704761 - Crash in nsXMLHttpRequest::GetResponseText

Status: RESOLVED DUPLICATE of bug 704760

(Core :: DOM: Core & HTML, defect)

Description

[Scoobidiver (away)]

It's #6 top crasher in 11.0a1/20111122 where it first appeared.

Signature	nsXMLHttpRequest::GetResponseText
UUID	669ee28e-630b-4013-aced-32e492111122
Date Processed	2011-11-22 22:30:32.579243
Uptime	268
Last Crash	7.5 weeks before submission
Install Age	20.8 minutes since version was first installed.
Install Time	2011-11-23 06:09:39
Product	Firefox
Version	11.0a1
Build ID	20111122030949
Release Channel	nightly
OS	Mac OS X
OS Version	10.7.2 11C74
Build Architecture	amd64
Build Architecture Info	family 6 model 23 stepping 10
Crash Reason	EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash Address	0x90
App Notes 	Renderers: GL Context? GL Context+
GL Layers? GL Layers+
Processor Notes 	This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	False

Frame 	Module 	Signature [Expand] 	Source
0 	XUL 	nsXMLHttpRequest::GetResponseText 	nsIDocument.h:319
1 	XUL 	nsIXMLHttpRequest_GetResponseText 	obj-firefox/x86_64/js/xpconnect/src/dom_quickstubs.cpp:22477
2 	XUL 	js_GetProperty 	js/src/jscntxtinlines.h:347
3 	XUL 	js::Interpret 	js/src/jsobjinlines.h:198
4 	XUL 	js::RunScript 	js/src/jsinterp.cpp:584
5 	XUL 	js::InvokeKernel 	js/src/jsinterp.cpp:647
6 	XUL 	js::Invoke 	js/src/jsinterp.h:148
7 	XUL 	js::InvokeGetterOrSetter 	js/src/jsinterp.cpp:716
8 	XUL 	js_GetProperty 	js/src/jsscopeinlines.h:281
9 	XUL 	js::Wrapper::get 	js/src/jsobjinlines.h:198
10 	XUL 	js::CrossCompartmentWrapper::get 	js/src/jswrapper.cpp:600
11 	XUL 	proxy_GetGeneric 	js/src/jsproxy.cpp:837
12 	XUL 	js::Interpret 	js/src/jsobjinlines.h:195
13 	XUL 	js::RunScript 	js/src/jsinterp.cpp:584
14 	XUL 	js::InvokeKernel 	js/src/jsinterp.cpp:647
15 	XUL 	js_fun_apply 	js/src/jsinterp.h:148
16 	XUL 	js::InvokeKernel 	js/src/jscntxtinlines.h:297
17 	XUL 	js::Invoke 	js/src/jsinterp.h:148
18 	XUL 	js::ProxyHandler::call 	js/src/jsproxy.cpp:303
19 	XUL 	js::CrossCompartmentWrapper::call 	js/src/jswrapper.cpp:262
20 	XUL 	proxy_Call 	js/src/jsproxy.cpp:878
21 	XUL 	js::InvokeKernel 	js/src/jscntxtinlines.h:297
22 	XUL 	js::Interpret 	js/src/jsinterp.cpp:3950
23 	XUL 	js::RunScript 	js/src/jsinterp.cpp:584
24 	XUL 	js::InvokeKernel 	js/src/jsinterp.cpp:647
25 	XUL 	js::Invoke 	js/src/jsinterp.h:148
26 	XUL 	JS_CallFunctionValue 	js/src/jsapi.cpp:5223
27 	XUL 	nsXPCWrappedJSClass::CallMethod 	js/xpconnect/src/XPCWrappedJSClass.cpp:1530
28 	XUL 	nsXPCWrappedJS::CallMethod 	js/xpconnect/src/XPCWrappedJS.cpp:611
29 	XUL 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_darwin.cpp:153
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsXMLHttpRequest%3A%3AGetResponseText

Comment 1

[Henri Sivonen (:hsivonen) (away from Bugzilla until 2026-01-05)]

Either this is a duplicate of bug 704284 or mResponseXML somehow manages not to QI into nsIDocument. Let's see if this goes away as the fix for bug 704284 propagates to the Nightly channel.

Either way, this is a duplicate of bug 704760. The real crash is in the inlined nsIDocument.h:319.