808006 - crash in xptiInterfaceEntry::GetInterfaceInfo

Status: RESOLVED INCOMPLETE

(Core :: XPCOM, defect)

Description

[Ludovic Hirlimann [:Usul]]

This bug was filed from the Socorro interface and is 
report bp-f24d63e0-befb-41a1-a9d2-e62072121101 .
============================================================= 
0 	xul.dll 	xptiInterfaceEntry::GetInterfaceInfo 	xpcom/reflect/xptinfo/src/xptiInterfaceInfo.cpp:558
1 	xul.dll 	EntryToInfo 	xpcom/reflect/xptinfo/src/xptiInterfaceInfoManager.cpp:198
2 	xul.dll 	xptiInterfaceInfoManager::GetInfoForIID 	xpcom/reflect/xptinfo/src/xptiInterfaceInfoManager.cpp:222
3 	xul.dll 	IIDTester 	js/xpconnect/src/nsXPConnect.cpp:274
4 	xul.dll 	FindInfo 	js/xpconnect/src/nsXPConnect.cpp:288
5 	xul.dll 	nsXPConnect::GetInfoForIID 	js/xpconnect/src/nsXPConnect.cpp:315
6 	xul.dll 	LookupInterfaceOrAncestor 	js/xpconnect/src/XPCQuickStubs.cpp:67
7 	xul.dll 	xpc_qsDefineQuickStubs 	js/xpconnect/src/XPCQuickStubs.cpp:297
8 	xul.dll 	xpc::DOM_DefineQuickStubs 	objdir-tb/mozilla/js/xpconnect/src/dom_quickstubs.cpp:33026
9 	xul.dll 	nsDOMClassInfo::PostCreatePrototype 	dom/base/nsDOMClassInfo.cpp:5078
10 	xul.dll 	XPCWrappedNativeProto::CallPostCreatePrototype 	js/xpconnect/src/XPCWrappedNativeProto.cpp:121
11 	xul.dll 	XPCWrappedNativeProto::Init 	js/xpconnect/src/XPCWrappedNativeProto.cpp:102
12 	xul.dll 	XPCWrappedNativeProto::GetNewOrUsed 	js/xpconnect/src/XPCWrappedNativeProto.cpp:210
13 	xul.dll 	XPCWrappedNative::GetNewOrUsed 	js/xpconnect/src/XPCWrappedNative.cpp:600
14 	xul.dll 	XPCConvert::NativeInterface2JSObject 	js/xpconnect/src/XPCConvert.cpp:920
15 	xul.dll 	NativeInterface2JSObject 	js/xpconnect/src/nsXPConnect.cpp:1240
16 	xul.dll 	nsXPConnect::WrapNativeToJSVal 	js/xpconnect/src/nsXPConnect.cpp:1296
17 	xul.dll 	WrapNative 	dom/base/nsDOMClassInfo.cpp:1992
18 	xul.dll 	nsWindowSH::NewResolve 	dom/base/nsDOMClassInfo.cpp:7383
19 	xul.dll 	XPC_WN_Helper_NewResolve 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1052
20 	mozjs.dll 	CallResolveOp 	js/src/jsobj.cpp:4269
21 	mozjs.dll 	js::baseops::LookupProperty 	js/src/jsobj.cpp:4370
22 	mozjs.dll 	js::LookupName 	js/src/jsobj.cpp:4398
23 	mozjs.dll 	js::NameOperation 	js/src/jsinterpinlines.h:390
24 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:2517
25 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:301
26 	mozjs.dll 	js::ExecuteKernel 	js/src/jsinterp.cpp:494
27 	mozjs.dll 	js::Execute 	js/src/jsinterp.cpp:532
28 	mozjs.dll 	JS::Evaluate 	js/src/jsapi.cpp:5665
29 	xul.dll 	nsJSContext::EvaluateStringWithValue 	dom/base/nsJSEnvironment.cpp:1302

Comment 1

[Wayne Mery (:wsmwk)]

bp-26752e43-d038-4203-a61c-30faa2130125
0	xul.dll	xptiInterfaceEntry::GetInterfaceInfo	xpcom/reflect/xptinfo/src/xptiInterfaceInfo.cpp:558
1	xul.dll	EntryToInfo	xpcom/reflect/xptinfo/src/xptiInterfaceInfoManager.cpp:198
2	xul.dll	xptiInterfaceInfoManager::GetInfoForName	xpcom/reflect/xptinfo/src/xptiInterfaceInfoManager.cpp:233
3	xul.dll	nsXPCComponents_Interfaces::NewResolve	js/xpconnect/src/XPCComponents.cpp:325
4	xul.dll	XPC_WN_Helper_NewResolve	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1052
5	mozjs.dll	CallResolveOp	js/src/jsobj.cpp:4009
6	mozjs.dll	js::GetPropertyHelper	js/src/jsobj.cpp:4365 

hg@1 548 if(!mInfo)
hg@1 549 {
hg@1 550 mInfo = new xptiInterfaceInfo(this);
hg@1 551 if(!mInfo)
hg@1 552 {
ayg@106838 553 *info = nullptr;
hg@1 554 return NS_ERROR_OUT_OF_MEMORY;
hg@1 555 }
hg@1 556 }
hg@1 557 
hg@1 558    NS_ADDREF(*info = mInfo);


Firefox crashes are same
bp-e54ebfe4-c21d-435a-ba2c-67f572130419

Comment 2

[Makoto Kato [:m_kato]]

It seems to be stack corruption...

Although I investigates some crash data, all crashes related to address 0x46206d65 have sahook.dll or McRTMui.dll (both is by McAfee)

Comment 3

[Wayne Mery (:wsmwk)]

Thanks. Some Thunderbird users who crash with McAfee do indeed report Firefox also crashes

And the reporter of bp-e54ebfe4-c21d-435a-ba2c-67f572130419 also crashes with topcrash signature for bug 811219 (also appears to be mostly McAfee)

Comment 4

[Wayne Mery (:wsmwk)]

Currently, incredibly rare and no testcase. So not actionable as is.