Closed Bug 116038 Opened 23 years ago Closed 22 years ago

Crash after dynamic theme switching. - Trunk M098 [@ nsTemplateRule::GetContent][@ nsRuleNode::GetPresContext | 0xf98b5708 ]

Categories

(Core Graveyard :: Skinability, defect)

Product:
Core Graveyard
Component:
Skinability
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
VERIFIED FIXED
Milestone:
mozilla1.2alpha

People

(Reporter: jlarsen, Assigned: bugzilla)

References

(
URL
)

Details

(4 keywords, Whiteboard: [driver:shaver])

Crash Data

Attachments

(5 files, 2 obsolete files)

crash log feb 06
170.70 KB, text/plain
Details
M098 crashes for nsRuleNode::GetPresContext
21.96 KB, text/plain
Details
Stack traces
9.27 KB, text/plain
Details
screenshot to go with comment 43
47.35 KB, image/png
Details
fix that handles null mScrollbar properly
8.20 KB, patch
bzbarsky
: review+
hyatt
: superreview+
asa
: approval+
Details | Diff | Splinter Review 
This should probably be 3 bugs. But I wasn't sure.
2001121803
1. Use view/apply theme/classic(or modern) to switch your theme.
2. Notice that scrollbars are gone. 
3. Click on screen to get focus (this is another existing bug I believe)
4. Hit ctrl-n to open new window.
5. Computer acts as if its opening a new window, but doesn't.
6. Switch back to the previus theme.
7. Crash
(it will only crash if you try to open new window, if you don't get focus, and
therefor it doesn't try, it won't crash)
Talkback ID: TB679600X
Reporter: Please change the severity level to "critical". Thanks.

Svante are you seeing this also?
Severity: normal → critical
Bug 106596 is probably related. I just had a crash too as I switched themes. I
had two mozilla windows open, which might be the triggering factor.

Talkback ID: TB688252W
Confirming crash on Linux 2001121908 after changing themes forth and back
several times with two windows and several tabs open, without going through
steps 3-5. Talkback ID TB690014W.

Please add "crash" keyword.
Keywords: crash
Ran into this using commercial:
2001-12-19-11-trunk/ on Nt 4.0 and
2001-12-19-08-trunk/ on linux 2.2.

Though my steps to reproduce aren't the same as this
bug or bug 106596

On linux build. the crash was just random. 
-Started browser in modern. 
-have messenger up or not
-page was on default netscape page
-switched to classic theme
-switched back to modern
-crash

TB ID TB690669X, TB691616X

On windows, I can reproduce it real easy:
-Start browser in modern theme
-enter url www.jeep.com
-switch themes
-crash

TB690410W, TB690241Q

In both windows/linux stack trace was the same even though
steps to reproduce were diferent:
sTemplateRule::GetContent 
 [d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp, line 
63]
     
nsStyleContext::Destroy 
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1292]
     
nsStyleContext::Release 
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191]
     
nsStyleContext::~nsStyleContext
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 182]
     
nsStyleContext::`scalar
   deleting destructor'                                   
nsStyleContext::Destroy 
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1296]
     
nsStyleContext::Release 
 [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191]
     
nsStyleContext::~nsStyleContext
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 182]

nsStyleContext::`scalar
deleting destructor' 
nsStyleContext::Destroy 
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1296]
nsStyleContext::Release 
   [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191]
     
nsStyleContext::~nsStyleContext
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 182]
     
nsStyleContext::`scalar
deleting destructor' 
                                   
     
nsStyleContext::Destroy 
 [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1296]
     
nsStyleContext::Release 
  [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191]
     
nsFrame::~nsFrame 
 [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrame.cpp, line 289]
     
nsFormFrame::~nsFormFrame 
 [d:\builds\seamonkey\mozilla\layout\html\forms\src\nsFormFrame.cpp, line 153]
     
nsFormFrame::`scalar deleting
destructor' 
                                     
nsFrame::Destroy 
   [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrame.cpp, line 472]
     
0x01fdd010 
                                   
     
docshell.dll + 0x10498
   (0x60140498) 
                                   
     
nsWebShell::AddRef 
                                   
0xd77ce924 



I'm seeing this on WinME 2001121909.  Switch themes causes a crash nearly every
time.  One time it crashed the whole OS (True it's WinME, but still).
TB690381Z
TB690191H
Status: UNCONFIRMED → NEW
Ever confirmed: true
this looks like hyatt's thing.  See also bug 116254
Assignee: ben → hyatt
Well none of these things seem to be happening now with 2001122003 for windows?
Anyone seeing crashes with these builds. Though I am seeing the URL bar mess up
with themeswitching, I'll wait till tomorrows build and retest.
It's much better with 2001122003 on WinME.  However I was still able to get
crashes in GKLAYOUT.DLL.  It seems to be related to some race condition like
drawing while changing themes.  For example, having a Chatzilla window open, or
changing themes while a slow page is downloading seemed to make a crash more
likely.  For some reason, I didn't get a talkback window after the crashes.
johnlar, I don't see crashing anymore on today's commercial trunk build (2001-20-
04-trunk). Yes, the URL location bar and the toolbars in composer are messed up
because of theme switching.

*** Bug 116254 has been marked as a duplicate of this bug. ***
> 2. Notice that scrollbars are gone. 

Just a quick note, this is bug 115943, now fixed.


*** Bug 116747 has been marked as a duplicate of this bug. ***
I can still repro at jeep.com on commercial builds:

win 2001-12-26-06-trunk
linux 2001-12-26-06-trunk
mac 2001-12-26-04-trunk
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla0.9.8
easy way to reproduce (win98 2002010403)
open http://www.priceline.com wait page to complete
apply modern theme
apply modern theme again
crash
see tb1275471z,tb1275277e,tb1275219h
The crash seen in comment #15 happens in Linux 2002010308 also, talkback
TB1276924W. Should be OS=all.
Adding topcrash keyword and Trunk [@ nsTemplateRule::GetContent] to
summary...this is a topcrasher with recent MozillaTrunk builds:

nsTemplateRule::GetContent   41 
BBID range: 1128050 - 1413047
Min/Max Seconds since last crash: 38 - 116602
Min/Max Runtime: 38 - 117549
Crash data range: 2002-01-01 to 2002-01-08
Build ID range: 2002010110 to 2002010810
Keyword List : theme(9), 
Stack Trace: 

	 nsTemplateRule::GetContent
[d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp  line 63]
	 nsStyleContext::Destroy
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 1292]
	 nsStyleContext::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 191]
	 nsStyleContext::~nsStyleContext
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 182]
	 nsStyleContext::`scalar deleting destructor'
	 nsStyleContext::Destroy
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 1296]
	 nsStyleContext::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 191]
	 nsStyleContext::~nsStyleContext
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 182]
	 nsStyleContext::`scalar deleting destructor'
	 nsStyleContext::Destroy
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 1296]
	 nsStyleContext::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 191]
	 nsStyleContext::~nsStyleContext
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 182]
	 nsStyleContext::`scalar deleting destructor'
	 nsStyleContext::Destroy
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 1296]
	 nsStyleContext::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 191]
	 nsStyleContext::~nsStyleContext
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 182]
	 nsStyleContext::`scalar deleting destructor'
	 nsStyleContext::Destroy
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 1296]
	 nsStyleContext::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 191]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1795]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1725]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1725]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1725]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1926]
	 FrameManager::ComputeStyleChangeFor
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 2187]
	 PresShell::ReconstructStyleData
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5409]
	 PresShell::StyleSheetRemoved
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5436]
	 nsDocument::UpdateStyleSheets
[d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp  line 1376]
	 nsChromeRegistry::RefreshWindow
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp  line 1334]
	 nsChromeRegistry::RefreshWindow
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp  line 1208]
	 nsChromeRegistry::RefreshSkins
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp  line 1161]
	 XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp 
line 106]
	 XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp  line 2011]
	 XPC_WN_CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp 
line 1267]
	 js_Invoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 834]
	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 2799]
	 js_Invoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 850]
	 js_InternalInvoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 925]
	 JS_CallFunctionValue
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3407]
	 nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 1014]
	 nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp  line 182]
	 nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
1206]
	 nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
2198]
	 nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3449]
	 nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3468]
	 nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3468]
	 nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3468]
 
 	Source File :
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/content/xul/templates/src/nsTemplateRule.cpp
line : 63
     (1413047)	Comments: switching from modern to classic theme. originally loaded with
LittleMozilla
     (1408780)	URL: www.ebay.com
(1408780)
Comments: Changing Display settings under Windows XP.
     (1406407)	Comments: Crash occured when switching the Windows theme (not the Mozilla
skin) in Windows XP.
     (1403871)	Comments: turbo on and selecting a different profile
     (1352992)	URL: forums.somethingawful.com
     (1352992)	Comments: I clicked on a link.
     (1352701)	URL: www.arstechnica.com
(1352701)
Comments: Switched themes twice in rapid succession
     (1343642)	URL: www.span.com
(1343642)
Comments: Closing a tab in the navigator  then straight after that attempting to
open the side bar by means of going to the left frame of the window to drag open
the sidebar
     (1310672)	URL: themes.org
     (1310672)	Comments: clicked on the "mozilla" link to view themes for mozilla. moz crashed.
     (1310254)	Comments: i entered the search term "computer" into the search sidebar and
initiated the search using google. moz then crashed.
     (1275108)	Comments: Changing theme
     (1270897)	URL: www.law.indiana.edu/car
(1270897)
Comments: Messing with view/select theme- changed from modern to classic (to see
WinXP theme)- opened preferences  opened a few categories (to see outliner)-
used view/theme/modern to switch back to modern theme.there was a long pause
then moz crashed.
     (1218498)	Comments: applying the LittleMozilla theme from Themes.org
     (1188663)	Comments: theme switch crash bug 116038
     (1143380)	Comments: theme switch crash bug 116038
Keywords: topcrash
Summary: Crash after dynamic theme switching. → Crash after dynamic theme switching. - Trunk [@ nsTemplateRule::GetContent]
Target Milestone: mozilla0.9.8 → mozilla0.9.9
Seeing this same stack as comment #5 with a different signature, same theme 
changing leading to the crash. Adding the signature to the summary for tracking.
Summary: Crash after dynamic theme switching. - Trunk [@ nsTemplateRule::GetContent] → Crash after dynamic theme switching. - Trunk [@ nsTemplateRule::GetContent][@ nsRuleNode::GetPresContext]
We have an internal crasher who is able to repro the stack with the 
nsRuleNode::GetPresContext signature on the 2002012309 build for Win2K. His 
steps are:
- Current Skin - Modern 
- Changed Skin to Modern (same skin) - OK 
- Changed Skin to Modern (same skin) - OK 
- Changed Skin to Modern (same skin) - Crashed
 
I experienced a crash when I clicked the History tab, after switching from
"LittleMozilla" to the Classic theme on release 0.9.8 for 32 bit Windows 
(Windows 98).
Ronald, can you give us a talkback incident ID? (Go to the 'components' 
directory in your M098 installation and click on 'talkback.exe'. You will get a 
list of your crash incident numbers.)
Attached file crash log feb 06 — 
Crash with build 2002020405, using Mac OS 9.1. Steps to reproduce: Go to www1
(or www2, www3).nameplanet.com/mail
open View - Apply Theme. Switch Theme twice and mozilla crashes. It doesn't
matter from what theme you switch - all combinations causes Mozilla to crash.
The crash above happend when I had Modern Theme choosed Classic, choosed
Modern. Different error alert messages appear (type 1, type 3, type 10) with
different crashes (Crash above resulted in alert box with error type 3).
Marking Platform, OS -> All based on comment 22.
OS: Windows 98 → All
Hardware: PC → All
Summary: Crash after dynamic theme switching. - Trunk [@ nsTemplateRule::GetContent][@ nsRuleNode::GetPresContext] → Crash after dynamic theme switching. - Trunk M098 [@ nsTemplateRule::GetContent][@ nsRuleNode::GetPresContext]
This is a topcrasher for M098 and I have attached the most frequently reported
stack traces and their relevant crash info.  Almost all the comments mention
switching themes, as we already know is the task leading to this crash.
Target Milestone: mozilla0.9.9 → mozilla1.0
I could reproduce this crash by switching themes on mac os 9.2, windows 98, and 
linux using this url only: http://www3.nameplanet.com/mail
(commercial build: 2002-02-07-06-trunk). The talkback is currently down.
Will provide stacktrace later.

Steps to reproduce:

1. Type this url: http://www3.nameplanet.com/mail
2. Select View > Apply theme... Modern or classic.
3. Switch skins back and forth for sereral time, it crashes!
URL: http://www3.nameplanet.com/mail
Attached file Stack traces — 
Patty's stacks from crashes on Windows 98, Linux and MacOS 9.2, from the above
comment. (W2K crashes with the same steps.)
Tom, thanks for posting the stacktraces since the talkback was down yesterday.

Using today's build on linux rehat 6.2 (commercial build: 2002-02-08-08-trunk),
I could reproduce the crash by switching themes on view > apply theme..modern 
or classic with this site http://home.netscape.com/
However,the stacktrace is quite different from stacktrace on additional comments
#26 on linux build.
Also, this url http://home.netscape.com does not crash on windows 98
(2002-02-08-07-trunk) and Mac os 9.2 (2002-02-08-08-trunk).

Stacktrace on linux (2002-02-08-08-trunk):

Incident ID: 2691812
Stack Trace
0x08ad5aed
nsStyleContext::Destroy()
nsStyleContext::Release()
nsStyleContext::~nsStyleContext()
nsStyleContext::Destroy()
nsStyleContext::Release()
nsFrame::~nsFrame()
nsContainerFrame::~nsContainerFrame()
nsBlockFrame::~nsBlockFrame()
nsFormFrame::~nsFormFrame()
nsFrame::Destroy()
nsContainerFrame::Destroy()
nsBlockFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsTableFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsTableOuterFrame::Destroy()
nsLineBox::DeleteLineList()
nsBlockFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsTableFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsTableOuterFrame::Destroy()
nsLineBox::DeleteLineList()
nsBlockFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsTableFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsTableOuterFrame::Destroy()
nsLineBox::DeleteLineList()
nsBlockFrame::Destroy()
nsLineBox::DeleteLineList()
nsBlockFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsBoxFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsBoxFrame::Destroy()
nsGfxScrollFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
ViewportFrame::Destroy()
FrameManager::Destroy()
PresShell::Destroy()
DocumentViewerImpl::Destroy()
nsDocShell::Destroy()
nsWebShell::Destroy()
nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame()
nsFrame::Destroy()
nsFrameList::DestroyFrames()
nsContainerFrame::Destroy()
nsFrameList::DestroyFrame()
nsBoxFrame::RemoveFrame()
FrameManager::RemoveFrame()
nsCSSFrameConstructor::ContentRemoved()
nsCSSFrameConstructor::RecreateFramesForContent()
nsCSSFrameConstructor::ProcessRestyledFrames()
PresShell::ReconstructStyleData()
PresShell::StyleSheetRemoved()
nsXULDocument::UpdateStyleSheets()
nsChromeRegistry::RefreshWindow()
nsChromeRegistry::RefreshSkins()
XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod()
XPC_WN_CallMethod()
js_Invoke()
js_Interpret()
js_Invoke()
js_InternalInvoke()
JS_CallFunctionValue()
nsJSContext::CallEventHandler()
nsJSEventListener::HandleEvent()
nsEventListenerManager::HandleEventSubType()
nsEventListenerManager::HandleEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent() 
Hyatt / Patty, since this one seems reproducible and is showing up consistenly 
in Trunk and M098 data, could you please bump up the target to mozilla0.9.9 so 
it gets on the radar for the next release?
nominate nsbeta1 since this one seems reproducible.
Keywords: nsbeta1
nsbeta1+ per nav triage team
Keywords: nsbeta1 → nsbeta1+
Blocks: 122050
*** Bug 115874 has been marked as a duplicate of this bug. ***
Adding testcase keyword, since it seems that simply switching themes is crashing
for everyone.  I just reproduced it:

 Incident ID 3074492   
Stack Signature  nsTemplateRule::GetContent de2bff6e
Trigger Time 2002-02-18 16:52:23
Email Address jpatel@netscape.com
URL visited themes
Build ID 2002021809
Product ID MozillaTrunk
Platform
Operating System Win32
Module
Trigger Reason Access violation
User Comments after switching themes back and forth successfully, i was trying
to go from classic to modern and boom!
Stack Trace
nsTemplateRule::GetContent
[d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp, line 63]
nsStyleContext::Destroy
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1283]
nsStyleContext::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191]
nsProperties::ReleaseValues
[d:\builds\seamonkey\mozilla\xpcom\ds\nsProperties.cpp, line 70]
PL_HashTableEnumerateEntries [../../../lib/ds/plhash.c, line 430]
nsHashtable::Enumerate [d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp,
line 362]
nsSupportsHashtable::~nsSupportsHashtable
[d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 866]
nsSupportsHashtable::`scalar deleting destructor'
nsOutlinerBodyFrame::ClearStyleAndImageCaches
[d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBodyFrame.cpp,
line 3115]
nsCOMPtr_base::assign_from_helper
[d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp, line 81]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
PresShell::ReconstructStyleData
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5327]
PresShell::StyleSheetRemoved
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5371]
nsXULDocument::UpdateStyleSheets
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 1344]
nsChromeRegistry::RefreshWindow
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1334]
nsChromeRegistry::RefreshSkins
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1161]
XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp,
line 106]
XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2000]
XPC_WN_CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 1267]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 834]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2803]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 850]
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 925]
JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3417]
nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1019]
nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 182]
nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
1218]
nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
2210]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3383]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402]
PresShell::HandleDOMEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6053]
nsMenuFrame::Execute
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 1640]
nsMenuFrame::HandleEvent
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 466]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6022]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5928]
nsViewManager::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2010]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 301]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1849]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 858]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 875]
nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4579]
ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4829]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3504]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1120]
USER32.dll + 0x1820 (0x77e71820) 

I crashed once the first time I tried to switch from Modern to Classic (but the
stack was different, that crash showed the nsRuleNode::WalkRuleTree stack
signature, bug 121963).  After relaunch, I was able to successfully switch
themes about 3 times before I crashed going from Classic to Modern.
Keywords: testcase
How about filing a separate bug for the crashes that go through 
nsOutlinerBodyFrame::ClearStyleAndImageCaches ?  That seems like a new bug, although I don't know why it 
wasn't a problem before.
*** Bug 126817 has been marked as a duplicate of this bug. ***
Using the current build, it still crashs while switching themes with this url:
http://home.netscape.com


Strace Trace from Linux (commercial build: 2002-02-21-08-trunk) and incident ID:
3200485: (switch from classic to classic by selecting view > apply theme...classic)

nsRuleNode::GetPresContext()
nsStyleContext::Destroy()
nsStyleContext::Release()
nsSupportsHashtable::ReleaseElement()
_hashEnumerate__FP11PLHashEntryiPv()
PL_HashTableEnumerateEntries()
nsHashtable::Enumerate()
nsSupportsHashtable::~nsSupportsHashtable()
nsOutlinerBodyFrame::ClearStyleAndImageCaches()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
FlushMiscWidgetInfo()
PresShell::ReconstructStyleData()
PresShell::StyleSheetRemoved()
nsXULDocument::UpdateStyleSheets()
nsChromeRegistry::RefreshWindow()
nsChromeRegistry::RefreshSkins()
XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod()
XPC_WN_CallMethod()
js_Invoke()
js_Interpret()
js_Invoke()
js_InternalInvoke()
JS_CallFunctionValue()
nsJSContext::CallEventHandler()
nsJSEventListener::HandleEvent()
nsEventListenerManager::HandleEventSubType()
nsEventListenerManager::HandleEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent()
nsXULElement::HandleDOMEvent()
PresShell::HandleDOMEventWithTarget()
nsMenuFrame::Execute()
nsMenuFrame::HandleEvent()
PresShell::HandleEventInternal()
PresShell::HandleEvent()
nsViewManager::HandleEvent()
nsView::HandleEvent()
nsViewManager::DispatchEvent()
HandleEvent()
nsWidget::DispatchEvent()
nsWidget::DispatchWindowEvent()
nsWidget::DispatchMouseEvent()
nsWidget::OnButtonReleaseSignal()
nsWindow::HandleGDKEvent()
dispatch_superwin_event()
handle_gdk_event()
libgdk-1.2.so.0 + 0x174db (0x403404db)
libglib-1.2.so.0 + 0x10186 (0x40370186)
libglib-1.2.so.0 + 0x10751 (0x40370751)
libglib-1.2.so.0 + 0x108f1 (0x403708f1)
libgtk-1.2.so.0 + 0x8c5b9 (0x402945b9)
nsAppShell::Run()
nsAppShellService::Run()
netscape-bin + 0x7e89 (0x0804fe89)
netscape-bin + 0x86d7 (0x080506d7)
libc.so.6 + 0x189cb (0x404719cb)

----------------------------------------

Strace Trace from Mac OS 9.2 (commercial build: 2002-02-21-08-trunk) and
incident ID: 3200424: (switch from classic to modern by selecting view > apply
theme...modern)

content.shlb + 0x2ea404 (0x3ce70b74)
content.shlb + 0x266640 (0x3cdecdb0)
content.shlb + 0x26434c (0x3cdeaabc)
nsSupportsHashtable::ReleaseElement() [nsHashtable.cpp, line 859]
_hashEnumerate() [nsHashtable.cpp, line 196]
PL_HashTableEnumerateEntries() [plhash.c, line 429]
nsHashtable::Enumerate() [nsHashtable.cpp, line 361]
nsSupportsHashtable::~nsSupportsHashtable() [nsHashtable.cpp, line 865]
layout.shlb + 0x1c11d4 (0x3c3bc204)
layout.shlb + 0x23fac (0x3c21efdc)
layout.shlb + 0x240c4 (0x3c21f0f4)
layout.shlb + 0x240c4 (0x3c21f0f4)
layout.shlb + 0x240c4 (0x3c21f0f4)
layout.shlb + 0x240c4 (0x3c21f0f4)
layout.shlb + 0x240b0 (0x3c21f0e0)
layout.shlb + 0x240c4 (0x3c21f0f4)
layout.shlb + 0x240c4 (0x3c21f0f4)

--------------------------------------------
For Mac OS 10.1 (commercial build: 2002-02-21-08-trunk),it does not crash
by switching themes from classic to modern, but it quits with this error: 
"The application Netscape has unexpectedly quit".

---------------------------------------
Strace Trace from windows 98 (commercial build: 2002-02-20-09-trunk) and
incident ID: 3165322: (switch from classic to modern by selecting view > apply
theme...modern)

nsTemplateRule::GetContent
[d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp, line 63]
nsStyleContext::Destroy
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1279]
nsStyleContext::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 187]
nsSupportsHashtable::ReleaseElement
[d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 860]
PL_HashTableEnumerateEntries [../../../lib/ds/plhash.c, line 430]
nsHashtable::Enumerate [d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp,
line 362]
nsSupportsHashtable::~nsSupportsHashtable
[d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 866]
nsSupportsHashtable::`scalar deleting destructor'
nsOutlinerStyleCache::Clear
[d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBodyFrame.h,
line 248]
nsOutlinerBodyFrame::ClearStyleAndImageCaches
[d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBodyFrame.cpp,
line 3115]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5256]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
FlushMiscWidgetInfo
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288]
PresShell::ReconstructStyleData
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5327]
PresShell::StyleSheetRemoved
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5371]
nsXULDocument::UpdateStyleSheets
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 1344]
nsChromeRegistry::RefreshWindow
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1334]
nsChromeRegistry::RefreshSkins
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1161]
XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp,
line 106]
XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2000]
XPC_WN_CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 1267]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 834]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2803]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 850]
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 925]
JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3417]
nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1019]
nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 182]
nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
1218]
nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
2210]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421]
PresShell::HandleDOMEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6053]
nsMenuFrame::Execute
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 1640]
nsMenuFrame::HandleEvent
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 466]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6022]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5928]
nsViewManager::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2043]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 306]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1863]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 860]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 877]
nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4619]
ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4869]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3544]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1122]
KERNEL32.DLL + 0x363b (0xbff7363b)
KERNEL32.DLL + 0x24407 (0xbff94407)
URL: http://www3.nameplanet.com/mail → http://www3.nameplanet.com/mail, http...
I think the recent regression was between builds of 2002-02-17-11 and
2002-02-18-06, judging from talkback data.
*** Bug 126692 has been marked as a duplicate of this bug. ***
These may not be the same bug, but bug 127716 and bug 127726 relate to crashes
after theme switches.
Whiteboard: [driver:shaver]
Depends on: 127784
The Trunk has 134 entires for this crash under the 0xf98b5708 signature. Adding
that to the summary to facilitate tracking.
Summary: Crash after dynamic theme switching. - Trunk M098 [@ nsTemplateRule::GetContent][@ nsRuleNode::GetPresContext] → Crash after dynamic theme switching. - Trunk M098 [@ nsTemplateRule::GetContent][@ nsRuleNode::GetPresContext | 0xf98b5708 ]
If the Navigation toolbar is hidden, it won't crash.
Maybe related to bug 120155
Takeyori Hara, I can NOT confirm that. It took me three theme switches to crash
it a minute ago, and I had the navigation toolbar hidden.
Don't know if this is the same bug or not, but on 2002022703 I changed themes
Modern to Classic (also works the other way), and noticed that some images from
Modern had displayed in their place in Classic (e.g. bookmark toolbar, component
bar). Then when I changed theme back again, Mozilla crashed. This could be a
combination of 2 bugs.

See the screenshot I'm about to attach.
Screenshot to go with comment 43. Notice where Mozilla has used the images from
the Modern theme, even though the current theme is Classic. Changing theme
after this state seems to cause a crash.
That's bug 115940
Renominating since restarting after a switch (127784) will fix this, and that
seems to be how pretty much everyone reproduced this topcrash.
Keywords: nsbeta1+ → nsbeta1
This clears the outliner style cache when the outlinerbodyframe gets a new
style context.	I'd really like hyatt's opinion as to whether this is the right
thing to do.  This probably will only get us back to the state where we were
before Feb. 18.
Would we want to clear the outliner's image cache too?
Hrm.  I think ClearStyleAndImageCaches(); is what is wanted, except that should
already be happening due to the FlushMiscWidgetInfo in nsPresShell.cpp.  Clearly
it isn't...
Attached patch better fix? (obsolete) — — Splinter Review 
This does all the correct cache clearing removes the corresponding code in
nsPresShell and the glue needed for it.
*** Bug 123715 has been marked as a duplicate of this bug. ***
sr=hyatt

Comment on attachment 72667 [details] [diff] [review]
better fix?

r=bzbarsky
Attachment #72667 - Flags: review+
Comment on attachment 72667 [details] [diff] [review]
better fix?

a=shaver for 0.9.9 and 1.0 trunk. Marking sr=hyatt, too.
Attachment #72667 - Flags: superreview+
Attachment #72667 - Flags: approval+
Comment on attachment 72667 [details] [diff] [review]
better fix?

I should have tested this patch better sooner.	The |mScrollbar = nsnull|
causes crashes sometimes because we don't reinitialize mScrollbar.
Attachment #72667 - Flags: needs-work+
Comment on attachment 73010 [details] [diff] [review]
fix that handles null mScrollbar properly

sr=hyatt
Attachment #73010 - Flags: superreview+
Comment on attachment 73010 [details] [diff] [review]
fix that handles null mScrollbar properly

r=bzbarsky
Attachment #73010 - Flags: review+
Comment on attachment 73010 [details] [diff] [review]
fix that handles null mScrollbar properly

a=asa (on behalf of drivers) for checkin to the 0.9.9 branch and the 1.0 trunk
Attachment #73010 - Flags: approval+
nsbeta1- per Nav triage team
Keywords: nsbeta1 → nsbeta1-
Attachment 73010 [details] [diff] was checked in:
 * to the trunk, 2002-03-07 15:48 PST
 * to the MOZILLA_0_9_9_BRANCH, 2002-03-07 15:43 PST

However, not marking bug as fixed since it's only the recent regression that's
fixed (most likely, anyway).  See comment 34.
no longer crashing from theme switch (actually was on exit post theme switch)
looks good on commercial builds:

windows 2002-03-08-05-trunk
mac os9 2002-03-08-03-trunk
mac osx 2002-03-08-03-trunk
No longer blocks: 122050
->blake, hoping this will go away when we delay theme switch to next startup. 
Has anyone been able to reproduce this in any scenario?  Has anyone filed bug
for separate case mentioned in comment 34?  qawanted.
Assignee: hyatt → blaker
Status: ASSIGNED → NEW
Keywords: qawanted
dynamic theme switching is currently a 100% crasher (at least for me) due to bug
129827.
129827 was just backed out, if you want to update and test again.
I am unable to crash with current CVS.  Mozilla displays a lot of
assertions/errors/warnings/unhappy info, loses the scrollbars and disables
Ctrl+n, but does not crash.

I still see bug 124421 and bug 124205, but no crashing at the time of theme
switching.

The crashes reported here have not appeared in Talkback data since 3/7.   I was
going to mark this worksforme, but then I saw dbaron's comment #61.  

dbaron:  which regression(s) were you referring to?  every stack signature
mentioned in this bug is no longer found in talkback data, so you probably can
mark this fixed (i think we have plenty of bugs open on other theme switching
issues).
Making this topcrash+.
Keywords: topcrash → topcrash+
Target Milestone: mozilla1.0 → mozilla1.2
All three stack signatures noted in the summary are no longer showing up in
Talkback data.  As I mentioned earlier, these crashes last occurred with builds
from 3/7 (the day of dbaron's checkin).  Marking this fixed...please reopen if
anyone finds a reason to keep this open.
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → FIXED
I tried 10 theme switches while having this bugreport open in the browser and I
didn't crash. Therefore marking VERIFIED with a CVS build from 2002-03-20-21 on
Linux.
Status: RESOLVED → VERIFIED
Product: Core → Core Graveyard
Crash Signature: [@ nsTemplateRule::GetContent] [@ nsRuleNode::GetPresContext | 0xf98b5708 ]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: