User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.9pre) Gecko/20071025 BonEcho/2.0.0.9pre Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.9pre) Gecko/20071025 BonEcho/2.0.0.9pre I have about 32 windows, with 246 tabs open in my profile. Reproducible: Sometimes Steps to Reproduce: 1.Try to restore a massive session 2.Sometimes, firefox just crash. Actual Results: Sometimes firefox crashes. Expected Results: Session restoration FF was working fine until build 2007090703. Versions since 2007090703 crashes most of the time at startup (restoring my massive session). I use a lot of extensions, but I can confirm that going back to that FF build worked fine. If I disable extensions, FF still crashes, but less often.

Talkback TB37342436Q: Stack Signature 0x50202020 b0de39b8 Product ID Firefox2 Build ID 2007102503 Trigger Time 2007-10-25 04:24:45.0 Platform LinuxIntel Operating System Linux 2.6.13-15.18-smp Module URL visited User Comments Since Last Crash 0 sec Total Uptime 0 sec Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) Source File, Line No. N/A Stack Trace 0x50202020 js_MarkGCThing() [mozilla/js/src/jsgc.c, line 2452] gc_sharp_table_entry_marker() [mozilla/js/src/jsobj.c, line 668] JS_HashTableEnumerateEntries() [mozilla/js/src/jshash.c, line 367] js_GCMarkSharpMap() [mozilla/js/src/jsobj.c, line 697] js_GC() [mozilla/js/src/jsgc.c, line 2949] js_NewGCThing() [mozilla/js/src/jsgc.c, line 1421] js_NewObject() [mozilla/js/src/jsobj.c, line 2415] js_CloneFunctionObject() [mozilla/js/src/jsfun.c, line 2179] JS_CloneFunctionObject() [mozilla/js/src/jsapi.c, line 3574] xpc_CloneJSFunction() [mozilla/js/src/xpconnect/src/xpcwrappednativeinfo.cpp, line 904] DefinePropertyIfFound() [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 455] XPC_WN_NoHelper_Resolve() [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1854] js_LookupPropertyWithFlags() [mozilla/js/src/jsobj.c, line 3308] js_LookupProperty() [mozilla/js/src/jsobj.c, line 3166] XPC_WN_Shared_Enumerate() [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 703] js_Enumerate() [mozilla/js/src/jsobj.c, line 4057] JS_Enumerate() [mozilla/js/src/jsapi.c, line 3225] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 466] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] js_EnterSharpObject() [mozilla/js/src/jsobj.c, line 566] js_obj_toSource() [mozilla/js/src/jsobj.c, line 734] js_Invoke() [mozilla/js/src/jsinterp.c, line 1375] js_Interpret() [mozilla/js/src/jsinterp.c, line 3947] js_Invoke() [mozilla/js/src/jsinterp.c, line 1394] nsXPCWrappedJSClass::CallMethod() [mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 1453] nsXPCWrappedJS::CallMethod() [mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 468] PrepareAndDispatch() [mozilla/xpcom/reflect/xptcall/src/md/unix/xptcstubs_gcc_x86_unix.cpp, line 100] nsTimerImpl::Fire() [mozilla/xpcom/threads/nsTimerImpl.cpp, line 403] handleTimerEvent() [mozilla/xpcom/threads/nsTimerImpl.cpp, line 462] PL_HandleEvent() [mozilla/xpcom/threads/plevent.c, line 689] PL_ProcessPendingEvents() [mozilla/xpcom/threads/plevent.c, line 623] nsEventQueueImpl::ProcessPendingEvents() [mozilla/xpcom/threads/nsEventQueue.cpp, line 452] event_processor_callback() [mozilla/widget/src/gtk2/nsAppShell.cpp, line 67] libglib-2.0.so.0 + 0x5215f (0x4065515f) libglib-2.0.so.0 + 0x2835c (0x4062b35c) libglib-2.0.so.0 + 0x2b7cb (0x4062e7cb) libglib-2.0.so.0 + 0x2bae7 (0x4062eae7) libgtk-x11-2.0.so.0 + 0x12e861 (0x40305861) nsAppShell::Run() [mozilla/widget/src/gtk2/nsAppShell.cpp, line 141] nsAppStartup::Run() [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152] XRE_main() [mozilla/toolkit/xre/nsAppRunner.cpp, line 2725] main() [mozilla/browser/app/nsBrowserApp.cpp, line 62] libc.so.6 + 0x14ea0 (0x40aaaea0)

Jesus, what extensions do you have installed? You say that since 2007090703 you get these crashes, so do you mean you started to see the crashes in the 2007-09-08 branch build? Otherwise, it would be great if you could find out a regression range for this: http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/ Also, it might be useful to get a few extra talkback ID's.

Yes, I got crashes since 2007-09-08. I have a lot of extensions, disabling "Yslow" convert a "always crash" to "50% chance of crashing". Disabling ALL extensions crashes also, although the ocurrence probability is far lower. A couple of additional TB: TB37349496H and TB37343512H. Seems to crash in the same code.

My extension list: BugMeNot 1.3 Diccionario de Español/España 1.1 DOM Inspector 1.8.1.9pre Download Statusbar 0.9.5.1 DownThemAll! 0.9.9.10 Firebug 1.05 Forecastfox 0.9.6 Greasemonkey 0.7.20070607.0 [DISABLED] Live HTTP Headers 0.13.1 Mozilla Quality Extension 0.1.5 Nightly Tester Tools 1.3b1 PwdHash 1.1 repagination 2006.4.5 Session Manager 0.6.1.5 Stylish 0.5.3 Tab Clicking Options 0.6.8 Talkback 2.0.0.9pre translator 1.0.4.3 Update Channel Selector 1.0.2 User Agent Switcher 0.6.10 Web Developer 1.1.4 YSlow 0.8.0 [DISABLED] I insists: if I disable all extensions, I still get crashes (just more unusual). Extensions are the same that I was using in 2007090703 build, and there firefox was working fine.

Until we can narrow this down I think its presumptive to hold the respin for it. Moving blocking request to 1.8.1.10, but we need to get this confirmed. We're not seeing a particular spike in crashes with this kind of stack. qawanted: check for instability especially with YSlow installed.

Can I do anything to help to triage this bug?. It is a real showstop for me.

Your time range doesn't make a lot of sense, here's what was checked in between Sept 7 and Sept 8 on the 1.8 branch: http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=MOZILLA_1_8_BRANCH&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2007-09-07&maxdate=2007-09-08+08%3A00&cvsroot=%2Fcvsroot It's all calendar and locale stuff that wouldn't have any bearing on this kind of crash. Are you sure about those dates?

Tomorrow I will check build by build. I'm very interested in that this bug be resolved.

I just skip my bedtime to identify the exact build where the regression was introduced. My session has 32 windows, with 206 tabs open. A complete session restore takes about 12-15 minutes, so this procedure was fairly time-intensive. I used binary-search. Build 2007102503: Crash: TB37371051W Build 2007100103: Crash: TB37371234Y Build 2007091603: Crash: TB37371576H and TB37373055Q Build 2007091503: WORKS FINE (five restarts so far) Build 2007091303: WORKS FINE (two restarts so far) Build 2007091003: WORKS FINE (two restarts so far) So, build 2007091503 worked fine, and build 2007091603 and newer crash. I'm not sure about patches included in each build. Hope this info be useful. I rather prefer do not compile FF myself, but I'm available to try modified binaries if necessary. Can I do anything else to help?. 08:34 in Spain. I rather go to bed now...

The TB37373055Q seems a bit different: js_GetGCThingFlags() [mozilla/js/src/jsgc.c, line 492] MarkGCThingChildren() [mozilla/js/src/jsgc.c, line 2085] js_MarkGCThing() [mozilla/js/src/jsgc.c, line 2452] gc_sharp_table_entry_marker() [mozilla/js/src/jsobj.c, line 668] JS_HashTableEnumerateEntries() [mozilla/js/src/jshash.c, line 367] js_GCMarkSharpMap() [mozilla/js/src/jsobj.c, line 697] js_GC() [mozilla/js/src/jsgc.c, line 2953] js_NewGCThing() [mozilla/js/src/jsgc.c, line 1421] js_NewString() [mozilla/js/src/jsstr.c, line 2442] JS_NewStringCopyZ() [mozilla/js/src/jsapi.c, line 4489] nsXPCComponents_Results::NewEnumerate() [mozilla/js/src/xpconnect/src/xpccomponents.cpp, line 963] XPC_WN_JSOp_Enumerate() [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1205] JS_Enumerate() [mozilla/js/src/jsapi.c, line 3249] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 466] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] MarkSharpObjects() [mozilla/js/src/jsobj.c, line 505] js_EnterSharpObject() [mozilla/js/src/jsobj.c, line 566] js_obj_toSource() [mozilla/js/src/jsobj.c, line 734] js_Invoke() [mozilla/js/src/jsinterp.c, line 1375] js_Interpret() [mozilla/js/src/jsinterp.c, line 3947] js_Invoke() [mozilla/js/src/jsinterp.c, line 1394] nsXPCWrappedJSClass::CallMethod() [mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 1453] nsXPCWrappedJS::CallMethod() [mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 468] PrepareAndDispatch() [mozilla/xpcom/reflect/xptcall/src/md/unix/xptcstubs_gcc_x86_unix.cpp, line 100] nsTimerImpl::Fire() [mozilla/xpcom/threads/nsTimerImpl.cpp, line 403] handleTimerEvent() [mozilla/xpcom/threads/nsTimerImpl.cpp, line 462] PL_HandleEvent() [mozilla/xpcom/threads/plevent.c, line 689] PL_ProcessPendingEvents() [mozilla/xpcom/threads/plevent.c, line 623] nsEventQueueImpl::ProcessPendingEvents() [mozilla/xpcom/threads/nsEventQueue.cpp, line 452] event_processor_callback() [mozilla/widget/src/gtk2/nsAppShell.cpp, line 67] libglib-2.0.so.0 + 0x5215f (0x4065515f) libglib-2.0.so.0 + 0x2835c (0x4062b35c) libglib-2.0.so.0 + 0x2b7cb (0x4062e7cb) libglib-2.0.so.0 + 0x2bae7 (0x4062eae7) libgtk-x11-2.0.so.0 + 0x12e861 (0x40305861) nsAppShell::Run() [mozilla/widget/src/gtk2/nsAppShell.cpp, line 141] nsAppStartup::Run() [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152] XRE_main() [mozilla/toolkit/xre/nsAppRunner.cpp, line 2725] main() [mozilla/browser/app/nsBrowserApp.cpp, line 62] libc.so.6 + 0x14ea0 (0x40aaaea0)

(In reply to comment #9) > Build 2007091603: Crash: TB37371576H and TB37373055Q > Build 2007091503: WORKS FINE (five restarts so far) Checkins on branch MOZILLA_1_8_BRANCH between 2007-09-15 02:00 and 2007-09-16 04:00 : http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=MOZILLA_1_8_BRANCH&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2007-09-15+02&maxdate=2007-09-16+04&cvsroot=%2Fcvsroot One Mail checkin and two Calendar checkins? (!)

Since I backed out (in my local installation) patch in bug 367605, that created bug 401113, I can't reproduce this bug either. So the bug seems to be really in the Javascript engine from long, but patch for bug 367605 triggers it now.

Won't make FF2.0.0.9, see bug 401113 comment 10

the fix for bug 401113 has been checked in now, does that fix this crash? Clearing nomination because we don't know what else to do if it doesn't fix your problem.

Sounds like that fixed the problem for Jesus.

Issue is Resolved - removing QA-Wanted Keywords - QA-Wanted query clean-up task