Closed Bug 718993 Opened 13 years ago Closed 6 years ago

Crash in DyingProtoKiller

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Platform:
All
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INACTIVE

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

It occurs in 11.0a2 and 12.0a1.

Signature 	nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller More Reports Search
UUID	8c35df6e-d5be-4a1d-8784-80ac22120118
Date Processed	2012-01-18 03:39:17
Uptime	989
Install Age	7.4 hours since version was first installed.
Install Time	2012-01-17 20:13:40
Product	Firefox
Version	12.0a1
Build ID	20120117031056
Release Channel	nightly
OS	Windows NT
OS Version	5.1.2600 Service Pack 3
Build Architecture	x86
Build Architecture Info	AuthenticAMD family 16 model 6 stepping 2
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x4f
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x03d6, AdapterSubsysID: 03d61849, AdapterDriverVersion: 6.14.11.8634
D3D10 Layers? D3D10 Layers-
D3D9 Layers? D3D9 Layers-
EMCheckCompatibility	True

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader> 	obj-firefox/dist/include/nsAutoPtr.h:907
1 	xul.dll 	DyingProtoKiller 	js/xpconnect/src/XPCJSRuntime.cpp:227
2 	mozjs.dll 	JS_DHashTableEnumerate 	js/src/jsdhash.cpp:746
3 	xul.dll 	XPCJSRuntime::GCCallback 	js/xpconnect/src/XPCJSRuntime.cpp:888
4 	mozjs.dll 	SweepPhase 	js/src/jsgc.cpp:2845
5 	mozjs.dll 	MarkAndSweep 	js/src/jsgc.cpp:2882
6 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp:3111
7 	mozjs.dll 	js_GC 	js/src/jsgc.cpp:3178
8 	mozjs.dll 	JS_GC 	js/src/jsapi.cpp:2883
9 	xul.dll 	nsXREDirProvider::DoShutdown 	toolkit/xre/nsXREDirProvider.cpp:810
10 	xul.dll 	xul.dll@0xb60f03 	
11 	msvcr80.dll 	operator new 	f:\\sp\\vctools\\crt_bld\\self_x86\\crt\\src\\new.cpp:60
12 	xul.dll 	gfxFontGroup::InitTextRun<wchar_t> 	gfx/thebes/gfxFont.cpp:3111
13 	ntdll.dll 	RtlFreeHeap 	
14 	msvcr80.dll 	memcpy_s 	f:\\sp\\vctools\\crt_bld\\self_x86\\crt\\src\\memcpy_s.c:67
15 	MSCTF.dll 	CheckTokenMembership 	

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsRefPtr%3CnsDocLoader%3E%3A%3A~nsRefPtr%3CnsDocLoader%3E%28%29%20|%20DyingProtoKiller
Crash Signature: [@ nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller] → [@ nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller] [@ @0x0 | nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller]
There's a spike from 12.0a1/20120117 with about 30 crashes per buildID.
The regression range for the spike is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=047c8ba7d2e4&tochange=34572943a3e4
Crash Signature: [@ nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller] [@ @0x0 | nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller] → [@ nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller] [@ @0x0 | nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller] [@ nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener>() | DyingProtoKiller] [@ @0x0 | nsRefP…
Summary: Crash @ nsRefPtr<nsDocLoader>::~nsRefPtr<nsDocLoader>() | DyingProtoKiller → Crash in DyingProtoKiller
It seems to be fixed in 12.0a1/20120119.
Crash Signature: nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener>() | DyingProtoKiller] [@ nsCOMPtr_base::~nsCOMPtr_base() | DyingProtoKiller] [@ nsRefPtr<nsPresContext>::~nsRefPtr<nsPresContext>() | DyingProtoKiller] → nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener>() | DyingProtoKiller] [@ nsCOMPtr_base::~nsCOMPtr_base() | DyingProtoKiller] [@ nsRefPtr<nsPresContext>::~nsRefPtr<nsPresContext>() | DyingProtoKiller] [@ nsRefPtr<nsIRunnable>::~nsRefPtr<ns…
Hardware: x86 → All
Crash Signature: nsRefPtr<nsIRunnable>::~nsRefPtr<nsIRunnable>() | DyingProtoKiller] → nsRefPtr<nsIRunnable>::~nsRefPtr<nsIRunnable>() | DyingProtoKiller] [@ nsRefPtr<T>::~nsRefPtr<T> | DyingProtoKiller] [@ @0x0 | nsRefPtr<T>::~nsRefPtr<T> | DyingProtoKiller] [@ nsCOMPtr_base::~nsCOMPtr_base | DyingProtoKiller]
Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.