842101 - crash in ConstructSlimWrapper

Status: RESOLVED WORKSFORME

(Core :: XPConnect, defect)

Description

[Wayne Mery (:wsmwk)]

#29 crash for TB17.0.2
appears to be a regression in tb16. perhaps from Bug 762436 

This bug was filed from the Socorro interface and is 
report bp-846e1d79-55d4-4fb3-b5ac-c6b2e2130202 .
0	xul.dll	ConstructSlimWrapper	js/xpconnect/src/XPCWrappedNative.cpp:3734
1	xul.dll	XPCConvert::NativeInterface2JSObject	js/xpconnect/src/XPCConvert.cpp:873
2	xul.dll	xpc_qsXPCOMObjectToJsval	js/xpconnect/src/XPCQuickStubs.cpp:1007
3	xul.dll	nsIDOMDocument_GetElementById	objdir-tb/mozilla/js/xpconnect/src/dom_quickstubs.cpp:3244
4	mozjs.dll	js::InvokeKernel	js/src/jsinterp.cpp:352 

peterv@51515 3731 nsISupports *identityObj = aHelper.GetCanonical();
peterv@51515 3732 nsXPCClassInfo *classInfoHelper = aHelper.GetXPCClassInfo();
peterv@40489 3733
ms2ger@102191  3734    XPCNativeScriptableFlags flags(classInfoHelper->GetScriptableFlags());

Comment 1

[Wayne Mery (:wsmwk)]

no correlations listed in https://crash-analysis.mozilla.com/crash_analysis/20130216/20130216_Thunderbird_17.0.2-interesting-addons.txt

and no extensions listed in many user crashes
bp-cdc3ce76-9e2a-4413-951c-e5f4b2130201
bp-b429e498-1db1-48ed-a59d-596e52130203

Comment 2

[:Ms2ger (he/him; ⌚ UTC+1/+2)]

Sorry, that doesn't make sense, I didn't realize this crash was much older than bug 830879. Bug 762436 doesn't seem like it can be related either, though.

Comment 3

[Boris Zbarsky [:bzbarsky]]

Looks like a null-deref of classInfoHelper.

How are we getting in there with a null classInfoHelper, though?

Comment 4

[Wayne Mery (:wsmwk)]

typical comment for this crash

1. When I am composing an email, it displays a message in the status area that it is copying the email to the Drafts older
2. When I send the email, it is unable to copy it to the Sent folder.
3. Emails cannot be deleted from the In-Tray, either directly or by >Tools>Delete Mail marked as Junk in Folder

Comment 5

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

I'm marking this bug as WORKSFORME as bug crashlog signature didn't appear from a long time (over half year) [except some obsolete <18 versions, no crashes starting since 18 version].