258843 - Chatzilla crashes on startup [@ nsDOMCSSAttributeDeclaration::GetCSSParsingEnvironment]

Status: RESOLVED FIXED

(Core :: CSS Parsing and Computation, defect, P1)

Description

[Frank Wein [:mcsmurf]]

To reproduce:
0. Fetch a current nightly Mozilla build
1. Start it up and start Chatzilla

Results in:
Crash

Probably caused by Bug 258707
dbaron, you can take a look at this (you made the patch for that bug)?

Stacktrace is
nsDOMCSSAttributeDeclaration::GetCSSParsingEnvironment(nsDOMCSSAttributeDeclaration
* const 0x0286060c, nsIURI * * 0x0012ead0, nsIURI * * 0x0012eac8, nsICSSLoader *
* 0x0012eac4, nsICSSParser * * 0x0012eacc) line 158
nsDOMCSSDeclaration::ParsePropertyValue(nsDOMCSSDeclaration * const 0x0286060c,
nsCSSProperty eCSSProperty_direction, const nsAString & {...}) line 258
nsDOMCSSDeclaration::SetPropertyValue(nsDOMCSSDeclaration * const 0x02e46178,
nsCSSProperty eCSSProperty_direction, const nsAString & {...}) line 101
CSS2PropertiesTearoff::SetDirection(CSS2PropertiesTearoff * const 0x02e4617c,
const nsAString & {...}) line 341 + 19 bytes
XPTC_InvokeByIndex(nsISupports * 0x02e4617c, unsigned int 0x00000056, unsigned
int 0x00000001, nsXPTCVariant * 0x0012eb2c) line 102
XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode
0xafb27520) line 2028 + 22 bytes
XPC_WN_GetterSetter(JSContext * 0x02a64c18, JSObject * 0x02d77198, unsigned int
0x00000001, long * 0x02d7739c, long * 0x0012ed88) line 1311 + 11 bytes
js_Invoke(JSContext * 0x00000001, unsigned int 0x00000001, unsigned int
0x00000002) line 1280 + 17 bytes
js_InternalInvoke(JSContext * 0x02c23320, JSObject * 0x02b27520, long
0x02b27530, unsigned int 0x00000000, unsigned int 0x00000001, long * 0x0012f014,
long * 0x0012f014) line 1377 + 13 bytes
js_InternalGetOrSet(JSContext * 0x02a64c18, JSObject * 0x02b27520, long
0x01fc9040, long 0x02b27530, int 0x00000008, unsigned int 0x00000001, long *
0x0012f014, long * 0x0012f014) line 1420 + 21 bytes
js_SetProperty(JSContext * 0x02a64c18, JSObject * 0x02b27520, long 0x01fc9040,
long * 0x0012f014) line 2796 + 33 bytes
js_Interpret(JSContext * 0x02a64c18, long * 0x0012f0b8) line 2529
js_Invoke(JSContext * 0x00000001, unsigned int 0x00000000, unsigned int
0x00000000) line 1300 + 10 bytes
js_Interpret(JSContext * 0x02a64c18, long * 0x0012f284) line 3373 + 11 bytes
js_Invoke(JSContext * 0x00000001, unsigned int 0x00000000, unsigned int
0x00000000) line 1300 + 10 bytes
js_Interpret(JSContext * 0x02a64c18, long * 0x0012f450) line 3373 + 11 bytes
js_Invoke(JSContext * 0x00000001, unsigned int 0x00000001, unsigned int
0x00000002) line 1300 + 10 bytes
js_InternalInvoke(JSContext * 0x02a64c44, JSObject * 0x020b74f0, long
0x020b7938, unsigned int 0x00000000, unsigned int 0x00000001, long * 0x0012f618,
long * 0x0012f628) line 1377 + 13 bytes
JS_CallFunctionValue(JSContext * 0x02a64c18, JSObject * 0x020b74f0, long
0x020b7938, unsigned int 0x00000001, long * 0x0012f618, long * 0x0012f628) line
3711 + 26 bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x0286060c, JSObject *
0x020b74f0, JSObject * 0x020b7938, unsigned int 0x00000001, long * 0x0012f618,
long * 0x0012f628) line 1344 + 24 bytes
nsJSEventListener::HandleEvent(nsJSEventListener * const 0x02a64c18, nsIDOMEvent
* 0x02c0c8b8) line 184 + 74 bytes
nsEventListenerManager::HandleEventSubType(nsEventListenerManager * const
0x0286060c, nsListenerStruct * 0x02a70830, nsIDOMEvent * 0x02c0c8b8,
nsIDOMEventTarget * 0x025628e4, unsigned int 0x02c0c8c0, unsigned int
0x00000007) line 1512 + 11 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x0160fc38
sLoadEvents, nsPresContext * 0x00000000, nsEvent * 0x00000001, nsIDOMEvent * *
0x0012f7ec, nsIDOMEventTarget * 0x025628e4, unsigned int 0x00000007,
nsEventStatus * 0x0012f8b0) line 1589
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x0286060c,
nsPresContext * 0x02a2e810, nsEvent * 0x0012f878, nsIDOMEvent * * 0x0012f7ec,
unsigned int 0x00000007, nsEventStatus * 0x0012f8b0) line 894
DocumentViewerImpl::LoadComplete(DocumentViewerImpl * const 0x00000000, unsigned
int 0x00000000) line 886 + 22 bytes
nsDocShell::EndPageLoad(nsDocShell * const 0x0286060c, nsIWebProgress *
0x027baa7c, nsIChannel * 0x02a6cbf8, unsigned int 0x00000000) line 4335
nsWebShell::EndPageLoad(nsWebShell * const 0x0286060c, nsIWebProgress *
0x027baa7c, nsIChannel * 0x02a6cbf8, unsigned int 0x00000000) line 759
nsDocShell::OnStateChange(nsDocShell * const 0x027baa7c, nsIWebProgress *
0x027baa7c, nsIRequest * 0x02a6cbf8, unsigned int 0x02a6cbf8, unsigned int
0x00000000) line 4269
nsDocLoaderImpl::FireOnStateChange(nsDocLoaderImpl * const 0x0286060c,
nsIWebProgress * 0x027baa7c, nsIRequest * 0x02a6cbf8, int 0x00020010, unsigned
int 0x00000000) line 1232
nsDocLoaderImpl::doStopDocumentLoad(nsDocLoaderImpl * const 0x0286060c,
nsIRequest * 0x02a6cbf8, unsigned int 0x00000000) line 867
nsDocLoaderImpl::DocLoaderIsEmpty(nsDocLoaderImpl * const 0x0286060c) line 765
nsDocLoaderImpl::OnStopRequest(nsDocLoaderImpl * const 0x027baa6c, nsIRequest *
0x02c12258, nsISupports * 0x00000000, unsigned int 0x00000000) line 695
nsLoadGroup::RemoveRequest(nsLoadGroup * const 0x02794be8, nsIRequest *
0x027baa6c, nsISupports * 0x00000000, unsigned int 0x00000000) line 695 + 13 bytes
imgRequestProxy::RemoveFromLoadGroup(imgRequestProxy * const 0x0286060c) line 177
imgRequestProxy::OnStopRequest(imgRequestProxy * const 0x0286060c, nsIRequest *
0x02c12510, nsISupports * 0x00000000, unsigned int 0x00000000) line 464
imgRequest::OnStopRequest(imgRequest * const 0x02c12608, nsIRequest *
0x02c12510, nsISupports * 0x00000000, unsigned int 0x00000000) line 723
ProxyListener::OnStopRequest(ProxyListener * const 0x02c126a0, nsIRequest *
0x02c12510, nsISupports * 0x00000000, unsigned int 0x00000000) line 868
nsJARChannel::OnStopRequest(nsJARChannel * const 0x02c12518, nsIRequest *
0x02c128c8, nsISupports * 0x00000000, unsigned int 0x00000000) line 687
nsInputStreamPump::OnStateStop(nsInputStreamPump * const 0x0286060c) line 505
nsInputStreamPump::OnInputStreamReady(nsInputStreamPump * const,
nsIAsyncInputStream *) line 342

Comment 1

[Felix Miata]

Happens on Linux trunk too. Too bad talkback drew a blank. But, after my crash I
installed http://www.hacksrus.com/~ginda/chatzilla/xpi/chatzilla-0.9.64g.xpi ,
restarted Moz to make it effective, and got no crash.

Comment 2

[Martijn Wargers (dead)]

I get the same sort of crash data when trying to install Adblock:
adblock.mozdev.org/adblock-0.5-dev.xpi
After installing that and a restart, I get an immediate crash every time, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a4) Gecko/20040911
Firefox/0.9.1+
Talkback ID: TB800448K
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB800448K

Comment 3

[Martijn Wargers (dead)]

I also get similar crashes when doing simple drag and drop actions inside the
bookmarks toolbar.
Talkback ID's: TB801288H, TB801328W and TB801564W.

Comment 4

[Boris Zbarsky [:bzbarsky]]

Is the "doc" there ending up null?  If so, how, exactly?  That's the owner
document...

Comment 5

[Bob Clary [:bc] (inactive)]

nsINodeInfo *nodeInfo = mContent->GetNodeInfo(); 
returns nodeInfo->mDocument == 0 and
nsIDocument* doc = nsContentUtils::GetDocument(nodeInfo);
returns doc == 0

Comment 6

[Boris Zbarsky [:bzbarsky]]

We can probably work around this crash, but having a node with no ownerDocument
is pretty wrong... any idea how that's being created?

Comment 7

[Johnny Stenback (:jst)]

Is this a node that somehow outlived its owner document?

Comment 8

[Justin Wood (:Callek)]

For further read, here is Debug Build output from when I click the CZ icon:

[...snip....only startup on relatively clean profile]
--WEBSHELL == 0
++WEBSHELL == 1
++DOMWINDOW == 2
++WEBSHELL == 2
++DOMWINDOW == 3
++WEBSHELL == 3
++DOMWINDOW == 4
--DOMWINDOW == 3
Document http://www.mozilla.org/start/ loaded successfully
++WEBSHELL == 4
++DOMWINDOW == 4
cz: Initializing ChatZilla {** ASSERTION FAILED: caught exception getting value
for ``cmd.input-text-direction.help''
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [n
sIStringBundle.GetStringFromName]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  l
ocation: "JS frame :: chrome://chatzilla/content/lib/js/message-manager.js :: mm
_getfrom :: line 204"  data: no]
 **
<top>
anonymous@56
mm_getfrom@219
getMsgFrom@117
cmdmgr_defcmd@238
cmgr_defcmds@195
initCommands@207
init@144
onLoad@58
onload@1
[anonymous]@0
** ASSERTION FAILED: caught exception getting value for ``cmd.text-direction.hel
p''
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [n
sIStringBundle.GetStringFromName]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  l
ocation: "JS frame :: chrome://chatzilla/content/lib/js/message-manager.js :: mm
_getfrom :: line 204"  data: no]
 **
<top>
anonymous@56
mm_getfrom@219
getMsgFrom@117
cmdmgr_defcmd@238
cmgr_defcmds@195
initCommands@207
init@144
onLoad@58
onload@1
[anonymous]@0
WARNING: Using nsIGlobalHistory->nsIGlobalHistory2 adapter., file D:/Mozilla/Sou
rces/Trunk/mozilla/docshell/base/nsGlobalHistory2Adapter.cpp, line 137

Comment 9

[Boris Zbarsky [:bzbarsky]]

*** Bug 259147 has been marked as a duplicate of this bug. ***

Comment 10

[Boris Zbarsky [:bzbarsky]]

Bug 259147 reports some general mac startup crashes...

Comment 11

[Stefan Borggraefe]

*** Bug 259545 has been marked as a duplicate of this bug. ***

Comment 12

[Bob Clary [:bc] (inactive)]

I'm not crashing with today's seamonkey trunk on winxpsp2.

Comment 13

[Daniel Kies]

Sadly, I am still crashing at launch, with the same result I reported in Bug
#259147.  Seamonkey 20040915 trunk nightly win32 build on winXP Pro SP2.

Comment 14

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

Attachment: patch

Comment 15

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 159244 [details] [diff] [review]
patch

r+sr=bzbarsky

Comment 16

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

Fix checked in to trunk, 2004-09-17 13:50 -0700.