1194559 - Crash (null ptr deref) in nsLayoutUtils::CalculateAndSetDisplayPortMargins

Status: RESOLVED DUPLICATE of bug 1190936

(Core :: Layout, defect)

Description

[Brian Carpenter [:geeknik]]

Visiting the NSFW link http://www.celebjihad.com/celeb-jihad/miley-cyrus-backstage-sex-tape-released causes Firefox Nightly (Built from https://hg.mozilla.org/mozilla-central/rev/07befc6f54e7) to crash.

Crashes on an old profile, but not a clean profile. In fact, after it crashed on the old profile, I'm no longer able to repro this. I did notice the site launched a pop-up that never returned, maybe that is responsible for causing this?

Crash Reports:
https://crash-stats.mozilla.com/report/index/afba0a57-20b3-4dd9-82cf-2abc92150807
https://crash-stats.mozilla.com/report/index/4b82f6c8-eba7-4005-8ba0-19d602150807

WinDBG Output:
(b440.b414): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins+0x48:
00007ffc`84cc3074 488b7018        mov     rsi,qword ptr [rax+18h] ds:00000000`00000018=????????????????
0:000> ~* kp

.  0  Id: b440.b414 Suspend: 1 Teb: 00007ff6`428be000 Unfrozen
Child-SP          RetAddr           Call Site
000000ec`1d7fe160 00007ffc`842bf996 xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins(class nsIScrollableFrame * aScrollFrame = 0x00000000`00000000, nsLayoutUtils::RepaintMode aRepaintMode = Repaint (0))+0x48 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\layout\base\nslayoututils.cpp @ 2982]
000000ec`1d7fe320 00007ffc`842c0b8e xul!mozilla::layers::PrepareForSetTargetAPZCNotification(class nsIWidget * aWidget = 0x000000ec`31610800, struct mozilla::layers::ScrollableLayerGuid * aGuid = 0x000000ec`31610800, class nsIFrame * aRootFrame = 0x000000ec`1d7fe640, struct mozilla::gfx::IntPointTyped<mozilla::LayoutDevicePixel> * aRefPoint = 0x00000000`00000000, class nsTArray<mozilla::layers::ScrollableLayerGuid> * aTargets = 0x000000ec`1d7fe4b0)+0x1b6 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\gfx\layers\apz\util\apzccallbackhelper.cpp @ 636]
000000ec`1d7fe450 00007ffc`84bb5fed xul!mozilla::layers::APZCCallbackHelper::SendSetTargetAPZCNotification(class nsIWidget * aWidget = 0x000000ec`37fb2200, class nsIDocument * aDocument = 0x000000ec`1d7fe640, class mozilla::WidgetGUIEvent * aEvent = 0x000000ec`1d7fe580, struct mozilla::layers::ScrollableLayerGuid * aGuid = 0x44158000`43610000, unsigned int64 aInputBlockId = 1)+0xea [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\gfx\layers\apz\util\apzccallbackhelper.cpp @ 741]
000000ec`1d7fe4b0 00007ffc`84bb5455 xul!nsBaseWidget::ProcessUntransformedAPZEvent(class mozilla::WidgetInputEvent * aEvent = 0x00007ffc`83abe296, struct mozilla::layers::ScrollableLayerGuid * aGuid = 0x000000ec`31603c00, unsigned int64 aInputBlockId = 0xec`1d7fe5b0, nsEventStatus aApzResponse = nsEventStatus_eConsumeNoDefault (1))+0x1bd [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\nsbasewidget.cpp @ 1006]
000000ec`1d7fe550 00007ffc`84bf9ead xul!nsBaseWidget::DispatchAPZAwareEvent(class mozilla::WidgetInputEvent * aEvent = 0x00007ffc`855ecd88)+0x61 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\nsbasewidget.cpp @ 1039]
000000ec`1d7fe5b0 00007ffc`84bd8e9f xul!nsWindow::DispatchWheelEvent(class mozilla::WidgetWheelEvent * aEvent = 0x000000ec`1d7fe6e0)+0x25 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 3879]
000000ec`1d7fe5e0 00007ffc`83e6d5d4 xul!mozilla::widget::MouseScrollHandler::HandleMouseWheelMessage(class nsWindowBase * aWidget = 0x00000000`00008310, unsigned int aMessage = 0x27100e5, unsigned int64 aWParam = 0x8310, int64 aLParam = 40960229)+0x173 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\winmousescrollhandler.cpp @ 637]
000000ec`1d7fe760 00007ffc`838466ec xul!mozilla::widget::MouseScrollHandler::ProcessMessage+0x33f904 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\winmousescrollhandler.cpp @ 217]
000000ec`1d7fe7a0 00007ffc`83842d2c xul!nsWindow::ExternalHandlerProcessMessage(unsigned int aMessage = 0x8310, unsigned int64 * aWParam = 0x000000ec`1d7feaa8, int64 * aLParam = 0x0000437c`8d9fb68e, struct mozilla::widget::MSGResult * aResult = 0x000000ec`1d7fe9f0)+0x88 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4666]
000000ec`1d7fe850 00007ffc`83a4cce0 xul!nsWindow::ProcessMessage(unsigned int msg = 0x8310, unsigned int64 * wParam = 0x000000ec`31603c00, int64 * lParam = 0x000000ec`31603c00, int64 * aRetValue = 0x000000ec`1d7feaa8)+0x68 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4692]
000000ec`1d7fea60 00007ffc`83a4cbee xul!nsWindow::WindowProcInternal(struct HWND__ * hWnd = 0x00007ffc`83a4cc10, unsigned int msg = 0x8310, unsigned int64 wParam = 0xfb500000, int64 lParam = 40960229)+0xd0 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4561]
000000ec`1d7fead0 00007ffc`83a4cbb0 xul!CallWindowProcCrashProtected(<function> * aWndProc = 0x00000000`00008310, struct HWND__ * aHWnd = 0x00000000`fb500000, unsigned int aMsg = 0x83a4cb3c, unsigned int64 aWParam = 0, int64 aLParam = 40960229)+0x22 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\xpcom\base\nscrashonexception.cpp @ 35]
000000ec`1d7feb00 00007ffc`b3ce250d xul!nsWindow::WindowProc(struct HWND__ * hWnd = 0x00000000`00000001, unsigned int msg = 0x1d7fecd9, unsigned int64 wParam = 0x8310, int64 lParam = 5832790)+0x74 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4514]
000000ec`1d7feb40 00007ffc`b3ce2367 USER32!UserCallWinProcCheckWow+0x149
000000ec`1d7fec10 00007ffc`83487be1 USER32!DispatchMessageWorker+0x1a7
000000ec`1d7fec90 00007ffc`834875ff xul!nsAppShell::ProcessNextNativeEvent(bool mayWait = true)+0x1a1 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nsappshell.cpp @ 303]
000000ec`1d7fed40 00007ffc`83488580 xul!nsBaseAppShell::OnProcessNextEvent(class nsIThreadInternal * thr = 0x00000000`0000001e, bool mayWait = false, unsigned int recursionDepth = 0x29633478)+0xbb [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\nsbaseappshell.cpp @ 281]
000000ec`1d7fedb0 00007ffc`8348712a xul!nsThread::ProcessNextEvent(bool aMayWait = false, bool * aResult = 0x000000ec`1d7fefa0)+0x174 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\xpcom\threads\nsthread.cpp @ 840]
000000ec`1d7fef40 00007ffc`8369b503 xul!mozilla::ipc::MessagePump::Run(class base::MessagePump::Delegate * aDelegate = 0x000000ec`1f733280)+0x7a [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\ipc\glue\messagepump.cpp @ 95]
000000ec`1d7fefa0 00007ffc`8369b19e xul!MessageLoop::RunHandler(void)+0x17 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\ipc\chromium\src\base\message_loop.cc @ 228]
           ^ User interrupted operation error in '~* kp'
0:000> !analyze -v -f
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\Nightly\icudt55.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\Bonjour\mdnsNSP.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\nvspcap64.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Users\Brian\AppData\Roaming\Mozilla\Firefox\Profiles\m6g9gh4p.default-1408128902607\extensions\[e-mail]\platform\WINNT_x86_64-msvc\components\lpxpcom_x86_64.dll - 
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files (x86)\Stardock\Start8\Start8_64.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\nvapi64.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\SYSTEM32\nvwgf2umx.dll - 

FAULTING_IP: 
xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins+48 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\layout\base\nslayoututils.cpp @ 2982]
00007ffc`84cc3074 488b7018        mov     rsi,qword ptr [rax+18h]

EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00007ffc84cc3074 (xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins+0x0000000000000048)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000000000018
Attempt to read from address 0000000000000018

FAULTING_THREAD:  000000000000b414

PROCESS_NAME:  firefox.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000018

READ_ADDRESS:  0000000000000018 

FOLLOWUP_IP: 
xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins+48 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\layout\base\nslayoututils.cpp @ 2982]
00007ffc`84cc3074 488b7018        mov     rsi,qword ptr [rax+18h]

NTGLOBALFLAG:  70

APPLICATION_VERIFIER_FLAGS:  0

DEFAULT_BUCKET_ID:  INVALID_POINTER_READ

PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ

BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ_NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 00007ffc842bf996 to 00007ffc84cc3074

STACK_TEXT:  
000000ec`1d7fe160 00007ffc`842bf996 : 00000000`00000000 00000000`00000000 000000ec`1d7fe4b0 00000000`00000000 : xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins+0x48 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\layout\base\nslayoututils.cpp @ 2982]
000000ec`1d7fe320 00007ffc`842c0b8e : 000000ec`31610800 000000ec`31610800 000000ec`1d7fe640 00000000`00000000 : xul!mozilla::layers::PrepareForSetTargetAPZCNotification+0x1b6 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\gfx\layers\apz\util\apzccallbackhelper.cpp @ 636]
000000ec`1d7fe450 00007ffc`84bb5fed : 000000ec`37fb2200 000000ec`1d7fe640 000000ec`1d7fe580 44158000`43610000 : xul!mozilla::layers::APZCCallbackHelper::SendSetTargetAPZCNotification+0xea [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\gfx\layers\apz\util\apzccallbackhelper.cpp @ 741]
000000ec`1d7fe4b0 00007ffc`84bb5455 : 000000ec`31603c00 00007ffc`83abe296 000000ec`31603c00 000000ec`1d7fe5b0 : xul!nsBaseWidget::ProcessUntransformedAPZEvent+0x1bd [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\nsbasewidget.cpp @ 1006]
000000ec`1d7fe550 00007ffc`84bf9ead : 000000ec`1d7fe9f0 00007ffc`855ecd88 00000000`00000001 000000ec`31603c00 : xul!nsBaseWidget::DispatchAPZAwareEvent+0x61 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\nsbasewidget.cpp @ 1039]
000000ec`1d7fe5b0 00007ffc`84bd8e9f : 000000ec`31603c00 000000ec`1d7fe6e0 00000000`00008310 000000ec`4103f0e0 : xul!nsWindow::DispatchWheelEvent+0x25 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 3879]
000000ec`1d7fe5e0 00007ffc`83e6d5d4 : 00000000`00000080 00000000`00008310 00000000`027100e5 00000000`00008310 : xul!mozilla::widget::MouseScrollHandler::HandleMouseWheelMessage+0x173 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\winmousescrollhandler.cpp @ 637]
000000ec`1d7fe760 00007ffc`838466ec : 000000ec`31603c00 000000ec`1d7fe7f1 000000ec`1d7feae0 000000ec`1d7feae8 : xul!mozilla::widget::MouseScrollHandler::ProcessMessage+0x33f904 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\winmousescrollhandler.cpp @ 217]
000000ec`1d7fe7a0 00007ffc`83842d2c : 00000000`00008310 00000000`00008310 000000ec`1d7feaa8 0000437c`8d9fb68e : xul!nsWindow::ExternalHandlerProcessMessage+0x88 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4666]
000000ec`1d7fe850 00007ffc`83a4cce0 : 00000000`00590056 00000000`00008310 000000ec`31603c00 000000ec`31603c00 : xul!nsWindow::ProcessMessage+0x68 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4692]
000000ec`1d7fea60 00007ffc`83a4cbee : 00007ffc`83a4cc10 00000000`00008310 00000000`fb500000 00000000`027100e5 : xul!nsWindow::WindowProcInternal+0xd0 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4561]
000000ec`1d7fead0 00007ffc`83a4cbb0 : 00000000`00008310 00000000`fb500000 00007ffc`83a4cb3c 00000000`00000000 : xul!CallWindowProcCrashProtected+0x22 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\xpcom\base\nscrashonexception.cpp @ 35]
000000ec`1d7feb00 00007ffc`b3ce250d : 00000000`00000001 000000ec`1d7fecd9 00000000`00008310 00000000`00590056 : xul!nsWindow::WindowProc+0x74 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nswindow.cpp @ 4514]
000000ec`1d7feb40 00007ffc`b3ce2367 : 000000ec`1dd7d540 000000ec`1d7fece8 00000000`00590056 00007ffc`837d4329 : USER32!UserCallWinProcCheckWow+0x149
000000ec`1d7fec10 00007ffc`83487be1 : 000000ec`29633400 000000ec`29633400 00000000`00000001 00007ffc`b3a78a78 : USER32!DispatchMessageWorker+0x1a7
000000ec`1d7fec90 00007ffc`834875ff : 000000ec`00000001 000000ec`29633478 000000ec`29633470 00007ffc`a25d8d4e : xul!nsAppShell::ProcessNextNativeEvent+0x1a1 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nsappshell.cpp @ 303]
000000ec`1d7fed40 00007ffc`83488580 : 00000000`00000000 00000000`0000001e 000000ec`1f73b400 000000ec`29633478 : xul!nsBaseAppShell::OnProcessNextEvent+0xbb [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\nsbaseappshell.cpp @ 281]
000000ec`1d7fedb0 00007ffc`8348712a : 000000ec`1f724801 000000ec`1f724800 000000ec`1d7fefa0 00007ffc`85594d48 : xul!nsThread::ProcessNextEvent+0x174 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\xpcom\threads\nsthread.cpp @ 840]
000000ec`1d7fef40 00007ffc`8369b503 : 000000ec`2aa2f401 000000ec`1f733280 000000ec`1d7ff410 00007ffc`94bbaced : xul!mozilla::ipc::MessagePump::Run+0x7a [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\ipc\glue\messagepump.cpp @ 95]
000000ec`1d7fefa0 00007ffc`8369b19e : 000000ec`2aa2f448 000000ec`1d7feff0 00007ffc`85fddbb0 00007ffc`834863ae : xul!MessageLoop::RunHandler+0x17 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\ipc\chromium\src\base\message_loop.cc @ 228]
000000ec`1d7fefd0 00007ffc`83487824 : 000000ec`29633470 000000ec`2b0f2cf0 000000ec`1f731550 00000000`80000000 : xul!MessageLoop::Run+0x3e [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\ipc\chromium\src\base\message_loop.cc @ 202]
000000ec`1d7ff020 00007ffc`83487cd7 : 000000ec`29633470 000000ec`29633470 000000ec`1d7ff410 000000ec`1f731550 : xul!nsBaseAppShell::Run+0x3c [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\nsbaseappshell.cpp @ 167]
000000ec`1d7ff050 00007ffc`837e8557 : 00000000`00000000 000000ec`1f707530 00000000`00000001 0000aba5`82742a89 : xul!nsAppShell::Run+0x27 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\widget\windows\nsappshell.cpp @ 180]
000000ec`1d7ff080 00007ffc`838d62c8 : 000000ec`2f932b40 000000ec`1d7ff410 00000000`00000000 00000000`00000001 : xul!nsAppStartup::Run+0x27 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\toolkit\components\startup\nsappstartup.cpp @ 281]
000000ec`1d7ff0b0 00007ffc`838d7509 : 000000ec`1f74e280 00000000`00000000 000000ec`1d7ff410 000000ec`1d7ff448 : xul!XREMain::XRE_mainRun+0x5c0 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\toolkit\xre\nsapprunner.cpp @ 4288]
000000ec`1d7ff340 00007ffc`83b7c4f7 : 000000ec`1d94a900 000000ec`1d7f0000 000000ec`1f7247c0 00000000`00000000 : xul!XREMain::XRE_main+0x179 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\toolkit\xre\nsapprunner.cpp @ 4385]
000000ec`1d7ff3b0 00007ff6`437217d2 : 000000ec`1f7311d0 000000ec`1d94a900 00000000`00000001 00000000`00000001 : xul!XRE_main+0x53 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\toolkit\xre\nsapprunner.cpp @ 4475]
000000ec`1d7ff5a0 00007ff6`437213da : 00000000`00000001 00000000`00000001 000000ec`1f73b270 00000000`00000001 : firefox!do_main+0x142 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\browser\app\nsbrowserapp.cpp @ 212]
000000ec`1d7ff7c0 00007ff6`43721244 : 00000000`00000000 00007ff6`428b8000 00000000`00000000 000000ec`1d94a908 : firefox!NS_internal_main+0x10a [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\browser\app\nsbrowserapp.cpp @ 401]
000000ec`1d7ff880 00007ff6`43722728 : 00000000`00000000 00007ff6`428b8000 00000000`00000000 00000000`00000001 : firefox!wmain+0x184 [c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\toolkit\xre\nswindowswmain.cpp @ 138]
000000ec`1d7ff8e0 00007ffc`b39613d2 : 00000000`00000000 00007ff6`43722790 00000000`00000000 00000000`00000000 : firefox!__tmainCRTStartup+0x144 [f:\dd\vctools\crt\crtw32\startup\crt0.c @ 255]
000000ec`1d7ff920 00007ffc`b4795444 : 00007ffc`b39613b0 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x22
000000ec`1d7ff950 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x34


FAULTING_SOURCE_CODE:  
No source found for 'c:\builds\moz2_slave\m-cen-w64-ntly-000000000000000\build\src\layout\base\nslayoututils.cpp'


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins+48

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: xul

IMAGE_NAME:  xul.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  55c365b9

STACK_COMMAND:  ~0s ; kb

FAILURE_BUCKET_ID:  INVALID_POINTER_READ_c0000005_xul.dll!nsLayoutUtils::CalculateAndSetDisplayPortMargins

BUCKET_ID:  X64_APPLICATION_FAULT_INVALID_POINTER_READ_NULL_CLASS_PTR_DEREFERENCE_xul!nsLayoutUtils::CalculateAndSetDisplayPortMargins+48

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/firefox_exe/42_0_0_5696/55c35004/xul_dll/42_0_0_5696/55c365b9/c0000005/01893074.htm?Retriage=1

Followup: MachineOwner

Comment 1

[Mats Palmgren (inactive)]

Looks like the code in question was written by kats and botond.

Comment 2

[Kartikaya Gupta (email:[e-mail])]

This is a dupe of bug 1190936. I noticed that both of your crash reports are from the August 06 nightly, which is just before the patch from that bug landed.