958567 - crash deep in nsBlockFrame::ReflowDirtyLines

Status: RESOLVED INVALID

(Firefox :: Untriaged, defect)

Description

[Andriy Gapon]

User Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:26.0) Gecko/20100101 Firefox/26.0 (Beta/Release)
Build ID: 20131214190525

Steps to reproduce:

There were many tabs open in firefox, but I was actually away from the desktop.


Actual results:

(gdb) bt
#0  thr_kill () at thr_kill.S:3
#1  0x00000008021e925a in nsProfileLock::FatalSignalHandler (signo=11, info=0x7fffffff7910, context=0x7fffffff75a0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/profile/dirserviceprovider/src/nsProfileLock.cpp:180
#2  0x0000000800f8c596 in handle_signal (actp=<optimized out>, sig=11, info=0x7fffffff7910, ucp=0x7fffffff75a0) at /usr/src/lib/libthr/thread/thr_sig.c:237
#3  0x0000000800f8c13f in thr_sighandler (sig=11, info=0x0, _ucp=0x7fffffff75a0) at /usr/src/lib/libthr/thread/thr_sig.c:182
#4  <signal handler called>
#5  Properties (this=this@entry=0x86a0f06b0) at ../../../layout/generic/nsIFrame.h:2631
#6  nsIFrame::GetNormalPosition (this=this@entry=0x86a0f06b0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsFrame.cpp:5110
#7  0x000000080257f486 in RecoverFloatsFor (aFloatManager=..., aFrame=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:5970
#8  nsBlockFrame::RecoverFloats (this=this@entry=0x86a0f01d8, aFloatManager=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:5951
#9  0x000000080257f563 in nsBlockFrame::RecoverFloatsFor (aFrame=<optimized out>, aFloatManager=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:5972
#10 0x0000000802588c65 in nsBlockReflowState::RecoverFloats (this=0x7fffffff7e60, aLine=..., aDeltaY=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowState.cpp:411
#11 0x0000000802588d5f in nsBlockReflowState::RecoverStateFrom (this=this@entry=0x7fffffff7e60, aLine=..., aLine@entry=..., aDeltaY=aDeltaY@entry=0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowState.cpp:436
#12 0x0000000802585670 in nsBlockFrame::ReflowDirtyLines (this=this@entry=0x86a046b58, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:2074
#13 0x0000000802586519 in nsBlockFrame::Reflow (this=0x86a046b58, aPresContext=0x83e97ae00, aMetrics=..., aReflowState=..., aStatus=@0x7fffffff8040: 2280) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1003
#14 0x000000080259494d in nsContainerFrame::ReflowChild (this=this@entry=0x86a046648, aKidFrame=0x86a046b58, aPresContext=aPresContext@entry=0x83e97ae00, aDesiredSize=..., aReflowState=..., aX=aX@entry=0, aY=aY@entry=0, aFlags=aFlags@entry=3, aStatus=@0x7fffffff8040: 2280, aTracker=aTracker@entry=0x0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsContainerFrame.cpp:961
#15 0x00000008025b9bf4 in nsHTMLScrollFrame::ReflowScrolledFrame (this=this@entry=0x86a046648, aState=aState@entry=0x7fffffff82d0, aAssumeHScroll=<optimized out>, aAssumeVScroll=<optimized out>, aMetrics=aMetrics@entry=0x7fffffff81c0, aFirstPass=aFirstPass@entry=true) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsGfxScrollFrame.cpp:441
#16 0x00000008025bce0c in nsHTMLScrollFrame::ReflowContents (this=this@entry=0x86a046648, aState=aState@entry=0x7fffffff82d0, aDesiredSize=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsGfxScrollFrame.cpp:539
#17 0x00000008025bec00 in nsHTMLScrollFrame::Reflow (this=0x86a046648, aPresContext=<optimized out>, aDesiredSize=..., aReflowState=..., aStatus=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsGfxScrollFrame.cpp:777
#18 0x0000000802588094 in nsBlockReflowContext::ReflowBlock (this=this@entry=0x7fffffff8460, aSpace=..., aApplyTopMargin=aApplyTopMargin@entry=true, aPrevMargin=..., aClearance=aClearance@entry=0, aIsAdjacentWithTop=aIsAdjacentWithTop@entry=true, aLine=aLine@entry=0x0, aFrameRS=..., aFrameReflowStatus=@0x7fffffff8660: 0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowContext.cpp:260
#19 0x000000080257ef55 in nsBlockFrame::ReflowFloat (this=0x86a044c58, aState=..., aAdjustedAvailableSpace=..., aFloat=aFloat@entry=0x86a046648, aFloatMargin=..., aFloatOffsets=..., aFloatPushedDown=false, aReflowStatus=@0x7fffffff8660: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:5787
#20 0x00000008025897a9 in nsBlockReflowState::FlowAndPlaceFloat (this=this@entry=0x7fffffff9150, aFloat=aFloat@entry=0x86a046648) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowState.cpp:766
#21 0x00000008025899db in nsBlockReflowState::AddFloat (this=0x7fffffff9150, aLineLayout=aLineLayout@entry=0x7fffffff8c80, aFloat=0x86a046648, aAvailableWidth=58800) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowState.cpp:517
#22 0x00000008025dadcb in AddFloat (aAvailableWidth=<optimized out>, aFloat=<optimized out>, this=0x7fffffff8c80) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsLineLayout.h:147
#23 nsLineLayout::ReflowFrame (this=this@entry=0x7fffffff8c80, aFrame=aFrame@entry=0x86a046bf0, aReflowStatus=@0x7fffffff8aa0: 0, aMetrics=aMetrics@entry=0x0, aPushedFrame=@0x7fffffff8a90: false) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsLineLayout.cpp:868
#24 0x0000000802581fa5 in nsBlockFrame::ReflowInlineFrame (this=0x86a044c58, aState=..., aLineLayout=..., aLine=..., aFrame=0x86a046bf0, aLineReflowStatus=0x7fffffff8b50) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3657
#25 0x0000000802582963 in nsBlockFrame::DoReflowInlineFrames (this=this@entry=0x86a044c58, aState=..., aLineLayout=..., aLine=..., aFloatAvailableSpace=..., aAvailableSpaceHeight=@0x7fffffff8c40: 0, aFloatStateBeforeLine=aFloatStateBeforeLine@entry=0x7fffffff8c50, aKeepReflowGoing=aKeepReflowGoing@entry=0x7fffffff8df0, aLineReflowStatus=aLineReflowStatus@entry=0x7fffffff8c30, aAllowPullUp=aAllowPullUp@entry=true) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3454
#26 0x00000008025830be in nsBlockFrame::ReflowInlineFrames (this=this@entry=0x86a044c58, aState=..., aLine=..., aKeepReflowGoing=aKeepReflowGoing@entry=0x7fffffff8df0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3314
#27 0x0000000802584f01 in ReflowLine (aKeepReflowGoing=0x7fffffff8df0, aLine=..., aState=..., this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:2456
#28 nsBlockFrame::ReflowDirtyLines (this=this@entry=0x86a044c58, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1975
#29 0x0000000802586519 in nsBlockFrame::Reflow (this=0x86a044c58, aPresContext=0x83e97ae00, aMetrics=..., aReflowState=..., aStatus=@0x7fffffff9390: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1003
#30 0x0000000802588094 in nsBlockReflowContext::ReflowBlock (this=this@entry=0x7fffffff9430, aSpace=..., aApplyTopMargin=aApplyTopMargin@entry=true, aPrevMargin=..., aClearance=aClearance@entry=0, aIsAdjacentWithTop=<optimized out>, aLine=aLine@entry=0x86b1e78e8, aFrameRS=..., aFrameReflowStatus=@0x7fffffff9390: 0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowContext.cpp:260
#31 0x0000000802583f5d in nsBlockFrame::ReflowBlockFrame (this=this@entry=0x86a0437b8, aState=..., aLine=aLine@entry=..., aKeepReflowGoing=aKeepReflowGoing@entry=0x7fffffff9640) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3038
#32 0x000000080258582c in ReflowLine (aKeepReflowGoing=0x7fffffff9640, aLine=..., aState=..., this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:2453
#33 nsBlockFrame::ReflowDirtyLines (this=this@entry=0x86a0437b8, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1975
#34 0x0000000802586519 in nsBlockFrame::Reflow (this=0x86a0437b8, aPresContext=0x83e97ae00, aMetrics=..., aReflowState=..., aStatus=@0x7fffffff9be0: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1003
#35 0x0000000802588094 in nsBlockReflowContext::ReflowBlock (this=this@entry=0x7fffffff9c80, aSpace=..., aApplyTopMargin=aApplyTopMargin@entry=true, aPrevMargin=..., aClearance=aClearance@entry=0, aIsAdjacentWithTop=<optimized out>, aLine=aLine@entry=0x86b1e79a8, aFrameRS=..., aFrameReflowStatus=@0x7fffffff9be0: 0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowContext.cpp:260
#36 0x0000000802583f5d in nsBlockFrame::ReflowBlockFrame (this=this@entry=0x869898470, aState=..., aLine=aLine@entry=..., aKeepReflowGoing=aKeepReflowGoing@entry=0x7fffffff9e90) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3038
#37 0x000000080258582c in ReflowLine (aKeepReflowGoing=0x7fffffff9e90, aLine=..., aState=..., this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:2453
#38 nsBlockFrame::ReflowDirtyLines (this=this@entry=0x869898470, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1975
#39 0x0000000802586519 in nsBlockFrame::Reflow (this=0x869898470, aPresContext=0x83e97ae00, aMetrics=..., aReflowState=..., aStatus=@0x7fffffffa430: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1003
#40 0x0000000802588094 in nsBlockReflowContext::ReflowBlock (this=this@entry=0x7fffffffa4d0, aSpace=..., aApplyTopMargin=aApplyTopMargin@entry=true, aPrevMargin=..., aClearance=aClearance@entry=0, aIsAdjacentWithTop=<optimized out>, aLine=aLine@entry=0x86b1e7a28, aFrameRS=..., aFrameReflowStatus=@0x7fffffffa430: 0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowContext.cpp:260
#41 0x0000000802583f5d in nsBlockFrame::ReflowBlockFrame (this=this@entry=0x861c4b458, aState=..., aLine=aLine@entry=..., aKeepReflowGoing=aKeepReflowGoing@entry=0x7fffffffa6e0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3038
#42 0x000000080258582c in ReflowLine (aKeepReflowGoing=0x7fffffffa6e0, aLine=..., aState=..., this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:2453
#43 nsBlockFrame::ReflowDirtyLines (this=this@entry=0x861c4b458, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1975
#44 0x0000000802586519 in nsBlockFrame::Reflow (this=0x861c4b458, aPresContext=0x83e97ae00, aMetrics=..., aReflowState=..., aStatus=@0x7fffffffac80: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1003
#45 0x0000000802588094 in nsBlockReflowContext::ReflowBlock (this=this@entry=0x7fffffffad20, aSpace=..., aApplyTopMargin=aApplyTopMargin@entry=false, aPrevMargin=..., aClearance=aClearance@entry=0, aIsAdjacentWithTop=<optimized out>, aLine=aLine@entry=0x86b1e7e78, aFrameRS=..., aFrameReflowStatus=@0x7fffffffac80: 0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowContext.cpp:260
#46 0x0000000802583f5d in nsBlockFrame::ReflowBlockFrame (this=this@entry=0x861c4b3c0, aState=..., aLine=aLine@entry=..., aKeepReflowGoing=aKeepReflowGoing@entry=0x7fffffffaf30) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3038
#47 0x000000080258582c in ReflowLine (aKeepReflowGoing=0x7fffffffaf30, aLine=..., aState=..., this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:2453
#48 nsBlockFrame::ReflowDirtyLines (this=this@entry=0x861c4b3c0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1975
#49 0x0000000802586519 in nsBlockFrame::Reflow (this=0x861c4b3c0, aPresContext=0x83e97ae00, aMetrics=..., aReflowState=..., aStatus=@0x7fffffffb4d0: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1003
#50 0x0000000802588094 in nsBlockReflowContext::ReflowBlock (this=this@entry=0x7fffffffb570, aSpace=..., aApplyTopMargin=aApplyTopMargin@entry=true, aPrevMargin=..., aClearance=aClearance@entry=0, aIsAdjacentWithTop=<optimized out>, aLine=aLine@entry=0x86b1e7ef8, aFrameRS=..., aFrameReflowStatus=@0x7fffffffb4d0: 0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockReflowContext.cpp:260
#51 0x0000000802583f5d in nsBlockFrame::ReflowBlockFrame (this=this@entry=0x85d59cbb0, aState=..., aLine=aLine@entry=..., aKeepReflowGoing=aKeepReflowGoing@entry=0x7fffffffb780) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:3038
#52 0x000000080258582c in ReflowLine (aKeepReflowGoing=0x7fffffffb780, aLine=..., aState=..., this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:2453
#53 nsBlockFrame::ReflowDirtyLines (this=this@entry=0x85d59cbb0, aState=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1975
#54 0x0000000802586519 in nsBlockFrame::Reflow (this=0x85d59cbb0, aPresContext=0x83e97ae00, aMetrics=..., aReflowState=..., aStatus=@0x7fffffffbf30: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsBlockFrame.cpp:1003
#55 0x000000080259494d in nsContainerFrame::ReflowChild (this=this@entry=0x850d063b8, aKidFrame=aKidFrame@entry=0x85d59cbb0, aPresContext=aPresContext@entry=0x83e97ae00, aDesiredSize=..., aReflowState=..., aX=<optimized out>, aY=0, aFlags=aFlags@entry=0, aStatus=@0x7fffffffbf30: 0, aTracker=aTracker@entry=0x0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsContainerFrame.cpp:961
#56 0x000000080258e13a in nsCanvasFrame::Reflow (this=0x850d063b8, aPresContext=0x83e97ae00, aDesiredSize=..., aReflowState=..., aStatus=@0x7fffffffbf30: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsCanvasFrame.cpp:510
#57 0x000000080259494d in nsContainerFrame::ReflowChild (this=this@entry=0x850d06680, aKidFrame=0x850d063b8, aPresContext=aPresContext@entry=0x83e97ae00, aDesiredSize=..., aReflowState=..., aX=aX@entry=0, aY=aY@entry=0, aFlags=aFlags@entry=3, aStatus=@0x7fffffffbf30: 0, aTracker=aTracker@entry=0x0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsContainerFrame.cpp:961
#58 0x00000008025b9bf4 in nsHTMLScrollFrame::ReflowScrolledFrame (this=this@entry=0x850d06680, aState=aState@entry=0x7fffffffc1c0, aAssumeHScroll=<optimized out>, aAssumeVScroll=<optimized out>, aMetrics=aMetrics@entry=0x7fffffffc0b0, aFirstPass=aFirstPass@entry=true) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsGfxScrollFrame.cpp:441
#59 0x00000008025bce0c in nsHTMLScrollFrame::ReflowContents (this=this@entry=0x850d06680, aState=aState@entry=0x7fffffffc1c0, aDesiredSize=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsGfxScrollFrame.cpp:539
#60 0x00000008025bec00 in nsHTMLScrollFrame::Reflow (this=0x850d06680, aPresContext=<optimized out>, aDesiredSize=..., aReflowState=..., aStatus=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsGfxScrollFrame.cpp:777
#61 0x000000080259494d in nsContainerFrame::ReflowChild (this=this@entry=0x850a34c20, aKidFrame=aKidFrame@entry=0x850d06680, aPresContext=aPresContext@entry=0x83e97ae00, aDesiredSize=..., aReflowState=..., aX=aX@entry=0, aY=aY@entry=0, aFlags=aFlags@entry=0, aStatus=@0x7fffffffc4dc: 0, aTracker=aTracker@entry=0x0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsContainerFrame.cpp:961
#62 0x00000008026186a4 in ViewportFrame::Reflow (this=0x850a34c20, aPresContext=0x83e97ae00, aDesiredSize=..., aReflowState=..., aStatus=@0x7fffffffc4dc: 0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/generic/nsViewportFrame.cpp:222
#63 0x000000080254535a in PresShell::DoReflow (this=this@entry=0x85625c280, target=0x850a34c20, aInterruptible=aInterruptible@entry=true) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/base/nsPresShell.cpp:7905
#64 0x0000000802546032 in PresShell::ProcessReflowCommands (this=this@entry=0x85625c280, aInterruptible=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/base/nsPresShell.cpp:8046
#65 0x00000008025462af in PresShell::FlushPendingNotifications (this=0x85625c280, aFlush=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/base/nsPresShell.cpp:3863
#66 0x0000000802555956 in nsRefreshDriver::Tick (this=0x851dad200, aNowEpoch=aNowEpoch@entry=1389314047137454, aNowTime=...) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/base/nsRefreshDriver.cpp:1153
#67 0x000000080255617a in TickDriver (now=..., jsnow=1389314047137454, driver=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/base/nsRefreshDriver.cpp:166
#68 TickOne (this=0x841856b20) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/base/nsRefreshDriver.cpp:526
#69 mozilla::InactiveRefreshDriverTimer::TimerTickOne (aTimer=<optimized out>, aClosure=0x841856b20) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/layout/base/nsRefreshDriver.cpp:535
#70 0x0000000803881eea in Fire (this=0x8418ab9c0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/xpcom/threads/nsTimerImpl.cpp:546
#71 nsTimerEvent::Run (this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/xpcom/threads/nsTimerImpl.cpp:630
#72 0x000000080387dc9b in nsThread::ProcessNextEvent (this=0x8017b41a0, mayWait=<optimized out>, result=0x7fffffffca20) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/xpcom/threads/nsThread.cpp:622
#73 0x0000000803832cd8 in NS_ProcessNextEvent (thread=<optimized out>, mayWait=mayWait@entry=true) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/xpcom/glue/nsThreadUtils.cpp:238
#74 0x000000080329394b in mozilla::ipc::MessagePump::Run (this=0x811402fc0, aDelegate=0x8017a4a80) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/ipc/glue/MessagePump.cpp:116
#75 0x00000008038b90dd in RunInternal (this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/ipc/chromium/src/base/message_loop.cc:220
#76 RunHandler (this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/ipc/chromium/src/base/message_loop.cc:213
#77 MessageLoop::Run (this=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/ipc/chromium/src/base/message_loop.cc:187
#78 0x000000080320e908 in nsBaseAppShell::Run (this=0x811446940) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/widget/xpwidgets/nsBaseAppShell.cpp:161
#79 0x0000000803031bee in nsAppStartup::Run (this=0x8114e05b0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/toolkit/components/startup/nsAppStartup.cpp:269
#80 0x00000008021e37a2 in XREMain::XRE_mainRun (this=this@entry=0x7fffffffcca0) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/toolkit/xre/nsAppRunner.cpp:3869
#81 0x00000008021e3eb1 in XREMain::XRE_main (this=this@entry=0x7fffffffcca0, argc=argc@entry=3, argv=argv@entry=0x7fffffffd3d8, aAppData=aAppData@entry=0x7fffffffcf40) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/toolkit/xre/nsAppRunner.cpp:3937
#82 0x00000008021e420f in XRE_main (argc=3, argv=0x7fffffffd3d8, aAppData=0x7fffffffcf40, aFlags=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/toolkit/xre/nsAppRunner.cpp:4139
#83 0x0000000000403680 in do_main (xreDirectory=0x80171efc0, argv=0x7fffffffd3d8, argc=3) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/browser/app/nsBrowserApp.cpp:275
#84 main (argc=<optimized out>, argv=<optimized out>) at /usr/obj/ports/usr/ports/www/firefox/work/mozilla-release/browser/app/nsBrowserApp.cpp:636

Comment 1

[Andriy Gapon]

It seems that the document referenced by PresShell::mDocument had an URI of a github pull request.  It was for a private repository, so posting it makes no sense.

Comment 2

[Andriy Gapon]

Perhaps the following is relevant as well:
(gdb) fr 5
#5  Properties (this=this@entry=0x86a0f06b0) at ../../../layout/generic/nsIFrame.h:2631
2631    in ../../../layout/generic/nsIFrame.h
(gdb) p *this->mStyleContext
$14 = {
  mParent = 0x0, 
  mChild = 0x0, 
  mEmptyChild = 0x0, 
  mPrevSibling = 0x0, 
  mNextSibling = 0x0, 
  mStyleIfVisited = {
    mRawPtr = 0x0
  }, 
  mPseudoTag = {
    <nsCOMPtr_base> = {
      mRawPtr = 0x0
    }, <No data fields>}, 
  mRuleNode = 0x0, 
  mAllocations = 0x0, 
  mCachedResetData = 0x0, 
  mCachedInheritedData = {
    mStyleStructs = {
      mArray = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}
    }
  }, 
  mBits = 0, 
  mRefCnt = 0
}

Comment 3

[Andriy Gapon]

this->mStyleContext actually points into a page that is all zeros:
(gdb) p this->mStyleContext
$16 = (nsStyleContext *) 0x8182bf748
(gdb) p *(char[4096]*)0x8182bf000
$17 = '\000' <repeats 4095 times>

Adjacent pages are non-zero.
Not sure what to make out of this.

Comment 4

[Andriy Gapon]

Looks like this was caused by a defect in a cutting edge kernel that I used.
The defect caused swapped out pages to become zeroed out under some very specific conditions.