725649 - Crash @ nsCOMPtr_base::~nsCOMPtr_base | nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear | nsAttrValue::EnsureEmptyMiscContainer

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[Scoobidiver (away)]

It's #7 top crasher in 10.0 on Linux.

Signature 	nsCOMPtr_base::~nsCOMPtr_base | nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear | nsAttrValue::EnsureEmptyMiscContainer More Reports Search
UUID	fcab30a7-d6ab-49cc-b1c7-249922120208
Date Processed	2012-02-08 11:59:30
Uptime	180085
Last Crash	2.0 weeks before submission
Install Age	2.1 days since version was first installed.
Install Time	2012-02-06 09:58:27
Product	Firefox
Version	10.0
Build ID	20120130150400
Release Channel	unknown
OS	Linux
OS Version	0.0.0 Linux 2.6.32-38-generic #83-Ubuntu SMP Wed Jan 4 11:12:07 UTC 2012 x86_64
Build Architecture	amd64
Build Architecture Info	family 6 model 30 stepping 5
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
OpenGL: NVIDIA Corporation -- Quadro FX 880M/PCI/SSE2 -- 3.2.0 NVIDIA 195.36.24 -- texture_from_pixmap
EMCheckCompatibility	True

Frame 	Module 	Signature 	Source
0 	libxul.so 	nsCOMPtr_base::~nsCOMPtr_base 	nsCOMPtr.cpp:81
1 	libxul.so 	nsTArray<nsCOMPtr<nsIAtom>, nsTArrayDefaultAllocator>::Clear 	nsCOMPtr.h:522
2 	libxul.so 	nsAttrValue::EnsureEmptyMiscContainer 	nsTArray.h:458
3 	libxul.so 	nsAttrValue::Reset 	nsAttrValue.cpp:150
4 	libxul.so 	nsAttrAndChildArray::InternalAttr::~InternalAttr 	nsAttrAndChildArray.h:202
5 	libxul.so 	nsAttrAndChildArray::Clear 	nsAttrAndChildArray.cpp:675
6 	libxul.so 	nsAttrAndChildArray::~nsAttrAndChildArray 	nsAttrAndChildArray.cpp:134
7 	libxul.so 	nsGenericElement::~nsGenericElement 	nsGenericElement.cpp:2390
8 	libxul.so 	nsHTMLSpanElement::~nsHTMLSpanElement 	nsHTMLSpanElement.cpp:84
9 	libxul.so 	nsNodeUtils::LastRelease 	nsNodeUtils.cpp:320
10 	libxul.so 	nsGenericElement::Release 	nsGenericElement.cpp:4415
11 	libxul.so 	nsXPCOMCycleCollectionParticipant::Unroot 	nsCycleCollectionParticipant.cpp:76
12 	libxul.so 	nsCycleCollector::CollectWhite 	nsCycleCollector.cpp:2049
13 	libxul.so 	nsCycleCollector::FinishCollection 	nsCycleCollector.cpp:2857
14 	libxul.so 	nsCycleCollectorRunner::Collect 	nsCycleCollector.cpp:3552
15 	libxul.so 	nsCycleCollector_collect 	nsCycleCollector.cpp:3616
16 	libxul.so 	nsJSContext::CycleCollectNow 	nsJSEnvironment.cpp:3236
17 	libxul.so 	TimerThread::UpdateFilter 	TimerThread.cpp:222
18 	libxul.so 	nsJSContext::CycleCollectNow 	nsJSEnvironment.cpp:3259 

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsCOMPtr_base%3A%3A~nsCOMPtr_base%20|%20nsTArray%3CnsCOMPtr%3CnsIAtom%3E%2C%20nsTArrayDefaultAllocator%3E%3A%3AClear%20|%20nsAttrValue%3A%3AEnsureEmptyMiscContainer

Comment 1

[Sebastian Zartner [:sebo]]

Seems this bug is also happening trying to access the DOM panel of Firebug.

Related crash report:
https://crash-stats.mozilla.com/report/index/557a39d7-4e0a-444f-9346-e16cb2120309

Related Firebug issue:
http://code.google.com/p/fbug/issues/detail?id=5311

Sebastian

Comment 2

[Scoobidiver (away)]

(In reply to Sebastian Zartner from comment #1)
> Seems this bug is also happening trying to access the DOM panel of Firebug.
There's indeed a correlation to Firebug in 10.0.2:
     40% (18/45) vs.  18% (240/1311) [e-mail] (Firebug, https://addons.mozilla.org/addon/1843)

Comment 3

[Scoobidiver (away)]

There's only one crash in 12.0 and none in 13.0.

Comment 4

[Sebastian Zartner [:sebo]]

As far as I can see, there were no related crashes the last few months, so I'm closing this bug.

Sebastian