1021253 - crash in nsCSSRuleProcessor::HasStateDependentStyle(ElementDependentRuleProcessorData*, mozilla::dom::Element*, nsCSSPseudoElements::Type, mozilla::EventStates)

Status: RESOLVED INCOMPLETE

(Core :: CSS Parsing and Computation, defect)

Description

[juan becerra [:juanb]]

This bug was filed from the Socorro interface and is 
report bp-905fc503-f622-4fb9-a83e-7be012140522.
=============================================================

This signature started spiking on 32.0a1 nightly on 5/14. Most crash reports are on Windows 7 and 8.1 We have no comments so far, and I couldn't find anything specific out of the add-on correlations.

More reports can be found here: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=nsCSSRuleProcessor%3A%3AHasStateDependentStyle%28ElementDependentRuleProcessorData%2A%2C+mozilla%3A%3Adom%3A%3AElement%2A%2C+nsCSSPseudoElements%3A%3AType%2C+mozilla%3A%3AEventStates%29


0 	xul.dll 	nsCSSRuleProcessor::HasStateDependentStyle(ElementDependentRuleProcessorData *,mozilla::dom::Element *,nsCSSPseudoElements::Type,mozilla::EventStates) 	layout/style/nsCSSRuleProcessor.cpp
1 	xul.dll 	nsCSSRuleProcessor::HasStateDependentStyle(StateRuleProcessorData *) 	layout/style/nsCSSRuleProcessor.cpp
2 	xul.dll 	SheetHasStatefulStyle 	layout/style/nsStyleSet.cpp
3 	xul.dll 	nsStyleSet::WalkRuleProcessors(bool (*)(nsIStyleRuleProcessor *,void *),ElementDependentRuleProcessorData *,bool) 	layout/style/nsStyleSet.cpp
4 	xul.dll 	nsStyleSet::HasStateDependentStyle(nsPresContext *,mozilla::dom::Element *,mozilla::EventStates) 	layout/style/nsStyleSet.cpp
5 	xul.dll 	mozilla::RestyleManager::ContentStateChanged(nsIContent *,mozilla::EventStates) 	layout/base/RestyleManager.cpp
6 	xul.dll 	PresShell::ContentStateChanged(nsIDocument *,nsIContent *,mozilla::EventStates) 	layout/base/nsPresShell.cpp
7 	xul.dll 	nsDocument::ContentStateChanged(nsIContent *,mozilla::EventStates) 	content/base/src/nsDocument.cpp
8 	xul.dll 	mozilla::dom::Element::UpdateState(bool) 	content/base/src/Element.cpp
9 	xul.dll 	mozilla::places::History::NotifyVisited(nsIURI *) 	toolkit/components/places/History.cpp
10 	xul.dll 	mozilla::places::`anonymous namespace'::VisitedQuery::NotifyVisitedStatus() 	toolkit/components/places/History.cpp
11 	xul.dll 	nsRunnableMethodImpl<tag_nsresult ( nsIUrlClassifierDBService::*)(void),void,1>::Run() 	obj-firefox/dist/include/nsThreadUtils.h
12 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
13 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	xpcom/glue/nsThreadUtils.cpp
14 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate *) 	ipc/glue/MessagePump.cpp
15 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
16 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
17 	xul.dll 	nsBaseAppShell::Run() 	widget/xpwidgets/nsBaseAppShell.cpp
18 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp
19 	xul.dll 	nsAppStartup::Run() 	toolkit/components/startup/nsAppStartup.cpp
20 	xul.dll 	XREMain::XRE_mainRun() 	toolkit/xre/nsAppRunner.cpp
21 	xul.dll 	XREMain::XRE_main(int,char * * const,nsXREAppData const *) 	toolkit/xre/nsAppRunner.cpp
22 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp
23 	firefox.exe 	do_main 	browser/app/nsBrowserApp.cpp
24 	firefox.exe 	NS_internal_main(int,char * *) 	browser/app/nsBrowserApp.cpp
25 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp
26 	firefox.exe 	__tmainCRTStartup 	f:/dd/vctools/crt_bld/self_64_amd64/crt/src/crtexe.c:552
27 	kernel32.dll 	kernel32.dll@0x16ad 	
28 	ntdll.dll 	ntdll.dll@0x74629 	
29 	KERNELBASE.dll 	KERNELBASE.dll@0xdd820

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsCSSRuleProcessor::HasStateDependentStyle':
 - nightly (version 50): 0 crash from 2016-06-06.
 - aurora  (version 49): 2 crashes from 2016-06-07.
 - beta    (version 48): 66 crashes from 2016-06-06.
 - release (version 47): 193 crashes from 2016-05-31.
 - esr     (version 45): 16 crashes from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          0          0          0          0          0          0
 - aurora           0          0          0          0          0          1          1
 - beta             8          8         10         16         12          7          1
 - release         40         24         28         19         33         25         13
 - esr              3          0          0          0          5          0          1

Affected platforms: Windows, Mac OS X, Linux

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsCSSRuleProcessor::HasStateDependentStyle':
 - nightly (version 51): 0 crashes from 2016-08-01.
 - aurora  (version 50): 1 crash from 2016-08-01.
 - beta    (version 49): 20 crashes from 2016-08-02.
 - release (version 48): 31 crashes from 2016-07-25.
 - esr     (version 45): 24 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       0       0
 - aurora        0       0       0
 - beta          5      11       2
 - release      12       5       6
 - esr           2       1       5

Affected platforms: Windows, Mac OS X

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly
 - aurora            #991
 - beta    #4261
 - release #1553     #1040
 - esr     #5326

Comment 3

[Mats Palmgren (inactive)]

nsCSSRuleProcessor is gone so it's not worth tracking these signatures anymore.
Please file new bugs as appropriate.