Closed Bug 677082 Opened 13 years ago Closed 12 years ago

Startup crash in mozilla::Preferences::~Preferences

Categories

(Core :: Preferences: Backend, defect)

Product:
Core
Component:
Preferences: Backend
Version:
7 Branch
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression, Whiteboard: [startupcrash])

Crash Data

It is a startup crash that is #3 top crasher in 7.0a2 and #25 in 8.0a1.

There are two kind of stack traces:

Frame 	Module 	Signature [Expand] 	Source
0 	mozcrt19.dll 	arena_dalloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4153
1 	mozcrt19.dll 	arena_dalloc 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4281
2 	mozcrt19.dll 	free 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:6200
3 	xul.dll 	nsPrefBranch::`scalar deleting destructor' 	
4 	xul.dll 	nsPrefBranch::Release 	modules/libpref/src/nsPrefBranch.cpp:128
5 	xul.dll 	mozilla::Preferences::~Preferences 	modules/libpref/src/Preferences.cpp:284
6 	xul.dll 	mozilla::Preferences::`scalar deleting destructor' 	
7 	xul.dll 	mozilla::Preferences::Release 	modules/libpref/src/Preferences.cpp:298
8 	xul.dll 	mozilla::Preferences::Shutdown 	modules/libpref/src/Preferences.cpp:259
9 	xul.dll 	nsComponentManagerImpl::KnownModule::~KnownModule 	xpcom/components/nsComponentManager.h:220
10 	xul.dll 	nsTArray<nsAutoPtr<nsComponentManagerImpl::KnownModule>,nsTArrayDefaultAllocator>::DestructRange 	obj-firefox/dist/include/nsTArray.h:1107
11 	xul.dll 	nsTArray<nsAutoPtr<nsComponentManagerImpl::KnownModule>,nsTArrayDefaultAllocator>::RemoveElementsAt 	obj-firefox/dist/include/nsTArray.h:835
12 	xul.dll 	nsComponentManagerImpl::Shutdown 	xpcom/components/nsComponentManager.cpp:1003
...

Frame 	Module 	Signature [Expand] 	Source
0 	mozcrt19.dll 	arena_dalloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4054
1 	mozcrt19.dll 	arena_dalloc 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4182
2 	mozcrt19.dll 	free 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:6057
3 	xul.dll 	clearPrefEntry 	modules/libpref/src/prefapi.cpp:83
4 	xul.dll 	PL_DHashTableFinish 	obj-firefox/xpcom/build/pldhash.c:410
5 	mozalloc.dll 	mozalloc.dll@0x108f 	
6 	xul.dll 	PREF_CleanupPrefs 	modules/libpref/src/prefapi.cpp:223
7 	xul.dll 	xul.dll@0xe24723 	
8 	xul.dll 	mozilla::Preferences::~Preferences 	modules/libpref/src/Preferences.cpp:291
9 	xul.dll 	mozilla::Preferences::`scalar deleting destructor' 	
10 	xul.dll 	mozilla::Preferences::Release 	modules/libpref/src/Preferences.cpp:300
11 	xul.dll 	mozilla::Preferences::Shutdown 	modules/libpref/src/Preferences.cpp:261
12 	xul.dll 	nsComponentManagerImpl::KnownModule::~KnownModule 	xpcom/components/nsComponentManager.h:204
13 	xul.dll 	nsTArray<nsAutoPtr<nsComponentManagerImpl::KnownModule>,nsTArrayDefaultAllocator>::DestructRange 	obj-firefox/dist/include/nsTArray.h:1107
14 	xul.dll 	nsTArray<nsAutoPtr<nsComponentManagerImpl::KnownModule>,nsTArrayDefaultAllocator>::RemoveElementsAt 	obj-firefox/dist/include/nsTArray.h:835
15 	xul.dll 	nsComponentManagerImpl::Shutdown 	xpcom/components/nsComponentManager.cpp:1002
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=arena_dalloc_small%20|%20arena_dalloc%20|%20free%20|%20nsPrefBranch%3A%3A%60scalar%20deleting%20destructor%27%27%28unsigned%20int%29
https://crash-stats.mozilla.com/report/list?signature=arena_dalloc_small%20|%20arena_dalloc%20|%20free%20|%20clearPrefEntry
See also:
https://crash-stats.mozilla.com/report/list?signature=arena_dalloc_small%20|%20arena_dalloc%20|%20free%20|%20nsPrefBranch%3A%3A%60vector%20deleting%20destructor%27%27%28unsigned%20int%29
Crash Signature: [@ arena_dalloc_small | arena_dalloc | free | nsPrefBranch::`scalar deleting destructor''(unsigned int) ] [@ arena_dalloc_small | arena_dalloc | free | clearPrefEntry ] → [@ arena_dalloc_small | arena_dalloc | free | nsPrefBranch::`scalar deleting destructor''(unsigned int) ] [@ arena_dalloc_small | arena_dalloc | free | nsPrefBranch::`vector deleting destructor''(unsigned int) ] [@ arena_dalloc_small | arena_dalloc | …
With combined signatures, it's #9 top crasher in 8.0.1.
Keywords: topcrash
Whiteboard: startupcrash
Crash Signature: free | clearPrefEntry ] → free | clearPrefEntry ] [@ je_free | xul.dll@0x2eba9f | clearPrefEntry ] [@ je_free | clearPrefEntry ]
Summary: Startup OOM crash in nsPrefBranch::Release or clearPrefEntry → Startup crash in mozilla::Preferences::~Preferences
Whiteboard: startupcrash → [startupcrash]
There are no crashes in 13.0.
Keywords: topcrash
most of mozilla::Preferences::~Preferences() have similar stack and indeed pretty much stopped after version 9 -- https://crash-stats.mozilla.com/query/query?product=Firefox&version=ALL%3AALL&range_value=16&range_unit=weeks&date=7%2F06%2F2012+13%3A40%3A46&query_search=signature&query_type=exact&query=mozilla%3A%3APreferences%3A%3A~Preferences%28%29&reason=&build_id=&hang_type=any&do_query=1 

Other mozilla::Preferences::~Preferences() crashes in recent version are rare and don't have same stack
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.