QA/Talkback/Topcrash Analysis/Firefox2

« QA/Talkback/Topcrash Analysis

Part of topcrash status. See there for what this page means and how it is intended to be used.

Relevant reports:

• Firefox 2 Branch
• Firefox 2 beta 2

ntdll.dll

A substantial portion of the crashes mention Yahoo! sites, and a sample of these look like they could match bug 326344.

It also appears that an older version of Java can cause this (see bug 361805#c5 and #c9)

PL_DHashTableEnumerate

In all crashes as of 2006-09-20, the top of the stack is:

• PL_DHashTableEnumerate
• nsDOMStorage::ClearAll

These are covered by bug 353227.

0xffffff4d

In all crashes, the top 3 frames are listed as:

• 0xffffff4d
• 0x01******
• js_GC

These are covered by bug 347053, which has appeared and gone away repeatedly on both trunk and branch. The reports when it appears are from multiple users. More understanding of this crash is definitely needed.

nsCOMPtr_base::nsCOMPtr_base

These are really nsCOMPtr_base::~nsCOMPtr_base, but the tilde character is incorrectly stripped somewhere along the way.

I think most of these crashes are a known bug, but I haven't checked this for a bit. David Baron 2006-09-20

npswf32.dll (all capitalizations)

These are crashes in Flash.

FadeMenuWindows

Covered by bug 351230. Note that on 2006-09-25, all 40 crashes were from only 12 unique users.

nsSubstring::Assign

In all crashes as of 2006-09-20, these are crashes where the top of the stack is:

• nsSubstring::Assign
• ClearStorageItem

These are covered by bug 353227.

js_LookupPropertyWithFlags

As of mid September, 2006, most of the crashes have the top of the stack:

• js_LookupPropertyWithFlags
• js_LookupProperty
• js_GetProperty
• nsXPCWrappedJSClass::CallQueryInterfaceOnJSObject

These crashes are covered by bug 317283, which is probably the same underlying problem as bug 319533. David Baron attempted to fix both in mid September, but it didn't fix them all, and may not have helped any.

Detecting

As of mid September, 2006, most of the crashes have the top of the stack:

• Detecting
• (js_LookupPropertyWithFlags)
• js_LookupProperty
• js_GetProperty
• nsXPCWrappedJSClass::CallQueryInterfaceOnJSObject

These crashes are covered by bug 319533, which is probably the same underlying problem as bug 317283. David Baron attempted to fix both in mid September, but it didn't fix them all, and may not have helped any.

PL_DHashTableOperate

As of mid September 2006, most of the crashes have the top of the stack:

• PL_DHashTableOperate
• (nsDOMClassInfo::UnsetExternallyReferenced)
• (nsImageLoadingContent::UnpreserveLoadHandlers)
• nsHTMLImageElement::~nsHTMLImageElement

These are covered by bug 353021.