923934 - Activities: "TypeError: cpmm is undefined", methodName= "cleanup"

Status: RESOLVED FIXED

(Core :: DOM: Device Interfaces, defect)

Description

[Gregor Wagner [:gwagner]]

Seen during b2g-desktop shutdown in debug-mode on trunk:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0x0000000000000000
mozalloc_abort (msg=0x7fff5fbf4a38 "###!!! ABORT: You can't dereference a NULL nsCOMPtr with operator->().: 'mRawPtr != 0', file ../../dist/include/nsCOMPtr.h, line 819") at /Users/Gregor/moz/b2g-inbound/memory/mozalloc/mozalloc_abort.cpp:30
30	    MOZ_CRASH();
(gdb) bt
#0  mozalloc_abort (msg=0x7fff5fbf4a38 "###!!! ABORT: You can't dereference a NULL nsCOMPtr with operator->().: 'mRawPtr != 0', file ../../dist/include/nsCOMPtr.h, line 819") at /Users/Gregor/moz/b2g-inbound/memory/mozalloc/mozalloc_abort.cpp:30
#1  0x0000000104502675 in Abort (aMsg=0x7fff5fbf4a38 "###!!! ABORT: You can't dereference a NULL nsCOMPtr with operator->().: 'mRawPtr != 0', file ../../dist/include/nsCOMPtr.h, line 819") at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsDebugImpl.cpp:430
#2  0x00000001045020bc in NS_DebugBreak (aSeverity=3, aStr=0x10608b4f6 "You can't dereference a NULL nsCOMPtr with operator->().", aExpr=0x10608b214 "mRawPtr != 0", aFile=0x105f87a4d "../../dist/include/nsCOMPtr.h", aLine=819) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsDebugImpl.cpp:387
#3  0x0000000102ab574a in nsCOMPtr<nsIXPConnect>::operator-> (this=0x7fff5fbf4ef8) at nsCOMPtr.h:819
#4  0x000000010441536c in mozilla::dom::GetCurrentJSStack () at /Users/Gregor/moz/b2g-inbound/dom/bindings/Exceptions.cpp:164
#5  0x00000001029a6f0c in mozilla::dom::Exception::Exception (this=0x10058b600, aMessage=0x10052c9a0 "'[JavaScript Error: \"cpmm is undefined\" {file: \"file:///Users/Gregor/moz/b2g-inbound/sbuild/dist/B2GDebug.app/Contents/MacOS/components/ActivityProxy.js\" line: 93}]' when calling method: [nsIActivityP"..., aResult=NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS, aName=0x0, aLocation=0x0, aData=0x10052a590) at /Users/Gregor/moz/b2g-inbound/dom/base/DOMException.cpp:204
#6  0x00000001029a6d2b in mozilla::dom::Exception::Exception (this=0x10058b600, aMessage=0x10052c9a0 "'[JavaScript Error: \"cpmm is undefined\" {file: \"file:///Users/Gregor/moz/b2g-inbound/sbuild/dist/B2GDebug.app/Contents/MacOS/components/ActivityProxy.js\" line: 93}]' when calling method: [nsIActivityP"..., aResult=NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS, aName=0x0, aLocation=0x0, aData=0x10052a590) at /Users/Gregor/moz/b2g-inbound/dom/base/DOMException.cpp:231
#7  0x00000001032c98b9 in XPCConvert::ConstructException (rv=NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS, message=0x100549ae8 "[JavaScript Error: \"cpmm is undefined\" {file: \"file:///Users/Gregor/moz/b2g-inbound/sbuild/dist/B2GDebug.app/Contents/MacOS/components/ActivityProxy.js\" line: 93}]", ifaceName=0x100506160 "nsIActivityProxy", methodName=0x10e1ebc08 "cleanup", data=0x10052a590, exceptn=0x7fff5fbf5d18, cx=0x0, jsExceptionPtr=0x0) at /Users/Gregor/moz/b2g-inbound/js/xpconnect/src/XPCConvert.cpp:1080
#8  0x00000001032cad93 in XPCConvert::JSErrorToXPCException (message=0x100506300 "TypeError: cpmm is undefined", ifaceName=0x100506160 "nsIActivityProxy", methodName=0x10e1ebc08 "cleanup", report=0x1005444a0, exceptn=0x7fff5fbf5d18) at /Users/Gregor/moz/b2g-inbound/js/xpconnect/src/XPCConvert.cpp:1326
#9  0x00000001032c9de1 in XPCConvert::JSValToXPCException (s={<js::MutableHandleBase<JS::Value>> = {<js::MutableValueOperations<JS::MutableHandle<JS::Value> >> = {<js::UnbarrieredMutableValueOperations<JS::MutableHandle<JS::Value> >> = {<js::ValueOperations<JS::MutableHandle<JS::Value> >> = {<No data fields>}, <No data fields>}, <No data fields>}, <No data fields>}, ptr = 0x7fff5fbf5cf8}, ifaceName=0x100506160 "nsIActivityProxy", methodName=0x10e1ebc08 "cleanup", exceptn=0x7fff5fbf5d18) at /Users/Gregor/moz/b2g-inbound/js/xpconnect/src/XPCConvert.cpp:1165
#10 0x0000000103324f4d in nsXPCWrappedJSClass::CheckForException (ccx=@0x7fff5fbf6660, aPropertyName=0x10e1ebc08 "cleanup", anInterfaceName=0x100506160 "nsIActivityProxy", aForceReport=false) at /Users/Gregor/moz/b2g-inbound/js/xpconnect/src/XPCWrappedJSClass.cpp:951
#11 0x0000000103327402 in nsXPCWrappedJSClass::CallMethod (this=0x15290e150, wrapper=0x144112680, methodIndex=4, info_=0x10e1ebbc0, nativeParams=0x7fff5fbf6970) at /Users/Gregor/moz/b2g-inbound/js/xpconnect/src/XPCWrappedJSClass.cpp:1459
#12 0x000000010331c5cf in nsXPCWrappedJS::CallMethod (this=0x144112680, methodIndex=4, info=0x10e1ebbc0, params=0x7fff5fbf6970) at /Users/Gregor/moz/b2g-inbound/js/xpconnect/src/XPCWrappedJS.cpp:591
#13 0x000000010451a8f9 in PrepareAndDispatch (self=0x1450979c0, methodIndex=4, args=0x7fff5fbf6ad0, gpregs=0x7fff5fbf6a50, fpregs=0x7fff5fbf6a80) at /Users/Gregor/moz/b2g-inbound/xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_darwin.cpp:122
#14 0x000000010451935b in SharedStub () at /Users/Gregor/moz/b2g-inbound/xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_darwin.cpp:35
#15 0x000000010299cd00 in mozilla::dom::Activity::~Activity (this=0x144112500) at /Users/Gregor/moz/b2g-inbound/dom/activities/src/Activity.cpp:81
#16 0x000000010299cc75 in mozilla::dom::Activity::~Activity (this=0x144112500) at /Users/Gregor/moz/b2g-inbound/dom/activities/src/Activity.cpp:79
#17 0x000000010299cc49 in mozilla::dom::Activity::~Activity (this=0x144112500) at /Users/Gregor/moz/b2g-inbound/dom/activities/src/Activity.cpp:79
#18 0x0000000102563c51 in nsDOMEventTargetHelper::DeleteCycleCollectable (this=0x144112500) at /Users/Gregor/moz/b2g-inbound/content/events/src/nsDOMEventTargetHelper.cpp:72
#19 0x000000010220a805 in nsDOMEventTargetHelper::cycleCollection::DeleteCycleCollectable (this=0x107982b90, p=0x144112500) at nsDOMEventTargetHelper.h:44
#20 0x0000000104500a68 in SnowWhiteKiller::~SnowWhiteKiller (this=0x7fff5fbf6c18) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:1988
#21 0x00000001044f7ae5 in SnowWhiteKiller::~SnowWhiteKiller (this=0x7fff5fbf6c18) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:1983
#22 0x00000001044f38a6 in nsCycleCollector::FreeSnowWhite (this=0x10e102000, aUntilNoSWInPurpleBuffer=true) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:2098
#23 0x00000001044f55d4 in nsCycleCollector::BeginCollection (this=0x10e102000, aCCType=ShutdownCC, aManualListener=0x0) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:2763
#24 0x00000001044f53a2 in nsCycleCollector::Collect (this=0x10e102000, aCCType=ShutdownCC, aWhiteNodes=0x7fff5fbf6e20, aResults=0x0, aManualListener=0x0) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:2693
#25 0x00000001044f52e0 in nsCycleCollector::ShutdownCollect (this=0x10e102000) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:2673
#26 0x00000001044f5a73 in nsCycleCollector::Shutdown (this=0x10e102000) at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:2816
#27 0x00000001044f715a in nsCycleCollector_shutdown () at /Users/Gregor/moz/b2g-inbound/xpcom/base/nsCycleCollector.cpp:3169
#28 0x000000010443f72e in mozilla::ShutdownXPCOM (servMgr=0x0) at /Users/Gregor/moz/b2g-inbound/xpcom/build/nsXPComInit.cpp:751
#29 0x000000010443f0f5 in NS_ShutdownXPCOM (servMgr=0x100593338) at /Users/Gregor/moz/b2g-inbound/xpcom/build/nsXPComInit.cpp:616
#30 0x000000010156cc7a in ScopedXPCOMStartup::~ScopedXPCOMStartup (this=0x10050f390) at /Users/Gregor/moz/b2g-inbound/toolkit/xre/nsAppRunner.cpp:1130
#31 0x000000010156cb85 in ScopedXPCOMStartup::~ScopedXPCOMStartup (this=0x10050f390) at /Users/Gregor/moz/b2g-inbound/toolkit/xre/nsAppRunner.cpp:1111
#32 0x00000001015760ba in XREMain::XRE_main (this=0x7fff5fbfee90, argc=3, argv=0x7fff5fbffa88, aAppData=0x100008230) at /Users/Gregor/moz/b2g-inbound/toolkit/xre/nsAppRunner.cpp:3961
#33 0x00000001015764bd in XRE_main (argc=3, argv=0x7fff5fbffa88, aAppData=0x100008230, aFlags=0) at /Users/Gregor/moz/b2g-inbound/toolkit/xre/nsAppRunner.cpp:4138
#34 0x0000000100001623 in do_main (argc=3, argv=0x7fff5fbffa88) at /Users/Gregor/moz/b2g-inbound/b2g/app/nsBrowserApp.cpp:168
#35 0x0000000100001078 in main (argc=3, argv=0x7fff5fbffa88) at /Users/Gregor/moz/b2g-inbound/b2g/app/nsBrowserApp.cpp:261

Comment 1

[Gregor Wagner [:gwagner]]

Attachment: patch

Comment 2

[Gregor Wagner [:gwagner]]

https://hg.mozilla.org/integration/b2g-inbound/rev/c8d069027f2f

Comment 3

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/c8d069027f2f