::Observe 	dom/base/nsJSEnvironment.cpp:294
12 	xul.dll 	nsObserverList::NotifyObservers 	xpcom/ds/nsObserverList.cpp:130
13 	xul.dll 	nsObserverService::NotifyObservers 	xpcom/ds/nsObserverService.cpp:182
14 	xul.dll 	nsEventStateManager::PreHandleEvent 	content/events/src/nsEventStateManager.cpp:1089
15 		@0x12b 	
16 	xul.dll 	nsWindow::ProcessMessage 	widget/src/windows/nsWindow.cpp:4862
17 	user32.dll 	RealDefWindowProcWorker 	
18 	user32.dll 	CallWindowProcW 	
19 	user32.dll 	RealDefWindowProcWorker 	
20 	user32.dll 	RealDefWindowProcWorker 	
21 	xul.dll 	nsWindow::WindowProcInternal 	widget/src/windows/nsWindow.cpp:4385
22 	kernel32.dll 	InternalFindAtom 	
23 	xul.dll 	nsWindow::WindowProc 	widget/src/windows/nsWindow.cpp:4340
24 	user32.dll 	_FindProp 	
25 	user32.dll 	_GetProp 	
26 	xul.dll 	nsWindow::WindowProcInternal 	widget/src/windows/nsWindow.cpp:4380
27 	xul.dll 	nsDocLoader::OnStartRequest 	uriloader/base/nsDocLoader.cpp:551
28 	user32.dll 	InternalCallWinProc 	

More reports at:
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=js%3A%3APropertyTree%3A%3AremoveChild%28JSContext*%2C%20js%3A%3AShape*%29

Comment 1

[Sheila Mooney]

Over the past 4 weeks, this signature only appears in 4.0 betas. Resolving as works for me.