opened bonsai.mozilla.org did a query on all checkins in the last week (over 105 people, very long list) did a Find on Page got a "running low on VM" message, then got this crash: memcpy(unsigned char * 0x00000000, unsigned char * 0x03d576f8, unsigned long 8192) line 171 nsStorageStream::Write(nsStorageStream * const 0x03a46c34, char * 0x03d576f8, unsigned int 8192, unsigned int * 0x0012fbcc) line 167 + 20 bytes MemCacheWriteStreamWrapper::Write(MemCacheWriteStreamWrapper * const 0x03a6ecf0, char * 0x03d576f8, unsigned int 8192, unsigned int * 0x0012fbcc) line 285 + 38 bytes CacheOutputStream::Write(CacheOutputStream * const 0x03a6ed30, char * 0x03d576f8, unsigned int 8192, unsigned int * 0x0012fbcc) line 75 + 38 bytes InterceptStreamListener::write(char * 0x03d576f8, unsigned int 8192) line 1141 InterceptStreamListener::Read(InterceptStreamListener * const 0x03a6eba4, char * 0x03d576f8, unsigned int 8192, unsigned int * 0x0012fcb4) line 1128 + 21 bytes nsParser::OnDataAvailable(nsParser * const 0x03d0bd34, nsIChannel * 0x03a32690, nsISupports * 0x00000000, nsIInputStream * 0x03a6eba4, unsigned int 0, unsigned int 8192) line 1328 + 30 bytes nsDocumentOpenInfo::OnDataAvailable(nsDocumentOpenInfo * const 0x03a33ef0, nsIChannel * 0x03a32690, nsISupports * 0x00000000, nsIInputStream * 0x03a6eba4, unsigned int 0, unsigned int 8192) line 192 + 46 bytes InterceptStreamListener::OnDataAvailable(InterceptStreamListener * const 0x03a6eba0, nsIChannel * 0x03a32690, nsISupports * 0x00000000, nsIInputStream * 0x03a69bd8, unsigned int 0, unsigned int 8192) line 1113 nsHTTPResponseListener::OnDataAvailable(nsHTTPResponseListener * const 0x03a69b70, nsIChannel * 0x03a47af4, nsISupports * 0x03a32690, nsIInputStream * 0x03a69bd8, unsigned int 1050624, unsigned int 8192) line 195 + 58 bytes nsOnDataAvailableEvent::HandleEvent(nsOnDataAvailableEvent * const 0x04b5d4e0) line 370 nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x04b5d530) line 93 + 12 bytes PL_HandleEvent(PLEvent * 0x04b5d530) line 522 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x010eb830) line 483 + 9 bytes _md_EventReceiverProc(void * 0x00ee063a, unsigned int 49445, unsigned int 0, long 17741872) line 951 + 9 bytes I have no reason to be running low on VM, I don't have much running and I have tons of memory. The inputs to nsStorageStream::Write() look fine, but mWriteCursor is null (this is never checked anywhere in this method, should be a precondition that it is not null because the code clearly expects it to point to something rational.) At a minimum, this code should get some assertions making sure reasonable values are computed and pointers aren't null.

I assume dougt is the owner of xpcom/io

warren, did you fix this? http://cvs-mirror.mozilla.org/webtools/bonsai/cvsview2.cgi?diff_mode=context&wh itespace_mode=show&subdir=mozilla/xpcom/io&command=DIFF_FRAMESET&file=nsStorage Stream.cpp&rev1=1.8&rev2=1.9&root=/cvsroot assign back if you did not, but I think you may have.

This is a dup, and was fixed a few days ago.

Adding crash keyword