777310 - crash in AccEvent::~AccEvent on Honeycomb

Status: RESOLVED WORKSFORME

(Core :: Disability Access APIs, defect)

Description

[Catalin Suciu [:csuciu]]

This bug was filed from the Socorro interface and is 
report bp-6c8af376-f561-4d1d-bedf-4986e2120725 .
============================================================= 

Frame 	Module 	Signature 	Source
0 	libmozglue.so 	arena_dalloc 	memory/jemalloc/jemalloc.c:4636
1 	libmozglue.so 	__wrap_free 	memory/jemalloc/jemalloc.c:6567
2 	libmozalloc.so 	moz_free 	memory/mozalloc/mozalloc.cpp:81
3 	libxul.so 	AccEvent::~AccEvent 	mozalloc.h:224
4 	libxul.so 	nsRefPtr<AccEvent>::~nsRefPtr 	accessible/src/base/AccEvent.h:110
5 	libxul.so 	nsAccEvent::~nsAccEvent 	accessible/src/xpcom/nsAccEvent.h:20
6 	libxul.so 	nsAccEvent::~nsAccEvent 	accessible/src/xpcom/nsAccEvent.h:20
7 	libxul.so 	nsAccEvent::Release 	accessible/src/xpcom/nsAccEvent.cpp:14
8 	libxul.so 	XPCJSRuntime::GCCallback 	js/xpconnect/src/XPCJSRuntime.cpp:576
9 	libxul.so 	js::MaybeGC 	js/src/jsgc.cpp:3827
10 	libxul.so 	JS_MaybeGC 	js/src/jsapi.cpp:2919
11 	libxul.so 	nsJSContext::ScriptEvaluated 	dom/base/nsJSEnvironment.cpp:2846
12 	libxul.so 	nsCxPusher::Pop 	content/base/src/nsContentUtils.cpp:3039
13 	libxul.so 	nsJSContext::CallEventHandler 	dom/base/nsJSEnvironment.cpp:1925
14 	libxul.so 	nsGlobalWindow::RunTimeout 	dom/base/nsGlobalWindow.cpp:9170
15 	libxul.so 	nsGlobalWindow::TimerCallback 	dom/base/nsGlobalWindow.cpp:9558
16 	libxul.so 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:473
17 	libxul.so 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:556
18 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:624
19 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:213
20 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:113
21 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
22 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201
23 	libxul.so 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:163
24 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:256
25 	libxul.so 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3786
26 	libxul.so 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3863
27 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3939
28 	libxul.so 	GeckoStart 	toolkit/xre/nsAndroidStartup.cpp:73
29 	libmozglue.so 	Java_org_mozilla_gecko_GeckoAppShell_nativeRun 	mozglue/android/APKOpen.cpp:972
30 	libdvm.so 	dvmPlatformInvoke 	
31 	libdvm.so 	dvmCallJNIMethod_general 	
32 	libdvm.so 	dvmResolveNativeMethod 	
33 	libdvm.so 	dvmAsmSisterStart 	
34 	libdvm.so 	dvmMterpStd 	
35 	libdvm.so 	dvmInterpret 	
36 	libdvm.so 	dvmCallMethodV 	
37 	libdvm.so 	dvmCallMethod 	
38 	libdvm.so 	dvmAttachCurrentThread 	
39 	libc.so 	__thread_entry 	
40 	libc.so 	pthread_create

Samsung Galaxy SII (Android 2.3.4)
Fennec 15.0b2 

No steps to reproduce so far.

Comment 1

[Catalin Suciu [:csuciu]]

Crash occurred on Samsung Galaxy Tab (Android 3.1) not on Galaxy SII

Comment 2

[Trevor Saunders (:tbsaunde)]

my bet is either heap curruption, or freeing something that's already been freed.  I'm not really sure we can do or investigate without steps to reproduce.

Comment 3

[David Bolter [:davidb] (NeedInfo me for attention)]

Agreed with comment 2. There is only one crash report I can see in the last 4 weeks:
https://crash-stats.mozilla.com/report/index/fcec5979-36e1-4fbb-96db-e172f2130103
(Build 20120808131814)

I'd recommend closing and if we see a more recent build crashing with this sig we should reopen then.

Comment 4

[Chris Peterson [:cpeterson]]

Removing steps-wanted keyword because this bug has been resolved.