53583 - mozilla crashes on startup

Status: VERIFIED DUPLICATE of bug 53517

(Core :: Graphics: ImageLib, defect, P3)

Description

[Chris Waterson]

I'm frequently crashing on startup with the below stack trace.

- At the point of the crash in nsHTMLImageLoader::Update, it appears that 
tell "this" is just pointing to garbage memory (so trying to dereference 
mImageLoader goes off into space).

- Up in nsFrameImageLoader::NotifyFrames(), the per-frame data appears to be 
referring to a frame that's been nuked.

Anyone have ideas?

nsHTMLImageLoader::Update(nsIPresContext * 0x03d0ea20, nsIFrame * 0x00f867c8, 
unsigned int 3) line 150 + 19 bytes
nsHTMLImageLoader::ImageLoadCB(nsIPresContext * 0x03d0ea20, nsIFrameImageLoader 
* 0x03dc69c0, nsIFrame * 0x00f867c8, void * 0x00f86804, unsigned int 3) line 134
nsFrameImageLoader::NotifyFrames(int 0) line 572 + 38 bytes
nsFrameImageLoader::Notify(nsIImageRequest * 0x03dc67d0, nsIImage * 0x03ddd290, 
nsImageNotification nsImageNotification_kImageComplete, int 0, int 0, void * 
0x00000000) line 505
ns_observer_proc(void * 0x03dc6670, long 7, void * 0x0012fb90, void * 
0x03dc67d0) line 113
XP_NotifyObservers(OpaqueObserverList * 0x03dc6700, long 7, void * 0x0012fb90) 
line 259 + 28 bytes
il_image_complete_notify(il_container_struct * 0x03d20150) line 327 + 18 bytes
il_image_complete(il_container_struct * 0x03d20150) line 1652 + 9 bytes
ImgDCallbk::ImgDCBHaveImageAll(ImgDCallbk * const 0x03c8c0e0) line 189 + 12 
bytes
process_buffered_gif_input_data(gif_struct * 0x03ddd580) line 694
gif_delay_time_callback(void * 0x03d20150) line 725 + 9 bytes
timer_callback(nsITimer * 0x03ddef60, void * 0x03ddee00) line 70 + 12 bytes
nsTimer::Fire() line 194 + 17 bytes
nsTimerManager::FireNextReadyTimer(nsTimerManager * const 0x02d51060, unsigned 
int 0) line 117
nsAppShell::Run(nsAppShell * const 0x02d810c0) line 116
nsAppShellService::Run(nsAppShellService * const 0x02d80b40) line 408
main1(int 1, char * * 0x004a3100, nsISupports * 0x00000000) line 958 + 32 bytes
main(int 1, char * * 0x004a3100) line 1139 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87903()

Comment 1

[Chris Waterson]

Ooh, digging more, I see that the nsFrameImageLoader's URL is referring to 
chrome://global/skin/scroll-up.gif. evaughan, do you think this might be 
related to your image loading changes from last night? It looks like the target 
frame for scroll-up.gif has been clobbered. Maybe XUL is not telling imagelib 
to "cancel chrome" when nuking image frames?

Comment 2

[Kathleen :Brade]

sounds like a duplicate to me...


*** This bug has been marked as a duplicate of 53517 ***

Comment 3

[Paul Wyskoczka]

Updating QA Contact

Comment 4

[Stephen Walker]

vrfy dup