M098 has turned up more than 50 crashes at this signature. All of the users who comment mention a crash at startup. There are at least 4 unique stacks that go with this signature (attachment in comment #1). The two most common stacks resemble the one below. This bug may need a component reassignment. Count Platform List 4 Windows NT 5.0 build 2195 4 Windows 98 4.10 build 67766446 3 Windows 98 4.10 build 67766222 1 Windows NT 4.0 build 1381 No of Unique Users 10 0x10101010 js_GetSlotThreadSafe [d:\builds\seamonkey\mozilla\js\src\jslock.c line 561] JS_GetPrivate [d:\builds\seamonkey\mozilla\js\src\jsapi.c line 1903] nsJSContext::ExecuteScript [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp line 834] nsXULDocument::ExecuteScript [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp line 6207] nsXULDocument::LoadScript [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp line 5998] nsXULDocument::ResumeWalk [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp line 5777] nsXULDocument::EndLoad [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp line 1681] XULContentSinkImpl::DidBuildModel [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULContentSink.cpp line 537] nsExpatDriver::DidBuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\nsExpatDriver.cpp line 842] nsParser::DidBuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp line 1388] nsParser::ResumeParse [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp line 1906] nsParser::OnStopRequest [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp line 2524] nsDocumentOpenInfo::OnStopRequest [d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp line 254] nsJARChannel::OnStopRequest [d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp line 614] nsOnStopRequestEvent::HandleEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp line 213] PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c line 591] PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c line 524] _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c line 1072] KERNEL32.DLL + 0x24407 (0xbff94407) 0x00648c16 (3135611) URL: www.prophetie.goa.com (3091012) URL: slashdot.org (3051138) URL: xulplanet.com (3051138) Comments: Starting the browser. (2917477) Comments: Double click icon on desktop (Windows 2000) caused crash

These are all of the stacks coming in under this signature. Only the first seems directly related to the initial stack.

Adding crash, topcrash keywords because this one is showing up in M098 topcrash reports. Adding qawanted to see if we can find someone who can reproduce this one.

nominating topcrash bugs for nsbeta1.

stephend crashed here and passed along this TB data to me

Updating summary with 0x10101010 since that is the actual stack signature this crash is being reported under.

Updating the summary with M099 and Trunk. Also removing startup from summary because I don't think this is just a startup crash. There was a spike in crashes with 3/15 MozillaTrunk builds...and there have only been a few crashes since then. Not sure what's going on there...but here is the most recent incident on the Trunk: Incident ID 4226110 Stack Signature 0x10101010 506b06ee Trigger Time 2002-03-19 12:09:46 Email Address URL visited Build ID 2002031809 Product ID MozillaTrunk Platform Operating System Win32 Module Trigger Reason Access violation User Comments closing email window Stack Trace 0x10101010 js_GetSlotThreadSafe [d:\builds\seamonkey\mozilla\js\src\jslock.c, line 562] JS_GetPrivate [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 1913] nsJSContext::ExecuteScript [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 824] nsXULDocument::ExecuteScript [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 6196] nsXULDocument::LoadScript [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 5988] nsXULDocument::ResumeWalk [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 5767] nsXULDocument::OnStreamComplete [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 6154] nsStreamLoader::OnStopRequest [d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamLoader.cpp, line 163] nsJARChannel::OnStopRequest [d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp, line 601] nsOnStopRequestEvent::HandleEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp, line 213] PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591] PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 524] _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 1072] nsAppShellService::Run [d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 309] main1 [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1366] main [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1701] WinMain [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1719] WinMainCRTStartup() KERNEL32.DLL + 0x17d08 (0x77e97d08) Taking a shot at a different component to see if anyone can point this bug in the right direction.

changing component again and assigning to respective owners...please correct me if i got the wrong component.

There haven't been any crashes with this stack signature since 3/20. If no one is able to reproduce this, I'm going to mark this worksforme in a couple of days if we don't see any more crashes in Talkback data. Do we know of any checkins that went in on 3/20 that might have fixed this crash?

I guess this crash is still around...there are a few incidents after 3/20. Cc'ing blaker to see if he can reproduce this still (Talkback data shows that he has crashed a lot with this stack signature in the past). Here is a recent crash on Linux (changing OS to All): Incident ID 4599799 Stack Signature 0x10101010 4bc567f2 Trigger Time 2002-03-29 03:49:02 Email Address URL visited http://www.gap.com Build ID 2002032521 Product ID MozillaTrunk Platform Operating System LinuxIntel Module Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) User Comments after reading my mail, I dismissed the mail window. Then, tried to load www.gap.com Stack Trace 0x10101010 JS_GetPrivate() nsJSContext::ExecuteScript() nsXULDocument::ExecuteScript() nsXULDocument::LoadScript() nsXULDocument::ResumeWalk() nsXULDocument::OnStreamComplete() nsStreamLoader::OnStopRequest() nsJARChannel::OnStopRequest() nsOnStopRequestEvent::HandleEvent() nsARequestObserverEvent::HandlePLEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xeaca (0x4036baca) libglib-1.2.so.0 + 0x10186 (0x4036d186) libglib-1.2.so.0 + 0x10751 (0x4036d751) libglib-1.2.so.0 + 0x10804 (0x4036d804) nsAppShell::DispatchNativeEvent() nsXULWindow::CreateNewContentWindow() nsXULWindow::CreateNewWindow() nsWindowCreator::CreateChromeWindow() nsWindowWatcher::OpenWindowJS() nsWindowWatcher::OpenWindow() GlobalWindowImpl::OpenInternal() GlobalWindowImpl::Open() XPTC_InvokeByIndex() XPCWrappedNative::CallMethod() XPC_WN_CallMethod() js_Invoke() js_Interpret() js_Invoke() js_InternalInvoke() JS_CallFunctionValue() nsJSContext::CallEventHandler() nsJSEventListener::HandleEvent() nsEventListenerManager::HandleEventSubType() nsEventListenerManager::HandleEvent() GlobalWindowImpl::HandleDOMEvent() DocumentViewerImpl::LoadComplete() nsDocShell::EndPageLoad() nsWebShell::EndPageLoad() nsDocShell::OnStateChange() nsDocLoaderImpl::FireOnStateChange() nsDocLoaderImpl::doStopDocumentLoad() nsDocLoaderImpl::DocLoaderIsEmpty() nsDocLoaderImpl::OnStopRequest() nsLoadGroup::RemoveRequest() imgRequestProxy::OnStopRequest() imgRequest::OnStopRequest() ProxyListener::OnStopRequest() nsStreamListenerTee::OnStopRequest() nsHttpChannel::OnStopRequest() nsOnStopRequestEvent::HandleEvent() nsARequestObserverEvent::HandlePLEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xeaca (0x4036baca) libglib-1.2.so.0 + 0x10186 (0x4036d186) libglib-1.2.so.0 + 0x10751 (0x4036d751) libglib-1.2.so.0 + 0x108f1 (0x4036d8f1) libgtk-1.2.so.0 + 0x8c5b9 (0x402915b9) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x189cb (0x4045f9cb)

I can reproduce this fairly easily using turbo mode - just shut down mail and restarting with browser causes it fairly often. It may have to do with starting the browser before mail has finished closing the window...

This bug was Non Reproducible on the 4-10-20002 build.

Talkback data is showing this one as the #2 crasher in the M1.0 branch builds and has 10 incidents in the Trunk data in the past ten days. Bienvenu, can you still reproduce this one? The few comments, again, point to a startup crash: M100 (0x01101010): 24 (5288981) - [Windows NT 5.0 build 2195] (Build 2002041308): restart 2002041109 (5203238) - 2002-04-14 URL: www.rozsamh.hu Linux 2.4.10-4GB Trunk (0x01101010): 10 (5080267) - [Windows NT 4.0 build 1381] (Build 2002041011): shutdown and restart again immediately (5310227) - [Windows NT 4.0 build 1381] (Build 2002041106): Open browser (5042138) - [Linux 2.2.17-21mdk] (Build 2002041006): restarting it after switching to German language pack

I was able to recreate this in mountain view where I have a relatively slow machine (450MHz) by closing down and restarting quickly (though I think I was in turbo mode at the time). I'll try it with my machine here, but it's much faster so if it's a problem with starting up while still shutting down, it will be harder to reproduce on a fast machine.

Both Yulian and I have crashed here (for some reason, Talkback didn't come up on her NT 4.0 system). See http://climate.netscape.com/reports/SingleIncidentInfo.cfm?dynamicBBID=5618996

Adding 0x10101010 signature and M1RC1 to the summary. Stephen / Yulian can you reproduce the crash?

StephenD's comment in the talkback incident sound like he and Yulian were both able to repro with the same steps. * news://news.mozilla.org/netscape.public.test * Enter an incorrect server when asked to complete the Profile Wizard. * Hit finish. * Remove the account * Re-add the account and do this again. I haven't been able to crash yet with these steps, but I get some odd behavior in the text input fields.

Tom, one of my crashes was this bug's stack, but the other was bug 140181, sorry.

Correcting summary...this crash is occurring under both the 0x01101010 and 0x10101010 stack signature...and the stacks either have js_GetSlotThreadSafe or JS_GetPrivate a few frames down.

This would appear to be exactly the same issue as bug 132216. The stack is virtually identical, and this would also appear to be a result of a garbage JSObject in the XUL cache. Please reopen if you disagree. *** This bug has been marked as a duplicate of 132216 ***

verifying