crash in nsObjectFrame::BeginSwapDocShells

RESOLVED FIXED in Firefox 17

Status

()

Core
Layout
--
critical
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: gcp, Unassigned)

Tracking

({crash, regression})

17 Branch
mozilla17
crash, regression
Points:
---

Firefox Tracking Flags

(firefox17+ fixed)

Details

(Whiteboard: [native-crash], crash signature)

(Reporter)

Description

5 years ago
This bug was filed from the Socorro interface and is 
report bp-60d55399-4783-464b-848e-032772120815 .
============================================================= 

Visit http://stara.fi. Close tab. (Repeat a few times if needed). Nightly crashes.
(Reporter)

Comment 1

5 years ago
Most likely a dupe of bug 782979 with different STR.

Updated

5 years ago
Duplicate of this bug: 782979

Updated

5 years ago
Severity: major → critical

Comment 3

5 years ago
This is also happening when closing the Gmail tab in the latest nightly build, as you can see in the duplicate bug. Definitely a critical issue.

Comment 4

5 years ago
I can reproduce the crash on windows7,
bp-0eeabe52-0217-4e48-9d25-5a38a2120815

Regression window(m-c)
Good:
http://hg.mozilla.org/mozilla-central/rev/22288130fea2
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Firefox/17.0 ID:20120813211942
Crash:
http://hg.mozilla.org/mozilla-central/rev/d9183f015df8
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Firefox/17.0 ID:20120814055342
Pushlog:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=22288130fea2&tochange=d9183f015df8



Regression window(m-i)
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/303b75594832
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Firefox/17.0 ID:20120813210542
Crash:
http://hg.mozilla.org/integration/mozilla-inbound/rev/4ddd9c731adc
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Firefox/17.0 ID:20120813210943
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=303b75594832&tochange=4ddd9c731adc


Suspected: Bug 775965
Blocks: 775965
OS: Windows 7 → All

Comment 5

5 years ago
Yep, looks like the patch for Bug 775965 is causing this crash. I subscribed Chris, who authored the patch and pushed it to m-i.

Comment 6

5 years ago
http://hg.mozilla.org/integration/mozilla-inbound/rev/bcac58cbf328 is the cause of this issue.
Reverting the commit "solves" the problem.

Updated

5 years ago
Keywords: regression
Noming, as nightly has become fairly unusable. I have a window full of tabs I can't close without crashing the browser :)
status-firefox17: --- → affected
tracking-firefox17: --- → ?
Duplicate of this bug: 783000

Comment 9

5 years ago
Backing out now & will respin.
Should be fixed by the backout:
https://hg.mozilla.org/mozilla-central/rev/7d4268f8884c

Nightly has been respun
> Nightly has been respun

ETA 3-5 hours, depending on platform.

Updated

5 years ago
Crash Signature: [@ PL_DHashTableOperate | nsTHashtable<nsBaseHashtableET<nsCStringHashKey, unsigned int> >::RemoveEntry(nsACString_internal const&)] → [@ PL_DHashTableOperate | nsTHashtable<nsBaseHashtableET<nsCStringHashKey, unsigned int> >::RemoveEntry(nsACString_internal const&)] [@ PL_DHashTableOperate | nsObjectFrame::BeginSwapDocShells(nsIContent* void*)] [@ PL_DHashTableOperate | Enumera&hellip;
Summary: crash in PL_DHashTableOperate → crash in nsObjectFrame::BeginSwapDocShells
Whiteboard: [native-crash]
Version: Trunk → 17 Branch

Updated

5 years ago
Hardware: x86 → All

Comment 12

5 years ago
Nightly (Mac) found an update at 11:30am and closing Gmail stopped crashing.

before: Built from http://hg.mozilla.org/mozilla-central/rev/86ee4deea55b
after: Built from http://hg.mozilla.org/mozilla-central/rev/7d4268f8884c

Updated

5 years ago
Duplicate of this bug: 783004
Got this while closing tab on http://www.tennis-x.com/xblog/2012-08-14/10461.php

Updated

5 years ago
Status: NEW → RESOLVED
Last Resolved: 5 years ago
status-firefox17: affected → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla17

Comment 15

5 years ago
Got this few minutes ago https://crash-stats.mozilla.com/report/index/bp-ad54b876-536f-4344-b957-56a022120815 while closing Gmail tab. Nightly l10n. Did there was respin for l10n as well?
(In reply to semtex2 from comment #15)
> Got this few minutes ago
> https://crash-stats.mozilla.com/report/index/bp-ad54b876-536f-4344-b957-
> 56a022120815 while closing Gmail tab. Nightly l10n. Did there was respin for
> l10n as well?

(In reply to Ed Morley [:edmorley] from comment #11)
> > Nightly has been respun
> 
> ETA 3-5 hours, depending on platform.
tracking-firefox17: ? → +

Updated

5 years ago
Duplicate of this bug: 783074

Comment 18

5 years ago
So, no respin for Win32 l10n Nightly, also no new build, something went not OK IMO.

Updated

5 years ago
Duplicate of this bug: 783365

Updated

5 years ago
Duplicate of this bug: 783655
You need to log in before you can comment on or make changes to this bug.