M091 topcrash [@ free() [nsAllocatorManager.cp] ] - nsJSEnvironment.cpp

VERIFIED WORKSFORME

Status

()

Core
DOM
--
critical
VERIFIED WORKSFORME
17 years ago
17 years ago

People

(Reporter: nhottanscp, Assigned: jst)

Tracking

({crash, topcrash})

Trunk
mozilla1.0
PowerPC
Mac System 9.x
crash, topcrash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

(Reporter)

Description

17 years ago
Separated from  bug 86173, incident ID 31706150, 31701653


tack Trace
free() [nsAllocatorManager.cp]
js_FinalizeStringRT() [jsstr.c, line 2337]
js_FinalizeString() [jsstr.c, line 2325]
js_GC() [jsgc.c, line 1216]
js_ForceGC() [jsgc.c, line 942]
JS_GC() [jsapi.c, line 1619]
nsJSContext::GC() [nsJSEnvironment.cpp, line 1331]
GlobalWindowImpl::SetNewDocument() [nsGlobalWindow.cpp, line 400]
DocumentViewerImpl::Init() [nsDocumentViewer.cpp, line 959]
nsDocShell::SetupNewViewer() [nsDocShell.cpp, line 3976]
(Reporter)

Updated

17 years ago
Keywords: crash
(Assignee)

Comment 1

17 years ago
Brendan, any ideas about this?

Updated

17 years ago
Severity: normal → critical

Updated

17 years ago
Keywords: topcrash

Comment 2

17 years ago
Can't reproduce based on instructions in talkback reports.  If anyone can attach
better instructions, we'll get more traction on fixing this.
Target Milestone: --- → mozilla1.0

Comment 3

17 years ago
Is this still showing up as a topcrash?

Comment 4

17 years ago
I'm not seeing this signature in the Trunk or M092 reports.

The closest thing I find is one incident in the Mac M092 report from 7/14 which 
passes through some of the same code:

Incident ID 32593917 
free() [nsAllocatorManager.cp] 
JS_free() [jsapi.c, line 1428] 
js_DestroyScript() [jsscript.c, line 818] 
fun_finalize() [jsfun.c, line 1069] 
js_FinalizeObject() [jsobj.c, line 1768] 
js_GC() [jsgc.c, line 1216] 
js_ForceGC() [jsgc.c, line 942] 
js_DestroyContext() [jscntxt.c, line 227] 
JS_DestroyContext() [jsapi.c, line 882] 
nsJSContext::~nsJSContext() [nsJSEnvironment.cpp, line 387] 
nsJSContext::Release() [nsJSEnvironment.cpp, line 397] 
nsCOMPtr_base::assign_with_AddRef() [nsCOMPtr.cpp, line 58] 
.__as__28nsCOMPtr<16nsIScriptContext>FP16nsIScriptContext [nsCOMPtr.h, line 582] 
nsDocShell::Destroy() [nsDocShell.cpp, line 2401] 
nsWebShell::Destroy() [nsWebShell.cpp, line 1425] 
nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame() [nsFrameFrame.cpp, line 600] 
nsFrame::Destroy() [nsFrame.cpp, line 430] 
nsFrameList::DestroyFrames() [nsFrameList.cpp, line 115] 
nsContainerFrame::Destroy() [nsContainerFrame.cpp, line 116] 
nsFrameList::DestroyFrames() [nsFrameList.cpp, line 115] 

Comment 5

17 years ago
That looks different. I'm going to mark WFM. Thanks!
Status: NEW → RESOLVED
Last Resolved: 17 years ago
Resolution: --- → WORKSFORME

Comment 6

17 years ago
The Talkback reports are showing this stack trace, similar to the original one 
for this bug. Reopening. Sorry that I don't have steps to repro. (I'll need 
some help from someone with a Mac.) 

        free() [nsAllocatorManager.cp]
         js_FinalizeStringRT()  [jsstr.c  line 2345]
         js_FinalizeString()    [jsstr.c  line 2325]
         js_GC()        [jsgc.c  line 1216]
         js_ForceGC()   [jsgc.c  line 942]
         js_DestroyContext()    [jscntxt.c  line 227]
         JS_DestroyContext()    [jsapi.c  line 882]
         nsJSContext::~nsJSContext()    [nsJSEnvironment.cpp  line 387]
         nsJSContext::Release() [nsJSEnvironment.cpp  line 397]
         nsCOMPtr_base::assign_with_AddRef()    [nsCOMPtr.cpp  line 58]
         .__as__28nsCOMPtr<16nsIScriptContext>FP16nsIScriptContext      
[nsCOMPtr.h  line
582]
         nsDocShell::Destroy()  [nsDocShell.cpp  line 2492]
         nsWebShell::Destroy()  [nsWebShell.cpp  line 1369]
         nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame()        
[nsFrameFrame.cpp  line 600]
         nsFrame::Destroy()     [nsFrame.cpp  line 430]
         nsFrameList::DestroyFrames()   [nsFrameList.cpp  line 115]
         nsContainerFrame::Destroy()    [nsContainerFrame.cpp  line 116]
         nsFrameList::DestroyFrames()   [nsFrameList.cpp  line 115]
         nsContainerFrame::Destroy()    [nsContainerFrame.cpp  line 116]
         nsBoxFrame::Destroy()  [nsBoxFrame.cpp  line 1006]     (34030067)      

Comments:
Restart the PC... but WHY the program crash at least once a day? I do not use
MS-DOS with Windows  but Apple...
     (34028171) Comments: quitting netscpe 6 from headhunter.net websitemessage
error type 2 reoccurred
     (34026170) Comments: Closing it!!
     (34011482) Comments: I was signing off.  I did not know there was a
failure.  maybe I disconnected before closing Netscape.
     (33993088) Comments: Using iTunes when starting Netscape 6.1. Crashed two
times.
     (33990972) Comments: attempting to access the horizon website.
     (33987361) Comments: Reloading 
     (33983995) Comments: It was just sitting....Idle!!!!Boy  have you guys
hatched a lemon....A PIECE OF JUNK!!!!!!!!!!!!
     (33976394) Comments: Starting Instant Messenger from the Netscape home
page.
     (33972461) Comments: I had two windows open  and I was sending email from
one.
     (33968929) Comments: Crashed when I was trying to use this feedback service
to report another error/crash problem....guess I will go back to EI. :-(
     (33968445) Comments: I was doing conection with IM... Eu estava tentato
conex?o com o IM
     (33960844) Comments: I was setting up my buddy list. I'd just opened it up
when *boom*!
     (33953488) URL: http://netscape.com
     (33953488) Comments: Iam trying to register for Netscape Instant
Messenger...Then it crashed
     (33912519) URL: http://www.21torr.com/dnml/dnml.php
     (33912519) Comments: View Flash Animation
     (33905714) URL: http://www.lmasc.lmco.com/f22
     (33905714) Comments: opening the site
     (33889387) Comments: accessing www.saxonpub
     (33872498) URL: www.netscape.com
     (33872498) Comments: I tried to click on the IM link and then it crashed
the browser. It didn't take down the system  though.
Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---

Comment 7

17 years ago
I'm not seeing this in M094 data. Returning to WFM
Status: REOPENED → RESOLVED
Last Resolved: 17 years ago17 years ago
Resolution: --- → WORKSFORME

Comment 8

17 years ago
Marking verified worksform.  This crash comes and goes, and we never have enough
info on it.  We'll open a new bug when we do figure out more about this crash.
Status: RESOLVED → VERIFIED
Crash Signature: [@ free() [nsAllocatorManager.cp] ]
You need to log in before you can comment on or make changes to this bug.