Open Bug 888605 Opened 12 years ago Updated 3 years ago

[10.9] crash in -[NSPopUpButtonObserver menuChangedItem:] with error message: "NSUnknownKeyException: [<FI_TTaggingSuggestionsTableViewItem <addr>> valueForUndefinedKey:]: this class is not key value coding-compliant for the key image"

Categories

(Core :: Widget: Cocoa, defect, P5)

Product:
Core
Component:
Widget: Cocoa
Platform:
x86_64
macOS
Type:
defect

Tracking

()

Tracking Flags:
Tracking Status
firefox28 - wontfix

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Keywords: crash, Whiteboard: tpi:+)

Crash Data

There are 10 crashes on Mac OS X 10.9 with the above error message. Signature -[NSPopUpButtonObserver menuChangedItem:] More Reports Search UUID f843c48e-2105-4bc5-9aad-da3aa2130626 Date Processed 2013-06-26 08:11:38.727144 Uptime 84784 Last Crash 2491290 seconds before submission Install Age 521266 since version was first installed. Install Time 2013-06-20 07:23:38 Product Firefox Version 22.0 Build ID 20130617145905 Release Channel beta OS Mac OS X OS Version 10.9.0 13A497d Build Architecture amd64 Build Architecture Info family 6 model 58 stepping 9 | None Crash Reason EXC_BAD_ACCESS / KERN_INVALID_ADDRESS Crash Address 0x58 App Notes AdapterVendorID: 0x8086, AdapterDeviceID: 0x 166GL Context? GL Context+ GL Layers? GL Layers+ WebGL? WebGL+ Obj-C Exception data: NSUnknownKeyException: [<FI_TTaggingSuggestionsTableViewItem 0x17eec3c80> valueForUndefinedKey:]: this class is not key value coding-compliant for the key image. Frame Module Signature Source 0 XUL -[NSPopUpButtonObserver menuChangedItem:] widget/cocoa/nsFilePicker.mm 1 CoreFoundation CoreFoundation@0x3e293 2 libmozglue.dylib libmozglue.dylib@0x4360 3 CoreFoundation CoreFoundation@0x8b29 4 libobjc.A.dylib libobjc.A.dylib@0x1d638 5 libobjc.A.dylib libobjc.A.dylib@0x70ae 6 libmozglue.dylib arena_dalloc memory/mozjemalloc/jemalloc.c 7 CoreFoundation CoreFoundation@0x8b29 8 libmozglue.dylib arena_malloc /Developer/SDKs/MacOSX10.6.sdk/usr/include/secure/_string.h 9 @0x100400040 10 libmozglue.dylib je_calloc memory/mozjemalloc/jemalloc.c 11 libsystem_malloc.dylib libsystem_malloc.dylib@0x102ad 12 libobjc.A.dylib libobjc.A.dylib@0x1da06 13 libobjc.A.dylib libobjc.A.dylib@0x1d341 14 Foundation Foundation@0x43466 15 libobjc.A.dylib libobjc.A.dylib@0x5080 16 Foundation Foundation@0x4336a 17 libobjc.A.dylib libobjc.A.dylib@0x5080 18 XUL addBinding.xmlNamespace 19 AppKit AppKit@0x340184 20 AppKit AppKit@0x33fec4 21 AppKit AppKit@0x33ea9d 22 libmozglue.dylib libmozglue.dylib@0x4690 23 libobjc.A.dylib libobjc.A.dylib@0x5000 24 XUL -[GeckoNSMenu performKeyEquivalent:] widget/cocoa/nsMenuBarX.mm 25 libobjc.A.dylib libobjc.A.dylib@0x5080 26 AppKit AppKit@0x33df71 27 HIToolbox HIToolbox@0x34f84 28 CarbonCore CarbonCore@0x1baad 29 HIToolbox HIToolbox@0x35068 30 libsystem_pthread.dylib libsystem_pthread.dylib@0x4933 31 AppKit AppKit@0x33d935 32 CoreFoundation CoreFoundation@0x50249 33 libobjc.A.dylib libobjc.A.dylib@0x5080 34 AppKit AppKit@0x20cd80 More reports at: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=-[NSPopUpButtonObserver+menuChangedItem%3A]
Crash Signature: [@ -[NSPopUpButtonObserver menuChangedItem:]] → [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]]
Marcia, a useless effort because of bug 703102.
Crash Signature: [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] → [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] [@ libobjc.A.dylib@0x50a3]
Crash Signature: [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] [@ libobjc.A.dylib@0x50a3] → [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] [@ libobjc.A.dylib@0x50a3] [@ nsFilePicker::GetFilterList() ]
Crash Signature: [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] [@ libobjc.A.dylib@0x50a3] [@ nsFilePicker::GetFilterList() ] → [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] [@ libobjc.A.dylib@0x50a3] [@ libobjc.A.dylib@0x5097] [@ nsFilePicker::GetFilterList() ] [@ nsXPCException::GetData(nsISupports**) ]
This bug also happens on other versions of OS X, but with different exceptions.
FI_TTaggingSuggestionsTableViewItem and BrowserViewState (from some of the exception messages) are symbols in the FinderKit framework. So this may be some kind of Apple bug.
I hit this crash again today using Aurora: https://crash-stats.mozilla.com/report/index/b79aad50-51b2-4948-a801-095882131011 I was rapidly changing tabs using Command + t when the crash occurred.
I am hitting this repeatedly using the Aurora build today: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:26.0) Gecko/20100101 Firefox/26.0. Each time I crashed I was using a keyboard command.
Are your crashes reproducible?, with a clean profile? If so please give detailed STR.
I can't find any of these crashes in the last week on the 27 branch (currently the trunk). Do you see these crashes with today's mozilla-central nightly?
Haven't seen them yet with trunk. On Aurora it happens more frequently, but not 100% reproducible. Working on getting exact steps but it seems every time it happens had done a copy command (Command + C) and then was trying to open a new tab using Command + t. https://crash-stats.mozilla.com/report/index/15d7bcd6-425a-4463-b3c4-5ab0c2131014 and https://crash-stats.mozilla.com/report/index/36193e49-45c8-44b6-9099-e6d822131014 are the two most recent on the latest Aurora.
Please go back to old mozilla-central nightlies, looking for ones on which you can reproduce this bug. Then find the first m-c nightly on which you *can't* repro this bug. Please also do the same for bug 917042. What I'm asking for is the opposite of regression ranges -- "degression ranges"?
(In reply to Steven Michaud from comment #10) > Please go back to old mozilla-central nightlies, looking for ones on which > you can reproduce this bug. Then find the first m-c nightly on which you > *can't* repro this bug. Please also do the same for bug 917042. > > What I'm asking for is the opposite of regression ranges -- "degression > ranges"? I will try, but as I said this is not a 100% reproducible case. Seems like it is one of those "timing" things.
Ioana, please have someone on your team see if they can assist Marcia in finding a regression window.
Flags: needinfo?(ioana.budnar)
Keywords: regressionwindow-wanted
Paul, please try to help out here.
Flags: needinfo?(ioana.budnar)
QA Contact: paul.silaghi
I could not reproduce the initial crash using the indications provided in Comments 5, 6 and 9 on Mac OS X 10.9 with Aurora 26.0a2 (Build ID: 20131014004003 - I used different keyboard commands like: Cmd+T, Cmd+C, Cmd+V, Cmd+1/2/3/4, Cmd+W, Cmd+N, but with no success).
QA Contact: paul.silaghi → simona.marcu
Nominating for tracking since this is the #3 Mac topcrash in Firefox 28.
status-firefox28: --- → affected
tracking-firefox28: --- → ?
Keywords: topcrash-mac
(In reply to Anthony Hughes, QA Mentor (:ashughes) from comment #15) > Nominating for tracking since this is the #3 Mac topcrash in Firefox 28. I should clarify that the signature @libobjc.A.dylib@0x5097 is what's currently at #3. Upon looking at correlations, I'm wondering if this isn't related to bug 951906. Steven, what do you think? Addon Correlations: 96% (24/25) vs. 10% (48/472) thunder@xunlei.com 88% (22/25) vs. 8% (37/472) cpmanager@mozillaonline.com 88% (22/25) vs. 8% (37/472) cehomepage@mozillaonline.com 88% (22/25) vs. 8% (37/472) quicklaunch@mozillaonline.com 84% (21/25) vs. 7% (33/472) livemargins@mozillaonline.com 80% (20/25) vs. 6% (29/472) share_all_cn@mozillaonline.com 24% (6/25) vs. 1% (7/472) youdao-translate@mozillaonline.com 24% (6/25) vs. 2% (8/472) {6005d9b1-d115-485a-a92a-3f6453ca3fe2} 20% (5/25) vs. 1% (5/472) wx-assistant@mozillaonline.com 20% (5/25) vs. 1% (6/472) tabimprovelite@mozillaonline.com 20% (5/25) vs. 2% (10/472) netvideohunter@netvideohunter.com (NetVideoHunter Video Downloader, https://addons.mozilla.org/addon/7447) 16% (4/25) vs. 1% (4/472) dict@www.youdao.com 12% (3/25) vs. 1% (3/472) shopping@mozillaonline.com 12% (3/25) vs. 2% (8/472) easyscreenshot@mozillaonline.com 12% (3/25) vs. 4% (17/472) saamazon@mybrowserbar.com 12% (3/25) vs. 4% (17/472) saebay@mybrowserbar.com 12% (3/25) vs. 4% (17/472) savingsslider@mybrowserbar.com 12% (3/25) vs. 4% (21/472) searchme@mybrowserbar.com 8% (2/25) vs. 1% (3/472) {2AE34F68-682B-492A-A1C0-BF9F98CFFE4E} 8% (2/25) vs. 1% (3/472) easelink@ashi.cn 8% (2/25) vs. 1% (4/472) HighSpeedDownload@dbank.com 8% (2/25) vs. 1% (5/472) {AFC4D939-F57F-45D7-9364-C3A010D73046} Library Correlations: 100% (25/25) vs. 14% (67/472) libSimplifiedChineseConverter.dylib 100% (25/25) vs. 51% (241/472) libsystem_stats.dylib 100% (25/25) vs. 51% (241/472) Mangrove 100% (25/25) vs. 52% (246/472) libCGCMS.A.dylib 100% (25/25) vs. 54% (254/472) libutil.dylib 100% (25/25) vs. 54% (254/472) ContactsData 100% (25/25) vs. 54% (254/472) libsystem_asl.dylib 100% (25/25) vs. 54% (254/472) libCoreStorage.dylib 100% (25/25) vs. 54% (254/472) Sharing 100% (25/25) vs. 54% (254/472) CoreUtils 100% (25/25) vs. 54% (254/472) IMCore 100% (25/25) vs. 54% (254/472) FTServices 100% (25/25) vs. 54% (254/472) libsystem_pthread.dylib 100% (25/25) vs. 54% (254/472) libcsfde.dylib 100% (25/25) vs. 54% (254/472) CoreDaemon 100% (25/25) vs. 54% (254/472) AppSandbox 100% (25/25) vs. 54% (254/472) libheimdal-asn1.dylib 100% (25/25) vs. 54% (254/472) libpcap.A.dylib 100% (25/25) vs. 54% (254/472) ViewBridge 100% (25/25) vs. 54% (254/472) MediaAccessibility 100% (25/25) vs. 54% (254/472) libMatch.1.dylib 100% (25/25) vs. 54% (254/472) SecCodeWrapper 100% (25/25) vs. 54% (254/472) Marco 100% (25/25) vs. 54% (254/472) libsystem_malloc.dylib 100% (25/25) vs. 54% (254/472) EFILogin 100% (25/25) vs. 54% (254/472) libsystem_configuration.dylib 100% (25/25) vs. 54% (254/472) DiagnosticLogCollection 100% (25/25) vs. 54% (254/472) IDSFoundation 100% (25/25) vs. 54% (254/472) libodfde.dylib 100% (25/25) vs. 54% (254/472) IDS 100% (25/25) vs. 54% (254/472) LoginUICore 100% (25/25) vs. 54% (254/472) SystemAdministration 100% (25/25) vs. 54% (254/472) FaceCore 100% (25/25) vs. 54% (254/472) libAVFAudio.dylib 100% (25/25) vs. 54% (254/472) ContactsFoundation 100% (25/25) vs. 54% (254/472) libsystem_platform.dylib 100% (25/25) vs. 54% (254/472) libsandbox.1.dylib 100% (25/25) vs. 54% (254/472) IMFoundation 100% (25/25) vs. 54% (254/472) IconServices 100% (25/25) vs. 54% (254/472) AppContainer 100% (25/25) vs. 54% (254/472) XPCService 100% (25/25) vs. 54% (255/472) AOSNotification 100% (25/25) vs. 54% (257/472) AppleSRP 100% (25/25) vs. 55% (260/472) WebKit 100% (25/25) vs. 55% (260/472) WebCore 100% (25/25) vs. 60% (282/472) libsystem_m.dylib 100% (25/25) vs. 60% (282/472) Ubiquity 100% (25/25) vs. 60% (282/472) GeoServices 100% (25/25) vs. 60% (282/472) ChunkingLibrary 100% (25/25) vs. 60% (282/472) ProtocolBuffer 100% (25/25) vs. 60% (282/472) libxar.1.dylib 100% (25/25) vs. 60% (282/472) libcorecrypto.dylib 100% (25/25) vs. 60% (282/472) Librarian 100% (25/25) vs. 60% (282/472) TCC 100% (25/25) vs. 60% (282/472) CoreWiFi 100% (25/25) vs. 60% (282/472) MediaControlSender 100% (25/25) vs. 60% (282/472) CoreAVCHD 100% (25/25) vs. 60% (282/472) AOSMigrate 100% (25/25) vs. 60% (282/472) AOSKit 100% (25/25) vs. 60% (282/472) ServiceManagement 100% (25/25) vs. 60% (283/472) ApplePushService 100% (25/25) vs. 64% (301/472) Bom 100% (25/25) vs. 64% (301/472) AppleFSCompression 100% (25/25) vs. 68% (319/472) AVFoundation 32% (8/25) vs. 2% (11/472) ThunderPlugIn 56% (14/25) vs. 27% (128/472) IOAccelerator 56% (14/25) vs. 27% (128/472) libGPUSupportMercury.dylib 100% (25/25) vs. 73% (343/472) DiskImages 100% (25/25) vs. 73% (343/472) libcurl.4.dylib 100% (25/25) vs. 73% (343/472) DiscRecording 100% (25/25) vs. 73% (343/472) MediaKit 100% (25/25) vs. 74% (347/472) GSS 100% (25/25) vs. 74% (347/472) Heimdal 100% (25/25) vs. 74% (347/472) PreferencePanes 100% (25/25) vs. 74% (347/472) libcompiler_rt.dylib 100% (25/25) vs. 74% (347/472) libsystem_blocks.dylib 100% (25/25) vs. 74% (347/472) CommonAuth 100% (25/25) vs. 74% (347/472) libunwind.dylib 100% (25/25) vs. 74% (347/472) GenerationalStorage 100% (25/25) vs. 74% (347/472) libsystem_c.dylib 100% (25/25) vs. 74% (347/472) libunc.dylib 100% (25/25) vs. 74% (347/472) libremovefile.dylib 100% (25/25) vs. 74% (347/472) libJP2.dylib 100% (25/25) vs. 74% (347/472) libcommonCrypto.dylib 100% (25/25) vs. 74% (347/472) libsystem_dnssd.dylib 100% (25/25) vs. 74% (347/472) InternetAccounts 100% (25/25) vs. 74% (347/472) libcache.dylib 100% (25/25) vs. 74% (347/472) libsystem_network.dylib 100% (25/25) vs. 74% (347/472) libsystem_kernel.dylib 100% (25/25) vs. 74% (347/472) libquarantine.dylib 100% (25/25) vs. 74% (347/472) CoreImage 100% (25/25) vs. 74% (347/472) ISSupport 100% (25/25) vs. 74% (347/472) liblaunch.dylib 100% (25/25) vs. 74% (347/472) libsystem_info.dylib 100% (25/25) vs. 74% (347/472) libCRFSuite.dylib 100% (25/25) vs. 74% (347/472) libcopyfile.dylib 100% (25/25) vs. 74% (347/472) libdyld.dylib 100% (25/25) vs. 74% (347/472) libmacho.dylib 100% (25/25) vs. 74% (347/472) libOpenScriptingUtil.dylib 100% (25/25) vs. 74% (347/472) libbz2.1.0.dylib 100% (25/25) vs. 74% (347/472) libc++.1.dylib 100% (25/25) vs. 74% (347/472) libDiagnosticMessagesClient.dylib 100% (25/25) vs. 74% (347/472) libxpc.dylib 100% (25/25) vs. 74% (347/472) libsystem_notify.dylib 100% (25/25) vs. 74% (347/472) Symbolication 100% (25/25) vs. 74% (347/472) libc++abi.dylib 100% (25/25) vs. 74% (347/472) libCVMSPluginSupport.dylib 100% (25/25) vs. 74% (347/472) CoreServicesInternal 100% (25/25) vs. 74% (347/472) RemoteViewServices 100% (25/25) vs. 74% (347/472) libpam.2.dylib 100% (25/25) vs. 74% (347/472) libdispatch.dylib 100% (25/25) vs. 74% (347/472) NetAuth 100% (25/25) vs. 74% (347/472) PhoneNumbers 100% (25/25) vs. 74% (347/472) libkeymgr.dylib 100% (25/25) vs. 74% (347/472) PerformanceAnalysis 100% (25/25) vs. 74% (347/472) CoreMediaIO 100% (25/25) vs. 74% (347/472) libsystem_sandbox.dylib 100% (25/25) vs. 74% (347/472) ScalableUserInterface 100% (25/25) vs. 74% (347/472) AppleSystemInfo 100% (25/25) vs. 74% (348/472) CoreMediaAuthoring 100% (25/25) vs. 74% (348/472) libiconv.2.dylib 100% (25/25) vs. 74% (349/472) DebugSymbols 100% (25/25) vs. 74% (349/472) CoreSymbolication 100% (25/25) vs. 75% (352/472) CoreAUC 24% (6/25) vs. 4% (18/472) AppleIntelHD5000GraphicsGLDriver 100% (25/25) vs. 80% (377/472) CorePDF 100% (25/25) vs. 80% (377/472) DataDetectorsCore 100% (25/25) vs. 80% (377/472) Quartz 100% (25/25) vs. 80% (377/472) DisplayServices 100% (25/25) vs. 80% (377/472) PDFKit 100% (25/25) vs. 80% (377/472) ImageKit 100% (25/25) vs. 80% (377/472) QuickLook 100% (25/25) vs. 80% (377/472) ImageCaptureCore 100% (25/25) vs. 80% (377/472) QuickLookUI 100% (25/25) vs. 80% (377/472) JavaScriptCore 100% (25/25) vs. 80% (377/472) QuartzComposer 100% (25/25) vs. 81% (381/472) QuartzFilters 84% (21/25) vs. 68% (319/472) libcldcpuengine.dylib 96% (24/25) vs. 81% (381/472) libnssdbm3.dylib 96% (24/25) vs. 81% (381/472) libsoftokn3.dylib 96% (24/25) vs. 81% (382/472) libfreebl3.dylib 28% (7/25) vs. 13% (62/472) AppleIntelHD4000GraphicsGLDriver 96% (24/25) vs. 81% (384/472) libnssckbi.dylib 100% (25/25) vs. 86% (406/472) CoreWLAN 100% (25/25) vs. 86% (406/472) CrashReporterSupport 100% (25/25) vs. 87% (412/472) Shortcut 100% (25/25) vs. 87% (412/472) HelpData 24% (6/25) vs. 12% (56/472) AppleIntelHD3000GraphicsGLDriver 100% (25/25) vs. 88% (416/472) firefox 100% (25/25) vs. 88% (417/472) libbrowsercomps.dylib 100% (25/25) vs. 94% (446/472) libtidy.A.dylib 100% (25/25) vs. 95% (448/472) libCGXType.A.dylib
Flags: needinfo?(smichaud)
QA Contact: sbadau
It isn't this bug we should be tracking. It's bug 951906. Bug 951906 is entirely unrelated. It just happens to share one signature with this bug.
Flags: needinfo?(smichaud)
Not tracking based on comment 17, will go look at bug 951906
tracking-firefox28: ? → -
This is likely wontfix for Firefox 28 at this point. I'm not sure of the status for other branches.
status-firefox28: affected → wontfix
Crash Signature: [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] [@ libobjc.A.dylib@0x50a3] [@ libobjc.A.dylib@0x5097] [@ nsFilePicker::GetFilterList() ] [@ nsXPCException::GetData(nsISupports**) ] → [@ -[NSPopUpButtonObserver menuChangedItem:]] [@ @0x0 | -[NSPopUpButtonObserver menuChangedItem:]] [@ libobjc.A.dylib@0x50a3] [@ libobjc.A.dylib@0x5097] [@ nsFilePicker::GetFilterList() ] [@ nsXPCException::GetData(nsISupports**) ] [@ nsFilePicker::…
Some of the signatures in this bug are still showing up on recent versions, but this bug doesn't seem to very actionable as-is.
Keywords: regressionwindow-wanted
Keywords: topcrash-mac
Priority: -- → P5
Whiteboard: tpi:+
QA Whiteboard: qa-not-actionable
Severity: critical → S2

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Severity: S2 → S3
You need to log in before you can comment on or make changes to this bug.