973863 - crash in mozilla::net::nsHttpConnectionMgr::OnMsgCancelTransaction(int, void*)

Status: RESOLVED DUPLICATE of bug 971893

(Firefox :: General, defect)

Description

[Ioana Chiorean]

This bug was filed from the Socorro interface and is 
report bp-76272338-2376-413b-b7dd-022fc2140218.

My Firefox Crashed while loading a search at the availability of an hotel. 
Not reproducible second time. 

Crash signature was spotted in Bug 971893 which was addressed in B2G only as I could read there. 
=============================================================
0	libxul.so	mozilla::net::nsHttpConnectionMgr::OnMsgCancelTransaction(int, void*)	obj-firefox/dist/include/nsTArray.h
1	libxul.so	mozilla::net::nsHttpConnectionMgr::nsConnEvent::Run()	netwerk/protocol/http/nsHttpConnectionMgr.h
2	libxul.so	nsThread::ProcessNextEvent(bool, bool*)	xpcom/threads/nsThread.cpp
3	libxul.so	NS_ProcessNextEvent(nsIThread*, bool)	xpcom/glue/nsThreadUtils.cpp
4	libxul.so	nsSocketTransportService::Run()	netwerk/base/src/nsSocketTransportService2.cpp
5	libxul.so	nsThread::ProcessNextEvent(bool, bool*)	xpcom/threads/nsThread.cpp
6	libxul.so	NS_ProcessNextEvent(nsIThread*, bool)	xpcom/glue/nsThreadUtils.cpp
7	libxul.so	mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)	ipc/glue/MessagePump.cpp
8	libxul.so	MessageLoop::Run()	ipc/chromium/src/base/message_loop.cc
9	libxul.so	nsThread::ThreadFunc(void*)	xpcom/threads/nsThread.cpp
10	libnspr4.so	_pt_root	nsprpub/pr/src/pthreads/ptthread.c
11	libpthread-2.15.so	libpthread-2.15.so@0x7e9a

Comment 1

[Tracy Walker [:tracy]]

This is a dupe of 971893.  There are but 2 crashes on Nightly desktop with builds after the fix there was checked in on 20140213.  And one of those crashed has the poisoned memory location.