797374 - crash in js::detail::HashTable

Status: RESOLVED DUPLICATE of bug 787887

(Core :: JavaScript Engine, defect)

Description

[Marcia Knous [:marcia]]

This bug was filed from the Socorro interface and is 
report bp-5d130795-9a01-4f6d-a60c-5c1752120930 .
============================================================= 

Seen while looking at the Firefox 16 explosive report - https://crash-stats.mozilla.com/report/list?signature=js%3A%3Adetail%3A%3AHashTable%3Cjs%3A%3AHashMapEntry%3CJSScript*%2C+wchar_t*%3E%2C+js%3A%3AHashMap%3CJSScript*%2C+wchar_t*%2C+js%3A%3ADefaultHasher%3CJSScript*%3E%2C+js%3A%3ASystemAllocPolicy%3E%3A%3AMapHashPolicy%2C+js%3A%3ASystemAllocPolicy%3E%3A%3Alookup%28JSScript*+const%26%2C+unsigned+int%2C+unsigned+int%29

Been around in small volume in other releases, but seems to have increased in 16 betas (although not present every beta). One user comment: everytime I close a tab or stop scripts my firefox crashes

Addon correlations:

js::detail::HashTable<js::HashMapEntry<JSScript*, wchar_t*>, js::HashMap<JSScript*, wchar_t*, js::DefaultHasher<JSScript*>, js::SystemAllocPolicy>::MapHashPolicy, js::SystemAllocPolicy>::lookup(JSScript* const&, unsigned int, unsigned int)|EXCEPTION_ACCESS_VIOLATION_READ (64 crashes)
     48% (31/64) vs.   1% (651/60495) [e-mail] (Firebug, https://addons.mozilla.org/addon/1843)
     45% (29/64) vs.   0% (102/60495) {81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} (iMacros for Firefox, https://addons.mozilla.org/addon/3863)
     30% (19/64) vs.   2% (1064/60495) {e4a8a97b-f2ed-450b-b12d-ee082ba24781} (Greasemonkey, https://addons.mozilla.org/addon/748)
     22% (14/64) vs.   0% (198/60495) {3d7eb24f-2740-49df-8937-200b1cc08f8a} (Flashblock, https://addons.mozilla.org/addon/433)
     22% (14/64) vs.   0% (247/60495) [e-mail] (Ghostery, https://addons.mozilla.org/addon/9609)
     19% (12/64) vs.   0% (14/60495) [e-mail] (Better Flickr, https://addons.mozilla.org/addon/8010)
     19% (12/64) vs.   0% (20/60495) {ea61041c-1e22-4400-99a0-aea461e69d04}
     19% (12/64) vs.   0% (25/60495) [e-mail] (Flash Killer, https://addons.mozilla.org/addon/5842)
     19% (12/64) vs.   0% (177/60495) {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} (BetterPrivacy, https://addons.mozilla.org/addon/6623)
     22% (14/64) vs.   6% (3455/60495) {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} (Adblock Plus, https://addons.mozilla.org/addon/1865)
     16% (10/64) vs.   1% (309/60495) [e-mail] (Adblock Plus: Element Hiding Helper, https://addons.mozilla.org/addon/4364)
     14% (9/64) vs.   0% (147/60495) {c45c406e-ab73-11d8-be73-000a95be3b12} (Web Developer, https://addons.mozilla.org/addon/60)
      9% (6/64) vs.   0% (171/60495) {e968fc70-8f95-4ab9-9e79-304de2a71ee1} (User Agent Switcher, https://addons.mozilla.org/addon/59)
      8% (5/64) vs.   0% (98/60495) {6AC85730-7D0F-4de0-B3FA-21142DD85326} (ColorZilla, https://addons.mozilla.org/addon/271)
      6% (4/64) vs.   0% (261/60495) [e-mail]
      6% (4/64) vs.   1% (548/60495) [e-mail] (Flash Video Downloader, https://addons.mozilla.org/addon/6584)


Frame 	Module 	Signature 	Source
0 	mozjs.dll 	js::detail::HashTable<js::HashMapEntry<JSScript*,wchar_t*>,js::HashMap<JSScript* 	obj-firefox/dist/include/js/HashTable.h:445
1 	mozjs.dll 	js::detail::HashTable<js::HashMapEntry<JSScript*,js::ScriptCounts>,js::HashMap<J 	obj-firefox/dist/include/js/HashTable.h:734
2 	mozjs.dll 	JSScript::debugScript 	js/src/jsscript.cpp:1879
3 	mozjs.dll 	JSScript::getBreakpointSite 	js/src/jsscript.h:851
4 	mozjs.dll 	JSScript::clearTraps 	js/src/jsscript.cpp:2082
5 	mozjs.dll 	JS_ClearScriptTraps 	js/src/jsdbgapi.cpp:212
6 	xul.dll 	jsd_ClearAllExecutionHooksForScript 	js/jsd/jsd_scpt.c:934
7 	xul.dll 	jsd_ClearAllExecutionHooks 	js/jsd/jsd_scpt.c:948
8 	xul.dll 	jsdService::ClearAllBreakpoints 	js/jsd/jsd_xpc.cpp:3030
9 	xul.dll 	jsdService::DeactivateDebugger 	js/jsd/jsd_xpc.cpp:2540
10 	xul.dll 	jsdService::Off 	js/jsd/jsd_xpc.cpp:2649
11 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:70
12 	xul.dll 	XPCWrappedNative::CallMethod 	js/xpconnect/src/XPCWrappedNative.cpp:2418
13 	xul.dll 	XPC_WN_CallMethod 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1474
14 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:344
15 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:2442
16 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:355
17 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:387
18 	mozjs.dll 	js::CrossCompartmentWrapper::call 	js/src/jswrapper.cpp:689
19 	mozjs.dll 	proxy_Call 	js/src/jsproxy.cpp:1666
20 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:337
21 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:2442
22 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:355
23 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:387
24 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:5604
25 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/xpconnect/src/XPCWrappedJSClass.cpp:1436
26 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/xpconnect/src/XPCWrappedJS.cpp:580
27 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:85
28 	xul.dll 	nsObserverList::NotifyObservers 	xpcom/ds/nsObserverList.cpp:99
29 	xul.dll 	nsObserverService::NotifyObservers 	xpcom/ds/nsObserverService.cpp:149
30 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:70
31 	xul.dll 	XPCWrappedNative::CallMethod 	js/xpconnect/src/XPCWrappedNative.cpp:2418
32 	xul.dll 	XPC_WN_CallMethod 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1474
33 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:344
34 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:2442
35 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:355
36 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:387
37 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:5604
38 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/xpconnect/src/XPCWrappedJSClass.cpp:1436
39 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/xpconnect/src/XPCWrappedJS.cpp:580
40 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:85
41 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:112
42 	xul.dll 	jsdService::ActivateDebugger 	js/jsd/jsd_xpc.cpp:2626

Comment 1

[Marcia Knous [:marcia]]

195 crashes in B5 in the last week. It appeared in B2 in the last week, but a four week view shows it didn't appear in some of the other betas.

Comment 2

[Alex Keybl [:akeybl]]

Let's do some testing on Windows with the above add-ons, but I'm not sure this needs to be tracked until it breaks into the top crash range.