Closed Bug 842101 Opened 11 years ago Closed 7 years ago

crash in ConstructSlimWrapper

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Platform:
x86
All
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: wsmwk, Unassigned)

Details

(Keywords: crash, regression, Whiteboard: [regression:tb16][tbird crash])

Crash Data

#29 crash for TB17.0.2
appears to be a regression in tb16. perhaps from Bug 762436 

This bug was filed from the Socorro interface and is 
report bp-846e1d79-55d4-4fb3-b5ac-c6b2e2130202 .
0	xul.dll	ConstructSlimWrapper	js/xpconnect/src/XPCWrappedNative.cpp:3734
1	xul.dll	XPCConvert::NativeInterface2JSObject	js/xpconnect/src/XPCConvert.cpp:873
2	xul.dll	xpc_qsXPCOMObjectToJsval	js/xpconnect/src/XPCQuickStubs.cpp:1007
3	xul.dll	nsIDOMDocument_GetElementById	objdir-tb/mozilla/js/xpconnect/src/dom_quickstubs.cpp:3244
4	mozjs.dll	js::InvokeKernel	js/src/jsinterp.cpp:352 

peterv@51515 3731 nsISupports *identityObj = aHelper.GetCanonical();
peterv@51515 3732 nsXPCClassInfo *classInfoHelper = aHelper.GetXPCClassInfo();
peterv@40489 3733
ms2ger@102191  3734    XPCNativeScriptableFlags flags(classInfoHelper->GetScriptableFlags());
no correlations listed in https://crash-analysis.mozilla.com/crash_analysis/20130216/20130216_Thunderbird_17.0.2-interesting-addons.txt

and no extensions listed in many user crashes
bp-cdc3ce76-9e2a-4413-951c-e5f4b2130201
bp-b429e498-1db1-48ed-a59d-596e52130203
Crash Signature: [@ ConstructSlimWrapper(XPCCallContext&, xpcObjectHelper&, XPCWrappedNativeScope*, JS::Value*)] → [@ ConstructSlimWrapper(XPCCallContext&, xpcObjectHelper&, XPCWrappedNativeScope*, JS::Value*)] [@ ConstructSlimWrapper]
Component: General → XPConnect
OS: Windows NT → All
Product: Thunderbird → Core
Whiteboard: [regression:tb16] → [regression:tb16][tbird crash]
Assignee: Ms2ger → peterv
Blocks: 830879
Sorry, that doesn't make sense, I didn't realize this crash was much older than bug 830879. Bug 762436 doesn't seem like it can be related either, though.
Assignee: peterv → nobody
No longer blocks: 830879
Looks like a null-deref of classInfoHelper.

How are we getting in there with a null classInfoHelper, though?
typical comment for this crash

1. When I am composing an email, it displays a message in the status area that it is copying the email to the Drafts older
2. When I send the email, it is unable to copy it to the Sent folder.
3. Emails cannot be deleted from the In-Tray, either directly or by >Tools>Delete Mail marked as Junk in Folder
I'm marking this bug as WORKSFORME as bug crashlog signature didn't appear from a long time (over half year) [except some obsolete <18 versions, no crashes starting since 18 version].
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.