Closed Bug 793614 Opened 12 years ago Closed 12 years ago

Crash in nsDOMEvent::cycleCollection::TraverseImpl viewing pdf file

Categories

(Core :: XPCOM, defect)

Product:
Core
Component:
XPCOM
Version:
18 Branch
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 792226
Tracking Flags:
Tracking Status
firefox18 - ---

People

(Reporter: david.smitmanis, Unassigned)

References

(
URL
)

Details

(Keywords: crash, regression, reproducible, Whiteboard: [sg:dupe 792226])

Crash Data

At least for me it's always reproducible:

1. Open http://atratus.se/david/20120921_se_stockholm.pdf (a pdf version of the Metro newspaper)

- Note that the pdf won't render properly (and pdf.js suggests another reader)

2. Scroll in the document for a short while

It will eventually crash.
Crash Signature: GCGraphBuilder::NoteXPCOMChild(nsISupports*) | nsDOMEvent::cycleCollection::TraverseImpl(nsDOMEvent::cycleCollection*, void*, nsCycleCollectionTraversalCallback&)
Summary: Crash viewing pdf file GCGraphBuilder::NoteXPCOMChild(nsISupports*) | nsDOMEvent::cycleCollection::TraverseImpl(nsDOMEvent::cycleCollection*, void*, nsCycleCollectionTraversalCallback&) → Crash viewing pdf file EXCEPTION_ACCESS_VIOLATION_READ
Severity: major → critical
Keywords: crash, reproducible
It's a regression indeed, probably after IonMonkey landed.

m-c
good=2012-09-11
bad=2012-09-12
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=96287ad60bef&tochange=6e78c3efd115

The changelog is pretty huge, bisecting needed.
tracking-firefox18: --- → ?
Keywords: regression, regressionwindow-wanted
URL: http://atratus.se/david/20120921_se_s...
Crash Signature: GCGraphBuilder::NoteXPCOMChild(nsISupports*) | nsDOMEvent::cycleCollection::TraverseImpl(nsDOMEvent::cycleCollection*, void*, nsCycleCollectionTraversalCallback&) → [@ GCGraphBuilder::NoteXPCOMChild(nsISupports*) | nsDOMEvent::cycleCollection::TraverseImpl(nsDOMEvent::cycleCollection*, void*, nsCycleCollectionTraversalCallback&)]
Component: PDF Viewer → XPCOM
Product: Firefox → Core
Hardware: x86_64 → x86
Summary: Crash viewing pdf file EXCEPTION_ACCESS_VIOLATION_READ → Crash in nsDOMEvent::cycleCollection::TraverseImpl viewing pdf file
For me, Firefox crashes as soon as the info bar is closed with a different crash signature: bp-6433418e-7d39-44bf-a298-c52f42120924.
Does it crash if you set javascript.options.ion.content to false? This may be a dupe of bug 792226.
(In reply to Andrew McCreight [:mccr8] from comment #4)
> Does it crash if you set javascript.options.ion.content to false?
Not for me.
In my case, crashes stop with javascript.options.ion.content=false.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
Not tracking this bug as this a dup ofof a resolved fixed bug
tracking-firefox18: ? → -
Whiteboard: [sg:dupe 792226]
You need to log in before you can comment on or make changes to this bug.