Last Comment Bug 681795 - Crash [@ __CFStringCreateImmutableFunnel3 ] [@ CoreFoundation@0x2ac0 ] while moving bookmarks
: Crash [@ __CFStringCreateImmutableFunnel3 ] [@ CoreFoundation@0x2ac0 ] while ...
Status: RESOLVED DUPLICATE of bug 673301
: crash, regression, reproducible
Product: Core
Classification: Components
Component: Widget: Cocoa (show other bugs)
: 7 Branch
: x86 Mac OS X
-- critical (vote)
: ---
Assigned To: Nobody; OK to take it and work on it
: Markus Stange [:mstange]
Depends on:
  Show dependency treegraph
Reported: 2011-08-24 15:17 PDT by Scoobidiver (away)
Modified: 2012-02-02 19:32 PST (History)
6 users (show)
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Description User image Scoobidiver (away) 2011-08-24 15:17:29 PDT
It is a new crash signature in 7.0 and is #5 top crasher in 7.0b1 on Mac OS X and #1 top crasher without Mac OS X Lion crashes.

Comments are all about moving bookmarks

Signature	__CFStringCreateImmutableFunnel3
UUID	9436aea7-0359-4be6-8ff3-a4bc42110822
Date Processed	2011-08-22 05:32:46.486453
Uptime	863
Last Crash	1.8 hours before submission
Install Age	3.7 days since version was first installed.
Install Time	2011-08-18 20:21:47
Product	Firefox
Version	7.0
Build ID	20110816154714
Release Channel	beta
OS Version	10.5.8 9L31a
CPU	x86
CPU Info	family 6 model 23 stepping 6
Crash Address	0x0
User Comments	Sooooo many crashes today!!!!
App Notes 	Renderers: 0x24200,0x20400

Frame 	Module 	Signature [Expand] 	Source
0 	CoreFoundation 	__CFStringCreateImmutableFunnel3 	
1 	CoreFoundation 	CFStringCreateWithCharacters 	
2 	Foundation 	-[NSPlaceholderString initWithCharacters:length:] 	
3 	Foundation 	+[NSString stringWithCharacters:length:] 	
4 	XUL 	nsClipboard::PasteboardDictFromTransferable 	widget/src/cocoa/
5 	XUL 	SetUpDragClipboard 	widget/src/cocoa/
6 	XUL 	nsDragService::InvokeDragSession 	widget/src/cocoa/
7 	XUL 	nsBaseDragService::InvokeDragSessionWithImage 	widget/src/xpwidgets/nsBaseDragService.cpp:286
8 	XUL 	nsEventStateManager::DoDefaultDragStart 	content/events/src/nsEventStateManager.cpp:2317
9 	XUL 	nsEventStateManager::GenerateDragGesture 	content/events/src/nsEventStateManager.cpp:2074
10 	XUL 	nsEventStateManager::PreHandleEvent 	content/events/src/nsEventStateManager.cpp:1160
11 	XUL 	PresShell::HandleEventInternal 	layout/base/nsPresShell.cpp:7076
12 	XUL 	PresShell::HandlePositionedEvent 	layout/base/nsPresShell.cpp:6923
13 	XUL 	PresShell::HandleEvent 	layout/base/nsPresShell.cpp:6758
14 	XUL 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:1053
15 	XUL 	HandleEvent 	view/src/nsView.cpp:160

More reports at:
Comment 1 User image Marcia Knous [:marcia - use ni] 2011-08-24 15:38:17 PDT
I can reproduce this easily using Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:8.0a2) Gecko/20110824 Firefox/8.0a2, although I get a bit of a different stack:

1. Install Aurora with a fresh profile.
2. Enable the Bookmarks Toolbar.'
3. Try to drag the "Latest Headlines" feed to the right with your mouse.
4. Crash.
Comment 2 User image Steven Michaud [:smichaud] (Retired) 2011-08-24 15:54:02 PDT
Please try to find a regression range.
Comment 3 User image Marcia Knous [:marcia - use ni] 2011-08-24 16:27:30 PDT
From what I can see in crash stats, this likely regressed between Firefox 6 and 7.0b1, since the crashes that predominantly show in crash stats show buildID=20110816154714 which is the B1 build ID. I don't see any crashes showing up from 6.

We built 7.0b1 from 

We built 6.0 from

Will keep digging further.
Comment 4 User image Marcia Knous [:marcia - use ni] 2011-08-24 16:30:46 PDT
I forgot to add in the last comment that this happens on both 10.6 and 10.7 according to crash stats. While I could reproduce the issue easily in Aurora I have not yet been able to crash FF 7b1.
Comment 5 User image Marcia Knous [:marcia - use ni] 2011-08-24 16:35:40 PDT
I was able to reproduce the crash on 10.6 using Firefox 7 as well as Aurora following the STR in Comment 1.
Comment 6 User image Onno Witvliet 2011-08-27 00:46:03 PDT
Bug 678145 looks like a duplicate of this bug.
Comment 7 User image Scoobidiver (away) 2011-08-27 02:51:27 PDT
Dupe of bug 673301?
Comment 8 User image Marco Bonardo [::mak] 2011-08-27 02:59:15 PDT
(In reply to Scoobidiver from comment #7)
> Dupe of bug 673301?

I think so, someone may try to repro on Firefox 9
Comment 9 User image Onno Witvliet 2011-08-28 00:31:52 PDT
I have tested with:

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:9.0a1) Gecko/20110819 Firefox/9.0a1
Build from
(first Nightly that contains the fix for bug 673301).

The crash has gone!
Comment 10 User image Scoobidiver (away) 2011-08-28 01:17:05 PDT

*** This bug has been marked as a duplicate of bug 673301 ***

Note You need to log in before you can comment on or make changes to this bug.