674622 - crash [@ nsNodeUtils::ParentChainChanged]

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-66f6c602-cf08-466d-aa78-833a12110721 .
============================================================= 
Frame 	Module 	Signature [Expand] 	Source
0 	libxul.so 	nsNodeUtils::ParentChainChanged 	nsTArray.h:140
1 	libxul.so 	nsGenericElement::UnbindFromTree 	content/base/src/nsGenericElement.cpp:2994
2 	libxul.so 	nsStyledElementNotElementCSSInlineStyle::UnbindFromTree 	content/base/src/nsStyledElement.cpp:249
3 	libxul.so 	nsGenericHTMLElement::UnbindFromTree 	content/html/content/src/nsGenericHTMLElement.cpp:979
4 	libxul.so 	nsAttrAndChildArray::Clear 	content/base/src/nsAttrAndChildArray.cpp:681
5 	libxul.so 	nsAttrAndChildArray::~nsAttrAndChildArray 	content/base/src/nsAttrAndChildArray.cpp:135
6 	libxul.so 	nsGenericElement::~nsGenericElement 	nsIContent.h:86
7 	libxul.so 	nsDocumentFragment::~nsDocumentFragment 	content/base/src/nsDocumentFragment.cpp:73
8 	libxul.so 	nsDocumentFragment::~nsDocumentFragment 	mozalloc.h:253
9 	libxul.so 	nsNodeUtils::LastRelease 	content/base/src/nsNodeUtils.cpp:327
10 	libxul.so 	nsGenericElement::Release 	content/base/src/nsGenericElement.cpp:4264
11 	libxul.so 	nsDocumentFragment::Release 	content/base/src/nsDocumentFragment.cpp:170
12 	libxul.so 	XPC_WN_NoHelper_Finalize 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:669
13 	libxul.so 	JSCompartment::finalizeObjectArenaLists 	js/src/jsobj.h:1274
14 	libxul.so 	GCCycle 	js/src/jsvector.h:330
15 	libxul.so 	js_GC 	js/src/jscntxt.h:1788
16 	libxul.so 	JS_CompartmentGC 	js/src/jsapi.cpp:2584
17 	libxul.so 	JS_GC 	js/src/jsapi.cpp:2591
18 	libxul.so 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:413
19 	libxul.so 	nsXPConnect::GarbageCollect 	js/src/xpconnect/src/nsXPConnect.cpp:422
20 	libxul.so 	nsJSContext::GarbageCollectNow 	dom/base/nsJSEnvironment.cpp:3254
21 	libxul.so 	GCTimerFired 	dom/base/nsJSEnvironment.cpp:3303
22 	libxul.so 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:425
23 	libxul.so 	nsTimerEvent::Run 	nsAutoPtr.h:969
24 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:617
25 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
26 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:111
27 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:230
28 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
29 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:511
30 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:191
31 	libxul.so 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp:671
32 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:222
33 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
34 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:511
35 	libxul.so 	XRE_InitChildProcess 	toolkit/xre/nsEmbedFunctions.cpp:514
36 	libmozutils.so 	ChildProcessInit 	other-licenses/android/APKOpen.cpp:801
37 	plugin-container 	main 	ipc/app/MozillaRuntimeMainAndroid.cpp:69
38 	libc.so 	libc.so@0xd43a

Comment 1

[Brad Lassey [:blassey] (use needinfo?)]

not tracking without STR

Comment 2

[Wayne Mery (:wsmwk)]

bp-af51b19a-2d55-47af-9446-efacc2130131 FF 4
bp-003d5c03-b96f-4365-b7e0-214d42130203 FF18

bp-42d7c410-3636-405c-866b-b2b6e2130204 TB17
bp-46c47959-4b3c-43ac-8524-34f4b2130201 TB15

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsNodeUtils::ParentChainChanged':
 - nightly (version 51): 0 crashes from 2016-08-01.
 - aurora  (version 50): 0 crashes from 2016-08-01.
 - beta    (version 49): 16 crashes from 2016-08-02.
 - release (version 48): 21 crashes from 2016-07-25.
 - esr     (version 45): 42 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       0       0
 - aurora        0       0       0
 - beta         11       3       0
 - release       5      12       3
 - esr           4       2       4

Affected platforms: Windows, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly
 - aurora
 - beta    #6155     #670
 - release #8569
 - esr     #1059

Comment 4

[Wayne Mery (:wsmwk)]

This is near zero for current versions, the stacks I sampled don't match comment 0, and none are fennec