Closed Bug 1200015 Opened 9 years ago Closed 5 years ago

repeated crashes under nsImageFrame::OnFrameUpdate

Categories

(Core :: Layout: Images, Video, and HTML Frames, defect)

40 Branch
defect
Not set
normal

Tracking

()

RESOLVED WONTFIX

People

(Reporter: david.hagood, Unassigned, NeedInfo)

References

Details

(Keywords: crash)

Crash Data

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:40.0) Gecko/20100101 Firefox/40.0
Build ID: 20150826023504

Steps to reproduce:

Just about anything, from pressing any key to refreshing a page to just waiting.


Actual results:

Crash in OnFrameUpdate (see ID: 405947d1-15fb-46a7-81c5-115512150830 among others)


Expected results:

Browser shouldn't crash. If there is an assertion failure, at least log the failure in a meaningful fashion so it can be debugged.
Correction: ID: 7e71fbe7-70a9-4f1f-9667-9e9e52150830, although I also get a lot of crashes in nsImageLoadingContent::GetFramePresContext() as well.
>Correction: ID: 7e71fbe7-70a9-4f1f-9667-9e9e52150830
[@ nsImageFrame::OnFrameUpdate(imgIRequest*, mozilla::gfx::IntRectTyped<T> const*) ]
https://crash-stats.mozilla.com/report/index/7e71fbe7-70a9-4f1f-9667-9e9e52150830

From the duplicate bug 1200016 [@ nsImageFrame::IsPendingLoad(imgIRequest*) const ]
https://crash-stats.mozilla.com/report/index/9c7b1e7d-46e0-48e6-9091-c25532150830

From the duplicate bug 1200017 [@ nsStyleVisibility const* nsStyleContext::DoGetStyleVisibility<T>() ]
https://crash-stats.mozilla.com/report/index/63faf857-8a21-41af-8801-d7c842150830

All three have basically the same stack, but the latter two have one more frame at the top.
> nsImageFrame::OnFrameUpdate
> nsImageFrame::Notify
> nsImageLoadingContent::Notify
> imgRequestProxy::Notify
> mozilla::image::ProgressTracker::SyncNotifyInternal
> mozilla::image::ProgressTracker::SyncNotifyProgress
> mozilla::image::RasterImage::NotifyProgress
> mozilla::image::RasterImage::FinalizeDecoder
> mozilla::image::NotifyDecodeCompleteWorker::Run
> nsThread::ProcessNextEvent

the other bug you filed, bug 1190177, shares the nsImageLoadingContent::Notify frame with these, although the rest is different.

Not sure there's enough information here to fix the crash. The best thing you could do to help figuring this out is to go through the troubleshooting process <https://support.mozilla.org/en-US/kb/troubleshoot-extensions-themes-to-fix-problems> and figure out if there's a particular extension or setting that causes the crash.
Crash Signature: [@ nsImageFrame::OnFrameUpdate(imgIRequest*, mozilla::gfx::IntRectTyped<T> const*) ] [@ nsImageFrame::IsPendingLoad(imgIRequest*) const ] [@ nsStyleVisibility const* nsStyleContext::DoGetStyleVisibility<T>() ]
Component: Untriaged → Layout: Images
Flags: needinfo?(david.hagood)
Keywords: crash
Product: Firefox → Core
Blocks: 1190177
Summary: nsImageFrame::OnFrameUpdate(imgIRequest*, mozilla::gfx::IntRectTyped<T> const*) → repeated crashes under nsImageFrame::OnFrameUpdate
Crash Signature: [@ nsImageFrame::OnFrameUpdate(imgIRequest*, mozilla::gfx::IntRectTyped<T> const*) ] [@ nsImageFrame::IsPendingLoad(imgIRequest*) const ] [@ nsStyleVisibility const* nsStyleContext::DoGetStyleVisibility<T>() ] → [@ nsImageFrame::OnFrameUpdate(imgIRequest*, mozilla::gfx::IntRectTyped<T> const*) ] [@ nsImageFrame::IsPendingLoad(imgIRequest*) const ] [@ nsStyleVisibility const* nsStyleContext::DoGetStyleVisibility<T>() ] [@ nsImageFrame::OnFrameUpdate ] [@ nsIma…
Product: Core → Core Graveyard
Product: Core Graveyard → Core
Closing because no crashes reported for 12 weeks.
Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Resolution: --- → WONTFIX
Closing because no crashes reported for 12 weeks.
You need to log in before you can comment on or make changes to this bug.