619060 - Firefox 4.0b8pre Crash Report [@ nsIFrame::InvalidateRectDifference ][@ nsIFrame::InvalidateWithFlags(nsRect const&, unsigned int)]

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[chris hofmann]

fast rising crash that hit mozilla-central builds on dec 13 and should block release of beta 8.   comments indicate most people are just trying to print any document.

reports at:
http://crash-stats.mozilla.com/report/list?signature=nsIFrame::InvalidateRectDifference

stack looks like

http://crash-stats.mozilla.com/report/index/850d9c1f-2693-4ecf-a96e-604ce2101213

Frame 	Module 	Signature [Expand] 	Source
0 	XUL 	nsIFrame::InvalidateRectDifference 	layout/base/nsPresContext.h:1278
1 	XUL 	PresShell::DoReflow 	layout/base/nsPresShell.cpp:7734
2 	XUL 	PresShell::ProcessReflowCommands 	layout/base/nsPresShell.cpp:7922
3 	XUL 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4884
4 	XUL 	nsPrintEngine::ReflowPrintObject 	layout/printing/nsPrintEngine.cpp:2035
5 	XUL 	nsPrintEngine::ReflowDocList 	layout/printing/nsPrintEngine.cpp:1873
6 	XUL 	nsPrintEngine::SetupToPrintContent 	layout/printing/nsPrintEngine.cpp:1682
7 	XUL 	nsPrintEngine::DoCommonPrint 	layout/printing/nsPrintEngine.cpp:1514
8 	XUL 	nsPrintEngine::CommonPrint 	layout/printing/nsPrintEngine.cpp:445
9 	XUL 	nsPrintEngine::Print 	layout/printing/nsPrintEngine.cpp:771
10 	XUL 	DocumentViewerImpl::Print 	layout/base/nsDocumentViewer.cpp:3644
11 	XUL 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/unix/xptcinvoke_x86_64_unix.cpp:208
12 	XUL 	XPCWrappedNative::CallMethod 	js/src/xpconnect/src/xpcwrappednative.cpp:3064
13 	XUL 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1588
14 	XUL 	js::Invoke 	js/src/jscntxtinlines.h:684
15 	XUL 	js::ExternalInvoke 	js/src/jsinterp.cpp:858
16 	XUL 	js::JSProxyHandler::call 	js/src/jsproxy.cpp:248
17 	XUL 	JSCrossCompartmentWrapper::call 	js/src/jswrapper.cpp:235
18 	XUL 	js::proxy_Call 	js/src/jsproxy.cpp:795
19 	XUL 	js::Invoke 	js/src/jscntxtinlines.h:684
20 	XUL 	js::Interpret 	js/src/jsinterp.cpp:4759
21 	XUL 	js::Invoke 	js/src/jsinterp.cpp:657
22 	XUL 	js::ExternalInvoke 	js/src/jsinterp.cpp:858
23 	XUL 	JS_CallFunctionValue 	js/src/jsinterp.h:962
24 	XUL 	nsJSContext::CallEventHandler 	dom/base/nsJSEnvironment.cpp:2177
25 	XUL 	nsJSEventListener::HandleEvent 	dom/src/events/nsJSEventListener.cpp:228
26 	XUL 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:1114
27 	XUL 	nsEventListenerManager::HandleEventInternal 	content/events/src/nsEventListenerManager.cpp:1210
28 	XUL 	nsEventTargetChainItem::HandleEventTargetChain 	content/events/src/nsEventListenerManager.h:146
29 	XUL 	nsEventDispatcher::Dispatch 	content/events/src/nsEventDispatcher.cpp:628
30 	XUL 	nsEventDispatcher::DispatchDOMEvent 	content/events/src/nsEventDispatcher.cpp:691
31 	XUL 	nsEventListenerManager::DispatchEvent 	content/events/src/nsEventListenerManager.cpp:1328
32 	XUL 	nsDOMEventRTTearoff::DispatchEvent 	content/base/src/nsGenericElement.cpp:1969
33 	XUL 	nsContentUtils::DispatchXULCommand 	content/base/src/nsContentUtils.cpp:5472
34 	XUL 	nsXULElement::PreHandleEvent 	content/xul/content/src/nsXULElement.cpp:1702
35 	XUL 	nsEventDispatcher::Dispatch 	content/events/src/nsEventDispatcher.cpp:272
36 	XUL 	nsEventDispatcher::DispatchDOMEvent 	content/events/src/nsEventDispatcher.cpp:691
37 	XUL 	nsEventListenerManager::DispatchEvent 	content/events/src/nsEventListenerManager.cpp:1328
38 	XUL 	nsDOMEventRTTearoff::DispatchEvent 	content/base/src/nsGenericElement.cpp:1969
39 	XUL 	nsMenuUtilsX::DispatchCommandTo 	widget/src/cocoa/nsMenuUtilsX.mm:82
40 	XUL 	-[NativeMenuItemTarget menuItemHit:] 	widget/src/cocoa/nsMenuBarX.mm:914
41 	AppKit 	AppKit@0x198e99 	
42 	AppKit 	AppKit@0x1bd41d 	
43 	AppKit 	AppKit@0x1bd187 	
44 	AppKit 	AppKit@0x441278 	
45 	AppKit 	AppKit@0x2f2f76 	
46 	Foundation 	Foundation@0x26131 	
47 	HIToolbox 	HIToolbox@0x67d7 	
48 	AppKit 	AppKit@0x19f95b 	
49 	HIToolbox 	HIToolbox@0x6c7d 	
50 	HIToolbox 	HIToolbox@0x7996 	
51 	HIToolbox 	HIToolbox@0x7276 	
52 	HIToolbox 	HIToolbox@0x7693 	
53 	HIToolbox 	HIToolbox@0x76f6 	
54 	CoreFoundation 	CoreFoundation@0x104c7 	
55 	CoreFoundation 	CoreFoundation@0x17a9d 	
56 	CarbonCore 	CarbonCore@0x288c1 	
57 	CarbonCore 	CarbonCore@0x22c8f 	
58 	HIToolbox 	HIToolbox@0x5221 	
59 	CoreFoundation 	CoreFoundation@0x104c7 	
60 	CoreFoundation 	CoreFoundation@0x104c7 	
61 	HIToolbox 	HIToolbox@0x48e7f 	
62 	CoreFoundation 	CoreFoundation@0x1796a 	
63 	HIToolbox 	HIToolbox@0x757c 	
64 	HIToolbox 	HIToolbox@0x7141 	
65 	HIToolbox 	HIToolbox@0x6ee5 	
66 	HIToolbox 	HIToolbox@0x24ba8 	
67 	HIToolbox 	HIToolbox@0x53cd0 	
68 	HIToolbox 	HIToolbox@0x80b05 	
69 	HIToolbox 	HIToolbox@0x80abd 	
70 	libSystem.B.dylib 	libSystem.B.dylib@0x6a02 	
71 	HIToolbox 	HIToolbox@0x809bd 	
72 	HIToolbox 	HIToolbox@0x5418 	
73 	HIToolbox 	HIToolbox@0x61cb2

Comment 1

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Fixed by backout of bug 615870?

Comment 2

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Yep, both the nsIFrame::InvalidateWithFlags(nsRect const&, unsigned int) (Windows) and nsIFrame::InvalidateRectDifference (Mac) signatures appeared on the 13th and went away again on the 14th.