Closed Bug 111061 Opened 23 years ago Closed 23 years ago

Trunk crash [@ FrameManager::ReResolveStyleContext]

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED DUPLICATE of bug 105619

People

(Reporter: jay, Assigned: attinasi)

References

(
URL
)

Details

(Keywords: crash, topcrash)

Crash Data

This is a topcrasher with recent MozillaTrunk builds.  It looks like most of the
recent crashes were reported by the same person, but the crash URL is
consistent: http://www.iht.com/.  This is happening on all flavors of Windows,
here is the latest info from Talkback:

FrameManager::ReResolveStyleContext   18 
BBID range: 37938063 - 38247461
Min/Max Seconds since last crash: 8 - 97465
Min/Max Runtime: 12 - 97465
Crash data range: 2001-11-12 to 2001-11-19
Build ID range: 2001111209 to 2001111910
Keyword List : 
Stack Trace: 

	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1668]
	 FrameManager::ReResolveStyleContext
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 1806]
	 FrameManager::ComputeStyleChangeFor
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp  line 2066]
	 nsCSSFrameConstructor::AttributeChanged
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp 
line 10173]
	 StyleSetImpl::AttributeChanged
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp  line 1470]
	 PresShell::AttributeChanged
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5125]
	 nsDocument::AttributeChanged
[d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp  line 1796]
	 nsHTMLDocument::AttributeChanged
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLDocument.cpp  line
1272]
	 nsDOMCSSAttributeDeclaration::ParsePropertyValue
[d:\builds\seamonkey\mozilla\content\html\style\src\nsDOMCSSAttrDeclaration.cpp
 line 284]
	 CallSetProperty
[d:\builds\seamonkey\mozilla\content\html\style\src\nsDOMCSSDeclaration.cpp 
line 229]
	 nsDOMCSSDeclaration::SetHeight
[d:\builds\seamonkey\mozilla\content\html\style\src\nsDOMCSSDeclaration.cpp 
line 300]
	 XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp 
line 154]
	 XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp  line 2011]
	 XPC_WN_GetterSetter
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp 
line 1291]
	 js_Invoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 834]
	 js_InternalInvoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 925]
	 js_SetProperty
[d:\builds\seamonkey\mozilla\js\src\jsobj.c  line 2601]
	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 2648]
	 js_Invoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 850]
	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 2792]
	 js_Invoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 850]
	 js_InternalInvoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 925]
	 JS_CallFunctionValue
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3407]
	 nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 991]
	 nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp  line 182]
	 nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
1214]
	 nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
1384]
	 nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 1880]
	 nsHTMLImageElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLImageElement.cpp 
line 582]
	 PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5846]
	 PresShell::HandleEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5816]
	 nsEventStateManager::CheckForAndDispatchClick
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp  line 2456]
	 nsEventStateManager::PostHandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp  line 1539]
	 PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5867]
	 PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5771]
	 nsView::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line 375]
	 nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp  line 1874]
	 HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line 84]
	 nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 838]
	 nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 855]
	 nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 4409]
	 ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 4659]
	 nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 3375]
	 nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 1103]
	 USER32.DLL + 0x2e98 (0x77e12e98)
	 USER32.DLL + 0x30e0 (0x77e130e0)
	 USER32.DLL + 0x5824 (0x77e15824)
	 nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp  line 303]
	 main1
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1316]
	 main
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1633]
	 WinMain
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1651]
	 WinMainCRTStartup()
	 KERNEL32.DLL + 0x17d08 (0x77e97d08)
 
 	Source File :
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/html/base/src/nsFrameManager.cpp
line : 1668
     (38247461)	URL: http://www.geocities.com/wranlon/portal.html
(38247461)
Comments: Crashed when interacting with DHTML on above site.
     (38247347)	URL: http://www.geocities.com/wranlon/portal.html
(38247347)
Comments: Crashed when DHTML window was minimized.
     (38186519)	URL: http://www.iht.com/
(38186519)
Comments: crashed!!!
     (38173468)	URL: www.iht.com
(38146695)
URL: http://www.iht.com/
(38146695)
Comments: just crashing
     (38102755)	URL: http://www.iht.com/
(38100574)
URL: http://www.iht.com/
(38100574)
Comments: just crashed
     (38100011)	URL: http://www.iht.com
(38100011)
Comments: crash on load
     (38097160)	URL: http://www.iht.com
(38097160)
Comments: crash
     (38088125)	URL: http://www.iht.com
(38088125)
Comments: crash on loading
     (38039436)	URL: http://www.iht.com/
(38013962)
URL: www.iht.com
(37989288)
URL: http://www.iht.com
(37989288)
Comments: just went to site
     (37959978)	URL: www.iht.com
(37941405)
URL: www.iht.com
Keywords: crash, topcrash
*** Bug 111268 has been marked as a duplicate of this bug. ***
This crashes on MacOS 9.x as well.

Platform/OS -> All?
*** Bug 111585 has been marked as a duplicate of this bug. ***
OS: Windows 2000 → All
Hardware: PC → All
0.9.6 on Linux also.
*** Bug 112085 has been marked as a duplicate of this bug. ***
*** Bug 112087 has been marked as a duplicate of this bug. ***
I'm crashing at http://www.iht.com (the frontpage) : talkback id's TB38555303X
and TB38555268H

Build ID 2001112009 (regular 0.9.6) on Windows NT 4.0 SP 6a

*** Bug 112122 has been marked as a duplicate of this bug. ***
Noted yesterday that this is actually a dup of bug 105619. The root cause is
that style data become corrupted on that page, and the crash occurs because
style data pointers in ReResolveStyleContext simply mean nothing.
based on rbs comment, marking as dup of 105619, David please reassign if this is 
not the case

*** This bug has been marked as a duplicate of 105619 ***
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → DUPLICATE
vrfy dupe
Status: RESOLVED → VERIFIED
Crash Signature: [@ FrameManager::ReResolveStyleContext]
You need to log in before you can comment on or make changes to this bug.