878440 - startup crash in mozilla::dom::XULDocument::AddPrototypeSheets

Status: RESOLVED WORKSFORME

(Core :: XUL, defect)

Description

[Scoobidiver (away)]

It first showed up in 23.0a1/20130503 and 22.0a2/20130423 but is discontinuous across builds.

Signature 	mozilla::dom::XULDocument::AddPrototypeSheets() More Reports Search
UUID	a5afe966-7bcd-4d1f-9858-cf5492130523
Date Processed	2013-05-23 15:36:47
Uptime	11
Last Crash	7.1 weeks before submission
Install Age	1.0 days since version was first installed.
Install Time	2013-05-22 15:06:40
Product	Firefox
Version	24.0a1
Build ID	20130519031035
Release Channel	nightly
OS	Mac OS X
OS Version	10.6.8 10K549
Build Architecture	amd64
Build Architecture Info	family 6 model 15 stepping 11
Crash Reason	EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash Address	0x30
App Notes 	
AdapterVendorID: 0x8086, AdapterDeviceID: 0x2a02
Processor Notes 	sp-processor10_phx1_mozilla_com_16389:2012; exploitability tool: ERROR: unable to analyze dump
EMCheckCompatibility	True
Adapter Vendor ID	0x8086
Adapter Device ID	0x2a02

Frame 	Module 	Signature 	Source
0 	XUL 	mozilla::dom::XULDocument::AddPrototypeSheets 	obj-firefox/x86_64/dist/include/nsTArray.h:363
1 	libmozglue.dylib 	arena_dalloc 	jemalloc.c:4598
2 	XUL 	mozilla::dom::XULDocument::OnPrototypeLoadDone 	content/xul/document/src/XULDocument.cpp:610
3 	XUL 	nsXULPrototypeDocument::NotifyLoadDone 	content/xul/document/src/nsXULPrototypeDocument.cpp:672
4 	XUL 	mozilla::dom::XULDocument::EndLoad 	content/xul/document/src/XULDocument.cpp:586
5 	XUL 	XULContentSinkImpl::DidBuildModel 	content/xul/document/src/nsXULContentSink.cpp:239
6 	XUL 	nsParser::ResumeParse 	parser/htmlparser/src/nsParser.cpp:956
7 	XUL 	_ZThn8_N8nsParser13OnStopRequestEP10nsIRequestP11nsISupports12tag_nsresult 	parser/htmlparser/src/nsParser.cpp:1957
8 	XUL 	nsJARChannel::OnStopRequest 	modules/libjar/nsJARChannel.cpp:982
9 	XUL 	_ZThn16_N12nsJARChannel13OnStopRequestEP10nsIRequestP11nsISupports12tag_nsresult 	modules/libjar/nsJARChannel.cpp:999
10 	XUL 	nsInputStreamPump::OnStateStop 	netwerk/base/src/nsInputStreamPump.cpp:555
11 	XUL 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:375
12 	XUL 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:82
13 	XUL 	nsThread::ProcessNextEvent 	nsThread.cpp:627
14 	XUL 	nsNavHistory::MarkPageAsFollowedBookmark 	obj-firefox/x86_64/dist/include/nsComponentManagerUtils.h:65
15 	libSystem.B.dylib 	pthread_mutex_lock 	
16 	XUL 	NS_ProcessNextEvent 	nsThreadUtils.cpp:238 
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Adom%3A%3AXULDocument%3A%3AAddPrototypeSheets%28%29

Comment 1

[John Hesling [:John99] (NeedInfo me)]

Possible Steps To Reproduce.

I am posting this because of Sumo thread https://support.mozilla.org/en-US/questions/979134

The user is reporting crashes with this signature and specifically bp-d5eda859-51e7-4b58-9a9b-e83442131130. 
The user unfortunately is using unsupported Firefox versions but has posted his contact details and STR at https://sites.google.com/site/dickguertin/home/app2process

Comment 2

[Wayne Mery (:wsmwk)]

Example from Thunderbird 38.1.0 bp-e63b93e2-abea-441c-acc1-e34932150730 (sophie)

Comment 3

[Wayne Mery (:wsmwk)]

BTW this is the 4th ranked crash for Thunderbird Mac users. I didn't check firefox

Comment 4

[Wayne Mery (:wsmwk)]

No crashes since v59