crash @ xul!txInstruction::~txInstruction+26 [c:\users\mozilla\debug-builds\mozilla-central\dom\xslt\xslt\txinstructions.h @ 33]

NEW
Unassigned

Status

()

3 years ago
2 years ago

People

(Reporter: cbook, Unassigned, NeedInfo)

Tracking

(Blocks: 1 bug, {crash})

Firefox Tracking Flags

(Not tracked)

Details

(URL)

Attachments

(3 attachments)

(Reporter)

Description

3 years ago
Created attachment 8626089 [details]
windbg information

Found via bughunter and reproduced on a win7 system trunk debug build

Steps to reproduce:

-> Load http://users.dominikanie.pl/%7Eondrash/catena/Mt1.xml

--> Crash
(Reporter)

Comment 1

3 years ago
Created attachment 8626090 [details]
bughunter stack
(Reporter)

Comment 2

3 years ago
Created attachment 8725647 [details]
windows debug build stack with todays m-c tip

still reproducible with todays trunk debug builds based on m-c tip
(Reporter)

Comment 3

3 years ago
njn, mccr8: do you know who could take a look at this ?
Flags: needinfo?(n.nethercote)
Flags: needinfo?(continuation)
Maybe peterv? The crash looks like deeply nested recursion that exhausts the stack. Maybe this is a known issue.
Flags: needinfo?(peterv)
Flags: needinfo?(n.nethercote)
Flags: needinfo?(continuation)
Jonas worked on bug 1243337, which appears to be somewhat related.
I don't think there's any relation between this and bug 1243337. Other than that both are related to XSLT.

I wonder if the problem here is simply that we tear down txInstructions recursively, and that this creates a *really* long list of instructions, meaning that we simply run out of stack space.
> I don't think there's any relation between this and bug 1243337. Other than
> that both are related to XSLT.

Indeed, that's what I meant -- that you know about this code, not that you caused the crash :)  Sorry if that wasn't clear.
You need to log in before you can comment on or make changes to this bug.