752824 - crash in nsXPConnect::CheckForDebugMode @ JS_GetInternedStringChars

Status: RESOLVED WORKSFORME

(Core :: XPConnect, defect)

Description

[Scoobidiver (away)]

It first appeared in 15.0a1/20120507. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=94ce5f33a9ea&tochange=448f554f6acb

Signature 	JS_GetInternedStringChars More Reports Search
UUID	df4e8534-06a7-493a-a93a-f29b12120508
Date Processed	2012-05-08 06:57:08
Uptime	6
Last Crash	11 seconds before submission
Install Age	25.8 minutes since version was first installed.
Install Time	2012-05-08 06:31:10
Product	Firefox
Version	15.0a1
Build ID	20120507030511
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 42 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0xffffffff850fd289
App Notes 	
AdapterVendorID: 0x8086, AdapterDeviceID: 0x0102, AdapterSubsysID: 00000000, AdapterDriverVersion: 8.15.10.2509
Has dual GPUs. GPU #2: AdapterVendorID2: 0x10de, AdapterDeviceID2: 0x0400, AdapterSubsysID2: 0000000c, AdapterDriverVersion2: 8.17.12.9053D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
EMCheckCompatibility	True	
Total Virtual Memory	4294836224
Available Virtual Memory	3747721216
System Memory Use Percentage	25
Available Page File	14604521472
Available Physical Memory	6320508928

Frame 	Module 	Signature 	Source
0 	mozjs.dll 	JS_GetInternedStringChars 	js/src/jsfriendapi.cpp:185
1 	xul.dll 	nsXPConnect::CheckForDebugMode 	js/xpconnect/src/nsXPConnect.cpp:2411
2 	xul.dll 	nsXPConnect::Push 	js/xpconnect/src/nsXPConnect.cpp:2500
3 	xul.dll 	nsContentUtils::WrapNative 	content/base/src/nsContentUtils.cpp:5912
4 	xul.dll 	nsXBLProtoImplAnonymousMethod::Execute 	content/xbl/src/nsXBLProtoImplMethod.cpp:335
5 	xul.dll 	nsBindingManager::ExecuteDetachedHandlers 	content/xbl/src/nsBindingManager.cpp:1094
6 	xul.dll 	nsGlobalWindow::PostHandleEvent 	dom/base/nsGlobalWindow.cpp:2574
7 	xul.dll 	nsEventTargetChainItem::HandleEventTargetChain 	content/events/src/nsEventDispatcher.cpp:352
8 	xul.dll 	nsEventTargetChainItem::HandleEventTargetChain 	content/events/src/nsEventDispatcher.cpp:404
9 	xul.dll 	nsEventDispatcher::Dispatch 	content/events/src/nsEventDispatcher.cpp:684
10 	xul.dll 	NS_IsMainThread_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:138
11 	xul.dll 	nsDocShell::FirePageHideNotification 	docshell/base/nsDocShell.cpp:1620
12 	xul.dll 	nsTArray<nsCOMPtr<nsIDocShell>,nsTArrayDefaultAllocator>::AppendElements<nsQuery 	obj-firefox/dist/include/nsTArray.h:902
13 	xul.dll 	mozilla::Preferences::RemoveObserver 	modules/libpref/src/Preferences.cpp:1377
14 	xul.dll 	nsDocShell::Destroy 	docshell/base/nsDocShell.cpp:4667
15 	xul.dll 	nsWebShellWindow::Destroy 	xpfe/appshell/src/nsWebShellWindow.cpp:787
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=JS_GetInternedStringChars

Comment 1

[Alice0775 White]

this is different range but same Sig
bp-419eacf4-0150-48e7-9197-d6fa52120716

Browser crashes in my usually used profile.
STR
1. Open http://www.mozilla.org/projects/firefox/prerelease.html
2. Play back the video
3. Open about:memory in the same tab

4. If not crashes, Restart browser with session restore

5. if not crashes, repeat from Step1

Regression window(m-c)
Good:
http://hg.mozilla.org/mozilla-central/rev/4b1249ae1906
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/16.0 Firefox/16.0 ID:20120706030535
Crash:
http://hg.mozilla.org/mozilla-central/rev/a8f682801a6d
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/16.0 Firefox/16.0 ID:20120706075126
Pushlog:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=4b1249ae1906&tochange=a8f682801a6d


Regression window(m-i)
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/478b9ac3a85f
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/16.0 Firefox/16.0 ID:20120705223156
Crash:
http://hg.mozilla.org/integration/mozilla-inbound/rev/0158f2d0b32d
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/16.0 Firefox/16.0 ID:20120705225257
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=478b9ac3a85f&tochange=0158f2d0b32d

Triggered by: Bug 687724

Comment 2

[Scoobidiver (away)]

(In reply to Alice0775 White from comment #1)
> this is different range but same Sig
It's not the same stack trace. You hit bug 772615.

Comment 3

[Wayne Mery (:wsmwk)]

No crashes with this signature after version 17
https://crash-stats.mozilla.com/report/list?product=Firefox&range_unit=days&range_value=28&signature=JS_GetInternedStringChars#tab-reports