919986 - crash in mozalloc_abort(char const* const) | mozalloc_handle_oom(unsigned int) | moz_xmalloc | nsJSID::NewID(nsID const&) OOM

Status: RESOLVED WORKSFORME

(Thunderbird :: General, defect)

Description

[Wayne Mery (:wsmwk)]

#11 crash for TB24
OOM Allocation Size=32 for the few crashes that I checked
also occurs in TB17 bp-e6da4288-115f-4461-a476-96f662130905

This bug was filed from the Socorro interface and is 
report bp-e4e16c3f-6119-4b8f-8824-eb8ac2130920.
=============================================================
0	mozalloc.dll	mozalloc_abort(char const * const)	memory/mozalloc/mozalloc_abort.cpp
1	mozalloc.dll	mozalloc_handle_oom(unsigned int)	memory/mozalloc/mozalloc_oom.cpp
2	mozalloc.dll	moz_xmalloc	memory/mozalloc/mozalloc.cpp
3	xul.dll	nsJSID::NewID(nsID const &)	js/xpconnect/src/XPCJSID.cpp
4	xul.dll	xpc_NewIDObject(JSContext *,JS::Handle<JSObject *>,nsID const &)	js/xpconnect/src/XPCJSID.cpp
5	xul.dll	nsXPCWrappedJSClass::CallQueryInterfaceOnJSObject(JSContext *,JSObject *,nsID const &)	js/xpconnect/src/XPCWrappedJSClass.cpp
6	xul.dll	nsXPCWrappedJSClass::DelegatedQueryInterface(nsXPCWrappedJS *,nsID const &,void * *)	js/xpconnect/src/XPCWrappedJSClass.cpp
7	xul.dll	nsXPCWrappedJS::QueryInterface(nsID const &,void * *)	js/xpconnect/src/XPCWrappedJS.cpp
8	xul.dll	nsXPTCStubBase::QueryInterface(nsID const &,void * *)	xpcom/reflect/xptcall/src/xptcall.cpp
9	xul.dll	nsQueryInterface::operator()(nsID const &,void * *)	objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp
10	xul.dll	nsCOMPtr_base::assign_from_qi(nsQueryInterface,nsID const &)	objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp
11	xul.dll	xpcObjectHelper::GetClassInfo()	js/xpconnect/src/xpcObjectHelper.h
12	xul.dll	XPCWrappedNative::GetNewOrUsed(xpcObjectHelper &,XPCWrappedNativeScope *,XPCNativeInterface *,XPCWrappedNative * *)	js/xpconnect/src/XPCWrappedNative.cpp
13	xul.dll	XPCConvert::NativeInterface2JSObject(JS::Value *,nsIXPConnectJSObjectHolder * *,xpcObjectHelper &,nsID const *,XPCNativeInterface * *,bool,tag_nsresult *)	js/xpconnect/src/XPCConvert.cpp

Comment 1

[Kyle Wooten]

Thanks!

Comment 2

[Tracy Walker [:tracy]]

topcrash is being replaced by more precise keywords per https://bugzilla.mozilla.org/show_bug.cgi?id=927557#c3

Comment 3

[Wayne Mery (:wsmwk)]

#3 crash for TB24.0.1. (would be #1 if not for the new Windows 7 topcrash taking #1 and #2 spots).  A big increase over TB24.0 rate.


Rare in version 17, so something regressive occurred in version 24 to make this a topcrash.
Unable to find TB crashes in betas, so unknown regression range
firefox, near zero and no crashes worth mentioning.

one person, Peter, cites spellcheck in two crashes, bp-c8bf29b7-371b-4234-891a-cbdb02131016 (bug 913447) and bp-e4e16c3f-6119-4b8f-8824-eb8ac2130920 (this bug). And Peter, like artistress, has several crash signatures, most notable being mozalloc_abort(char const* const) | NS_DebugBreak_P | AbortIfOffMainThreadIfCheckFast | nsCycleCollector::Forget2(nsPurpleBufferEntry*)
bp-d628730a-405b-4cf2-961e-a2b3a2130805.   

But most users cite Thunderbird being in the background or computer coming out of sleep, for example bp-55efa5c3-0ef2-4aab-8cdf-24c9c2131027

v17 crashes appear roughly to be same stack bp-d0f2044b-4eab-416f-9660-a0e102130729  (I didn't examine super well)

Comment 4

[Wayne Mery (:wsmwk)]

closing for same reason as bug 837438, i.e. bug 804742