704760 - Crash in nsXMLHttpRequest::MaybeDispatchProgressEvents

Status: RESOLVED DUPLICATE of bug 704284

(Core :: DOM: Core & HTML, defect)

Description

[Scoobidiver (away)]

It's #2 top crasher in 11.0a1/20111122 where it first appeared.

Signature	nsXMLHttpRequest::MaybeDispatchProgressEvents
UUID	e6ff8562-7fc8-4552-a340-44d5e2111122
Date Processed	2011-11-22 13:45:34.811518
Uptime	7274
Last Crash	2.0 hours before submission
Install Age	3.8 hours since version was first installed.
Install Time	2011-11-22 17:50:02
Product	Firefox
Version	11.0a1
Build ID	20111122030949
Release Channel	nightly
OS	Mac OS X
OS Version	10.6.8 10K549
Build Architecture	amd64
Build Architecture Info	family 6 model 37 stepping 5
Crash Reason	EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash Address	0x90
User Comments	Was working on Gliffy on Mana when the page crashed.
App Notes 	Renderers: GL Context? GL Context+
GL Layers? GL Layers+

Frame 	Module 	Signature [Expand] 	Source
0 	XUL 	nsXMLHttpRequest::MaybeDispatchProgressEvents 	nsIDocument.h:319
1 	XUL 	nsXMLHttpRequest::OnDataAvailable 	content/base/src/nsXMLHttpRequest.cpp:1811
2 	XUL 	nsStreamListenerTee::OnDataAvailable 	netwerk/base/src/nsStreamListenerTee.cpp:111
3 	XUL 	nsHttpChannel::OnDataAvailable 	netwerk/protocol/http/nsHttpChannel.cpp:4392
4 	XUL 	nsInputStreamPump::OnStateTransfer 	netwerk/base/src/nsInputStreamPump.cpp:510
5 	XUL 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:400
6 	XUL 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:114
7 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
8 	XUL 	NS_ProcessPendingEvents_P 	obj-firefox/x86_64/xpcom/build/nsThreadUtils.cpp:195
9 	XUL 	nsBaseAppShell::NativeEventCallback 	widget/src/xpwidgets/nsBaseAppShell.cpp:130
10 	XUL 	nsAppShell::ProcessGeckoEvents 	widget/src/cocoa/nsAppShell.mm:424
11 	CoreFoundation 	CoreFoundation@0x4e3d0 	
12 	CoreFoundation 	CoreFoundation@0x4c5c8 

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsXMLHttpRequest%3A%3AMaybeDispatchProgressEvents

Comment 1

[Henri Sivonen (:hsivonen)]

Either this is a duplicate of bug 704284 or mResponseXML somehow manages not to QI into nsIDocument. Let's see if this goes away as the fix for bug 704284 propagates to the Nightly channel.

Comment 3

[Andrew McCreight [:mccr8]]

This happened to me yesterday when I clicked on a bugmail link in gmail.  I was not able to reproduce it.  bp-c0931e46-9f4a-44b4-99eb-0cce12111122

It then happened again this morning when I turned my computer on, after a few seconds (after Facebook and Gamil had refreshed).  I had gmail and facebook in app tabs, and a random hacker news link open.  bp-3bdffdd2-76fb-4c55-9d2c-3eb2b2111123

Comment 4

[Henri Sivonen (:hsivonen)]

Has this happened to anyone in a build that contains the changeset https://hg.mozilla.org/mozilla-central/rev/3a00a7c1227f ?

Comment 5

[Armen [:armenzg]]

Something very interesting that happened to me is that the crash happened in two different machines that were side-by-side simultaneously.

Both builds have Sync setup (though they were for different Sync accounts).

The minimum common tabs were:
- gmail.com
- facebook.com
- last.fm
- calendar.google.com

bp-d9fadd66-6841-4d19-888f-b67f32111123 - MacOS X 10.6
bp-2198faff-3af2-43bb-9fe9-fc9342111123 - MacOS X 10.7

Comment 6

[Scoobidiver (away)]

(In reply to Henri Sivonen (:hsivonen) from comment #4)
> Has this happened to anyone in a build that contains the changeset
> https://hg.mozilla.org/mozilla-central/rev/3a00a7c1227f ?
So far, there have been no crashes in 11.0a1/20111123.

Comment 7

[Henri Sivonen (:hsivonen)]

(In reply to Scoobidiver from comment #6)
> (In reply to Henri Sivonen (:hsivonen) from comment #4)
> > Has this happened to anyone in a build that contains the changeset
> > https://hg.mozilla.org/mozilla-central/rev/3a00a7c1227f ?
> So far, there have been no crashes in 11.0a1/20111123.

OK. Marking as duplicate.