Closed Bug 681118 Opened 10 years ago Closed 3 months ago

crash in nsAttrValue::Reset

Categories

(Core :: DOM: Core & HTML, defect)

ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED INACTIVE

People

(Reporter: nhirata, Unassigned)

Details

(Keywords: crash, Whiteboard: [mobile-crash][native-crash])

Crash Data

This bug was filed from the Socorro interface and is 
report bp-972bbd57-6b75-4ecc-bcc1-77c912110822 .
============================================================= 
Frame 	Module 	Signature [Expand] 	Source
0 	libxul.so 	nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear 	nsTArray.h:170
1 	libxul.so 	nsAttrValue::EnsureEmptyMiscContainer 	nsTArray.h:408
2 	libxul.so 	nsAttrValue::Reset 	mozalloc.h:253
3 	libxul.so 	nsAttrValue::~nsAttrValue 	content/base/src/nsAttrValue.cpp:101
4 	libxul.so 	nsAttrAndChildArray::InternalAttr::~InternalAttr 	content/base/src/nsAttrName.h:234
5 	libxul.so 	nsAttrAndChildArray::Clear 	content/base/src/nsAttrAndChildArray.cpp:659
6 	libxul.so 	nsAttrAndChildArray::~nsAttrAndChildArray 	content/base/src/nsAttrAndChildArray.cpp:136
7 	libxul.so 	nsGenericElement::~nsGenericElement 	Element.h:92
8 	libxul.so 	nsHTMLDivElement::~nsHTMLDivElement 	content/html/content/src/nsHTMLDivElement.cpp:92
9 	libxul.so 	nsHTMLDivElement::~nsHTMLDivElement 	mozalloc.h:253
10 	libxul.so 	nsNodeUtils::LastRelease 	content/base/src/nsNodeUtils.cpp:327
11 	libxul.so 	nsGenericElement::Release 	content/base/src/nsGenericElement.cpp:4276
12 	libxul.so 	nsHTMLDivElement::Release 	content/html/content/src/nsHTMLDivElement.cpp:96
13 	libxul.so 	nsXPCOMCycleCollectionParticipant::Unroot 	obj-firefox/xpcom/build/nsCycleCollectionParticipant.cpp:78
14 	libxul.so 	nsCycleCollector::CollectWhite 	xpcom/base/nsCycleCollector.cpp:2026
15 	libxul.so 	nsCycleCollector::FinishCollection 	xpcom/base/nsCycleCollector.cpp:2838
16 	libxul.so 	nsCycleCollectorRunner::Collect 	xpcom/base/nsCycleCollector.cpp:3526
17 	libxul.so 	nsCycleCollector_collect 	xpcom/base/nsCycleCollector.cpp:3592
18 	libxul.so 	nsJSContext::CycleCollectNow 	dom/base/nsJSEnvironment.cpp:3243
19 	libxul.so 	CCTimerFired 	dom/base/nsJSEnvironment.cpp:3283
20 	libxul.so 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:425
21 	libxul.so 	nsTimerEvent::Run 	nsAutoPtr.h:969
22 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
23 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
24 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
25 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:230
26 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:222
27 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:514
28 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:191
29 	libxul.so 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp:673
30 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:222
31 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:222
32 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:514
33 	libxul.so 	XRE_InitChildProcess 	nsAutoPtr.h:155
34 	libmozutils.so 	ChildProcessInit 	other-licenses/android/APKOpen.cpp:796
35 	plugin-container 	main 	ipc/app/MozillaRuntimeMainAndroid.cpp:69
36 	libc.so 	libc.so@0x14cbc 	

Show/hide other threads
Keywords: crash
Whiteboard: [mobile-crash]
Crash Signature: [@ nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear | nsAttrValue::EnsureEmptyMiscContainer] → [@ nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear | nsAttrValue::EnsureEmptyMiscContainer] [@ nsAttrValue::Reset]
Whiteboard: [mobile-crash] → [mobile-crash][native-crash]
Summary: crash [@ nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear | nsAttrValue::EnsureEmptyMiscContainer] → crash in nsAttrValue::Reset
Crash Signature: [@ nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear | nsAttrValue::EnsureEmptyMiscContainer] [@ nsAttrValue::Reset] → [@ nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear | nsAttrValue::EnsureEmptyMiscContainer] [@ nsAttrValue::Reset] [@ nsTArray<T>::Clear | nsAttrValue::EnsureEmptyMiscContainer]
Status: NEW → RESOLVED
Closed: 3 months ago
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.