Closed Bug 774632 Opened 13 years ago Closed 10 years ago

crash in js::GetObjectParent

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Version:
16 Branch
Platform:
All
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

There's a spike in crashes from 16.0a1/20120716. The regression range for the spike is: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=57abb5f70e01&tochange=4cffe2b37d0c It might be a regression from bug 774104. Signature js::GetObjectParent(JSObject*) More Reports Search UUID 1b67e03d-e934-418a-ad23-9648d2120716 Date Processed 2012-07-16 23:22:13 Uptime 90 Last Crash 2.2 weeks before submission Install Age 8.2 hours since version was first installed. Install Time 2012-07-16 15:07:55 Product Firefox Version 16.0a1 Build ID 20120716030546 Release Channel nightly OS Windows NT OS Version 6.1.7601 Service Pack 1 Build Architecture x86 Build Architecture Info GenuineIntel family 6 model 15 stepping 2 Crash Reason EXCEPTION_ACCESS_VIOLATION_READ Crash Address 0x0 App Notes AdapterVendorID: 0x10de, AdapterDeviceID: 0x0de1, AdapterSubsysID: 00000000, AdapterDriverVersion: 8.17.12.9610 D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ EMCheckCompatibility True Adapter Vendor ID 0x10de Adapter Device ID 0x0de1 Total Virtual Memory 4294836224 Available Virtual Memory 3746742272 System Memory Use Percentage 72 Available Page File 2273193984 Available Physical Memory 870817792 Frame Module Signature Source 0 xul.dll js::GetObjectParent obj-firefox/dist/include/jsfriendapi.h:351 1 xul.dll XPCWrappedNative::GetParentWrapper js/xpconnect/src/XPCWrappedNative.cpp:1692 2 xul.dll XPCWrappedNative::RescueOrphans js/xpconnect/src/XPCWrappedNative.cpp:1739 3 xul.dll MoveWrapper js/xpconnect/src/nsXPConnect.cpp:1604 4 xul.dll nsXPConnect::MoveWrappers js/xpconnect/src/nsXPConnect.cpp:1729 5 xul.dll nsContentUtils::ReparentContentWrappersInScope content/base/src/nsContentUtils.cpp:1667 6 xul.dll nsHTMLDocument::Open content/html/document/src/nsHTMLDocument.cpp:1503 7 xul.dll NS_InvokeByIndex_P xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:70 8 xul.dll XPCWrappedNative::CallMethod js/xpconnect/src/XPCWrappedNative.cpp:2382 9 xul.dll XPC_WN_CallMethod js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1474 10 mozjs.dll js::InvokeKernel js/src/jsinterp.cpp:344 11 mozjs.dll js::Invoke js/src/jsinterp.cpp:387 12 mozjs.dll js::CrossCompartmentWrapper::call js/src/jswrapper.cpp:689 13 mozjs.dll proxy_Call js/src/jsproxy.cpp:1666 14 mozjs.dll js::InvokeKernel js/src/jsinterp.cpp:337 15 mozjs.dll js::Interpret js/src/jsinterp.cpp:2442 16 mozjs.dll js::InvokeKernel js/src/jsinterp.cpp:355 17 mozjs.dll js::Invoke js/src/jsinterp.h:119 18 mozjs.dll js_fun_apply js/src/jsfun.cpp:740 19 mozjs.dll js::InvokeKernel js/src/jsinterp.cpp:344 20 mozjs.dll js::Interpret js/src/jsinterp.cpp:2442 21 xul.dll nsXPConnect::WrapNativeToJSVal js/xpconnect/src/nsXPConnect.cpp:1330 22 mozjs.dll JS_CallFunctionValue js/src/jsapi.cpp:5564 ... More reports at: https://crash-stats.mozilla.com/report/list?signature=js%3A%3AGetObjectParent%28JSObject*%29
There are 5 crash reports I see. These are all null-derefs. 4 of the crash stacks look like this: js::GetObjectParent XPCWrappedNative::GetParentWrapper nsRefPtr<nsPresContext>::~nsRefPtr<nsPresContext> XPCWrappedNative::GatherProtoScriptableCreateInfo XPCWrappedNative::RescueOrphans
It's #29 top browser crasher in 16.0b1, #53 in 17.0a2, and #40 in 18.0a1.
No crashes for this signature after version 18 https://crash-stats.mozilla.com/report/list?signature=js%3A%3AGetObjectParent%28JSObject*%29#tab-reports
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.