86173 - M091 topcrash [@ free() [nsAllocatorManager.cp] ]

Status: VERIFIED DUPLICATE of bug 86488

(Core :: Internationalization, defect)

Description

[Jan Carpenter]

This bug is a topcrasher for M091

Here are some URLs & Comments that might help repro this crash:
     (31751643) Comments: I choose Japanese(japan) on language
menu and restart
     (31737634) Comments: After adding japanese plugins
     (31737590) Comments: Just open japanese page.
     (31733114) Comments: clicked on a link!
     (31706444) Comments: When I were importing the mails of
Netscape4.7 by import tools for Eudra
     (31706150) URL: pricefinder page linked by maccentral.com
(not sure of exact URL)
     (31706150) Comments: crash occurred when I clicked icon to go
to buy.com to purchase software (not a "good for the industry"
type crash)
     (31701653) Comments: Many windows open
     (31674502) URL: http://my.yahoo.com
     (31674502) Comments: clicking on a news link. the main page
probably hadn't finished loading when I clicked a second level
link.
     (31658008) URL: aolmail.aol.com
     (31658008) Comments: login for aolmail
     (31634206) Comments: I was about to open Mozilla Mail after
having dowloaded a huge page with a lot of quite big pictures.
Mozilla mail opened

Here is a recent stack trace:

Incident ID 31753278 
free() [nsAllocatorManager.cp] 
.__dl__FPv [CPlusPlusLevel.cp] 
.__dla__FPv [CPlusPlusLevel.cp] 
nsCharsetMenu::ReorderMenuItemArray() [nsCharsetMenu.cpp, line 1519] 
nsCharsetMenu::InitAutodetMenu() [nsCharsetMenu.cpp, line 923] 
nsCharsetMenu::InitSecondaryTiers() [nsCharsetMenu.cpp, line 860] 
nsCharsetMenu::nsCharsetMenu() [nsCharsetMenu.cpp, line 387] 
NS_NewCharsetMenu() [nsCharsetMenu.cpp, line 270] 
nsGenericFactory::CreateInstance() [nsGenericFactory.cpp, line 54] 
nsComponentManagerImpl::CreateInstance() [nsComponentManager.cpp, line 1205] 
nsComponentManager::CreateInstance() [nsRepository.cpp, line 81] 
nsServiceManagerImpl::GetService() [nsServiceManager.cpp, line 344] 
nsServiceManager::GetService() [nsServiceManager.cpp, line 559] 
nsJSCID::GetService() [xpcjsid.cpp, line 846] 
CODE.10 
XPTC_InvokeByIndex() [xptcinvoke_mac.cpp, line 129] 
XPCWrappedNative::CallMethod() [xpcwrappednative.cpp, line 1834]

Comment 1

[Jan Carpenter]

added topcrash keyword

Comment 2

[Blake Ross]

Needs an owner; starting with the i18n team.

Comment 3

[nhottanscp]

I think this is a dup of bug 86488.

Comment 4

[nhottanscp]

The first three cases (31751643, 31737634, 31737590) are probably dup of bug 86488.

31733114 - necko - [e-mail]
31706444, 31674502 - style system - [e-mail]
31706150, 31701653 - JS/nsGlobalWindow - [e-mail]?
31658008 - docShell - [e-mail]?
31634206 - mail (nsMsgThreadedDBView) - [e-mail]

I reassign to [e-mail], anc cc to other people.

Comment 5

[neeti]

darin, the talkback stack trace for incident id 31733114 is

free() [nsAllocatorManager.cp] 
PR_Free() [prmem.c, line 66] 
nsMemoryImpl::Free() [nsMemoryImpl.cpp, line 326] 
nsMemory::Free() [nsMemoryImpl.cpp, line 559] 
nsStr::Free() [nsStr.cpp, line 694] 
nsStr::Destroy() [nsStr.cpp, line 87] 
nsCString::~nsCString() [nsString.cpp, line 139] 
nsCAutoString::~nsCAutoString() [nsString.cpp, line 1595] 
nsAuthURLParser::ParseAtPath() [nsAuthURLParser.cpp, line 396] 
nsAuthURLParser::ParseAtHost() [nsAuthURLParser.cpp, line 312] 
nsAuthURLParser::ParseAtPreHost() [nsAuthURLParser.cpp, line 237] 
nsAuthURLParser::ParseAtScheme() [nsAuthURLParser.cpp, line 106] 
nsStdURL::Parse() [nsStdURL.cpp, line 350] 
nsStdURL::SetSpec() [nsStdURL.cpp, line 915] 
nsStdURL::Init() [nsStdURL.cpp, line 163] 
nsHttpHandler::NewURI() [nsHttpHandler.cpp, line 1427] 
nsIOService::NewURI() [nsIOService.cpp, line 409] 
NS_NewURI() [nsNetUtil.h, line 80] 
NS_NewURI() [nsNetUtil.h, line 92] 
nsWebShell::HandleLinkClickEvent() [nsWebShell.cpp, line 791] 

Comment 6

[Darin Fisher]

dougt: could there be something in your nsStdURL checkin that invalidates this
crash?

Comment 7

[Doug Turner (:dougt)]

I don't know.  I can look for 0.9.3.

Comment 8

[Doug Turner (:dougt)]

I will *try* to look at this for 0.9.2

Comment 9

[nhottanscp]

Filed separate bugs:
31706444, 31674502 - bug 87193
31706150, 31701653 - bug 87194
31634206 - bug 87196

31658008 also necko?
Stack Trace
freeRENtree [d:\builds\seamonkey\mozilla\js\src\jsregexp.c, line 1278]
js_DestroyRegExp [d:\builds\seamonkey\mozilla\js\src\jsregexp.c, line 1315]
regexp_finalize [d:\builds\seamonkey\mozilla\js\src\jsregexp.c, line 2501]
js_FinalizeObject [d:\builds\seamonkey\mozilla\js\src\jsobj.c, line 1771]
js_GC [d:\builds\seamonkey\mozilla\js\src\jsgc.c, line 1221]
js_ForceGC [d:\builds\seamonkey\mozilla\js\src\jsgc.c, line 944]
JS_GC [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 1620]
nsJSContext::GC [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp,
line 1333]
MSVCRT.DLL + 0xcc63 (0x7800cc63)
DocumentViewerImpl::Init
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 961]
nsDocShell::SetupNewViewer
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 3982]
nsWebShell::SetupNewViewer
[d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp, line 356]
nsDocShell::Embed [d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp,
line 3468]
nsWebShell::Embed [d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp,
line 376]
nsDocShell::CreateContentViewer
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 3748]
nsDSURIContentListener::DoContent
[d:\builds\seamonkey\mozilla\docshell\base\nsDSURIContentListener.cpp, line 120]
nsDocumentOpenInfo::DispatchContent
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 353]
nsDocumentOpenInfo::OnStartRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 220]
nsStreamListenerTee::OnStartRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamListenerTee.cpp, line 14]
nsHttpChannel::ProcessNormal
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHttpChannel.cpp, line 444]
nsHttpChannel::ProcessResponse
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHttpChannel.cpp, line 421]
nsHttpChannel::OnStartRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHttpChannel.cpp, line 2034]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 524]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072]
KERNEL32.DLL + 0x24407 (0xbff94407)
0x00688b5e 

Comment 10

[Doug Turner (:dougt)]

Maybe James Burke from that science show could here me here, as I don't see any 
connections here.  Maybe I will after I sleep some...

Comment 11

[Doug Turner (:dougt)]

that is one to many here's....

Comment 12

[Doug Turner (:dougt)]

moving out.

Comment 13

[Doug Turner (:dougt)]

I have created bug:
http://bugzilla.mozilla.org/show_bug.cgi?id=87766

for the necko crash incident id 31733114. 

back to nhotta?

Comment 14

[nhottanscp]

*** This bug has been marked as a duplicate of 86488 ***

Comment 15

[Andreas Becker]

Switching qa contact from jonrubin to marina.

Comment 16

[marina]

verified as a dup of 86488 per Naoki's comments