Closed Bug 700830 Opened 13 years ago Closed 13 years ago

Zombie compartments

Categories

(Core :: DOM: Core & HTML, defect)

Product:
Core
Component:
DOM: Core & HTML
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: roc, Unassigned)

References

Details

(Whiteboard: [MemShrink])

Attachments

(1 file)

about:memory (verbose)
23.92 KB, text/plain
Details
Attached file about:memory (verbose) —
I have a long-lived Firefox session running and about:memory shows some zombie compartments. The interesting thing is that I use very few extensions --- about:telemetry, DOM Inspector, and Font Information only --- and all three are made by Mozilla people. CC dump at http://people.mozilla.org/~roc/cc-edges-1.4840.log.bz2 about:memory shows a compartment for http://www.nytimes.com/2011/10/27/opinion/qaddafi-and-the-lives-of-tyrants.html, but no presentation for that document; I closed that tab several days ago.
find_roots.py reports this for the zombie document: 47B7AF48 [nsGenericElement (xhtml) p] --[GetParent()]-> 47B78798 [nsGenericElement (xhtml) div] --[GetParent()]-> 47B808F8 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B7CF28 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B75EA8 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B84AE8 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 440B3498 [nsGenericElement (xhtml) ul] --[mAttrsAndChildren[i]]-> 47B7F868 [nsGenericElement (xhtml) li] --[mAttrsAndChildren[i]]-> 4082D9C8 [nsGenericElement (xhtml) a] --[[via hash] mListenerManager]-> 47B7ED78 [nsEventListenerManager] --[mListeners[i] mListener]-> 422AA768 [nsXPCWrappedJS (nsIDOMEventListener)] --[]-> 3158D4D8 [JS Object (Function) (global=2b963c10)] --[]-> 31BD9918 [JS Object (Call) (global=2b963c10)] --[]-> 26316938 [JS Object (Call) (global=2b963c10)] --[]-> 2AB436A8 [JS Object (Array) (global=2b963c10)] --[]-> 27972468 [JS Object (HTMLDivElement) (global=2b963c10)] --[xpc_GetJSPrivate(obj)]-> 440D49E8 [XPCWrappedNative (HTMLDivElement)] --[mIdentity]-> 47B7F4F8 [nsGenericElement (xhtml) div] --[GetParent()]-> 47B733D8 [nsGenericElement (xhtml) div] --[GetParent()]-> 47B79878 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 4377C018 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 4378CD78 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 43788548 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 4082E4C0 [nsGenericElement (xhtml) a] --[[via hash] mListenerManager]-> 43792048 [nsEventListenerManager] --[mListeners[i] mListener]-> 42C0CCF8 [nsXPCWrappedJS (nsIDOMEventListener)] --[]-> 2B79B3F8 [JS Object (Function) (global=2b963c10)] --[]-> 1BDC7D90 [JS Object (Call) (global=2b963c10)] --[]-> 1D2F6F90 [JS Object (HTMLAnchorElement) (global=2b963c10)] --[]-> 2AB759E0 [JS Object (HTMLDocument) (global=2b963c10)] --[]-> 2AB51C58 [JS Object (Object) (global=2b963c10)] --[]-> 2C1A5D28 [JS Object (Function) (global=2b963c10)] --[]-> 2644F0D0 [JS Object (Call) (global=2b963c10)] --[]-> 2C1425E8 [JS Object (Call) (global=2b963c10)] --[]-> 2AB5EC10 [JS Object (HTMLHtmlElement) (global=2b963c10)] --[xpc_GetJSPrivate(obj)]-> 4195AF60 [XPCWrappedNative (HTMLHtmlElement)] --[mIdentity]-> 40B93FB8 [nsGenericElement (xhtml) html] --[mAttrsAndChildren[i]]-> 47B69838 [nsGenericElement (xhtml) body] --[mAttrsAndChildren[i]]-> 47B83CD8 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B81AC8 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B764E8 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B6B9F8 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B70278 [nsGenericElement (xhtml) ins] --[mAttrsAndChildren[i]]-> 47B86AC8 [nsGenericElement (xhtml) ins] --[mAttrsAndChildren[i]]-> 3C3A37B8 [nsGenericElement (xhtml) iframe] --[[via hash] mListenerManager]-> 47B727A8 [nsEventListenerManager] --[mListeners[i] mListener]-> 41AA2F08 [nsJSEventListener] --[mHandler]-> 279DD2E0 [JS Object (Function - onload) (global=2b963c10)] --[]-> 2C1CDCB8 [JS Object (HTMLIFrameElement) (global=2b963c10)] --[]-> 2C1CDC48 [JS Object (XPC_WN_ModsAllowed_NoCall_Proto_JSClass - HTMLIFrameElement) (global=2b963c10)] --[]-> 2AB75B30 [JS Object (XPC_WN_ModsAllowed_NoCall_Proto_JSClass - HTMLElement) (global=2b963c10)] --[]-> 1D2A3C80 [JS Object (Function) (global=2b963c10)] --[]-> 1D28BCE8 [JS Object (Call) (global=2b963c10)] --[]-> 2BBD7920 [JS Object (Function) (global=2b963c10)] --[]-> 2AB51AF0 [JS Object (Object) (global=2b963c10)] --[]-> 27DD72E0 [JS Object (Function) (global=2b963c10)] --[]-> 1D24FD60 [JS Object (Function) (global=2b963c10)] --[]-> 18780580 [JS Object (Object) (global=2b963c10)] --[]-> 2792D160 [JS Object (Object) (global=2b963c10)] --[]-> 2792D1A8 [JS Object (Object) (global=2b963c10)] --[]-> 2792D1F0 [JS Object (Object) (global=2b963c10)] --[]-> 2792D238 [JS Object (Object) (global=2b963c10)] --[]-> 2B7781C8 [JS Object (Array) (global=2b963c10)] --[]-> 279DD740 [JS Object (Function) (global=2b963c10)] --[]-> 12ECDEC8 [JS Object (Call) (global=2b963c10)] --[]-> 27B0F078 [JS Object (Function - handleMouseUp) (global=2b963c10)] --[]-> 29FDBE78 [JS Object (Call) (global=2b963c10)] --[]-> 2B7C40E8 [JS Object (Selection) (global=2b963c10)] --[xpc_GetJSPrivate(obj)]-> 440D4BE8 [XPCWrappedNative (Selection)] --[mIdentity]-> 44094680 [nsTypedSelection] --[mRanges[i].mRange, mAnchorFocusRange]-> 3C5B8470 [nsRange] --[mRoot]-> 26B33EC0 [nsDocument (xhtml) http://www.nytimes.com/2011/10/27/opinion/qaddafi-and-the-lives-of-tyrants.html?pagewanted=2&_r=2&ref=opinion] Root 47B7AF48 is a ref counted object with 2 unknown edge(s). known edges: 440DCDE8 [XPCWrappedNative (HTMLParagraphElement)] --[mIdentity]-> 47B7AF48 422A9A28 [nsGenericDOMDataNode] --[GetParent()]-> 47B7AF48 47B78798 [nsGenericElement (xhtml) div] --[mAttrsAndChildren[i]]-> 47B7AF48 Node 47B7AF48 is actually in the zombie document. Unfortunately, while trying to attach windbg to the browser process and monkey with it, I crashed the process, so I can't investigate further to find the unknown edges. I should have taken a heap dump :-(.
I don't think we'll be able to pursue this further now :-(.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → INCOMPLETE
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: