682916 - Firefox Crash [@ XPC_WN_NoHelper_Finalize ]

Status: RESOLVED INCOMPLETE

(Core :: XPConnect, defect)

Description

[Marcia Knous [:marcia]]

Seen while looking at crash reports. Seen across all versions. https://crash-stats.mozilla.com/report/list?signature=XPC_WN_NoHelper_Finalize to the crashes which occur on Win, Mac and Linux.

One comment mentions Roboform 2 Go

https://crash-stats.mozilla.com/report/index/2c39bef4-eab8-4d82-be29-259542110829

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	XPC_WN_NoHelper_Finalize 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:672
1 	xul.dll 	js::gc::Arena::finalize<JSObject_Slots2> 	js/src/jsgc.cpp:244
2 	xul.dll 	js::gc::ArenaList::finalizeNow<JSObject_Slots2> 	js/src/jsgc.cpp:1234
3 	xul.dll 	JSCompartment::finalizeObjectArenaLists 	js/src/jsgc.cpp:1983
4 	xul.dll 	MarkAndSweep 	js/src/jsgc.cpp:2366
5 	xul.dll 	GCCycle 	js/src/jsgc.cpp:2658
6 	xul.dll 	js_GC 	js/src/jsgc.cpp:2744
7 	xul.dll 	XPCCallContext::XPCCallContext 	js/src/xpconnect/src/xpccallcontext.cpp:63
8 	xul.dll 	JS_CompartmentGC 	js/src/jsapi.cpp:2599
9 	xul.dll 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:414
10 	xul.dll 	nsTHashtable<nsBaseHashtableET<mozilla::URIAndPrincipalHashKey,nsRefPtr<nsCSSStyleSheet> > >::s_InitEntry 	obj-firefox/dist/include/nsTHashtable.h:408
11 	xul.dll 	xul.dll@0x2beb5f 	
12 	nspr4.dll 	MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:308
13 	xul.dll 	mozilla::imagelib::RasterImage::Notify 	modules/libpr0n/src/RasterImage.cpp:1552
14 	nspr4.dll 	PR_ExitMonitor 	nsprpub/pr/src/threads/prmon.c:132
15 	xul.dll 	nsTHashtable<nsBaseHashtableET<mozilla::URIAndPrincipalHashKey,nsRefPtr<nsCSSStyleSheet> > >::s_InitEntry 	obj-firefox/dist/include/nsTHashtable.h:408
16 	xul.dll 	nsXPConnect::GarbageCollect 	js/src/xpconnect/src/nsXPConnect.cpp:422
17 	xul.dll 	nsThread::HasPendingEvents 	xpcom/threads/nsThread.cpp:516
18 	xul.dll 	nsJSContext::GarbageCollectNow 	dom/base/nsJSEnvironment.cpp:3168
19 	xul.dll 	nsTHashtable<nsBaseHashtableET<mozilla::URIAndPrincipalHashKey,nsRefPtr<nsCSSStyleSheet> > >::s_InitEntry 	obj-firefox/dist/include/nsTHashtable.h:408
20 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:424
21 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:520
22 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
23 	xul.dll 	xul.dll@0x109d8f 	
24 	nspr4.dll 	MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:308
25 	xul.dll 	MessageLoop::DoWork 	ipc/chromium/src/base/message_loop.cc:412
26 	xul.dll 	xul.dll@0x109d8f 	
27 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
28 	xul.dll 	nsCommandLine::EnumerateHandlers 	toolkit/components/commandlines/nsCommandLine.cpp:600
29 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
30 	nspr4.dll 	PR_GetThreadPrivate 	nsprpub/pr/src/threads/prtpd.c:232
31 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
32 	msvcr90.dll 	getenv_helper_nolock 	
33 	xul.dll 	MessageLoop::current 	ipc/chromium/src/base/message_loop.cc:85
34 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:189
35 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:224
36 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3551
37 	kernel32.dll 	kernel32.dll@0x22f70

Comment 1

[intendentedelleacque]

I'm the developer of ImportExportTools extension and I received some reports about this bug, in connection with export of a large number of messages in plain-text format.

My reports are two and both with IMAP accounts and export in plain-text format.

To do this, my extension uses messageService.DisplayMessage function.

Both users told me that they get it just with Thunderbird 5 or higher, but not with Thunderbird 3.1.x.

Unluckly I can't reproduce it in any way.

Comment 2

[Wayne Mery (:wsmwk)]

comment 1 Thunderbird issue should be fixed by bug 692735. But that patch won't affect firefox.

Comment 3

[Wayne Mery (:wsmwk)]

Thunderbird crashes continue in version 8, for people who never used ImportExportTools.

Comment 4

[Olli Pettay [:smaug][[e-mail]]]

Based on the stack, maybe related to Bug 712448

Comment 5

[Phoenix]

Got crash with same signature on yesterday SeaMonkey nightly, link - https://crash-stats.mozilla.com/report/index/bp-9d267060-f3f8-45a5-bf65-7e8d32120507

Comment 6

[Lorne]

I get this crash every few days, almost always overnight. I don't have ImportExportTools installed.  FF12.  Crash report:

http://crash-stats.mozilla.com/report/index/bp-cdadebbe-282e-48ec-8b86-8e1022120611

Comment 7

[Brian Carpenter [:geeknik]]

I just got this crash while I was running cross_fuzz v3 (file:///d:/grinder/fuzzer/FF/cross_fuzz_randomized_20110105_seed.html#13371337).

https://crash-stats.mozilla.com/report/index/bp-086e136b-79aa-42bf-a5a0-502de2120731

I managed to grab a windbg log file as well and I'll attach it and hopefully it is helpful.

Comment 8

[Brian Carpenter [:geeknik]]

Attachment: windbg log file

Comment 9

[Andrew McCreight [:mccr8]]

I refactored this code a little in bug 714725, but it wasn't supposed to change the behavior.

Comment 10

[Phoenix]

Don't see any crashes with this signature on crash-stats, is this still actual?

Comment 11

[Andrew McCreight [:mccr8]]

I see a few crashes, but I think it is okay to close this as incomplete, given that the volume is so low. This bug isn't serving any purpose.