Closed Bug 707646 Opened 14 years ago Closed 9 years ago

Crash @ memcpy | nsAString_internal::ReplacePrepInternal

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Version:
8 Branch
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: epinal99-bugzilla2, Unassigned)

Details

(Keywords: crash)

Crash Data

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0 Build ID: 20111104165243 Steps to reproduce: A new crash signature seems to be related (again) to Roboform add-on (GUID: {972ce4c6-7e08-4474-a285-3208198ce6fd}). Some users told they were not able to restart Firefox after upgrading it to 8.0.1. However various Firefox versions (9.0, 8.0.1, 8.0, 6.0.2, 7.0.1, 5.0, 4.0.1) are affected by this crash. Removing Robofom seems to stop Frirefox crashing. See https://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=nsAString_internal%3A%3AReplacePrepInternal&reason_type=contains&date=12%2F05%2F2011%2004%3A58%3A03&range_value=1&range_unit=weeks&hang_type=any&process_type=any&do_query=1&signature=nsAString_internal%3A%3AReplacePrepInternal%28unsigned%20int%2C%20unsigned%20int%2C%20unsigned%20int%2C%20unsigned%20int%29
Crash Signature: [@ nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ] [@ memcpy | nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int unsigned int) ] [@ memmove | nsAString_internal::ReplacePre…
Keywords: crash
Sorry, I did a mistake, {972ce4c6-7e08-4474-a285-3208198ce6fd} is not the GUID of Roboform extension, but the default theme. :/ Title modified.
Summary: Crash in [@ nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ] likely related to Roboform → Crash in [@ nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ]
I removed the unrelated crash signatures and let only the memcpy | nsAString_internal::ReplacePrepInternal crash signature. Stack traces are various: Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:188 1 xul.dll nsAString_internal::ReplacePrepInternal xpcom/string/src/nsTSubstring.cpp:209 2 xul.dll nsAString_internal::Replace xpcom/string/src/nsTSubstring.cpp:487 3 xul.dll nsStaticCaseInsensitiveNameTable::Lookup xpcom/ds/nsStaticNameTable.cpp:247 4 xul.dll `anonymous namespace'::CSSParserImpl::ParseOneFamily layout/style/nsCSSParser.cpp:7120 5 xul.dll `anonymous namespace'::CSSParserImpl::ParseFamily layout/style/nsCSSParser.cpp:7573 6 xul.dll `anonymous namespace'::CSSParserImpl::ParseBoxProperties layout/style/nsCSSParser.cpp:5207 ... Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:259 1 xul.dll nsAString_internal::ReplacePrepInternal xpcom/string/src/nsTSubstring.cpp:209 2 mozcrt19.dll arena_dalloc obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4281 3 xul.dll nsAString_internal::Replace xpcom/string/src/nsTSubstring.cpp:528 4 xul.dll nsAString_internal::Append obj-firefox/dist/include/nsTSubstring.h:386 5 xul.dll nsCSSScanner::AddToError 6 xul.dll nsCSSScanner::ReportUnexpectedParams layout/style/nsCSSScanner.cpp:531 7 xul.dll nsCSSScanner::ReportUnexpectedToken layout/style/nsCSSScanner.cpp:586 8 xul.dll `anonymous namespace'::CSSParserImpl::ParseTypeOrUniversalSelector ... Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:188 1 xul.dll nsAString_internal::ReplacePrepInternal xpcom/string/src/nsTSubstring.cpp:209 2 xul.dll nsAString_internal::Replace xpcom/string/src/nsTSubstring.cpp:487 3 xul.dll nsAString_internal::Replace obj-firefox/dist/include/nsTSubstring.h:378 4 xul.dll nsAString_internal::Append obj-firefox/dist/include/nsTSubstring.h:385 5 xul.dll nsPlainTextSerializer::Output content/base/src/nsPlainTextSerializer.cpp:1271 6 xul.dll nsPlainTextSerializer::EndLine content/base/src/nsPlainTextSerializer.cpp:1523 7 xul.dll nsPlainTextSerializer::EnsureVerticalSpace content/base/src/nsPlainTextSerializer.cpp:1223 8 xul.dll nsPlainTextSerializer::DoAddLeaf ... Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:271 1 xul.dll nsAString_internal::ReplacePrepInternal xpcom/string/src/nsTSubstring.cpp:218 2 xul.dll nsAString_internal::Replace xpcom/string/src/nsTSubstring.cpp:487 3 xul.dll nsAString_internal::Replace obj-firefox/dist/include/nsTSubstring.h:378 4 xul.dll nsString::ReplaceSubstring xpcom/string/src/nsTStringObsolete.cpp:374 5 @0x0 6 xul.dll nsAttrValue::ToString content/base/src/nsAttrValue.cpp:378 7 xul.dll nsContentUtils::IsEventAttributeName 8 xul.dll nsXMLContentSerializer::IsJavaScript content/base/src/nsXMLContentSerializer.cpp:823 9 xul.dll nsHTMLContentSerializer::SerializeHTMLAttributes content/base/src/nsHTMLContentSerializer.cpp:245 ... Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:407 1 xul.dll nsAString_internal::ReplacePrepInternal xpcom/string/src/nsTSubstring.cpp:218 2 xul.dll nsAString_internal::ReplacePrep obj-firefox/dist/include/nsTSubstring.h:684 3 xul.dll dosprintf obj-firefox/xpcom/build/nsTextFormatter.cpp:1115 4 xul.dll nsTextFormatter::smprintf obj-firefox/xpcom/build/nsTextFormatter.cpp:1251 5 xul.dll nsStringBundle::FormatString intl/strres/src/nsStringBundle.cpp:396 6 xul.dll nsStringBundle::FormatStringFromName intl/strres/src/nsStringBundle.cpp:231 7 xul.dll nsStringBundle::FormatStringFromID intl/strres/src/nsStringBundle.cpp:209 8 xul.dll nsStringBundleService::FormatWithBundle intl/strres/src/nsStringBundle.cpp:790 ... Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:318 1 xul.dll nsAString_internal::ReplacePrepInternal xpcom/string/src/nsTSubstring.cpp:209 2 xul.dll nsAString_internal::ReplacePrep obj-firefox/dist/include/nsTSubstring.h:684 3 xul.dll nsAString_internal::ReplaceASCII xpcom/string/src/nsTSubstring.cpp:510 4 xul.dll nsAString_internal::ReplaceASCII xpcom/string/src/nsTSubstring.cpp:510 ... Frame Module Signature [Expand] Source 0 mozcrt19.dll memcpy memcpy.asm:188 1 xul.dll nsAString_internal::ReplacePrepInternal xpcom/string/src/nsTSubstring.cpp:209 2 xul.dll nsAString_internal::ReplacePrep obj-firefox/dist/include/nsTSubstring.h:684 3 xul.dll nsAString_internal::Replace xpcom/string/src/nsTSubstring.cpp:528 4 xul.dll nsLocalFile::AppendInternal xpcom/io/nsLocalFileWin.cpp:1071 5 xul.dll nsLocalFile::Append xpcom/io/nsLocalFileWin.cpp:1019 ...
Severity: normal → critical
Status: UNCONFIRMED → NEW
Crash Signature: [@ nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ] [@ memcpy | nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int unsigned int) ] [@ memmove | nsAString_internal::ReplacePre… → [@ memcpy | nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ]
Ever confirmed: true
Hardware: x86_64 → x86
Summary: Crash in [@ nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ] → Crash @ memcpy | nsAString_internal::ReplacePrepInternal
Crash Signature: [@ memcpy | nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ] → [@ memcpy | nsAString_internal::ReplacePrepInternal(unsigned int, unsigned int, unsigned int, unsigned int) ] [@ memcpy | nsAString_internal::ReplacePrepInternal ]
There are but two crashes in the past week for version 46.0.1 with signature containing nsAString_internal::ReplacePrepInternal (eg bp-f6ad2017-ce22-45e5-b6cd-2df892160603) and neither has similar stacks to this bug. So closing WFM
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.