Closed Bug 862705 Opened 11 years ago Closed 5 years ago

crash in nsGlobalWindow::RunTimeoutHandler

Categories

(Core :: DOM: Core & HTML, defect)

x86
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED WONTFIX

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash)

Crash Data

It started spiking in 23.0a1/20130416. The regression range for the spike is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=261d6997d1d1&tochange=1d9c510b3742
Although bug 810644 is not in the regression range, it might be involved.

Signature 	nsGlobalWindow::RunTimeoutHandler(nsTimeout*, nsIScriptContext*) More Reports Search
UUID	071f1c53-2708-4c39-ba2a-1b4582130416
Date Processed	2013-04-16 22:40:02
Uptime	467
Last Crash	8.2 minutes before submission
Install Age	14.7 minutes since version was first installed.
Install Time	2013-04-16 22:25:07
Product	Firefox
Version	23.0a1
Build ID	20130416030901
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 15 stepping 2
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x0
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x0de1, AdapterSubsysID: 00000000, AdapterDriverVersion: 9.18.13.697
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
Processor Notes 	sp-processor04.phx1.mozilla.com_4774:2012; exploitability tool failed: 127
EMCheckCompatibility	True
Adapter Vendor ID	0x10de
Adapter Device ID	0x0de1
Total Virtual Memory	4294836224
Available Virtual Memory	3199184896
System Memory Use Percentage	61
Available Page File	2968018944
Available Physical Memory	1230340096

Frame 	Module 	Signature 	Source
0 	xul.dll 	nsGlobalWindow::RunTimeoutHandler 	dom/base/nsGlobalWindow.cpp:10209
1 	xul.dll 	nsGlobalWindow::RunTimeout 	dom/base/nsGlobalWindow.cpp:10471
2 	xul.dll 	nsGlobalWindow::TimerCallback 	dom/base/nsGlobalWindow.cpp:10740
3 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:543
4 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:630
5 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:627
6 	xul.dll 	NS_ProcessNextEvent 	obj-firefox/xpcom/build/nsThreadUtils.cpp:238
7 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:82
8 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:209
9 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:183
10 	xul.dll 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:163
11 	xul.dll 	nsAppShell::Run 	widget/windows/nsAppShell.cpp:113
12 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:288
13 	xul.dll 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3881
14 	xul.dll 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3948
15 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:4164
16 	firefox.exe 	do_main 	browser/app/nsBrowserApp.cpp:271
17 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:105
18 	firefox.exe 	__tmainCRTStartup 	crtexe.c:552
19 	kernel32.dll 	BaseThreadInitThunk 	
20 	ntdll.dll 	__RtlUserThreadStart 	
21 	ntdll.dll 	_RtlUserThreadStart 	

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsGlobalWindow%3A%3ARunTimeoutHandler%28nsTimeout*%2C+nsIScriptContext*%29
Hmm.  So I'm seeing a bunch of crashes here in Firefox 20 and earlier...

The list view I'm loking at only shows 5 crashes in 23.0a1, all on this line:

  nsRefPtr<Function> callback = handler->GetCallback();

There are also fx20 crashes here with a null "handler", on its equivalent of the same line.
And I don't see offhand how handler can ever be null.  :(
There are two comments:
"Rytlock Critter Rampage by ArenaNET"
"HTML 5 makes tihs browser its b..."

I tried https://d3b4yo2b5lbfy.cloudfront.net/rampage/index.html but I only hit bug 863923.
The spike is gone after 23.0a1/20130425162858.
Keywords: regression
Version: 23 Branch → Trunk
Crash Signature: [@ nsGlobalWindow::RunTimeoutHandler(nsTimeout*, nsIScriptContext*)] → [@ nsGlobalWindow::RunTimeoutHandler(nsTimeout*, nsIScriptContext*)] [@ nsGlobalWindow::RunTimeoutHandler]
Closing because no crashes reported for 12 weeks.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WONTFIX
Closing because no crashes reported for 12 weeks.
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.