617056 - Firefox 4.0b8pre crash in [@ arena_dalloc_small | arena_dalloc | free | nsStandardURL::Release() ]

Status: RESOLVED WORKSFORME

(Core :: Memory Allocator, defect)

Description

[Marcia Knous [:marcia]]

Seen while reviewing trunk crash stats.  Crashes started showing up using the 2010112500 build and it is currently the #23 crash in the last week.

http://tinyurl.com/2d86ajh to the crashes so far.

Frame 	Module 	Signature [Expand] 	Source
0 	mozcrt19.dll 	arena_dalloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4153
1 	mozcrt19.dll 	arena_dalloc 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4281
2 	mozcrt19.dll 	free 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:6121
3 	xul.dll 	nsStandardURL::Release 	netwerk/base/src/nsStandardURL.cpp:929
4 	xul.dll 	nsRefPtr<mozilla::dom::Element>::~nsRefPtr<mozilla::dom::Element> 	obj-firefox/xpcom/build/nsCOMPtr.cpp:81
5 	xul.dll 	nsSHEntry::Release 	docshell/shistory/src/nsSHEntry.cpp:191
6 	xul.dll 	ReleaseObjects 	obj-firefox/xpcom/build/nsCOMArray.cpp:148
7 	xul.dll 	nsCOMArray_base::Clear 	obj-firefox/xpcom/build/nsCOMArray.cpp:158
8 	xul.dll 	nsSHEntry::~nsSHEntry 	docshell/shistory/src/nsSHEntry.cpp:166
9 	xul.dll 	nsSHEntry::Release 	docshell/shistory/src/nsSHEntry.cpp:191
10 	xul.dll 	ReleaseObjects 	obj-firefox/xpcom/build/nsCOMArray.cpp:148
11 	xul.dll 	nsCOMArray_base::Clear 	obj-firefox/xpcom/build/nsCOMArray.cpp:158
12 	xul.dll 	nsSHEntry::~nsSHEntry 	docshell/shistory/src/nsSHEntry.cpp:166
13 	xul.dll 	nsSHEntry::Release 	docshell/shistory/src/nsSHEntry.cpp:191
14 	xul.dll 	ReleaseObjects 	obj-firefox/xpcom/build/nsCOMArray.cpp:148
15 	xul.dll 	nsCOMArray_base::Clear 	obj-firefox/xpcom/build/nsCOMArray.cpp:158
16 	xul.dll 	nsSHEntry::~nsSHEntry 	docshell/shistory/src/nsSHEntry.cpp:166
17 	xul.dll 	nsSHEntry::Release 	docshell/shistory/src/nsSHEntry.cpp:191
18 	xul.dll 	ReleaseObjects 	obj-firefox/xpcom/build/nsCOMArray.cpp:148
19 	xul.dll 	nsCOMArray_base::Clear 	obj-firefox/xpcom/build/nsCOMArray.cpp:158
20 	xul.dll 	nsSHEntry::~nsSHEntry 	docshell/shistory/src/nsSHEntry.cpp:166
21 	xul.dll 	nsSHEntry::Release 	docshell/shistory/src/nsSHEntry.cpp:191
22 	xul.dll 	ReleaseObjects 	obj-firefox/xpcom/build/nsCOMArray.cpp:148
23 	xul.dll 	nsCOMArray_base::Clear 	obj-firefox/xpcom/build/nsCOMArray.cpp:158
24 	xul.dll 	nsSHEntry::~nsSHEntry 	docshell/shistory/src/nsSHEntry.cpp:166
25 	mozalloc.dll 	mozalloc.dll@0x106f 	
26 	xul.dll 	nsSHEntry::Release 	docshell/shistory/src/nsSHEntry.cpp:191
27 	xul.dll 	DoDeferredRelease<nsISupports*> 	js/src/xpconnect/src/xpcjsruntime.cpp:544
28 	xul.dll 	nsHTMLInputElement::`vector deleting destructor' 	
29 	xul.dll 	XPCJSRuntime::GCCallback 	js/src/xpconnect/src/xpcjsruntime.cpp:815
30 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
31 	xul.dll 	nsHTMLInputElement::`vector deleting destructor' 	
32 	xul.dll 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:405

Comment 1

[chris hofmann]

this has shot up from about 1 crash per day to around 10 crashes per day on  4.0b8pre builds after dec. 4

20101201 12  	9 3.6.122010102621, 
        		1 3.6.32010040108, 	1 3.6.102010091412, 
        		1 3.0.102009042316, 
20101202 14  	10 3.6.122010102621, 
        		2 4.0b72010110414, 	1 3.5.152010102620, 
        		1 3.0.192010031422, 
20101203 8  	5 3.6.122010102621, 
        		1 4.0b8pre2010112503, 	1 4.0b72010110414, 
        		1 4.0b12010063014, 
20101204 26  	11 4.0b8pre2010120403, 
        		7 3.6.122010102621, 	2 3.6.32010040108, 
        		1 4.0b72010110414, 	1 4.0b12010062821, 
        		1 3.6.62010062523, 	1 3.0b52008032620, 
        		1 3.0.192010031422, 	1 3.02008052906, 
20101205 31  	10 4.0b8pre2010120503, 
        		9 4.0b8pre2010120403, 	8 3.6.122010102621, 
        		2 4.0b72010110414, 	1 3.6.32010040108, 
        		1 3.6.112010101211,

Comment 2

[Wayne Mery (:wsmwk)]

signature gone after version 4.