150700 - Crash reloading sidebar tab M1.0 Trunk N70PR1[@ nsXULTreeBuilder::GetTemplateActionCellFor]

Status: VERIFIED DUPLICATE of bug 127842

(Core :: XUL, defect)

Description

[greer]

This one is showing up in the M1.0 topcrash lists and I am not seeing an
existing bug with this signature in the summary or description field. 

I have reproduced it twice with these steps:
1. Right click on the "History" tab in the sidebar
2. Select "Reload" from the context menu

There are talkback incidents with this signature as far back as M1RC1, with
talkback incidents in the Trunk as well as N70PR1.

nsXULTreeBuilder::GetTemplateActionCellFor
[d:\builds\seamonkey\mozilla\content\xul\templates\src\nsXULTreeBuilder.cpp,
line 1466]
nsXULTreeBuilder::GetCellProperties
[d:\builds\seamonkey\mozilla\content\xul\templates\src\nsXULTreeBuilder.cpp,
line 532]
nsTreeBodyFrame::PaintCell
[d:\builds\seamonkey\mozilla\layout\xul\base\src\tree\src\nsTreeBodyFrame.cpp,
line 2187]
nsTreeBodyFrame::PaintRow
[d:\builds\seamonkey\mozilla\layout\xul\base\src\tree\src\nsTreeBodyFrame.cpp,
line 2161]
nsTreeBodyFrame::Paint
[d:\builds\seamonkey\mozilla\layout\xul\base\src\tree\src\nsTreeBodyFrame.cpp,
line 1988]
PresShell::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5800]
nsView::Paint [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 280]
nsViewManager::RenderDisplayListElement
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1192]
nsViewManager::RenderViews
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1141]
nsViewManager::Refresh [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp,
line 732]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1732]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 891]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 913]
nsWindow::OnPaint [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp,
line 4542]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3421]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1153]
USER32.DLL + 0x3eb0 (0x77e13eb0)
USER32.DLL + 0x591b (0x77e1591b)
USER32.DLL + 0x595d (0x77e1595d)
ntdll.dll + 0x1fb83 (0x77f9fb83)
nsXULDocument::FlushPendingNotifications
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 2361]
nsContentTreeOwner::SetStatus
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsContentTreeOwner.cpp, line 385]
GlobalWindowImpl::SetStatus
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 1311]
GlobalWindowImpl::SetNewDocument
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 418]
DocumentViewerImpl::InitInternal
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 1257]
DocumentViewerImpl::Init
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 1180]
nsDocShell::SetupNewViewer
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 4338]
nsDocShell::Embed [d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp,
line 3691]
nsDocShell::CreateContentViewer
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 4073]
nsDSURIContentListener::DoContent
[d:\builds\seamonkey\mozilla\docshell\base\nsDSURIContentListener.cpp, line 108]
nsDocumentOpenInfo::DispatchContent
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 365]
nsDocumentOpenInfo::OnStartRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 229]
nsCachedChromeChannel::HandleStartLoadEvent
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeProtocolHandler.cpp, line 451]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 597]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1078]
0x778b0c24

Comment 1

[Shiva Thirumazhusai]

Re-assigning to joe hewitt.

Comment 2

[scottputterman]

please add back the adt1.0.1 nomination when there's a patch that's ready to go
into the branch.

Comment 3

[Samir Gehani]

Nav triage team: nsbeta1-

Comment 4

[Shiva Thirumazhusai]

It is better practice to explain why we are changing priority. This bug is a
topcrash+ and it has testcase. Adt nomination removed and nsbeta1- without
explanation on why that is. 

  Having explanation will help us determine it is a topcrash+ or otherwise.

Comment 5

[Asa Dotzler [:asa]]

I have another testcase which reproduces this crash. 
Go to http://bugzilla.mozilla.org/duplicates.xul, wait for the page to load
(maybe as much as a minute) then go to any other page to experience the crash. 
With these steps I can reproduce the crash consistently on recent trunk nightly
windows builds. Myk has reproduced the crash at least once just visiting the URL
using a 1.0 build on linux (no leaving the site required). 

Comment 6

[Jan Varga [:janv]]

this sounds like bug 127842.
there is a fix even.

Comment 7

[Jan Varga [:janv]]

This should be fixed now.
Can anyone verify?

Comment 8

[shrirang khanzode]

can u ,pls, John ? Thx!

Comment 9

[Blake Ross]

Jan has checked in a fix for bug 127842, which appears to be a dup of this.  So,
nominating for nsbeta1.

Comment 10

[Jay Patel [:jay]]

Bug 127842 has been nominated and I'm transferring all the topcrash info there also.

*** This bug has been marked as a duplicate of 127842 ***

Comment 11

[John Morrison]

verified duplicate.