736250 - Firefox 11.0 Crash [@ IsAboutToBeFinalized(JSContext*, js::gc::Cell const*) ]

Status: RESOLVED DUPLICATE of bug 665059

(Core :: JavaScript Engine, defect)

Description

[Marcia Knous [:marcia]]

Seen while looking at incoming 11 crash stats. Fairly low volume crash that seems to be primarily present in the 11 betas up to final - https://crash-stats.mozilla.com/report/list?signature=IsAboutToBeFinalized%28JSContext*,%20js::gc::Cell%20const*%29.

No addon correlations for 73 FF 11 crashes, but here are module correlations:

IsAboutToBeFinalized(JSContext*, js::gc::Cell const*)|EXCEPTION_ACCESS_VIOLATION_READ (73 crashes)
     81% (59/73) vs.  39% (17303/44582) lz32.dll
     81% (59/73) vs.  40% (17732/44582) wldap32.dll
     79% (58/73) vs.  41% (18257/44582) xpsp2res.dll
     81% (59/73) vs.  43% (19246/44582) iphlpapi.dll
    100% (73/73) vs.  64% (28389/44582) nssckbi.dll
     93% (68/73) vs.  57% (25445/44582) t2embed.dll
    100% (73/73) vs.  64% (28685/44582) freebl3.dll
    100% (73/73) vs.  64% (28687/44582) nssdbm3.dll
     82% (60/73) vs.  48% (21305/44582) mpr.dll
     81% (59/73) vs.  47% (20809/44582) wshtcpip.dll
     79% (58/73) vs.  46% (20674/44582) hnetcfg.dll
     97% (71/73) vs.  68% (30376/44582) feclient.dll
     63% (46/73) vs.  34% (15127/44582) cryptui.dll
     81% (59/73) vs.  52% (23263/44582) comres.dll
     99% (72/73) vs.  70% (31266/44582) winrnr.dll
    100% (73/73) vs.  73% (32383/44582) browsercomps.dll
     81% (59/73) vs.  54% (23896/44582) ws2help.dll
     84% (61/73) vs.  57% (25608/44582) imagehlp.dll
    100% (73/73) vs.  74% (33156/44582) softokn3.dll
    100% (73/73) vs.  74% (33191/44582) firefox.exe
    100% (73/73) vs.  75% (33238/44582) xpcom.dll
    100% (73/73) vs.  75% (33628/44582) dbghelp.dll
     97% (71/73) vs.  74% (32999/44582) rasadhlp.dll
    100% (73/73) vs.  77% (34433/44582) dnsapi.dll
     51% (37/73) vs.  32% (14210/44582) MSCTF.dll
    101% (74/73) vs.  87% (38954/44582) mswsock.dll
     75% (55/73) vs.  62% (27422/44582) shdocvw.dll
     99% (72/73) vs.  85% (37837/44582) wintrust.dll
     67% (49/73) vs.  54% (24258/44582) netapi32.dll
     33% (24/73) vs.  21% (9333/44582) MSCTFIME.IME
    100% (73/73) vs.  90% (39963/44582) setupapi.dll
     99% (72/73) vs.  90% (39934/44582) mscms.dll
     75% (55/73) vs.  68% (30396/44582) rsaenh.dll
      8% (6/73) vs.   1% (596/44582) Syncor11.dll
     97% (71/73) vs.  92% (40805/44582) userenv.dll
    100% (73/73) vs.  95% (42132/44582) crypt32.dll
    100% (73/73) vs.  95% (42135/44582) msasn1.dll


https://crash-stats.mozilla.com/report/index/f71de3b0-3493-4100-be23-5e33b2120315

Frame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	IsAboutToBeFinalized 	js/src/jsgc.cpp:824
1 	mozjs.dll 	JS_IsAboutToBeFinalized 	js/src/jsapi.cpp:2781
2 	xul.dll 	SweepWaiverWrappers 	js/xpconnect/src/XPCJSRuntime.cpp:629
3 	mozjs.dll 	JS_DHashTableEnumerate 	js/src/jsdhash.cpp:746
4 	xul.dll 	SweepCompartment 	js/xpconnect/src/XPCJSRuntime.cpp:649
5 	xul.dll 	nsBaseHashtable<xpc::PtrAndPrincipalHashKey,JSCompartment*,JSCompartment*>::s_EnumReadStub 	obj-firefox/dist/include/nsBaseHashtable.h:395
6 	xul.dll 	PL_DHashTableEnumerate 	obj-firefox/xpcom/build/pldhash.cpp:754
7 	xul.dll 	XPCJSRuntime::GCCallback 	js/xpconnect/src/XPCJSRuntime.cpp:711
8 	mozjs.dll 	EndMarkPhase 	js/src/jsgc.cpp:2557
9 	mozjs.dll 	MarkAndSweep 	js/src/jsgc.cpp:2710
10 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp:2941
11 	mozjs.dll 	js_GC 	js/src/jsgc.cpp:3010
12 	mozjs.dll 	JS_GC 	js/src/jsapi.cpp:2750
13 	xul.dll 	nsXPConnect::Collect 	js/xpconnect/src/nsXPConnect.cpp:412
14 	xul.dll 	nsXPConnect::GarbageCollect 	js/xpconnect/src/nsXPConnect.cpp:420
15 	xul.dll 	nsJSContext::GarbageCollectNow 	dom/base/nsJSEnvironment.cpp:3204
16 	xul.dll 	nsTypedSelection::Repaint 	layout/generic/nsSelection.cpp:4552
17 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:524
18 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:660
19 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
20 	xul.dll 	pref_DoCallback 	modules/libpref/src/prefapi.cpp:905
21 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
22 	xul.dll 	_SEH_epilog4 	
23 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
24 	xul.dll 	nsImageBoxFrame::OnStopDecode 	layout/xul/base/src/nsImageBoxFrame.cpp:608
25 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:189
26 		@0x64cfffff 	

Show/hide other threads

Comment 1

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

Is this the same as bug 665059? We changed the signature in Firefox 11 to take a Cell* instead of a void*. Can you tell if the volume has changed at all?

Comment 2

[Marcia Knous [:marcia]]

Still early as far as volume since we only have a little over a million users, but as we unthrottle in the next few days I will check volume on this signature to see how it pans out.