725632 - Crash in nsScriptSecurityManager::GetScriptSecurityManager @ ozone_size or nsPrefBranch::RemoveObserver

Status: RESOLVED WORKSFORME

(Core :: Security: CAPS, defect)

Description

[Scoobidiver (away)]

It's #6 top crasher in 10.0 and #9 in 11.0b1 on Mac OS X.
87% of crashes happen within one minute.

Signature 	ozone_size More Reports Search
UUID	eb129667-6f81-41b5-b181-9cc372120209
Date Processed	2012-02-09 13:32:05
Uptime	36
Last Crash	more than 3 months before submission
Install Age	36 seconds since version was first installed.
Install Time	2012-02-09 13:31:06
Product	Firefox
Version	10.0
Build ID	20120129021758
Release Channel	release
OS	Mac OS X
OS Version	10.6.8 10K549
Build Architecture	amd64
Build Architecture Info	family 6 model 23 stepping 10
Crash Reason	EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash Address	0x8000
Processor Notes 	WARNING: JSON file missing Add-ons
EMCheckCompatibility	False

Frame 	Module 	Signature [Expand] 	Source
0 	libmozutils.dylib 	ozone_size 	memory/jemalloc/jemalloc.c:4304
1 	libSystem.B.dylib 	free 	
2 	XUL 	nsScriptSecurityManager::~nsScriptSecurityManager 	
3 	XUL 	nsScriptSecurityManager::GetScriptSecurityManager 	caps/src/nsScriptSecurityManager.cpp:3473
4 	XUL 	nsContentUtils::Init 	content/base/src/nsContentUtils.cpp:356
5 	XUL 	nsLayoutStatics::Initialize 	layout/build/nsLayoutStatics.cpp:166
6 	XUL 	Initialize 	layout/build/nsLayoutModule.cpp:379
7 	XUL 	nsComponentManagerImpl::KnownModule::Load 	xpcom/components/nsComponentManager.cpp:960
8 	XUL 	nsFactoryEntry::GetFactory 	xpcom/components/nsComponentManager.cpp:1973
9 	XUL 	nsComponentManagerImpl::CreateInstanceByContractID 	xpcom/components/nsComponentManager.cpp:1295
10 	XUL 	nsComponentManagerImpl::GetServiceByContractID 	xpcom/components/nsComponentManager.cpp:1701
11 	XUL 	nsGetServiceByContractIDWithError::operator 	obj-firefox/x86_64/xpcom/build/nsComponentManagerUtils.cpp:94
12 	XUL 	nsCOMPtr_base::assign_from_gs_contractid_with_error 	obj-firefox/x86_64/xpcom/build/nsCOMPtr.cpp:141
13 	XUL 	nsAppStartupNotifier::Observe 	nsCOMPtr.h:1069
14 	XUL 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3383
15 	firefox 	main 	browser/app/nsBrowserApp.cpp:198
16 	firefox 	firefox@0xac3 	

More reports at:
https://crash-stats.mozilla.com/report/list?signature=ozone_size

Comment 1

[Scoobidiver (away)]

With combined signatures, it's #4 top crasher in 10.0 on Mac OS X.

More x86 reports at:
https://crash-stats.mozilla.com/report/list?signature=nsPrefBranch%3A%3ARemoveObserver

Comment 2

[Sheila Mooney]

I looked at the stats for 10.0.2. The first signature (ozone_size) appears at #41 with 66 crashes/week. The second one nsPrefBranch::RemoveObserver is much lower volume. It's higher one 11 betas - #8 with 33 crashes.

Comment 3

[Sheila Mooney]

The first signature appears at #7 overall for FF 11 Mac crashes.

Comment 4

[Scoobidiver (away)]

It's not a top crasher in 15.0.

Comment 5

[Wayne Mery (:wsmwk)]

no firefox nsPrefBranch::RemoveObserver crashes since after firefox 14
https://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=nsPrefBranch%3A%3ARemoveObserver&reason_type=contains&date=04%2F21%2F2013%2014%3A37%3A32&range_value=4&range_unit=weeks&hang_type=any&process_type=all&do_query=1&admin=1&signature=nsPrefBranch%3A%3ARemoveObserver

changed to something else?

Comment 6

[Scoobidiver (away)]

(In reply to Wayne Mery (:wsmwk) from comment #5)
> changed to something else?
No I think it's fixed.