125518 - Trunk M099 theme switch crash [@ nsRuleNode::ComputePositionData]

Reporter

Description

•

23 years ago

I hate to add another theme switch crash to the pile, but I haven't found a
match for this one in existing bugs. Please feel free to dupe this one if I have
missed it somewhere. cc'ing blake. Looks like the same crash as bug 121055.

This signature is showing up in the M098 topcrash data and has 9 incidents on
the Trunk. I've tried some of the steps listed in the user comments but I've had
no success recreating this one yet.


nsRuleNode::ComputePositionData
[d:\builds\seamonkey\mozilla\content\base\src\nsRuleNode.cpp  line 3854]
         nsRuleNode::WalkRuleTree
[d:\builds\seamonkey\mozilla\content\base\src\nsRuleNode.cpp  line 1579]
         nsRuleNode::GetPositionData
[d:\builds\seamonkey\mozilla\content\base\src\nsRuleNode.cpp  line 1366]
         nsRuleNode::GetStyleData
[d:\builds\seamonkey\mozilla\content\base\src\nsRuleNode.cpp  line 4728]
         nsStyleContext::GetStyleData
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp  line 366]
         nsHTMLContainerFrame::CreateViewForFrame
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLContainerFrame.cpp  line
465]
         nsCSSFrameConstructor::ConstructHTMLFrame
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp 
line 4627]
         nsCSSFrameConstructor::ConstructFrameInternal
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp 
line 6993]
         nsCSSFrameConstructor::ConstructFrame
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp 
line 6888]
         nsCSSFrameConstructor::ContentAppended
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp 
line 8090]
         StyleSetImpl::ContentAppended
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp  line 1436]
         PresShell::ContentAppended
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5143]
         nsDocument::ContentAppended
[d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp  line 1868]
         nsHTMLDocument::ContentAppended
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLDocument.cpp  line
1234]
         HTMLContentSink::NotifyAppend
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp 
line 4745]
         SinkContext::FlushTags
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp 
line 2151]
         HTMLContentSink::FlushPendingNotifications
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp 
line 5248]
         nsHTMLDocument::FlushPendingNotifications
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLDocument.cpp  line
1387]
         GlobalWindowImpl::FlushPendingNotifications
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp  line 4342]
         GlobalWindowImpl::GetFrames
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp  line 2541]
         XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp 
line 106]
         XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp  line 2000]
         XPC_WN_GetterSetter
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp 
line 1299]
         js_Invoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 834]
         js_InternalInvoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c 
line 925]
         js_GetProperty [d:\builds\seamonkey\mozilla\js\src\jsobj.c  line 2448]
         js_Interpret   [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 2632]
         js_Invoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 850]
         nsXPCWrappedJSClass::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjsclass.cpp  line 1203]
         nsXPCWrappedJS::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjs.cpp  line 430]
         PrepareAndDispatch
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp 
line 117]
         SharedStub
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp 
line 139]
         nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
1206]
         nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
1725]
         nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3359]
         nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3340]
         nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3340]
         nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3340]
         nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3340]
         nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 3340]
         nsXULElement::HandleChromeEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line 4568]
         GlobalWindowImpl::HandleDOMEvent
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp  line 635]
         nsDocument::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp  line 3238]
         nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 1633]
         nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 1627]
         nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 1627]
         nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 1627]
         nsGenericHTMLElement::HandleDOMEventForAnchors
[d:\builds\seamonkey\mozilla\content\html\content\src\nsGenericHTMLElement.cpp 
line 1328]
         nsHTMLAreaElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLAreaElement.cpp 
line 223]
         nsEventStateManager::SendFocusBlur
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp  line 3613]
         nsEventStateManager::SetContentState
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp  line 3302]
         nsGenericHTMLElement::HandleDOMEventForAnchors
[d:\builds\seamonkey\mozilla\content\html\content\src\nsGenericHTMLElement.cpp 
line 1396]
         nsHTMLAreaElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLAreaElement.cpp 
line 223]
         nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 1670]
         nsHTMLImageElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLImageElement.cpp 
line 664]
         PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5993]
         PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp
line 5911]
         nsView::HandleEvent    [d:\builds\seamonkey\mozilla\view\src\nsView.cpp
 line 387]
         nsView::HandleEvent    [d:\builds\seamonkey\mozilla\view\src\nsView.cpp
 line 344]
         nsView::HandleEvent    [d:\builds\seamonkey\mozilla\view\src\nsView.cpp
 line 344]
         nsViewManager::DispatchEvent  
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp
line 1909]
         HandleEvent    [d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line 83]
         nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 854]
         nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 871]
 
        Source File : 
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/content/base/src/nsRuleNode.cpp
line : 3854
     (2828251)  URL: www.linuxnews.pl
     (2828251)  Comments: Again  change from Modern to Classic while displaying
print preview kills Mozilla. Changing from Classic to Modern does not cause that. 
     (2828161)  URL: www.linuxnews.pl
     (2828161)  Comments: Mozilla was displaying print preview when I tried to
change theme from Modern to Classic.
     (2820859)  Comments: I was switching the theme
     (2708886)  URL: www.sparkasse.de
     (2708886)  Comments: Changing the theme
     (2604666)  Comments: changing themes
     (2603096)  Comments: changing themes from modern to classic.
     (2602523)  URL: www.pandasoftware.com
     (2602523)  Comments: Changing from Modern theme to Classic theme.
     (2594155)  Comments: Trying to switch from Modern to Classic skin
     (2577156)  Comments: Switched on load-all-images + ask-me  and it started
asking and asking so i switched to another window and closed the tabs that
wanted to load all those myriads of images. Then I clicked 'no' one more time
(=no images from that site)  and it died.
     (2571545)  Comments: when changing theme
     (2567641)  Comments: Switched theme from Modern to Classic
     (2549830)  Comments: Changing themes from MODERN to CLASSIC in Mozilla 0.9.8
     (2544302)  Comments: switching theme
     (2539963)  URL: http://www.slashdot.org
     (2539963)  Comments: Applying Classic theme from Modern
     (2539623)  Comments: changing themes
     (2535512)  URL: http://www.amco.com
     (2535512)  Comments: Just clicked ok to load first image when mozilla fault
popped up
     (2534386)  URL: www.mozilla.org
     (2534386)  Comments: I typed www.slashdot.org into the URL field  hit enter
 and nothing happened. I thought perhaps it was an issue with the Theming
functionality  since I had just switched from Classic mode to Modern. So I
switched back to Classic  and it crashed.Note -- I simply *cannot* use Mozilla
because typing URLs into the url field doesn't work. I hit enter and *nothing*
happens. Seriously.
     (2519479)  URL: slashdot.org
     (2519479)  Comments: Changing themes in Mozilla 0.9.8  mozilla crashed upon
clicking OK on theme "tab" of preferences window.

greer

Reporter

Comment 1

•

23 years ago

Adding crash, topcrash, qawanted. (Love to hear from users who think they can
recreate this one!)

Keywords: crash, qawanted, topcrash

Tracy Walker [:tracy]

Comment 2

•

23 years ago

I can recreate this on linux ..probably bug 116038  
I have not been able to reproduce bug 116038 on windows for a few days now...am
thus not able to reproduce this bug with latest mozilla build (2002-02-14-09-trunk)

greer

Reporter

Comment 3

•

23 years ago

Tracy, you have crashed four times in the last 30 days with the stack in bug
121055 (I'll add your info there.) And yes, your three recent Linux crashes have
been bug 116038. You deserve a copy of our home game.

greer

Reporter

Comment 4

•

23 years ago

I have reproduced this one on M098 with a Win2000 machine:

1. install LCARStrek theme from
http://www.xulplanet.com/downloads/view.cgi?category=skins&view=lcarstrek
2. use the theme
3. Try to revert to Classic (shouldn't work)
4. Try to uninstall LCARStrek theme
5. crash

Incident #2926179

greer

Reporter

Comment 5

•

23 years ago

My Trunk build also crashes with those steps.
 
petersen, would you please try out the steps in comment #4? Thanks.

Keywords: qawanted → testcase

Chris Petersen

Comment 6

•

23 years ago

Based on the steps you provided, I downloaded the theme. I crashed when
switching from Classic to LCARStrek (via View -Apply Theme). Tested under OS X
Feb 14 build (2002-02-14-13). After relaunching the app, I could switch back
between both themes.


Exception:  EXC_BAD_INSTRUCTION (0x0002)
Code[0]:    0x00000002
Code[1]:    0x056f12cc

Thread 0 Crashed:
 #0   0x056f12cc in 0x56f12cc
 #1   0x0299d9d4 in PresShell::AllocateFrame(unsigned long, void **)
 #2   0x02196234 in nsStyleContext::Destroy(void)
 #3   0x02193e50 in nsStyleContext::Release(void)
 #4   0x0219371c in nsStyleContext::_dt(void)
 #5   0x0219624c in nsStyleContext::Destroy(void)
 #6   0x02193e50 in nsStyleContext::Release(void)
 #7   0x0219371c in nsStyleContext::_dt(void)
 #8   0x0219624c in nsStyleContext::Destroy(void)
 #9   0x02193e50 in nsStyleContext::Release(void)
 #10  0x0219371c in nsStyleContext::_dt(void)
 #11  0x0219624c in nsStyleContext::Destroy(void)
 #12  0x02193e50 in nsStyleContext::Release(void)
 #13  0x0219371c in nsStyleContext::_dt(void)
 #14  0x0219624c in nsStyleContext::Destroy(void)
 #15  0x02193e50 in nsStyleContext::Release(void)
 #16  0x02abdf64 in 0x2abdf64
 #17  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #18  0x02abdc3c in 0x2abdc3c
 #19  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #20  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #21  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #22  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #23  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #24  0x02abdc3c in 0x2abdc3c
 #25  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #26  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #27  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #28  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #29  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #30  0x02abdc3c in 0x2abdc3c
 #31  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #32  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #33  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #34  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #35  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #36  0x02abe3b4 in ReResolveStyleContext__12FrameManagerFP14nsIPresContextP8nsIFr
 #37  0x02abe5f0 in ComputeStyleChangeFor__12FrameManagerFP14nsIPresContextP8nsIFr
 #38  0x029aaa64 in PresShell::ReconstructStyleData(int)
 #39  0x029aac9c in PresShell::StyleSheetRemoved(nsIDocument *, nsIStyleSheet *)
 #40  0x01f3d270 in UpdateStyleSheets__10nsDocumentFP16nsISupportsArrayP16nsISuppo
 #41  0x01e8d74c in nsChromeRegistry::RefreshWindow(nsIDOMWindowInternal *)
 #42  0x01e8c870 in 0x1e8c870
 #43  0x01e8c264 in nsChromeRegistry::RefreshSkins(void)
 #44  0x005c411c in XPTC_InvokeByIndex
 #45  0x005c4010 in XPTC_InvokeByIndex
 #46  0x01b5258c in 0x1b5258c
 #47  0x01b5898c in XPC_WN_CallMethod(JSContext *, JSObject *, unsigned int,
long *, long *)
 #48  0x01ad45ec in js_Invoke
 #49  0x01adc6b0 in 0x1adc6b0
 #50  0x01ad4644 in js_Invoke
 #51  0x01ad4890 in js_InternalInvoke
 #52  0x01ab5bdc in JS_CallFunctionValue
 #53  0x027e70c0 in nsJSContext::CallEventHandler(void *, void *, unsigned int,
void *, int *, int)
 #54  0x028046e4 in nsJSEventListener::HandleEvent(nsIDOMEvent *)
 #55  0x01fc6610 in HandleEventSubType__22nsEventListenerManagerFP16nsListenerStru
 #56  0x01fc8c58 in HandleEvent__22nsEventListenerManagerFP14nsIPresConte
 #57  0x021eb864 in HandleDOMEvent__12nsXULElementFP14nsIPresContextP7nsEventPP11n
 #58  0x021eb970 in HandleDOMEvent__12nsXULElementFP14nsIPresContextP7nsEventPP11n
 #59  0x024cba68 in DispatchCommandTo__12MenuHelpersXFP16nsIWeakReferenceP10nsICon
 #60  0x024d2c9c in nsMenuItemX::DoCommand(void)
 #61  0x024c8f1c in nsMenuBarX::CommandEventHandler(OpaqueEventHandlerCallRef *)
 #62  0x73118504 in DispatchEventToHandlers
 #63  0x731017b4 in SendEventToEventTargetInternal
 #64  0x731b59e0 in SendEventToEventTarget
 #65  0x7310b488 in SendHICommandEvent
 #66  0x731a76d0 in SendMenuItemSelectedEvent
 #67  0x7318aec0 in FinishMenuSelection(OpaqueMenuHandle *, MenuResult *,
MenuResult *, unsigned long)
 #68  0x731651a8 in MenuSelectCore(Point, double, unsigned long,
OpaqueMenuHandle **, unsigned short *)
 #69  0x73187748 in MenuSelect
 #70  0x024b0ba0 in 0x24b0ba0
 #71  0x024b083c in nsMacMessagePump::DispatchEvent(int, EventRecord *)
 #72  0x024b0510 in nsMacMessagePump::DoMessagePump(void)
 #73  0x024afe8c in nsAppShell::Run(void)
 #74  0x02465d3c in nsAppShellService::Run(void)
 #75  0x004cbba4 in main1(int, char **, nsISupports *)
 #76  0x004cc67c in main

Thread 1:
 #0   0x7000497c in syscall
 #1   0x70557600 in BSD_waitevent
 #2   0x70554b80 in CarbonSelectThreadFunc
 #3   0x7002054c in _pthread_body

Thread 2:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x705593ec in CarbonOperationThreadFunc
 #3   0x7002054c in _pthread_body

Thread 3:
 #0   0x70044cf8 in semaphore_timedwait_signal_trap
 #1   0x70044cd8 in semaphore_timedwait_signal
 #2   0x70283ea4 in TSWaitOnConditionTimedRelative
 #3   0x7027d748 in TSWaitOnSemaphoreCommon
 #4   0x702c2078 in TimerThread
 #5   0x7002054c in _pthread_body

Thread 4:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x70250ab0 in TSWaitOnCondition
 #3   0x7027d730 in TSWaitOnSemaphoreCommon
 #4   0x70243d14 in AsyncFileThread
 #5   0x7002054c in _pthread_body

Thread 5:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x7055b884 in CarbonInetOperThreadFunc
 #3   0x7002054c in _pthread_body

Thread 6:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x7017bf98 in __CFRunLoopRun
 #3   0x701b7100 in CFRunLoopRunSpecific
 #4   0x7017b8e0 in CFRunLoopRunInMode
 #5   0x7061be08 in
XIOAudioDeviceManager::NotificationThread(XIOAudioDeviceManager *)
 #6   0x706141c0 in CAPThread::Entry(CAPThread *)
 #7   0x7002054c in _pthread_body

Thread 7:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x70026a2c in _pthread_become_available
 #3   0x70026724 in pthread_exit
 #4   0x70020550 in _pthread_body

PPC Thread State:
  srr0: 0x056f12cc srr1: 0x0208f030                vrsave: 0x00000000
   xer: 0x00000008   lr: 0x022199ec  ctr: 0x056f12cc   mq: 0x00000000
    r0: 0x056f12cc   r1: 0xbfffbdd0   r2: 0x056f12cc   r3: 0x056593e4
    r4: 0xbfffbe48   r5: 0x00000004   r6: 0x00000000   r7: 0x00000000
    r8: 0x00000000   r9: 0x00000000  r10: 0x00000000  r11: 0x00000000
   r12: 0x056f16d4  r13: 0x06143260  r14: 0x06c539dc  r15: 0x00000008
   r16: 0x05738130  r17: 0x02c09dd0  r18: 0x06c53068  r19: 0xbfffc32c
   r20: 0x00000000  r21: 0x055886d0  r22: 0xffffffff  r23: 0xbfffd29c
   r24: 0x00000000  r25: 0x056f1a7c  r26: 0x04c77b90  r27: 0x04c77b90
   r28: 0x0565ef8c  r29: 0xffffffff  r30: 0x00000004  r31: 0x0565ee78

**********

Christine Hoffman

Updated

•

23 years ago

QA Contact: petersen → amar

Marc Attinasi

Comment 7

•

23 years ago

Accepting, setting milestone, and nominating for nsbeta1

Also, CC Hyatt in case this is obvious to him from the stack :)

Status: NEW → ASSIGNED

Keywords: nsbeta1

Target Milestone: --- → mozilla1.0

Shiva Thirumazhusai

Comment 8

•

23 years ago

nominating for nsbeta1. Since this bug is topcrash, and it has steps to
reproduce the crash.

Amarendra Hanumanula

Updated

•

23 years ago

Priority: -- → P2

Kevin McCluskey (gone)

Comment 9

•

23 years ago

Marking nsbeta1+

Keywords: nsbeta1 → nsbeta1+

Marc Attinasi

Comment 10

•

23 years ago

Trying to use the theme LCARStreck, I get this assertion

  NS_ASSERTION(protoBinding, "Unable to locate an XBL binding.");

in nsXBLService::GetBindingInternal

Ignoring that, I get the theme, but when switching back to Modern I crash in
layout, dealing with chrome:

nsCSSFrameConstructor::ContentStatesChanged(nsCSSFrameConstructor * const
0x03104bd0, nsIPresContext * 0x03103b98, nsIContent * 0x03f69870, nsIContent *
0x00000000) line 10096 + 3 bytes
StyleSetImpl::ContentStatesChanged(StyleSetImpl * const 0x03104ad0,
nsIPresContext * 0x03103b98, nsIContent * 0x03f69870, nsIContent * 0x00000000)
line 1482
PresShell::ContentStatesChanged(PresShell * const 0x02fb60d0, nsIDocument *
0x0319fd58, nsIContent * 0x03f69870, nsIContent * 0x00000000) line 5102 + 49 bytes
nsXULDocument::ContentStatesChanged(nsXULDocument * const 0x0319fd58, nsIContent
* 0x03f69870, nsIContent * 0x00000000) line 1941
nsEventStateManager::SetContentState(nsEventStateManager * const 0x03e14088,
nsIContent * 0x00000000, int 1) line 3448
nsEventStateManager::PostHandleEvent(nsEventStateManager * const 0x03e14088,
nsIPresContext * 0x03103b98, nsEvent * 0x0012f904, nsIFrame * 0x0441850c,
nsEventStatus * 0x0012f714, nsIView * 0x04e984d0) line 1540
PresShell::HandleEventInternal(nsEvent * 0x0012f904, nsIView * 0x04e984d0,
unsigned int 1, nsEventStatus * 0x0012f714) line 6023 + 43 bytes
PresShell::HandleEvent(PresShell * const 0x02fb60cc, nsIView * 0x04e984d0,
nsGUIEvent * 0x0012f904, nsEventStatus * 0x0012f714, int 0, int & 1) line 5926 +
25 bytes
nsViewManager::HandleEvent(nsView * 0x03f8e310, nsGUIEvent * 0x0012f904, int 0)
line 2043
nsView::HandleEvent(nsViewManager * 0x03104590, nsGUIEvent * 0x0012f904, int 0)
line 306
nsViewManager::DispatchEvent(nsViewManager * const 0x03104590, nsGUIEvent *
0x0012f904, nsEventStatus * 0x0012f804) line 1857 + 23 bytes
HandleEvent(nsGUIEvent * 0x0012f904) line 83
nsWindow::DispatchEvent(nsWindow * const 0x03f8e3dc, nsGUIEvent * 0x0012f904,
nsEventStatus & nsEventStatus_eIgnore) line 854 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f904) line 875
nsWindow::DispatchMouseEvent(unsigned int 301, unsigned int 0, nsPoint *
0x00000000) line 4577 + 21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 301, unsigned int 0, nsPoint *
0x00000000) line 4829
nsWindow::ProcessMessage(unsigned int 514, unsigned int 0, long 3276854, long *
0x0012fd20) line 3470 + 28 bytes
nsWindow::WindowProc(HWND__ * 0x0049082c, unsigned int 514, unsigned int 0, long
3276854) line 1119 + 27 bytes
USER32! 77e12e98()
USER32! 77e130e0()
USER32! 77e15824()
nsAppShellService::Run(nsAppShellService * const 0x01baef30) line 308
main1(int 2, char * * 0x003c7908, nsISupports * 0x00000000) line 1285 + 32 bytes
main(int 2, char * * 0x003c7908) line 1625 + 37 bytes
mainCRTStartup() line 338 + 17 bytes

the PrimaryFrame for a XULElement is an nsMenuFrame, and it is corrupted,
causing a crash when GetStyleData is called on it.

I think the lack of a binding is the root problem here, but I know little about
that so I'm sending this to XUL owner for now.  Bounce back as necessary, but
please try to give me some leads on where to investigate.

Assignee: attinasi → hyatt

Status: ASSIGNED → NEW

Component: Layout → XP Toolkit/Widgets: XUL

QA Contact: amar → jrgm

Blake Ross

Comment 11

•

23 years ago

Renominating since this will be fixed by restarting after a switch (bug 127784).

Keywords: nsbeta1+ → nsbeta1

Peter Trudelle

Comment 12

•

22 years ago

nsbeta1- per Nav triage team, ->1.2

Keywords: nsbeta1 → nsbeta1-

Target Milestone: mozilla1.0 → mozilla1.2

Jay Patel [:jay]

Updated

•

22 years ago

Depends on: 127784

Jay Patel [:jay]

Comment 13

•

22 years ago

Making topcrash+.  Even if this doesn't get fixed directly, we need to make sure
to verify this is gone after dynamic theme switching is disabled.

Jay Patel [:jay]

Updated

•

22 years ago

Keywords: topcrash → topcrash+

Jay Patel [:jay]

Comment 14

•

22 years ago

Pretty sure this is related to bug 121055...marking it a dup.

*** This bug has been marked as a duplicate of 121055 ***

Status: NEW → RESOLVED

Closed: 22 years ago

Resolution: --- → DUPLICATE

Jay Patel [:jay]

Comment 15

•

22 years ago

v.dup

Status: RESOLVED → VERIFIED

David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)

Assignee

Comment 16

•

22 years ago

Reopening.  The stack in comment 0 is definitely unrelated to bug 121055 and may
not even be related to theme switching.

Status: VERIFIED → REOPENED

Resolution: DUPLICATE → ---

David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)

Assignee

Comment 17

•

22 years ago

OK, I see how the comments line up now.  Probably this bug is because triggering
a full reresolve on those web pages causes a crash, which is a bug we need to
fix, since it happens with dynamic style changes, etc.  However, it's now much
harder to test with theme switching turned off.

Taking bug.

Assignee: hyatt → dbaron

Status: REOPENED → NEW

Component: XP Toolkit/Widgets: XUL → Style System

QA Contact: jrgm → ian

Jonas Jørgensen

Updated

•

22 years ago

Blocks: 134260

greer

Reporter

Comment 18

•

22 years ago

David, I was looking to see if this was still around on the Trunk. There are two
users crashing, one with the comment:

(4736358) - [2002040110 - 2002-04-02] browsing and using mail client. I had
tried to open two messages.  The first one had not displayed a message body or
headers.   Also  I was using the feature that selectively blocks images from
certain servers.  There was a hidden (background) window.
URL: www.cnn.com  Platform: Windows 98  4.10 build 67766446

Would the selective blocking feature trigger a full reresolve (as you mentioned
in the previous comment)?

Summary: Trunk M098 theme switch crash [@ nsRuleNode::ComputePositionData] → Trunk M099 theme switch crash [@ nsRuleNode::ComputePositionData]

greer

Reporter

Comment 19

•

22 years ago

David, since dynamic theme switching is off and we still see crashes here (and
per your comments in #16) it seems this bug should be closed as WFM and a new
bug logged for the reresolve issue.

David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)

Assignee

Comment 20

•

22 years ago

Theme switching will hopefully be turned back on at some point and this is a
valid bug that should probably be fixed first.  Changing topcrash+ back to topcrash.

Keywords: topcrash+ → topcrash

Madhur Bhatia

Comment 21

•

22 years ago

cc'ing myself

Shiva Thirumazhusai

Comment 22

•

22 years ago

-> topcrash- by Talkback triage team.

Keywords: topcrash → topcrash-

David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)

Assignee

Comment 23

•

22 years ago

Marking worksforme since I can't reproduce on these sites even with dynamic skin
switching.

Status: NEW → RESOLVED

Closed: 22 years ago → 22 years ago

Resolution: --- → WORKSFORME

Alex Hosking

Comment 24

•

22 years ago

Isnt it cute the way babies suck your nose?

Status: RESOLVED → VERIFIED

Hixie (not reading bugmail)

Updated

•

20 years ago

No longer blocks: 134260

Nobody; OK to take it and work on it

Updated

•

13 years ago

Crash Signature: [@ nsRuleNode::ComputePositionData]