Closed Bug 221499 Opened 22 years ago Closed 7 years ago

FF10x crash [@0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] and [@ nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)]

Categories

(Core :: CSS Parsing and Computation, defect)

Product:
Core
Component:
CSS Parsing and Computation
Platform:
x86
Windows 98
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: timeless, Unassigned)

References

Details

(Keywords: crash, Whiteboard: [tbird crash])

Crash Data

Attachments

(3 files)

analysis of TB17669006
40.30 KB, text/plain; charset=utf-8
Details
analysis of TB17604650
35.73 KB, text/plain; charset=utf-8
Details
analysis of TB17891189
41.46 KB, text/plain; charset=utf-8
Details
nsRuleNode::Transition 16 BBID range: 24024125 - 24180718 Min/Max Seconds since last crash: 11 - 96802 Min/Max Runtime: 95 - 104503 Crash data range: 2003-09-30 to 2003-10-06 Build ID range: 2003093004 to 2003100304 Stack Trace: nsRuleNode::Transition [c:/builds/seamonkey/mozilla/content/base/src/nsRuleNode.cpp line 468] ContentEnumFunc [c:/builds/seamonkey/mozilla/content/html/style/src/nsCSSStyleSheet.cpp line 3969] RuleHash::EnumerateAllRules [c:/builds/seamonkey/mozilla/content/html/style/src/nsCSSStyleSheet.cpp line 625] CSSRuleProcessor::RulesMatching [c:/builds/seamonkey/mozilla/content/html/style/src/nsCSSStyleSheet.cpp line 3988] EnumRulesMatching [c:/builds/seamonkey/mozilla/content/base/src/nsStyleSet.cpp line 981] nsSupportsArray::EnumerateForwards [c:/builds/seamonkey/mozilla/xpcom/ds/nsSupportsArray.cpp line 646] nsXBLBinding::WalkRules [c:/builds/seamonkey/mozilla/content/xbl/src/nsXBLBinding.cpp line 1074] nsBindingManager::WalkRules [c:/builds/seamonkey/mozilla/content/xbl/src/nsBindingManager.cpp line 1299] nsBindingManager::WalkRules [c:/builds/seamonkey/mozilla/content/xbl/src/nsBindingManager.cpp line 1320] StyleSetImpl::FileRules [c:/builds/seamonkey/mozilla/content/base/src/nsStyleSet.cpp line 1071] StyleSetImpl::ResolveStyleFor [c:/builds/seamonkey/mozilla/content/base/src/nsStyleSet.cpp line 1201] nsPresContext::ResolveStyleContextFor [c:/builds/seamonkey/mozilla/layout/base/src/nsPresContext.cpp line 929] FrameManager::ReResolveStyleContext [c:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp line 1708] FrameManager::ReResolveStyleContext [c:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp line 1945] FrameManager::ReResolveStyleContext [c:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp line 1945] FrameManager::ComputeStyleChangeFor [c:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp line 1992] nsCSSFrameConstructor::ContentStatesChanged [c:/builds/seamonkey/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp line 10144] StyleSetImpl::ContentStatesChanged [c:/builds/seamonkey/mozilla/content/base/src/nsStyleSet.cpp line 1679] PresShell::ContentStatesChanged [c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp line 5303] nsDocument::ContentStatesChanged [c:/builds/seamonkey/mozilla/content/base/src/nsDocument.cpp line 2023] nsEventStateManager::SetContentState [c:/builds/seamonkey/mozilla/content/events/src/nsEventStateManager.cpp line 4060] nsEventStateManager::GenerateMouseEnterExit [c:/builds/seamonkey/mozilla/content/events/src/nsEventStateManager.cpp line 2635] nsEventStateManager::PreHandleEvent [c:/builds/seamonkey/mozilla/content/events/src/nsEventStateManager.cpp line 402] PresShell::HandleEventInternal [c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp line 6222] PresShell::HandleEvent [c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp line 6152] nsViewManager::HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp line 2299] nsView::HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsView.cpp line 298] nsViewManager::DispatchEvent [c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp line 2042] HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsView.cpp line 79] nsWindow::DispatchEvent [c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp line 1054] nsWindow::DispatchWindowEvent [c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp line 1071] nsWindow::DispatchMouseEvent [c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp line 5193] ChildWindow::DispatchMouseEvent [c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp line 5448] nsWindow::ProcessMessage [c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp line 3962] nsWindow::WindowProc [c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp line 1334] USER32.dll + 0x27ad7 (0x77d37ad7) USER32.dll + 0x2ccd4 (0x77d3ccd4) USER32.dll + 0x4455 (0x77d14455) USER32.dll + 0x95d5 (0x77d195d5) nsContentTreeOwner::ShowAsModal [c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsContentTreeOwner.cpp line 449] nsWindowWatcher::OpenWindowJS [c:/builds/seamonkey/mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp line 801] GlobalWindowImpl::OpenInternal [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp line 4637] GlobalWindowImpl::OpenDialog [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp line 3236] XPTC_InvokeByIndex [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp line 102] XPCWrappedNative::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp line 2019] XPC_WN_CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp line 1270] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 845] js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 2863] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 861] js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 936] JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c line 3573] nsJSContext::CallEventHandler [c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp line 1222] nsJSEventListener::HandleEvent [c:/builds/seamonkey/mozilla/dom/src/events/nsJSEventListener.cpp line 182] nsEventListenerManager::HandleEventSubType [c:/builds/seamonkey/mozilla/content/events/src/nsEventListenerManager.cpp line 1423] nsEventListenerManager::HandleEvent [c:/builds/seamonkey/mozilla/content/events/src/nsEventListenerManager.cpp line 1500] nsXULElement::HandleDOMEvent [c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp line 3175] PresShell::HandleDOMEventWithTarget [c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp line 6306] nsMenuFrame::Execute [c:/builds/seamonkey/mozilla/layout/xul/base/src/nsMenuFrame.cpp line 1683] nsMenuFrame::HandleEvent [c:/builds/seamonkey/mozilla/layout/xul/base/src/nsMenuFrame.cpp line 460] PresShell::HandleEventInternal [c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp line 6275] PresShell::HandleEvent [c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp line 6152] nsViewManager::HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp line 2299] nsView::HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsView.cpp line 298] nsViewManager::DispatchEvent [c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp line 2042] Source File : c:/builds/seamonkey/mozilla/content/base/src/nsRuleNode.cpp line : 468 (24180718) Comments: al aplicar el filtro de correo se bloquea el programa (24153026) Comments: se cerro el programa (24110636) Comments: viewing a message filter. I can reproduce this on my build... (24094889) Comments: I tried to change a filter-type. I clicked on the checkbox -- in the Filter Options dialog -- for "lable as" and Mozilla died. --this bug is filed based on talkback data, don't come to me asking for steps to reproduce or contacts--
Depends on: 220126
Summary: [@ SelectorMatchesTree] → [@ RuleNode::Transition]
Still happening across various Firefox and Thunderbird 1.0.x releases: http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsRuleNode%3A%3ATransition&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid Here is a recent crash with a decent stack (most incidents have 1 stack frame): Incident ID: 5916582 Stack Signature nsRuleNode::Transition ee927abd Product ID Firefox10 Build ID 2005041417 Trigger Time 2005-05-17 15:29:47.0 Platform Win32 Operating System Windows 98 4.10 build 67766446 Module FIREFOX.EXE + (0014d55d) URL visited sports.yahoo.com/mlb/standings User Comments I had two other Cardinals baseball websites opened in tabs. One from espn.com and the other... I'm not sure. Since Last Crash 39101 sec Total Uptime 39101 sec Trigger Reason Access violation Source File, Line No. d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/base/src/nsRuleNode.cpp, line 438 Stack Trace nsRuleNode::Transition [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/base/src/nsRuleNode.cpp, line 438] ContentEnumFunc [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/style/src/nsCSSStyleSheet.cpp, line 3899] RuleHash::EnumerateAllRules [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/style/src/nsCSSStyleSheet.cpp, line 625] CSSRuleProcessor::RulesMatching [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/style/src/nsCSSStyleSheet.cpp, line 3925] nsStyleSet::ResolveStyleFor [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/base/src/nsStyleSet.cpp, line 546] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1399] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1359] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1611] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1611] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ReResolveStyleContext [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1620] nsFrameManager::ComputeStyleChangeFor [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1663] PresShell::ReconstructStyleData [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsPresShell.cpp, line 5311] PresShell::EndUpdate [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsPresShell.cpp, line 3557] CSSLoaderImpl::ParseSheet [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/style/src/nsCSSLoader.cpp, line 1468] CSSLoaderImpl::LoadInlineStyle [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/style/src/nsCSSLoader.cpp, line 1637] nsStyleLinkElement::UpdateStyleSheet [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/base/src/nsStyleLinkElement.cpp, line 307] HTMLContentSink::ProcessSTYLETag [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 4428] HTMLContentSink::AddLeaf [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 3190] HTMLContentSink::AddHeadContent [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 3146] CNavDTD::AddHeadLeaf [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 3839] CNavDTD::HandleStartToken [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 1832] CNavDTD::HandleToken [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 1019] CNavDTD::BuildModel [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 511] nsParser::BuildModel [d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/htmlparser/src/nsParser.cpp, line 2004]
Summary: [@ RuleNode::Transition] → FF10x crash [@ RuleNode::Transition]
Attached file analysis of TB17891189 —
This one *could* be an out-of-memory crash; I filed bug 335729 on this.
Assignee: dbaron → nobody
QA Contact: ian → style-system
xref Bug 436962 - Crash when closing tab [@ nsRuleNode::Transition] there are a variety of stacks, all low occurrence. crash citations in A and B are FF. But thunderbird crashes also exist (A) these might be same stack, much lower frequency than crashes (B) below - @0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char) bp-583ca2c7-b4a7-4ee2-85f6-32c812100131 - nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char) bp-ffb40a92-6208-4e6d-ad7f-0ac0f2100126 (B) these appear to be mostly same stack - not same stack as (A) above - nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char) [including Mac] bp-f0b64fa3-a2a6-4861-ba0a-72c0d2100123 - PL_DHashTableOperate | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char) bp-304f15f2-75b0-435d-b219-6088c2100120 Thunderbird example of (A) bp-f0b64fa3-a2a6-4861-ba0a-72c0d2100123 0 @0x5c 1 thunderbird.exe nsRuleNode::Transition layout/style/nsRuleNode.cpp:724 2 thunderbird.exe nsRuleWalker::Forward layout/style/nsRuleWalker.h:53 3 thunderbird.exe ContentEnumFunc layout/style/nsCSSRuleProcessor.cpp:1899 4 thunderbird.exe RuleHash::EnumerateAllRules layout/style/nsCSSRuleProcessor.cpp:630 5 thunderbird.exe nsCSSRuleProcessor::RulesMatching layout/style/nsCSSRuleProcessor.cpp:1919 6 thunderbird.exe EnumRulesMatching layout/style/nsStyleSet.cpp:409 7 thunderbird.exe nsStyleSet::FileRules layout/style/nsStyleSet.cpp:532 8 thunderbird.exe nsStyleSet::ResolveStyleFor layout/style/nsStyleSet.cpp:676 9 thunderbird.exe nsCSSFrameConstructor::ResolveStyleContext layout/base/nsCSSFrameConstructor.cpp:6841 10 thunderbird.exe nsCSSFrameConstructor::ConstructFrame layout/base/nsCSSFrameConstructor.cpp:7430 11 thunderbird.exe nsCSSFrameConstructor::ProcessChildren layout/base/nsCSSFrameConstructor.cpp:11459 12 thunderbird.exe nsCSSFrameConstructor::ConstructXULFrame layout/base/nsCSSFrameConstructor.cpp:6240 13 thunderbird.exe nsCSSFrameConstructor::ConstructFrameInternal layout/base/nsCSSFrameConstructor.cpp:7574 14 thunderbird.exe nsCSSFrameConstructor::ConstructFrame layout/base/nsCSSFrameConstructor.cpp:7444 15 thunderbird.exe nsCSSFrameConstructor::ProcessChildren layout/base/nsCSSFrameConstructor.cpp:11459 16 thunderbird.exe nsCSSFrameConstructor::ConstructXULFrame layout/base/nsCSSFrameConstructor.cpp:6240 17 thunderbird.exe nsCSSFrameConstructor::ConstructFrameInternal layout/base/nsCSSFrameConstructor.cpp:7574 18 thunderbird.exe nsCSSFrameConstructor::ConstructFrame layout/base/nsCSSFrameConstructor.cpp:7444 19 thunderbird.exe nsCSSFrameConstructor::ProcessChildren layout/base/nsCSSFrameConstructor.cpp:11459 20 thunderbird.exe nsCSSFrameConstructor::ConstructXULFrame layout/base/nsCSSFrameConstructor.cpp:6240 21 thunderbird.exe nsCSSFrameConstructor::ConstructFrameInternal layout/base/nsCSSFrameConstructor.cpp:7574 22 thunderbird.exe nsCSSFrameConstructor::ConstructFrame layout/base/nsCSSFrameConstructor.cpp:7444 23 thunderbird.exe nsCSSFrameConstructor::ProcessChildren layout/base/nsCSSFrameConstructor.cpp:11459 24 thunderbird.exe nsCSSFrameConstructor::ConstructXULFrame layout/base/nsCSSFrameConstructor.cpp:6240 25 thunderbird.exe nsCSSFrameConstructor::ConstructFrameInternal layout/base/nsCSSFrameConstructor.cpp:7574 26 thunderbird.exe nsCSSFrameConstructor::ConstructFrame layout/base/nsCSSFrameConstructor.cpp:7444 27 thunderbird.exe nsCSSFrameConstructor::ProcessChildren layout/base/nsCSSFrameConstructor.cpp:11459 28 thunderbird.exe nsCSSFrameConstructor::ConstructXULFrame layout/base/nsCSSFrameConstructor.cpp:6240 29 thunderbird.exe nsCSSFrameConstructor::ConstructFrameInternal layout/base/nsCSSFrameConstructor.cpp:7574 30 thunderbird.exe nsCSSFrameConstructor::ConstructFrame layout/base/nsCSSFrameConstructor.cpp:7444 31 thunderbird.exe nsCSSFrameConstructor::ProcessChildren layout/base/nsCSSFrameConstructor.cpp:11459 32 thunderbird.exe nsCSSFrameConstructor::ConstructDocElementFrame layout/base/nsCSSFrameConstructor.cpp:4386 33 thunderbird.exe nsCSSFrameConstructor::ContentInserted layout/base/nsCSSFrameConstructor.cpp:8851 34 thunderbird.exe PresShell::InitialReflow layout/base/nsPresShell.cpp:2680 35 thunderbird.exe nsXULDocument::StartLayout content/xul/document/src/nsXULDocument.cpp:2073 36 thunderbird.exe nsXULDocument::DoneWalking content/xul/document/src/nsXULDocument.cpp:3218 37 thunderbird.exe nsXULDocument::StyleSheetLoaded content/xul/document/src/nsXULDocument.cpp:3304 38 thunderbird.exe CSSLoaderImpl::SheetComplete layout/style/nsCSSLoader.cpp:1599 39 thunderbird.exe CSSLoaderImpl::ParseSheet layout/style/nsCSSLoader.cpp:1560 40 thunderbird.exe SheetLoadData::OnStreamComplete layout/style/nsCSSLoader.cpp:861 41 thunderbird.exe nsUnicharStreamLoader::OnStopRequest netwerk/base/src/nsUnicharStreamLoader.cpp:162 42 jar50.dll nsJARChannel::OnStopRequest modules/libjar/nsJARChannel.cpp:877
Keywords: topcrash → topcrash-
Summary: FF10x crash [@ RuleNode::Transition] → FF10x crash [@0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] and [@ nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)]
Crash Signature: [@0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] [@ nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)]
Bug 600186, bug 735802, bug 752240 all look like they could be connected or the same thing.
Crash Signature: [@0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] [@ nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] → [@0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] [@ nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)]
The topcrash- keyword is not actively maintained and pollutes queries with topcrash.
Keywords: topcrash-
Crash Signature: [@0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] [@ nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] → [@0x0 | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] [@ nsRefPtr<imgRequest>::operator=(imgRequest*) | nsRuleNode::Transition(nsIStyleRule*, unsigned char, unsigned char)] [@0x0 | nsRuleNode::Transition] [@ nsRefPtr<T>::operator…
Depends on: 735802
Flags: a11y-review+
Flags: a11y-review+
nsRuleNode is gone so it's not worth tracking these signatures anymore. Please file new bugs as appropriate.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: