MASTER [EDGY] Firefox Crashed [@ ~nsCOMPtr_base] [@ ~XPCWrappedNativeProto]

Bug #72142 reported by Ariel
24
Affects Status Importance Assigned to Milestone
Mozilla Firefox
Invalid
Critical
firefox (Ubuntu)
Fix Released
High
Mozilla Bugs

Bug Description

Crash on closing

DistroRelease: Ubuntu 6.10
Package: firefox 2.0+0dfsg-0ubuntu3

Good stracktrace

Firefox crashed as i clicked CLOSE button on the main window

From retr. stacktrace:
...
 #3 <signal handler called>
 #4 ~nsCOMPtr_base (this=<value optimized out>)
 #5 ~XPCWrappedNativeProto (this=0xac56ca0)
 #6 DyingProtoKiller (table=0x8110270, hdr=0xae0e2dc8, number=6,
 #7 JS_DHashTableEnumerate (table=0x8110270,
 #8 XPCJSRuntime::GCCallback (cx=0x810a3e8,
 #9 DOMGCCallback (cx=0x810a3e8, status=JSGC_FINALIZE_END)
 #10 js_GC (cx=0x810a3e8, gckind=GC_NORMAL) at jsgc.c:2989
 #11 js_DestroyContext (cx=0x810a3e8, mode=JSDCM_FORCE_GC)
 #12 JS_DestroyContext (cx=0x810a3e8) at jsapi.c:967
...

Revision history for this message
In , L. David Baron (dbaron) wrote :

Created attachment 219386
Analysis of TB17821431

Revision history for this message
In , L. David Baron (dbaron) wrote :

I believe these crashes are showing up in significant numbers on Windows as well (the clear reports are on Linux): although the only the first, fifth, and sixth, and eighth frames of the stack are identifiable. (I've seen stacks reliably mangled in similar ways for other crashes on Windows.)

Revision history for this message
In , Hhschwab (hhschwab) wrote :

Created attachment 219459
TB17821431 with links (in case it's deleted from the server)

don't know if it is of any use, but I like the links into LXR

Revision history for this message
In , Dveditz (dveditz) wrote :

Looks like this is missing 1.8.0.3, try 1.8.0.4

Revision history for this message
In , Dveditz (dveditz) wrote :

Minusing, no patch and a shutdown crash isn't critical enough to push hard for.

Revision history for this message
In , Hubert-hubertgajewski (hubert-hubertgajewski) wrote :

Talkback TB21571362

It's probably the same problem.

Revision history for this message
In , L. David Baron (dbaron) wrote :
Revision history for this message
In , L. David Baron (dbaron) wrote :

Actually, never mind the previous comment. The stacks are different; the ones not within XPCOM shutdown are destroying a wrapped native, not a wrapped native proto.

Revision history for this message
In , Mardeg (mardeg) wrote :

A windows user with incident - http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=26109651 - reported that disabling an extension called "My Global Search" stopped the crashing on exit. Apparently it appeared automatically after installing BearShare, and uninstalling BearShare didn't remove the malware.
References:

http://security-central.us/SafeHex/prevention.htm
http://research.sunbelt-software.com/threatdisplay.aspx?name=MyGlobalSearch.Toolbar&threatid=41891
http://www.file.net/process/mgsbar.dll.html
http://www.spyware-browser.com/items/-/9184/

Revision history for this message
Ariel (xedxgex-walla) wrote : Crash on closing

Firefox crashed as i clicked CLOSE button on the main window

Revision history for this message
Ariel (xedxgex-walla) wrote :
Revision history for this message
David Farning (dfarning) wrote :

Thanks for your bug report. Could you please install firefox-dbg and try to obtain a backtrace (or crash report) by following the instructions on https://wiki.ubuntu.com/DebuggingFirefox This will greatly aid us in tracking down your problem.

Maybe linked to #74576

Which flash package do you have installed?
Which Java package do you have installed?
Which firefox extensions do you have installed?

Thanks
David

Changed in firefox:
assignee: nobody → dfarning
status: Unconfirmed → Needs Info
Revision history for this message
David Farning (dfarning) wrote :

May be linked to Bug #74576

Revision history for this message
Sitsofe Wheeler (sitsofe) wrote :

Stack trace for previously attached crash report with debug symbols (as provided by apport-retrace with the firefox 2.0+0dfsg-0ubuntu3 and debug symbols installed).

David Farning (dfarning)
description: updated
Changed in firefox:
assignee: dfarning → nobody
status: Needs Info → Confirmed
David Farning (dfarning)
Changed in firefox:
assignee: nobody → mozillateam
importance: Undecided → Medium
David Farning (dfarning)
Changed in firefox:
assignee: mozillateam → mozilla-bugs
Changed in firefox:
importance: Medium → High
Changed in firefox:
status: Confirmed → Needs Info
Changed in firefox:
status: Needs Info → Confirmed
description: updated
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :
Changed in firefox:
status: Confirmed → In Progress
Changed in firefox:
status: Unknown → Confirmed
Revision history for this message
Alexander Sack (asac) wrote :

we haven't received any dupes for a while and in ffox 3 the code involved is different. closing this bug.

Changed in firefox:
status: In Progress → Fix Released
Revision history for this message
In , Jruderman (jruderman) wrote :

Very few of these crashes nowadays. It sounds like dbaron never identified a likely cause (except maybe the last paragraph of comment 0?).

Changed in firefox:
status: Confirmed → Invalid
Changed in firefox:
importance: Unknown → Critical
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.