1101121 - Tab crash visiting Splinter patch review page

Status: RESOLVED WORKSFORME

(Core :: General, defect)

Description

[Jim Blandy :jimb]

With a release build of changeset 084441e904d1 (M-C as of 2014-11-18), visiting the patch review link in bugzilla in a fresh profile causes Firefox to crash.

I'm running Fedora 19 on an x86_64.

Comment 1

[Jim Blandy :jimb]

To be specific: I get the "Tab crashed" page; FF as a whole doesn't crash.

Comment 2

[:Gijs (he/him)]

(In reply to Jim Blandy :jimb from comment #1)
> To be specific: I get the "Tab crashed" page; FF as a whole doesn't crash.

Are there crash reports for this in about:crashes that we can look at? :-)

Comment 3

[Jim Blandy :jimb]

I think these are they:
https://crash-stats.mozilla.com/report/index/2e7b2ff8-b4bf-450b-94e2-864d22141113
https://crash-stats.mozilla.com/report/index/052d087d-d476-471b-ad0e-1a7312141113

Comment 4

[Jim Blandy :jimb]

Those are not very informative; let me try a debug build.

Comment 5

[Jim Blandy :jimb]

Here's a stack trace from GDB:

(gdb) where
#0  0x0000003c594bd12d in nanosleep () from /lib64/libc.so.6
#1  0x0000003c594bcfc4 in sleep () from /lib64/libc.so.6
#2  0x00007ffb644e1b15 in ah_crap_handler (signum=11) at /home/jimb/moz/mc2/toolkit/xre/nsSigHandlers.cpp:101
#3  0x00007ffb644cf712 in nsProfileLock::FatalSignalHandler (signo=11, info=0x7fff1156beb0, context=0x7fff1156bd80) at /home/jimb/moz/mc2/profile/dirserviceprovider/nsProfileLock.cpp:190
#4  0x00007ffb64a7b141 in AsmJSFaultHandler (signum=11, info=0x7fff1156beb0, context=0x7fff1156bd80) at /home/jimb/moz/mc2/js/src/asmjs/AsmJSSignalHandlers.cpp:878
#5  <signal handler called>
#6  0x00007ffb63da79c4 in mozilla::ElementPropertyTransition::CurrentValuePortion (this=this@entry=0x2ce2a30) at /home/jimb/moz/mc2/layout/style/nsTransitionManager.cpp:49
#7  0x00007ffb63da873d in nsTransitionManager::ConsiderStartingTransition (this=this@entry=0xf101c0, aProperty=aProperty@entry=eCSSProperty_box_shadow, aTransition=..., aElement=aElement@entry=0x28cb1e0, aElementTransitions=@0x7fff1156c518: 0x32e3990, aOldStyleContext=aOldStyleContext@entry=0x26152e8, aNewStyleContext=aNewStyleContext@entry=0x1c86ae0, aStartedAny=aStartedAny@entry=0x7fff1156c517, aWhichStarted=aWhichStarted@entry=0x7fff1156c530) at /home/jimb/moz/mc2/layout/style/nsTransitionManager.cpp:487
#8  0x00007ffb63da99db in nsTransitionManager::StyleContextChanged (this=0xf101c0, aElement=0x28cb1e0, aOldStyleContext=aOldStyleContext@entry=0x26152e8, aNewStyleContext=aNewStyleContext@entry=0x1c86ae0) at /home/jimb/moz/mc2/layout/style/nsTransitionManager.cpp:240
#9  0x00007ffb63dc3241 in mozilla::RestyleManager::TryStartingTransition (aPresContext=0x1b4d200, aContent=<optimized out>, aOldStyleContext=0x26152e8, aNewStyleContext=aNewStyleContext@entry=0x7fff1156c6e0) at /home/jimb/moz/mc2/layout/base/RestyleManager.cpp:1941
#10 0x00007ffb63ddc126 in mozilla::ElementRestyler::RestyleSelf (this=this@entry=0x7fff1156ca00, aSelf=aSelf@entry=0x26156d0, aRestyleHint=aRestyleHint@entry=eRestyle_Self, aSwappedStructs=aSwappedStructs@entry=0x7fff1156c90c) at /home/jimb/moz/mc2/layout/base/RestyleManager.cpp:3118
#11 0x00007ffb63ddabd2 in mozilla::ElementRestyler::Restyle (this=this@entry=0x7fff1156ca00, aRestyleHint=aRestyleHint@entry=eRestyle_Self) at /home/jimb/moz/mc2/layout/base/RestyleManager.cpp:2614
#12 0x00007ffb63dddbc4 in mozilla::RestyleManager::ComputeStyleChangeFor (this=this@entry=0x1f568f0, aFrame=aFrame@entry=0x26156d0, aChangeList=aChangeList@entry=0x7fff1156cd20, aMinChange=aMinChange@entry=(unknown: 0), aRestyleTracker=..., aRestyleHint=aRestyleHint@entry=eRestyle_Self) at /home/jimb/moz/mc2/layout/base/RestyleManager.cpp:3757
#13 0x00007ffb63ddddea in mozilla::RestyleManager::ComputeAndProcessStyleChange (this=this@entry=0x1f568f0, aFrame=aFrame@entry=0x26156d0, aMinChange=aMinChange@entry=(unknown: 0), aRestyleTracker=..., aRestyleHint=aRestyleHint@entry=eRestyle_Self) at /home/jimb/moz/mc2/layout/base/RestyleManager.cpp:3699
#14 0x00007ffb63dde1bc in mozilla::RestyleManager::RestyleElement (this=0x1f568f0, aElement=aElement@entry=0x28cb1e0, aPrimaryFrame=<optimized out>, aPrimaryFrame@entry=0x26156d0, aMinHint=aMinHint@entry=(unknown: 0), aRestyleTracker=..., aRestyleHint=aRestyleHint@entry=eRestyle_Self) at /home/jimb/moz/mc2/layout/base/RestyleManager.cpp:942
#15 0x00007ffb63dde71c in mozilla::RestyleTracker::ProcessOneRestyle (this=this@entry=0x1f56940, aElement=aElement@entry=0x28cb1e0, aRestyleHint=eRestyle_Self, aChangeHint=aChangeHint@entry=(unknown: 0)) at /home/jimb/moz/mc2/layout/base/RestyleTracker.cpp:177
#16 0x00007ffb63ddf289 in mozilla::RestyleTracker::DoProcessRestyles (this=this@entry=0x1f56940) at /home/jimb/moz/mc2/layout/base/RestyleTracker.cpp:280
#17 0x00007ffb63ddf9db in ProcessRestyles (this=0x1f56940) at /home/jimb/moz/mc2/layout/base/RestyleTracker.h:277
#18 mozilla::RestyleManager::ProcessPendingRestyles (this=0x1f568f0) at /home/jimb/moz/mc2/layout/base/RestyleManager.cpp:1598
#19 0x00007ffb63e8ef6a in PresShell::FlushPendingNotifications (this=0x12be540, aFlush=...) at /home/jimb/moz/mc2/layout/base/nsPresShell.cpp:4304
#20 0x00007ffb63e8f1bd in PresShell::FlushPendingNotifications (this=<optimized out>, aType=<optimized out>) at /home/jimb/moz/mc2/layout/base/nsPresShell.cpp:4183
#21 0x00007ffb634e1bf9 in mozilla::EventStateManager::FlushPendingEvents (this=this@entry=0x30d6ac0, aPresContext=aPresContext@entry=0x1b4d200) at /home/jimb/moz/mc2/dom/events/EventStateManager.cpp:4870
#22 0x00007ffb634f0fc3 in mozilla::EventStateManager::PreHandleEvent (this=0x30d6ac0, aPresContext=aPresContext@entry=0x1b4d200, aEvent=aEvent@entry=0x7fff1156e310, aTargetFrame=aTargetFrame@entry=0x2976f50, aStatus=aStatus@entry=0x7fff1156e15c) at /home/jimb/moz/mc2/dom/events/EventStateManager.cpp:618
#23 0x00007ffb63e950e6 in PresShell::HandleEventInternal (this=this@entry=0x12be540, aEvent=aEvent@entry=0x7fff1156e310, aStatus=aStatus@entry=0x7fff1156e15c) at /home/jimb/moz/mc2/layout/base/nsPresShell.cpp:8175
#24 0x00007ffb63e9557c in PresShell::HandlePositionedEvent (this=this@entry=0x12be540, aTargetFrame=aTargetFrame@entry=0x2976f50, aEvent=aEvent@entry=0x7fff1156e310, aEventStatus=aEventStatus@entry=0x7fff1156e15c) at /home/jimb/moz/mc2/layout/base/nsPresShell.cpp:7924
#25 0x00007ffb63e970af in PresShell::HandleEvent (this=<optimized out>, aFrame=<optimized out>, aEvent=<optimized out>, aDontRetargetEvents=<optimized out>, aEventStatus=0x7fff1156e15c) at /home/jimb/moz/mc2/layout/base/nsPresShell.cpp:7721
#26 0x00007ffb63b4e45a in nsViewManager::DispatchEvent (this=this@entry=0x1a8ca30, aEvent=aEvent@entry=0x7fff1156e310, aView=aView@entry=0x1a8cad0, aStatus=aStatus@entry=0x7fff1156e15c) at /home/jimb/moz/mc2/view/nsViewManager.cpp:775
#27 0x00007ffb63b49b68 in nsView::HandleEvent (this=<optimized out>, aEvent=0x7fff1156e310, aUseAttachedEvents=<optimized out>) at /home/jimb/moz/mc2/view/nsView.cpp:1097
#28 0x00007ffb63b83f1e in nsWindow::DispatchEvent (this=0x19c9f50, aEvent=0x7fff1156e310, aStatus=@0x7fff1156e244: nsEventStatus_eIgnore) at /home/jimb/moz/mc2/widget/gtk/nsWindow.cpp:479
#29 0x00007ffb63b89f80 in nsWindow::OnMotionNotifyEvent (this=0x19c9f50, aEvent=aEvent@entry=0x7ffa8c002330) at /home/jimb/moz/mc2/widget/gtk/nsWindow.cpp:2577
#30 0x00007ffb63b89fcc in motion_notify_event_cb (widget=<optimized out>, event=0x7ffa8c002330) at /home/jimb/moz/mc2/widget/gtk/nsWindow.cpp:5305
#31 0x0000003c6c94167c in _gtk_marshal_BOOLEAN__BOXED () from /lib64/libgtk-x11-2.0.so.0
#32 0x0000003c5c40fa28 in g_closure_invoke () from /lib64/libgobject-2.0.so.0
#33 0x0000003c5c420a1d in signal_emit_unlocked_R () from /lib64/libgobject-2.0.so.0
#34 0x0000003c5c428422 in g_signal_emit_valist () from /lib64/libgobject-2.0.so.0
#35 0x0000003c5c428a32 in g_signal_emit () from /lib64/libgobject-2.0.so.0
#36 0x0000003c6ca69224 in gtk_widget_event_internal () from /lib64/libgtk-x11-2.0.so.0
#37 0x0000003c6c93f8c4 in gtk_propagate_event () from /lib64/libgtk-x11-2.0.so.0
#38 0x0000003c6c93fc8b in gtk_main_do_event () from /lib64/libgtk-x11-2.0.so.0
#39 0x0000003c6d45ea3c in gdk_event_dispatch () from /lib64/libgdk-x11-2.0.so.0
#40 0x0000003c5b847dc6 in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#41 0x0000003c5b848118 in g_main_context_iterate.isra.22 () from /lib64/libglib-2.0.so.0
#42 0x0000003c5b8481bc in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#43 0x00007ffb63b9133c in nsAppShell::ProcessNextNativeEvent (this=<optimized out>, mayWait=<optimized out>) at /home/jimb/moz/mc2/widget/gtk/nsAppShell.cpp:156
#44 0x00007ffb63b5e5c6 in nsBaseAppShell::DoProcessNextNativeEvent (this=this@entry=0xd49ba0, mayWait=<optimized out>, recursionDepth=recursionDepth@entry=0) at /home/jimb/moz/mc2/widget/nsBaseAppShell.cpp:140
#45 0x00007ffb63b5e6f7 in nsBaseAppShell::OnProcessNextEvent (this=0xd49ba0, thr=0x953860, mayWait=true, recursionDepth=0) at /home/jimb/moz/mc2/widget/nsBaseAppShell.cpp:298
#46 0x00007ffb620e5120 in nsThread::ProcessNextEvent (this=0x953860, aMayWait=<optimized out>, aResult=0x7fff1156ebff) at /home/jimb/moz/mc2/xpcom/threads/nsThread.cpp:801
#47 0x00007ffb621119df in NS_ProcessNextEvent (aThread=<optimized out>, aMayWait=aMayWait@entry=true) at /home/jimb/moz/mc2/xpcom/glue/nsThreadUtils.cpp:265
#48 0x00007ffb6244319e in mozilla::ipc::MessagePump::Run (this=0x950870, aDelegate=0x953010) at /home/jimb/moz/mc2/ipc/glue/MessagePump.cpp:140
#49 0x00007ffb624258e8 in MessageLoop::RunInternal (this=this@entry=0x953010) at /home/jimb/moz/mc2/ipc/chromium/src/base/message_loop.cc:233
#50 0x00007ffb62425c37 in RunHandler (this=0x953010) at /home/jimb/moz/mc2/ipc/chromium/src/base/message_loop.cc:226
#51 MessageLoop::Run (this=0x953010) at /home/jimb/moz/mc2/ipc/chromium/src/base/message_loop.cc:200
#52 0x00007ffb63b56aa3 in nsBaseAppShell::Run (this=0xd49ba0) at /home/jimb/moz/mc2/widget/nsBaseAppShell.cpp:164
#53 0x00007ffb6446ecdd in nsAppStartup::Run (this=0xcfdf80) at /home/jimb/moz/mc2/toolkit/components/startup/nsAppStartup.cpp:281
#54 0x00007ffb644df39c in XREMain::XRE_mainRun (this=this@entry=0x7fff1156f0c0) at /home/jimb/moz/mc2/toolkit/xre/nsAppRunner.cpp:4150
#55 0x00007ffb644df7a4 in XREMain::XRE_main (this=this@entry=0x7fff1156f0c0, argc=argc@entry=4, argv=argv@entry=0x7fff11570598, aAppData=aAppData@entry=0x7fff1156f2c0) at /home/jimb/moz/mc2/toolkit/xre/nsAppRunner.cpp:4226
#56 0x00007ffb644dfa62 in XRE_main (argc=4, argv=0x7fff11570598, aAppData=0x7fff1156f2c0, aFlags=<optimized out>) at /home/jimb/moz/mc2/toolkit/xre/nsAppRunner.cpp:4446
#57 0x0000000000404239 in do_main (argc=argc@entry=4, argv=argv@entry=0x7fff11570598, xreDirectory=0x845010) at /home/jimb/moz/mc2/browser/app/nsBrowserApp.cpp:287
#58 0x0000000000404368 in main (argc=4, argv=0x7fff11570598) at /home/jimb/moz/mc2/browser/app/nsBrowserApp.cpp:656
(gdb)

Comment 6

[Jim Blandy :jimb]

Here's the assertion failure:

Assertion failure: !GetLocalTime().IsNull() (Getting the value portion of an animation that's not being sampled), at /home/jimb/moz/mc2/layout/style/nsTransitionManager.cpp:51

Comment 7

[Jim Blandy :jimb]

Could be the same crash as bug 1072683; the stack looks very similar. That wasn't reproducible in-house.

Comment 8

[Paul Pasca[Away. Please needinfo? Paul Oiegas [:pauloiegasSV]]]

Based on Socorro reports from last 28 days, this crash signature was not encountered anymore. Considering this I will mark the issue as RESOLVED WORKSFORME. If you still encounter this crash, feel free to reopen this issue.

Comment 9

[Firefox Bug Husbandry Bot]

Moving from Core::Untriaged to Core::General https://bugzilla.mozilla.org/show_bug.cgi?id=1407598