389770 - Crash [nsRuleNode::GetStyleDisplay] with moz-binding and textZoom

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[Martijn Wargers (dead)]

Attachment: testcase

Same regression range as bug 389744. Maybe they are related?
You need to download the testcase to your computer, because of the use of enhanced privileges.

http://crash-stats.mozilla.com/report/index/eb7c6bcc-3be1-11dc-b254-001a4bd46e84
0  	nsRuleNode::GetStyleDisplay(nsStyleContext *,int)
1 	nsStyleContext::GetStyleDisplay()
2 	IsInlineOutside
3 	nsCSSFrameConstructor::RecreateFramesForContent(nsIContent *)
4 	nsCSSFrameConstructor::ProcessRestyledFrames(nsStyleChangeList &)
5 	nsPresContext::ClearStyleDataAndReflow()
6 	DocumentViewerImpl::SetTextZoom(float)
7 	NS_InvokeByIndex_P
8 	AutoJSSuspendRequest::SuspendRequest()
9 	XPCConvert::JSArray2Native(XPCCallContext &,void * *,long,unsigned int,unsigned int,nsXPTType const &,int,nsID const *,unsigned int *)

Comment 1

[Martijn Wargers (dead)]

Attachment: testcase2

My guess is that this is the same sort of crash (although the stacktrace is different). The crash happens when you increase the font-size.

http://crash-stats.mozilla.com/report/index/ea682085-3e3a-11dc-bb2f-001a4bd43e5c
0  	nsFrame::Destroy()
1 	nsContainerFrame::Destroy()
2 	nsBlockFrame::DoRemoveFrame(nsIFrame *,int,int)
3 	nsBlockFrame::RemoveFrame(nsIAtom *,nsIFrame *)
4 	nsFrameManager::RemoveFrame(nsIFrame *,nsIAtom *,nsIFrame *)
5 	nsCSSFrameConstructor::ContentRemoved(nsIContent *,nsIContent *,int,int)
6 	nsCSSFrameConstructor::RecreateFramesForContent(nsIContent *)
7 	nsCSSFrameConstructor::ProcessRestyledFrames(nsStyleChangeList &)
8 	nsPresContext::ClearStyleDataAndReflow()
9 	DocumentViewerImpl::SetTextZoom(float)

Comment 2

[Daniel Holbert [:dholbert]]

Attachment: testcase2 (reduced)

Posting a slightly reduced version of testcase 2.

Comment 3

[Mats Palmgren (inactive)]

The patch in bug 389744 fixes all three testcases on Linux.

Comment 4

[Martijn Wargers (dead)]

Indeed, this doesn't crash anymore (neither of the 3 testcases), using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a9pre) Gecko/2007100104 Minefield/3.0a9pre