209716 - frequent crashes loading pages in multiple tabs after upgrading to 10.2.6

Status: RESOLVED WORKSFORME

(Core Graveyard :: GFX: Mac, defect)

Description

[Myk Melez [:myk] [@mykmelez]]

I'm seeing frequent crashes on yesterday's branch build (2003-06-16-05) when
loading pages in multiple tabs.  The crashes seem to happen when I start loading
a page in one tab, then create or go to a new tab and start loading another page
in it.  I recently upgraded Mac OS X to version 10.2.6, which may be a factor here.

Some relevant talkback reports:

http://heatwave.netscape.com/reports/incidenttemplate.cfm?bbid=286290
http://heatwave.netscape.com/reports/incidenttemplate.cfm?bbid=286256

Comment 1

[Simon Fraser [no longer active]]

Stack:

 	 QD.96.21.0 + 0x260c (0x91a5260c)   	 
    	QD.96.21.0 + 0x25d4 (0x91a525d4) 	 
    	HIToolbox.124.0.0 + 0x1be40 (0x969bbe40) 	 
    	nsMacWindow::StandardCreate() 
[/builds/nightly/seamonkey/1.4/mozilla/widget/src/mac/nsMacWindow.cpp, line 473]
    	nsWindow::Create() 
[/builds/nightly/seamonkey/1.4/mozilla/widget/src/mac/nsWindow.cpp, line 399]
    	nsView::CreateWidget() 
[/builds/nightly/seamonkey/1.4/mozilla/view/src/nsView.cpp, line 777]
    	nsCSSFrameConstructor::InitializeSelectFrame() 
[/builds/nightly/seamonkey/1.4/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3633]
    	nsCSSFrameConstructor::ConstructSelectFrame() 
[/builds/nightly/seamonkey/1.4/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 4211]
    	nsCSSFrameConstructor::ConstructHTMLFrame() 

What web sites cause this?

Comment 2

[Myk Melez [:myk] [@mykmelez]]

I'm seeing it a lot on vegas.com, particularly when running a "book your room
today!" search.  If that search is running in one tab, and I open a new tab and
load f.e. apple.com, I get the crash.  I also see this sometimes when a number
of tabs are open and I open a new one and go to
http://bugzilla.mozilla.org/query.cgi

Unfortunately, although the crashes are frequent, they are also intermittent,
and I haven't been able to nail down a set of tabs/URLs that consistently causes
it yet.

I've also been doing some experimenting with 1.3.1 to see if it happens there
(which might implicate the OS upgrade), but so far I have only crashed once
there (and Talkback didn't work for that crash).

Comment 3

[Myk Melez [:myk] [@mykmelez]]

I've got some talkback reports in now from Mozilla 1.3.1, and the crash looks
similar there:

    	 QD.96.21.0 + 0x260c (0x91a5260c)   	 
    	QD.96.21.0 + 0x25d4 (0x91a525d4) 	 
    	HIToolbox.124.0.0 + 0x1be40 (0x969bbe40) 	 
    	nsMacWindow::StandardCreate() 
[/builds/nightly/seamonkey/1.3.1/mozilla/widget/src/mac/nsMacWindow.cpp, line 473]
    	nsWindow::Create() 
[/builds/nightly/seamonkey/1.3.1/mozilla/widget/src/mac/nsWindow.cpp, line 394]
    	nsView::CreateWidget() 
[/builds/nightly/seamonkey/1.3.1/mozilla/view/src/nsView.cpp, line 786]
    	nsListControlFrame::CreateScrollingViewWidget() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/forms/src/nsListControlFrame.cpp,
line 1603]
    	nsScrollFrame::CreateScrollingView() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/base/src/../../../../dist/include/xpcom/nsISupportsUtils.h,
line 243]
    	nsScrollFrame::Init() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/base/src/nsScrollFrame.cpp,
line 105]
    	nsListControlFrame::Init() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/forms/src/../../../../dist/include/xpcom/nsISupportsUtils.h,
line 243]
    	nsCSSFrameConstructor::InitAndRestoreFrame() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/style/src/../../../../dist/include/xpcom/nsCOMPtr.h,
line 631]
    	nsCSSFrameConstructor::InitializeSelectFrame() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/style/src/../../../../dist/include/xpcom/nsCOMPtr.h,
line 643]
    	nsCSSFrameConstructor::ConstructSelectFrame() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 4412]
    	nsCSSFrameConstructor::ConstructHTMLFrame() 
[/builds/nightly/seamonkey/1.3.1/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 4883]

(http://heatwave.netscape.com/reports/incidenttemplate.cfm?bbid=286341)

Comment 4

[Simon Fraser [no longer active]]

myk: can you turn on crash reporting by the OS (Console app prefs), and attach a
crash log file here? That will show us which OS call is crashing.

Comment 5

[Myk Melez [:myk] [@mykmelez]]

Turns out it was already on.  Here's what looks like the relevant part of one of
the crash reports.  Let me know if you need more.

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0xffffffff

Thread 0 Crashed:
#0   0x91a5260c in CopyRgn
#1   0x969ac97c in GetWindowRegion
#2   0x969bbe40 in GetWindowBounds
#3   0x01ca0788 in nsMacWindow::StandardCreate(nsIWidget*, nsRect const&,
nsEventStatus (*)(nsGUIEvent*), nsIDeviceContext*, nsIAppShell*, nsIToolkit*,
nsWidgetInitData*, void*)
#4   0x01cb3610 in nsWindow::Create(nsIWidget*, nsRect const&, nsEventStatus
(*)(nsGUIEvent*), nsIDeviceContext*, nsIAppShell*, nsIToolkit*, nsWidgetInitData*)
#5   0x01bca160 in nsWebShellWindow::Initialize(nsIXULWindow*, nsIAppShell*,
nsIURI*, int, int, unsigned, int, int, int, nsWidgetInitData&)
#6   0x01bc4d64 in nsAppShellService::JustCreateTopWindow(nsIXULWindow*,
nsIURI*, int, int, unsigned, int, int, int, nsIXULWindow**)
#7   0x01bc4140 in nsAppShellService::CreateHiddenWindow()
#8   0x00005160 in main1(int, char**, nsISupports*)
#9   0x000058a8 in main
#10  0x000020d0 in _start
#11  0x00001f50 in start

Comment 6

[Myk Melez [:myk] [@mykmelez]]

I haven't been able to reproduce this crash since the day after i first reported
it.  Can anyone else?

Comment 7

[ventura]

It's easy to "make this bug happen". Open two tabs, put the mouse pointer over
the tab ear, hold the left mouse button and move the mouse. Voilla !! You crash
your browser, maybe your Xwindow.

I crashed my Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5a) Gecko/20030728
Mozilla Firebird/0.6.1 hundreds times, so I understand what I was doing, it's
really easy repeat this. Don't need to be severals tabs, just two makes the job.

Obs: Athlon XP, Mandrake Linux

Comment 8

[ventura]

This crash behavior I posted above disappeared with the new nigh build 2003 08 23

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5b) Gecko/20030823 Mozilla
Firebird/0.6.1+

I opened multiples tabs, change themes, right click, left click and its all
right. I think an update could solve this issue and this bug may be closed. Well
... maybe, I am using i686 and this bug was assigned to Mac OS X

Comment 9

[Simon Fraser [no longer active]]

Sounds like a WFM, whatever the platform.