676571 - Firefox 8.0a1 Crash @ CrashIfInvalidSlot

Status: RESOLVED DUPLICATE of bug 676023

(Core :: JavaScript Engine, defect)

Description

[Marcia Knous [:marcia]]

Seen while reviewing crash stats. Crashes started showing up on Windows and Mac using the 2011080400 build. https://crash-stats.mozilla.com/report/list?signature=CrashIfInvalidSlot to the crashes so far which are low volume.

Possible Pushlog regression range: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=%203735fb1cd5ef&tochange=be4b064f1159

Frame 	Module 	Signature [Expand] 	Source
0 	XUL 	CrashIfInvalidSlot 	js/src/vm/Stack.cpp:919
1 	XUL 	js::StackIter::settleOnNewState 	js/src/vm/Stack.cpp:1016
2 	XUL 	js::StackIter::operator++ 	js/src/vm/Stack.cpp:1095
3 	XUL 	InitExnPrivate 	js/src/vm/Stack.h:1682
4 	XUL 	js_ErrorToException 	js/src/jsexn.cpp:1177
5 	XUL 	ReportError 	js/src/jscntxt.cpp:634
6 	XUL 	js_ReportErrorNumberVA 	js/src/jscntxt.cpp:982
7 	XUL 	JS_ReportErrorFlagsAndNumber 	js/src/jsapi.cpp:5811
8 	XUL 	js_ReportIsNullOrUndefined 	js/src/jscntxt.cpp:1068
9 	XUL 	js_ValueToNonNullObject 	js/src/jsobj.cpp:6122
10 	XUL 	js::Interpret 	js/src/jsinterp.cpp:3484
11 	XUL 	js::RunScript 	js/src/jsinterp.cpp:613
12 	XUL 	js::Invoke 	js/src/jsinterp.cpp:686
13 	XUL 	js_fun_apply 	js/src/jsinterp.h:169
14 	XUL 	js::Invoke 	js/src/jscntxtinlines.h:281
15 	XUL 	js::Interpret 	js/src/jsinterp.cpp:4011
16 	XUL 	js::RunScript 	js/src/jsinterp.cpp:613
17 	XUL 	js::Invoke 	js/src/jsinterp.cpp:686
18 	XUL 	js::ExternalInvoke 	js/src/jsinterp.h:169
19 	XUL 	JS_CallFunctionValue 	js/src/jsapi.cpp:5082
20 	XUL 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1657
21 	XUL 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:585
22 	XUL 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_darwin.cpp:153
23 	XUL 	XUL@0xe80ffa 	
24 	XUL 	jsds_ExecutionHookProc 	js/jsd/jsd_xpc.cpp:697
25 	XUL 	jsd_ThrowHandler 	js/jsd/jsd_hook.c:177
26 	XUL 	js::Interpret 	js/src/jsinterp.cpp:5935
27 	XUL 	js::RunScript 	js/src/jsinterp.cpp:613
28 	XUL 	js::Invoke 	js/src/jsinterp.cpp:686
29 	XUL 	js::ExternalInvoke 	js/src/jsinterp.h:169
30 	XUL 	JS_CallFunctionValue 	js/src/jsapi.cpp:5082
31 	XUL 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1657
32 	XUL 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:585
33 	XUL 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_darwin.cpp:153
34 	XUL 	XUL@0xe80ffa 	
35 	XUL 	nsObserverList::NotifyObservers 	xpcom/ds/nsObserverList.cpp:130
36 	XUL 	nsObserverService::NotifyObservers 	xpcom/ds/nsObserverService.cpp:182
37 	XUL 	nsAppStartup::Quit 	toolkit/components/startup/nsAppStartup.cpp:369
38 	XUL 	nsAppStartup::ExitLastWindowClosingSurvivalArea 	toolkit/components/startup/nsAppStartup.cpp:439
39 	XUL 	nsAppStartup::Observe 	toolkit/components/startup/nsAppStartup.cpp:550
40 	XUL 	nsObserverList::NotifyObservers 	xpcom/ds/nsObserverList.cpp:130
41 	XUL 	nsObserverService::NotifyObservers 	xpcom/ds/nsObserverService.cpp:182
42 	XUL 	nsXULWindow::Destroy 	xpfe/appshell/src/nsXULWindow.cpp:565
43 	XUL 	nsWebShellWindow::Destroy 	xpfe/appshell/src/nsWebShellWindow.cpp:821
44 	XUL 	nsGlobalWindow::ReallyCloseWindow 	dom/base/nsGlobalWindow.cpp:6427
45 	XUL 	nsCloseEvent::Run 	dom/base/nsGlobalWindow.cpp:6200
46 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
47 	XUL 	NS_ProcessPendingEvents_P 	obj-firefox/x86_64/xpcom/build/nsThreadUtils.cpp:195
48 	XUL 	nsBaseAppShell::NativeEventCallback 	widget/src/xpwidgets/nsBaseAppShell.cpp:130
49 	XUL 	nsAppShell::ProcessGeckoEvents 	widget/src/cocoa/nsAppShell.mm:424
50 	CoreFoundation 	CoreFoundation@0x12240 	
51 	CoreFoundation 	CoreFoundation@0x11aac 	
52 	CoreFoundation 	CoreFoundation@0x388d8 	
53 	XUL 	nsDOMUIEvent::QueryInterface 	content/events/src/nsDOMUIEvent.cpp:124
54 		@0x17fff8228315f 	
55 	CarbonCore 	CarbonCore@0x17b9b 	
56 	XUL 	XUL@0xe3e38f 	
57 	XUL 	nsDOMKeyboardEvent::QueryInterface 	content/events/src/nsDOMKeyboardEvent.cpp:75
58 		@0x7fff5fbfd5ff 	
59 	XUL 	NS_NewAtom 	xpcom/ds/nsAtomTable.cpp:538
60 	CoreFoundation 	CoreFoundation@0x2754 	
61 	libobjc.A.dylib 	libobjc.A.dylib@0xea22 	
62 	CoreFoundation 	CoreFoundation@0xee1f 	
63 	XUL 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:1075
64 	XUL 	nsEventListenerManager::HandleEventInternal 	dom/base/nsPIDOMWindow.h:693
65 	XUL 	nsEventTargetChainItem::HandleEventTargetChain 	nsCOMPtr.h:492
66 	XUL 	nsDOMEvent::DuplicatePrivateData 	nsAutoPtr.h:957
67 	XUL 	nsDOMUIEvent::DuplicatePrivateData 	content/events/src/nsDOMUIEvent.cpp:391
68 	XUL 	nsEventDispatcher::Dispatch 	nsCOMPtr.h:492
69 	XUL 	PresShell::HandleEventInternal 	
70 		@0x10413c8af 	
71 	CoreFoundation 	CoreFoundation@0x1ec7c 	
72 	CoreFoundation 	CoreFoundation@0xf342 	
73 	CoreFoundation 	CoreFoundation@0x38540 	
74 	CoreFoundation 	CoreFoundation@0xf342 	
75 	CoreFoundation 	CoreFoundation@0x2a958 	
76 	CoreFoundation 	CoreFoundation@0x1edd 	
77 	CoreFoundation 	CoreFoundation@0x166f77 	
78 	libsystem_c.dylib 	libsystem_c.dylib@0x4d15f 	
79 	libsystem_c.dylib 	libsystem_c.dylib@0x4d46f 	
80 	CoreFoundation 	CoreFoundation@0x8903 	
81 	CoreFoundation 	CoreFoundation@0x540bc 	
82 	HIToolbox 	HIToolbox@0x18904 	
83 	libsystem_c.dylib 	libsystem_c.dylib@0x4d15f 	
84 	CoreFoundation 	CoreFoundation@0x635e7 	
85 	CoreFoundation 	CoreFoundation@0x6348f 	
86 	CoreFoundation 	CoreFoundation@0x38215 	
87 	HIToolbox 	HIToolbox@0x24fe 	
88 	HIToolbox 	HIToolbox@0x9b72 	
89 	CoreFoundation 	CoreFoundation@0x122c9 	
90 	HIToolbox 	HIToolbox@0x9aad 	
91 	AppKit 	AppKit@0x9190 	
92 	libobjc.A.dylib 	libobjc.A.dylib@0xd566 	
93 	libsystem_c.dylib 	libsystem_c.dylib@0xa0788 	
94 	libobjc.A.dylib 	libobjc.A.dylib@0xd566 	
95 	libobjc.A.dylib 	libobjc.A.dylib@0xd4b4 	
96 	libobjc.A.dylib 	libobjc.A.dylib@0xd417 	
97 	libobjc.A.dylib 	libobjc.A.dylib@0xf049 	
98 	libsystem_blocks.dylib 	libsystem_blocks.dylib@0x11e0 	
99 	AppKit 	AppKit@0x8962 	
100 	AppKit 	AppKit@0x2c0ada 	
114 	Foundation 	Foundation@0x3a519 	
115 	libobjc.A.dylib 	libobjc.A.dylib@0xd566 	
116 	libobjc.A.dylib 	libobjc.A.dylib@0xe41a 	
117 	CoreFoundation 	CoreFoundation@0x30416 	
118 	AppKit 	AppKit@0x53d5 	
119 	XUL 	nsAppShell::Run 	widget/src/cocoa/nsAppShell.mm:771
120 	XUL 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:224
121 	XUL 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3577
122 	firefox 	main 	browser/app/nsBrowserApp.cpp:198
123 	firefox 	firefox@0xb73

Comment 1

[Luke Wagner [:luke]]

Thanks!  Moving tracking of this to the patch that added the telemetry.  In the future, I should preemptively add these signatures to the crash signature...