Closed Bug 718285 Opened 10 years ago Closed 10 years ago

crash during cycle collection traversal of nsDOMEvent::target


(Core :: DOM: Events, defect)

Not set





(Reporter: mccr8, Unassigned)


(Keywords: crash)

Crash Data

There are a number of crashes with stacks that look like this:
0 	xul.dll 	GCGraphBuilder::NoteXPCOMChild 	xpcom/base/nsCycleCollector.cpp:1724
1 	xul.dll 	nsDOMEvent::cycleCollection::Traverse 	content/events/src/nsDOMEvent.cpp:239
2 	xul.dll 	nsCycleCollector::MarkRoots 	xpcom/base/nsCycleCollector.cpp:1920
The NoteXPComChild line is this:
   if (!child || !(child = canonicalize(child)))
The Traverse line is this:

In 10 and 11, 5 users reported crashing here while searching for Wikipedia:
"happens about 50% of time when I visit wikipedia through search box"
"This crash occurs every time I attempt to search Wikipedia via the search bar plugin. It does not occur when I use other searches from the same bar. It does not occur when I navigate to Wikipedia using the URL bar or search via the Wikipedia landing page."
"Problem with wikipedia. Crashes everytime after 2 seconds."
"This crash (along with the one submitted from my same machine about 2.5 hours ago, and along with the previous six crashes for which I didn't submit crash reports) was triggered by entering something into the #nav-bar's search bar, then clicking/pressng enter to tell Firefox to search, with Wikipedia as the selected search engine. (It used to seem associated with alt-tabbed away while still loading, but in this case Firefox still had focus.)"
"Yet another crash after entering text into the search bar and searching with Wikipedia as the search engine."
The 4 that have any extensions listed all have HTTPS Everywhere 1.2.1 installed.  The latest version 1.2.2 lists "Fixes: Wikipedia,, Verizon,, UserScripts, Yandex" in the patch notes.

In bug 547987, some users reported similar crashes by reloading with ctrl-F5 on  Out of the 8 or so crashes, two had the same stack as above:
Neither seemed to have HTTPS Everywhere.

Maybe there's enough info here to figure something out.
Severity: normal → critical
Crash Signature: [@ GCGraphBuilder::NoteXPCOMChild(nsISupports*)] [@ @0x0 | GCGraphBuilder::NoteXPCOMChild(nsISupports*)]
Keywords: crash
I can reproduce this by refreshing repeatedly.  The first time, it crashed in XPCWrappedNative::FlatJSObjectFinalized:
The second time it crashed in NoteXPCom as noted above:
This is similar behavior as was reported in bug 547987.

I don't know if this is related to the Wikipedia thing or not, maybe it should be a separate bug.
Bug 718284 is the same thing, but with detailed steps to reproduce the HTTPS Everywhere thing. I think I'll file a separate bug for HTML5test crashing.
Closed: 10 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 718284
No longer blocks: 469267
You need to log in before you can comment on or make changes to this bug.